
Research
5 Malicious Chrome Extensions Enable Session Hijacking in Enterprise HR and ERP Systems
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.
shader-school
Advanced tools
An introduction to GLSL shaders and graphics programming that runs in your web browser.

First, you need to get a browser with WebGL, as well as a copy of node.js and git. Once you have all of that set up, you can install the workshop using npm, which is included with node:
npm install -g shader-school
After that completes, you should be able to run the workshopper with the command:
shader-school
The script will ask you if you want to create an answer directory, press y to
accept. This will populate your current directory with shader files for you to
edit for each lesson – hopefully, it should also automatically open your web
browser but if it doesn't you can find the workshop menu on
http://localhost:12492/.
Feedback and criticism is welcome, please log your troubles in issues. The workshop is still being worked on but is very close to being complete!
Full curriculum reviews like this one are very helpful. More feedback like this please!
| Mikola Lysenko | GitHub/mikolalysenko | Twitter/@mikolalysenko |
|---|---|---|
| Hugh Kennedy | GitHub/hughsk | Twitter/@hughskennedy |
| Chris Dickinson | GitHub/chrisdickinson | Twitter/@isntitvacant |

From left to right:
#34363B vec3(0.2039, 0.2117, 0.2313) (black)#A9B0C3 vec3(0.5372, 0.6901, 0.7647) (dark grey)#DEE7FF vec3(0.8705, 0.9058, 1.0) (light grey)#FFFFFF vec3(1.0, 1.0, 1.0) (white)#58FF8B vec3(0.3451, 1.0, 0.5450) (green)#FF6E57 vec3(1.0, 0.4313, 0.3411) (red)#FFE25F vec3(1.0, 0.8862, 0.3725) (yellow)#61C3FF vec3(0.3804, 0.7647, 1.0) (blue)




FAQs
Self directed GLSL lessons
We found that shader-school demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 11 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Five coordinated Chrome extensions enable session hijacking and block security controls across enterprise HR and ERP platforms.

Research
Node.js patched a crash bug where AsyncLocalStorage could cause stack overflows to bypass error handlers and terminate production servers.

Research
/Security News
A malicious Chrome extension steals newly created MEXC API keys, exfiltrates them to Telegram, and enables full account takeover with trading and withdrawal rights.