David_Osipov

7 ms·

1.
CVE-2026-14440: Cloudflare Universal SSL CAA records supersede user CAA(nvd.nist.gov)
2 points by David_Osipov 2mo ago|0 comments
2.
by David_Osipov 8mo ago
Great job! I've tried to test their tool as well, but was totally paywalled.
3.
by David_Osipov 8mo ago
Well be great if you've mitigated this as well: https://notcve.org/view.php?id=NotCVE-2026-0001
4.
by David_Osipov 8mo ago
I can just tell you, that my whole website with the complex logic and systems (based on Astro), which produce more scientific metadata in html code than Nature journal, was spec-coded by me using Github Copilot. But this is my pet project,
5.
by David_Osipov 8mo ago
Wait, they have been in hibernation for almost several years, why to publish it now?
6.
Cloudflare CAA augmentation enables unauthorized DV certificate issuance(notcve.org)
3 points by David_Osipov 8mo ago|0 comments
7.
by David_Osipov 8mo ago
There is a nuance here for Cloudflare users that makes this problematic. While analyzing the Jabber.ru incident (which used this exact BGP->TLS vector), I discovered that Cloudflare's "Universal SSL" actively injects permi
8.
Analysis: Cloudflare's permissive CAA injection nullifies RFC 8657(david-osipov.vision)
3 points by David_Osipov 9mo ago|0 comments
9.
by David_Osipov 9mo ago
Spot on! We tried to somehow reduce the libcef size in our B2B app - barely could do that. We had to employ some fancy compression techniques, but still this thing is huge!
10.
by David_Osipov 9mo ago
Hi, guys! As an experiment, I've created AI video and audio overview, based my article's info. If this helps at least some of you, pls let me know! If you have any questions or found any mistakes - pls let me know.
11.
The 2023 jabber.ru Attack Exposes a Critical Cloudflare Flaw in 2026(david-osipov.vision)
5 points by David_Osipov 9mo ago|1 comments
12.
by David_Osipov 9mo ago
A product manager here. Thanks to AI, I was able to create my own website on Astro. I was so fascinated by web technologies, that I didn't realize when I created not just a website, but a blazing fast website with extensive amount of m
13.
by David_Osipov 9mo ago
But look, they occupied his time for 7 weeks full-time. He could have taken another project (opportunity cost) if not for this project. I mean, the inefficiencies of their business processes are not his point of concern - they occupied his
14.
by David_Osipov 9mo ago
No idea why have they created these MS Store versions. The same for MS Store Edge browser - it was (or is) just a downloader of an exe file from their webservers - useless piece of an app
15.
by David_Osipov 9mo ago
I'm not a web developer, but a product manager, and recently I've created my own website using Astro. I do support the point, that its better to have a relatively simple static website - it's really fast and lightweight! An a