Write laravel for a living? Maybe make sure that you don’t let your web server serve your .env files. Sample Google search: db_username filetype:env
Continue reading "PSA: Make sure that your server is not serving your .env file"
Recently, I was poking around on Shodan (as I do when I am bored) and I stumbled across an interesting query. If you search for “Default: admin/1234”, you get over 14,000 devices that are broadcasting their own default username and password. The devices appear to be Edimax routers. I reached out to both EmbedThis and Edimax to ask them about this. …
Continue reading "Why are the default credentials in the realm attribute?"