January 2021 - BAH-Estrecho - lists.ourproject.org

[Bah-general] Reparto verduras en las calles. Semana lucha campesina
by Marian BAH 21 Mar '22

21 Mar '22

Aquí´el cartel tipo para el reparto de verduras en las calles el martes 23 Con libertad para tunearlo y poner el sitio/hora de nuestros repartos *Si hacéis reparto*, molaría avisar a madridagroecologico(a)gmail.com para contar todos los sitios donde se hace y luego enviar alguna foto, para seguir difundiendo después Ah, y hay personas de Teatro de la Tierra y asociación Paraguaya que se ofrecen a ayudar ese día, igual podríamos ofrecerles un espacio para que cuenten la realidad y represión a las comunidades indígenas allá Besos _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 1

[Bah-general] Important paid work with Ourproject
by Emily Jensen 05 Feb '21

05 Feb '21

Hi Bah, Hope you’re having a great festive season. I’m reaching out to check if you’re willing to accept a paid link insertion in one of your old articles. If yes, can you please let me know the guidelines and the price for it? Cheers Emily Jensen Community Head Hustler 7 You may unsubscribe <http://ec2-52-26-194-35.us-west-2.compute.amazonaws.com/x/u?u=8d47a35b-3543…> to stop receiving our emails. _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 2

[Bah-general] CLICK JACKING
by Secure Web 01 Feb '21

01 Feb '21

[image: clickjack.png] Hello Team Hope that you're doing all good and healthy.I would like to draw your attention to some of the vulnerabilities in your site which i would like to report. Kindly provide me the email of relevant team or person and let me know if there is any bug bounty program or reward regarding this disclosure of vulnerabilties as this work requires both cost and time. Thank you BUG TYPE: CLICK JACKING In the index (home page): https://website.com/login Clickjacking, also known as a "UI redress attack", is when an attacker uses multiple transparent or opaque layers to trick a user into clicking on a button or link on another page when they were intending to click on the the top level page. Thus, the attacker is "hijacking" clicks meant for their page and routing them to another page, most likely owned by another application, domain, or both. Using a similar technique, keystrokes can also be hijacked. With a carefully crafted combination of style sheets, i frames, and text boxes, a user can be led to believe they are typing in the password to their email or bank account, but are instead typing into an invisible frame controlled by the attacker. PoC: <html> <head> <title>test nbxsites </title> </head> <body> <p> https://website.com/login is vulnerable to clickjacking!</p> <iframe src="https://website.com/login" width="500" height="500"></iframe> </body> </html> IMPACTS: Tricking a user into unknowingly; No.1: An attacker can gain access to the credentials of users and use those credentials for booking and payment. No.2: adding events to their profile they are interested in attending. No. 3: editing their star rating on reviews; No.1: bookmarking unwanted business PROOF: Screenshot Best Regards. Found More bugs on your website reply me so that i may disclose them further. _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 1

[Bah-general] quick question
by Jesse Davidson 30 Jan '21

30 Jan '21

Hi Bah, I noticed you shared an article from En.Wikipedia.org when you talked about Apple switching from using Intel processors to using their own chips, here: lists.ourproject.org/pipermail/solar-general/2009-October/055526.html I've read that piece from En.Wikipedia.org and I think it's good -- but we recently published an article about the transition to Apple chips (and the latest Mac OS update) that goes quite a bit further. This article discusses: - Apple's move to Intel processors, and the back to their own - Possible challenges with the transition - What the switch means To ensure that our article is authoritative, we quote more than 20 different sources. May I send you the article to see if you think it’s worth linking to from your (already excellent) page? Thanks, -Jesse -- Jesse Davidson, Editor 5 Ross Rd Durham, NH 03824 BTW, if you didn't like getting this email, please reply with something like "please don't email me anymore", and I'll make sure that we don't. _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 2

Fwd: REPARTO MADRID 2 FEBRERO
by Francisco Garcia 27 Jan '21

27 Jan '21

Hola! Empieza la temporada de yogures, quien está interesado? Yo de momento no voy a pedir. Puedo llevar el pedido sin problema. Un abrazo Chesco ---------- Forwarded message --------- De: <pedidosapisquillos(a)gmail.com> Date: dom., 24 ene. 2021 20:13 Subject: REPARTO MADRID 2 FEBRERO To: <chescomedinilla(a)gmail.com> [image: Formularios de Google] Te he invitado a que rellenes un formulario: REPARTO MADRID 2 FEBRERO <https://docs.google.com/forms/d/e/1FAIpQLScszUlSeTw0Jvp85mn7ggQLOyuMJW_yBEq…> Reparto de yogures (quesos aún no hay) para los Grupos de Consumo de Madrid. Enviar éste formulario antes del viernes 29 de enero a las 10 de la noche. Aprovecharemos éste formulario para actualizar algunos datos. TENEMOS UN NUEVO NÚMERO DE CUENTA PARA HACER LOS INGRESOS: ES59 0049 2196 0328 9484 6706 Gracias serranas, buen provecho y mejor digestión!!!!! Rellenar formulario <https://docs.google.com/forms/d/e/1FAIpQLScszUlSeTw0Jvp85mn7ggQLOyuMJW_yBEq…> Crea tu propio formulario de Google <https://docs.google.com/forms?usp=mail_form_link>

2 1

[Bah-general] Missing SPF
by Secure Web 27 Jan '21

27 Jan '21

Hi, I'm an independent cyber security researcher i have found multiple issues in your website. Vulnerability : Missing SPF I am just looking at your SPF records then found following. SPF Records missing safe check which can allow me to send mail and phish easily any victim. PoC: <?php $to = "VICTIM(a)example.com"; $subject = "Password Change"; $txt = "Change your password by visiting here - [VIRUS LINK HERE]l"; $headers = "From: https://www.alidropstore.com/"; mail($to,$subject,$txt,$headers); ?> SPF record lookup and validation for: ourproject.org SPF records are published in DNS as TXT records. The TXT records found for your domain are: google-site-verification=5X82i4YusPOi9SFgcLejX0p5zr-RVkAeMjIcKD6-11E keybase-site-verification=6IadbJzgiOL0KIQiLqw_1e9vPEVXhXiOE1PrikgmhgY v=spf1 mx ip4:168.119.136.67/32 ip4:159.69.75.86/32 ip4:159.69.75.87/32 ip4: 168.119.136.88/32 ip4:168.119.136.79/32 ip4:80.81.122.32/27 a: snowden.comunes.org a:snowden-02.comunes.org a:howard.comunes.org a: ada.comunes.org a:stallman.comunes.org a:rms.comunes.org a: selver.comunes.org a:ci.comunes.org a:mailhost.ourproject.org ~all Checking to see if there is a valid SPF record. DNS: Truncated UDP Reply, SPF records should fit in a UDP packet, retrying TCP Found v=spf1 record for ourproject.org: v=spf1 mx ip4:168.119.136.67/32 ip4:159.69.75.86/32 ip4:159.69.75.87/32 ip4: 168.119.136.88/32 ip4:168.119.136.79/32 ip4:80.81.122.32/27 a: snowden.comunes.org a:snowden-02.comunes.org a:howard.comunes.org a: ada.comunes.org a:stallman.comunes.org a:rms.comunes.org a: selver.comunes.org a:ci.comunes.org a:mailhost.ourproject.org ~all Fix: SPF record lookup and validation for: ourproject.org SPF records are published in DNS as TXT records. The TXT records found for your domain are: google-site-verification=5X82i4YusPOi9SFgcLejX0p5zr-RVkAeMjIcKD6-11E keybase-site-verification=6IadbJzgiOL0KIQiLqw_1e9vPEVXhXiOE1PrikgmhgY v=spf1 mx ip4:168.119.136.67/32 ip4:159.69.75.86/32 ip4:159.69.75.87/32 ip4: 168.119.136.88/32 ip4:168.119.136.79/32 ip4:80.81.122.32/27 a: snowden.comunes.org a:snowden-02.comunes.org a:howard.comunes.org a: ada.comunes.org a:stallman.comunes.org a:rms.comunes.org a: selver.comunes.org a:ci.comunes.org a:mailhost.ourproject.org -all Checking to see if there is a valid SPF record. DNS: Truncated UDP Reply, SPF records should fit in a UDP packet, retrying TCP Found v=spf1 record for ourproject.org: v=spf1 mx ip4:168.119.136.67/32 ip4:159.69.75.86/32 ip4:159.69.75.87/32 ip4: 168.119.136.88/32 ip4:168.119.136.79/32 ip4:80.81.122.32/27 a: snowden.comunes.org a:snowden-02.comunes.org a:howard.comunes.org a: ada.comunes.org a:stallman.comunes.org a:rms.comunes.org a: selver.comunes.org a:ci.comunes.org a:mailhost.ourproject.org -all You can refer this https://www.digitalocean.com/community/tutorials/how-to-use-an-spf-record-t… Let me know if any further info is required. Regards. Found More bugs on your website reply me so that i may disclose them further. _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 0

[Bah-general] Weak Ciphers Enabled
by Secure Web 27 Jan '21

27 Jan '21

[image: cipher.png] Hi team, this time i found this vulnerability in your website. Vulnerability Report : Weak Ciphers Enabled Vulnerability Details:- I detected that weak ciphers are enabled during secure communication (SSL). You should allow only strong ciphers on your web server to protect secure communication with your visitors. Impact:- Attackers might decrypt SSL traffic between your server and your visitors. Remedy:- Configure your web server to disallow using weak ciphers. URL : https://www.ssllabs.com/ssltest/index.html Screenshot: Regards. Found More bugs on your website reply me so that i may disclose them further. _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 0

[Bah-general] Producción hortícola intensiva
by Alberto San Andrés 26 Jan '21

26 Jan '21

** 28 Enero ------------------------------------------------------------ ** 17:00h ------------------------------------------------------------ ** Producción intensiva en suelos degradados. Hortícolas ------------------------------------------------------------ Webinar gratuito con Información y conclusiones a tener en cuenta para el buen desarrollo de cultivos hortícolas Participa (https://attendee.gotowebinar.com/register/2799973842636398093) ============================================================ ** Facebook (http://www.facebook.com/vitaveris.biofertilizantes) ** vitaveris (http://www.vitaveris.com) ** Email (mailto:[email protected]) ** LinkedIn (https://us16.admin.mailchimp.com/campaigns/linkedin.com/in/alberto-san-andr…) Vitaveris 2021 - Pamplona - Navarra Si no desea recibir más comunicados sobre nuestras actividades, le rogamos nos lo comunique. Aqui puede actualizar sus ** preferencias (https://vitaveris.us16.list-manage.com/profile?u=7c5d9e5673a922e2f3ee0a790&…) o ** darse de baja (https://vitaveris.us16.list-manage.com/unsubscribe?u=7c5d9e5673a922e2f3ee0a…) This email was sent to bah(a)ourproject.org (mailto:[email protected]) why did I get this? (https://vitaveris.us16.list-manage.com/about?u=7c5d9e5673a922e2f3ee0a790&id…) unsubscribe from this list (https://vitaveris.us16.list-manage.com/unsubscribe?u=7c5d9e5673a922e2f3ee0a…) update subscription preferences (https://vitaveris.us16.list-manage.com/profile?u=7c5d9e5673a922e2f3ee0a790&…) Vitaveris . C/Icircota 8 . Pamplona/iruna, Na 31194 . Spain _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 0

[Bah-general] Producción hortícola intensiva
by Alberto San Andrés 26 Jan '21

26 Jan '21

** 28 Enero ------------------------------------------------------------ ** 17:00h ------------------------------------------------------------ ** Producción intensiva en suelos degradados. Hortícolas ------------------------------------------------------------ Webinar gratuito con Información y conclusiones a tener en cuenta para el buen desarrollo de cultivos hortícolas Participa (https://attendee.gotowebinar.com/register/2799973842636398093) ============================================================ ** Facebook (http://www.facebook.com/vitaveris.biofertilizantes) ** vitaveris (http://www.vitaveris.com) ** Email (mailto:[email protected]) ** LinkedIn (https://us16.admin.mailchimp.com/campaigns/linkedin.com/in/alberto-san-andr…) Vitaveris 2021 - Pamplona - Navarra Si no desea recibir más comunicados sobre nuestras actividades, le rogamos nos lo comunique. Aqui puede actualizar sus ** preferencias (https://vitaveris.us16.list-manage.com/profile?u=7c5d9e5673a922e2f3ee0a790&…) o ** darse de baja (https://vitaveris.us16.list-manage.com/unsubscribe?u=7c5d9e5673a922e2f3ee0a…) This email was sent to Bah-general(a)lists.ourproject.org (mailto:[email protected]) why did I get this? (https://vitaveris.us16.list-manage.com/about?u=7c5d9e5673a922e2f3ee0a790&id…) unsubscribe from this list (https://vitaveris.us16.list-manage.com/unsubscribe?u=7c5d9e5673a922e2f3ee0a…) update subscription preferences (https://vitaveris.us16.list-manage.com/profile?u=7c5d9e5673a922e2f3ee0a790&…) Vitaveris . C/Icircota 8 . Pamplona/iruna, Na 31194 . Spain _______________________________________________ Bah-general mailing list Bah-general(a)lists.ourproject.org https://lists.ourproject.org/cgi-bin/mailman/listinfo/bah-general

1 0

Producción hortícola intensiva
by Alberto San Andrés 26 Jan '21

26 Jan '21

** 28 Enero ------------------------------------------------------------ ** 17:00h ------------------------------------------------------------ ** Producción intensiva en suelos degradados. Hortícolas ------------------------------------------------------------ Webinar gratuito con Información y conclusiones a tener en cuenta para el buen desarrollo de cultivos hortícolas Participa (https://attendee.gotowebinar.com/register/2799973842636398093) ============================================================ ** Facebook (http://www.facebook.com/vitaveris.biofertilizantes) ** vitaveris (http://www.vitaveris.com) ** Email (mailto:[email protected]) ** LinkedIn (https://us16.admin.mailchimp.com/campaigns/linkedin.com/in/alberto-san-andr…) Vitaveris 2021 - Pamplona - Navarra Si no desea recibir más comunicados sobre nuestras actividades, le rogamos nos lo comunique. Aqui puede actualizar sus ** preferencias (https://vitaveris.us16.list-manage.com/profile?u=7c5d9e5673a922e2f3ee0a790&…) o ** darse de baja (https://vitaveris.us16.list-manage.com/unsubscribe?u=7c5d9e5673a922e2f3ee0a…) This email was sent to bah-estrecho(a)lists.ourproject.org (mailto:[email protected]) why did I get this? (https://vitaveris.us16.list-manage.com/about?u=7c5d9e5673a922e2f3ee0a790&id…) unsubscribe from this list (https://vitaveris.us16.list-manage.com/unsubscribe?u=7c5d9e5673a922e2f3ee0a…) update subscription preferences (https://vitaveris.us16.list-manage.com/profile?u=7c5d9e5673a922e2f3ee0a790&…) Vitaveris . C/Icircota 8 . Pamplona/iruna, Na 31194 . Spain

1 0