Urgent.News

What's breaking now, across thousands of outlets.

More in Tech

Dumping Every User's Plaintext Password Without Touching the Database

Exploiting a forgotten debug statement that logs plaintext passwords and a hidden SIEM dashboard with hardcoded credentials to retrieve a flag.

  • Debug statement logged plaintext passwords in error logs
  • Hidden SIEM dashboard with default credentials exposed
  • Flag retrieved via directory brute-forcing and logging oversight

Svelte's runes are just React hooks wearing a Svelte hoodie

Svelte convinced me with a promise. You write let count = 0 , then modify that, and the UI updates magically. No need for hooks. No dependency arrays. No complex setup.

  • Svelte 5 reintroduces React-like hooks as "runes" named $state, $derived, and $effect".
  • Implicit reactivity, automatic UI updates, is now explicit with $derived" in Svelte 5.

More from Saturday 19 September →