azcomputerguru
  • Joined on 2025-12-11
azcomputerguru opened issue azcomputerguru/guru-connect#19 2026-06-05 17:35:46 -07:00
[H5] Server does not block self-role-demotion (only self-delete); lockout guard is client-only
azcomputerguru opened issue azcomputerguru/guru-connect#18 2026-06-05 17:35:41 -07:00
[H4] token_blacklist cleanup_expired re-verifies every JWT signature; stores whole tokens in RAM
azcomputerguru opened issue azcomputerguru/guru-connect#17 2026-06-05 17:35:35 -07:00
[H3] revoke_user_tokens is a 501 stub whose comment claims partial behavior
azcomputerguru opened issue azcomputerguru/guru-connect#16 2026-06-05 17:35:30 -07:00
[H2] Bootstrap admin plaintext password written to .admin-credentials + info! log fallback
azcomputerguru opened issue azcomputerguru/guru-connect#15 2026-06-05 17:35:24 -07:00
[H1] No rate-limit/lockout on the login path
azcomputerguru opened issue azcomputerguru/guru-connect#14 2026-06-05 17:35:21 -07:00
[C5] Auto-update verified only by SHA-256 over same channel, no signature -> fleet-wide SYSTEM RCE on MITM
azcomputerguru opened issue azcomputerguru/guru-connect#13 2026-06-05 17:35:11 -07:00
[C4] Agent block_in_place/Handle::block_on in main async session loop -> thread-starvation/deadlock
azcomputerguru opened issue azcomputerguru/guru-connect#12 2026-06-05 17:35:08 -07:00
[C3] downloads.rs body().unwrap() on attacker-controlled Content-Disposition filename -> unauthenticated panic/DoS
azcomputerguru opened issue azcomputerguru/guru-connect#11 2026-06-05 17:35:02 -07:00
[C2] Unauthenticated downloads.rs: hardcoded prod relay URL + default API-key fallback + false support-embedding docstring
azcomputerguru opened issue azcomputerguru/guru-connect#10 2026-06-05 17:34:57 -07:00
[C1] Secrets/tokens in WebSocket URL query strings
azcomputerguru pushed to main at azcomputerguru/guru-connect 2026-06-05 17:20:45 -07:00
ded99c5882 docs(review): three-way (Claude+Gemini+Grok) codebase review + remediation plan
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 17:06:07 -07:00
ec411f44bc docs(skills): document review path-resolution gotcha in agy + grok
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 16:44:23 -07:00
2fcdc5fb13 sync: auto-sync from GURU-5070 at 2026-06-05 16:44:08
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 15:42:48 -07:00
fc36218960 sync: auto-sync from GURU-BEAST-ROG at 2026-06-05 15:42:37
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 15:15:32 -07:00
fd0b0125e0 sync: auto-sync from GURU-BEAST-ROG at 2026-06-05 15:15:20
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 15:07:41 -07:00
528bc9ce2f sync: auto-sync from GURU-5070 at 2026-06-05 15:07:30
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 14:39:40 -07:00
59647ee666 sync: auto-sync from GURU-5070 at 2026-06-05 14:39:29
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 14:37:29 -07:00
1aa9fcecad glaztech: Tom reply #2 (sent) + quo checklist + payroll/TimeForce answer logged
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 13:10:38 -07:00
47b71b7b3a rmm dashboard redesign (Gemini live review) + CDP Chrome driver
c4ec2ed4b0 memory: Syncro bot alerts must include ticket link
Compare 2 commits »
azcomputerguru pushed to main at azcomputerguru/claudetools 2026-06-05 12:20:48 -07:00
b9474ff286 remediation-tool skill: enforce required Syncro ticket fields (priority, user_id, problem_type)