Lmst

I noticed a (minor but abusable) data leak in the RMM/PSA tool Atera a while ago, reported it and it's now fixed. I think it's somewhat interesting so I wrote it up.

https://fyr.io/post/atera-leaked-their-customers-to-mailinator

Tldr: if you tested your SMTP settings, it used a public mailbox on mailinator, allowing anyone to watch for (and respond to, if you're so inclined) mail. Phishing opportunity!

#infosec #atera #privacy #dataleak #mailinator #writeup #phishing #netsec

I installed a new ceiling light in my son's bedroom. One of those with an RGB function. It's quite pretty and can be controlled by a remote or an app. My son was curious, so we installed the app.

But why, oh why, do you need to register an account?!? Come on, people. It's a f... LAMP!!!

Anyway, we registered with a #Mailinator throwaway email address, checked the app, and confirmed it to be completely worthless and deleted the app. The lamp works much better with the remote anyway.

There should be a law requiring all appliances, even with smarts, to function without the #Internet.

#IoT