code · design · life · travel

jena.run

JENA PARK

hi! i'm Memil ♡

🐾 Latest notes

The Story of How I Took Apart an APK and Found a Messed-Up Login Callback

Account Takeover Resulting from Android Deep Link Hijacking and a Missing OAuth PKCE

The admin page was working fine, but the API didn't perform an authorization check.

A Penetration Test That Exposed How GraphQL Could Compromise Tenant Isolation in SaaS

My AWS keys weren't compromised, but an "AssumeRole" event was logged.

A GitHub Action That Triggered a Security Incident Response in the Early Morning

SSH was running just 0.5 seconds slower, so I looked into it, and...

Was there a backdoor in Linux?

If you had relied solely on `package-lock.json`,

Why the Shai-Hulud npm Supply Chain Attack Is So Alarming

jena.run, A Fresh Start

The new jena.run, now featuring a CMS that lets you write posts directly on the site.

☁︎

Quick uploadOpen the editor and upload photos or posts.

📷Photo 🎥Video 🖊Write

🌼 Recent Memil