Jump to content

While the UN laughed at Trump, hackers chortled at the UN's lousy web application security


steven36
 Share

Recommended Posts

Jobseekers' files follow internal records leaking online

 

186886

 

The United Nations has been hit with two damning data leak allegations in as many days.

 

The global organization has seen researchers uncover a pair of flaws that had left a number of its records, and those of its employees, accessible to hackers online.

 

Word of the first issue came out yesterday when security researcher Kushagra Pathak found that the UN had left an unsecured set of Trello, Jira and Google Docs projects exposed to the internet.

 

Pathak, who has specialized in uncovering vulnerable Trello boards and web apps, said the exposed information included account credentials and internal communications and documents used by UN staff to plan projects.

 

After stumbling onto the vulnerable Trello board, he was able to then get access to the Jira and Google Docs deployments where he harvested other sensitive data. Pathak privately reported the issue to UN, who has since locked down the vulnerable web app instances.

 

The second exposure was uncovered by researcher Mohamed Baset of Seekurity and resulted in the exposure of "thousands" of CVs submitted by job applicants.

 

Baset reports that the UN failed to patch vulnerabilities in one of the WordPress CMS systems it uses to handle job applications. This would potentially allow anyone who chose to exploit the local path disclosure the ability to access the thousands of CVs people had submitted when they applied for a job with a UN agency.

 

The vulnerability was reported to the UN in August, but after getting the full bureaucratic runaround, Baset decided to go public with the flaw this week, and share a proof of concept video:

 

 

 

It wasn't all long faces at the UN this week, however.

 

Members of the org had a moment of levity this morning when US President Donald Trump addressed the General Assembly. The Commander-in-Chief's boasts of historic accomplishments at the helm of America sparked chuckling and guffawing by foreign diplomats witnessing his speech...

A nice chuckle was had by most. Meanwhile, at last estimate, Trump was custodian to some 4,000 nuclear warheads.

 

Source

  • Haha 2
Link to comment
Share on other sites

but still..the biggest headline...the world just laughed in trumps face...why...because trump tried to tell a lie to them about how great he is...and they called him on it

Link to comment
Share on other sites

1 hour ago, dMog said:

but still..the biggest headline...the world just laughed in trumps face...why...because trump tried to tell a lie to them about how great he is...and they called him on it

They wont be laughing if he take our 4000 Nukes and  tells them to shove the UN were the sun dont shine  and to defend themselves for a change and that sounds like something he would do...  Russia and the USA  have  92 per cent of the world’s stockpile. Instead making fun of trump they ought to be worried about if New START gets extended or not .

 

You know what New START is? It's  longstanding agreements on so-called ‘strategic stability’ that were designed to prevent nuclear Armageddon. New START, a is 2010 agreement that limits the number of nuclear warheads held by both countries, expires in February 2021. Separately, both capitals have accused the other of breaching the 1987 INF Treaty, which limits the use of long-range missiles. they meet next month to see if they can extend it.

 

The UN has became a bunch of fools  since the cold war ended  and while the rest of the world only having 8% what they going to do with that ?  , even if they shoot  nukes down in test 1 out of 5 makes contact and all it takes is one to kill millions.

 

They better be worried about World War 3  they dont want to turn us against them.

 

if we go back to the way we was before World War 2 lord help them.

 

Lucky for them what he said was meant to be funny and he didn't take it wrong...

Quote

 

Mr. Trump later told reporters that that line was "meant to get some laughter," and that the speech "went very well."

 

 

But did he, you don't know about him but we will soon find out? :rolleyes:

 

He done pulled  out of parts of the UN already.. 

 

Donald Trump pulls US out of UN global compact on migration

http://thehill.com/homenews/administration/363014-us-pulls-out-of-global-compact-on-migration

 

Trump Administration Pulls US Out of UN Human Rights Council

https://www.usnews.com/news/world/articles/2018-06-19/us-poised-to-announce-exit-from-un-human-rights-council

 

Edited by steven36
  • Like 2
Link to comment
Share on other sites

On 9/26/2018 at 3:44 AM, dMog said:

the world just laughed in trumps face.

 

On 9/26/2018 at 4:29 AM, steven36 said:

But did he, you don't know about him but we will soon find out?

 

The world's leaders may regret laughing at Donald Trump

http://www.weny.com/story/39198096/the-worlds-leaders-may-regret-laughing-at-donald-trump

 

Link to comment
Share on other sites

more likely though, trump, and therefore American commerce will collectively pay a price for crapping all over his friends and allies ...as well as the adversaries...

Edited by dMog
Link to comment
Share on other sites

1 hour ago, dMog said:

more likely though, trump, and therefore American commerce will collectively pay a price for crapping all over his friends and allies ...as well as the adversaries...

How is that  @dMog ? Just it will cause a rise in inflation,  but most people that can afford new cars and things  are  rich and will buy them regardless  and I use to work for a company  out of Canada we made car parts in the USA  because they could pay us a lower wage then you guys made than making them up there , Chevrolet they have a big plant down in Mexico  were we shipped the parts  too  and they  pay them way less than they pay Detroit  and Flint too make them ..no union down there or here ether for that matter . Ford  going quit making cars altogether soon as well,  Fact is commerce in my area has been bad every since they started the WTO  that's basically all of the 21st century we suffered because they sent our jobs away.

 

Back in the 70, 80s and 90s  the best electronics  came from Japan and we had our own  witch were good as well .. We paid a higher price for them but they were better made stuff than you buy today and we were  just fine ... 1st PC i bought  set me back a grand  it was a Dell made in the USA. We owe Japan just as much money as we do China and us  mostly trading with China is not fair to Japan  because China makes cheaper stuff .. Stuff costing more  because it was made somewhere else use to be a way of life for us  before the WTO  started that made  commerce make things in USA so we could get it cheaper..

 

Too many over paid people in my country  while there's millions that have no job that will do it for less money.

Edited by steven36
Link to comment
Share on other sites

The US Chamber of Commerce has said it would be "unacceptable to sideline Canada, our largest export market in the world."
    Vehicles, machinery and agricultural products make up much of the goods traded between the countries.
    "We have a level playing field with Canada and Mexico, and we have for the last quarter century that NAFTA has been in place," said Rosensweig of Emory University. "This changes nothing. It's just a political move."
     
    this deal was signed and all it was political pestering by one person to make it look like something major changed,,,reality... the NAFTA AGREEMENT  is basically in place with very minor tweaks, unless you listen to the hype then you will believe MEXICO and CANADA crawled and begged for their very existence from the all seeing all knowing all powerful leader....a deal was always going to be signed...some had to jumped through is all
    . there was no way it was going to shut out Canada or Mexico or the treat carried out to destroy Canada economically with tariffs. talk and bluster on the part of one person.
     
       
      Link to comment
      Share on other sites

      Join the conversation

      You can post now and register later. If you have an account, sign in now to post with your account.
      Note: Your post will require moderator approval before it will be visible.

      Guest
      Reply to this topic...

      ×   Pasted as rich text.   Paste as plain text instead

        Only 75 emoji are allowed.

      ×   Your link has been automatically embedded.   Display as a link instead

      ×   Your previous content has been restored.   Clear editor

      ×   You cannot paste images directly. Upload or insert images from URL.

       Share

      • Recently Browsing   0 members

        No registered users viewing this page.

      ×
      ×
      • Create New...