April 11
Craig Newmark is throwing 50m into “cyber civil defense” which will be focusing on tools for the common civilian.
Impressive improvement in cracking passwords.
A little dive into the shitty world of Russian disinformation.
Goodbye Tracking? Impact of iOS App Tracking Transparency and Privacy Labels
Overall, our findings suggest that, while tracking individual users is more difficult now, the changes reinforce existing market power of gatekeeper companies with access to large troves of first-party data.
https://arxiv.org/abs/2204.03556
This cyberpunk future is both amazing and terrifying and, frankly, terrible. It’s not exactly the Off World Colonies, but…
Impressive progress in solving security. Looks like UAF memory corruptions will all be over by Christmas!
As we frequently discuss, there is a lot of soft power in having good opportunities and desirable lifestyles. For example, you can brain drain your adversaries.
Some sorta nginx 0day going about. Some initial reports of ITW exploitation and an older version being vulnerable? Is it the same issue as this one?
Additional info is available on GitHub.
https://github.com/AgainstTheWest/NginxDay
And an interview with the person behind the exploit. Or at least part of the team. See next.
A Pro West hacking collective. They find and develop an nginx 0day. And then immediately report it via HackerOne. Just… what kind of hackers are these?
The sections on motivations and where they see themselves in the larger cyber conflict is interesting.
https://www.databreaches.net/an-interview-with-againstthewest/
The Awesome OSINT list.
https://github.com/jivoi/awesome-osint
%
The updates on this eBay listing. It is very funny and the storytelling is incredible
https://www.ebay.co.uk/itm/154933141682
A bunch of semgrep rules for vuln hunting.
NSO was used to hack the phones of top EU officials. This seems like the death blow for NSO.
Several advances in ransomware gang techniques. New methods of initial access, and more AV evasion techniques.
Finland is really keen to point out that they are going to join NATO and any actions by Russia will only harden their resolve. I liked that cyber attacks are called out.
China.