August 9, 2022

Hacker News Bot @newsycombinator

To uncover a deepfake video call, ask the caller to turn sideways

metaphysic.aiTo Uncover a Deepfake Video Call, Ask the Caller to Turn Sideways - Metaphysic.aiThere is an interesting vulnerability in video deepfakes that, to date, has been generally overlooked by the security research community, perhaps because ‘live’, real-time deepfakes in video calls have not been a major cause for concern until very recently.

https://metaphysic.ai/to-uncover-a-deepfake-video-call-ask-the-caller-to-turn-sideways/

-

-

Undine @HorribleSanity

For me, this is the image that defines the Victorian era. (Illustrated Police News 1872, via @_newspapers)

-

Soviet Visuals @sovietvisuals

"Rock concert" painting by Viktor Tsoi, USSR, 1980s

-

Corin Faife @corintxt

🚨 Breaking: Treasury Department has added the Tornado Cash ethereum mixer to its sanction list, barring all US citizens from interacting with it. 🚨home.treasury.gov/policy-issues/…

Jerry Brito @jerrybrito

Today’s action does not seem so much as a sanction against a person or entity with agency. It appears instead to be the sanctioning of a tool that is neutral in character and that can be put to good or bad uses like any other technology.

coincenter.orgU.S. Treasury sanction of privacy tools places sweeping restrictions on all Americans - Coin CenterSanctioned Tornado Cash smart contract is a tool, not a person.

Immediate fallout:

https://cointelegraph.com/news/tornado-cash-co-founder-reports-being-kicked-off-github-as-industry-reacts-to-sanctions

Press release:

https://home.treasury.gov/news/press-releases/jy0916

-

web3 is going just great @web3isgreat

Bitcoin mining operation Riot Blockchain earns more money in July by not mining, effectively mines without paying for power August 8, 2022 web3isgoinggreat.com/?id=bitcoin-mi…

-

Halvar Flake @halvarflake

Thread on exploit mitigations. Below are rules I wrote for a good mitigation a while ago: “Before you ship a mitigation...

And the blogpost version:

http://addxorrol.blogspot.com/2020/03/before-you-ship-security-mitigation.html

-

Lily Hay Newman @lilyhnewman

Rare example of people actually turning cool privacy research into a service you can use right now

wired.comA Phone Carrier That Doesn’t Track Your Browsing or LocationThe new Pretty Good Phone Privacy service for Android hides the data linking you to your mobile device.

-

Jessica Valenti @JessicaValenti

A Nebraska teenager is being charged as an adult for what the state says was an illegal abortion. Detectives got her medical records & went through her Facebook messages to build their case.

jessica.substack.comAbortion, Every Day (8.8.22)Nebraska charges teenager with illegal abortion

-

Google data centre goes boom

Council Bluffs Scanner @CBScanner

Large Electrical Explosion/No fire 10410 Bunge Ave/Google Plant Responding: E41, M3 Extra squad M6 Lifenet on air-standby Multiple people injured, several burn patients - One has a lower torso injury - An other has burns to face left arm and thigh

-

MF FairyPrincessSmoo @Smooheed

If you worked on a boat and never as a joke, ran screaming through the cabin while wearing a life jacket You probably didn't get fired for the same reasons I did

-

[Targeted attack on industrial enterprises and public institutions | Kaspersky ICS CERT]

https://ics-cert.kaspersky.com/publications/reports/2022/08/08/targeted-attack-on-industrial-enterprises-and-public-institutions/

-

Dan Black @DanWBlack

The level of stealth (not to be mistaken with secrecy) required for operational success is much lower than commonly treated. Sadly, many theories about cybered conflict are built upon this flawed lynchpin of clandestine exploitation and have made a mountain out of a molehill

Brian in Pittsburgh @arekfurt

It really is kind of amazing how many smart people in infosec still seem to think about the archetypal intrusion as involving skilled attack personnel taking pains to use cleverness and evasion in a targeted attack with the aim of long-term persistence. It's 2022, people.🙂

-

Jan Lemnitzer @JanLemnitzer

All 175 7-11 stores in Denmark were closed down by a suspected ransomware attack. It hit the payment system so could be a supply chain attack. Many of the stores are at busy train stations so this attack is very visible in Danish everyday life. @thegrugq

dr.dk7-Eleven lagt ned af formodet hackerangrebKort inden middag mandag meddelte 7-Eleven, at samtlige af landets butikker er midlertidigt lukket.

-

That report on “ransomware at hospitals increases mortality 30%” was very misreported. The actual finding was that increased information security measures leads to increased mortality because of slower access.

Lukasz Olejnik @lukOlejnik

Security/data breaches at hospital/medical facilities linked with increased patient mortality. Reason: increased security adds friction in the use of IT systems. The sensational take would of course be "cyberattacks kill", but it is a bit more complex. ncbi.nlm.nih.gov/pmc/articles/P…

-

Runa Sandvik @runasand

Kosovo arrested a Russian journalist on suspicion of her being a spy, then released her a few days later. Here’s a good piece from @RFERL about Daria Aslamova and her employer, pro-Kremlin tabloid Komsomolskaya Pravda.

rferl.orgWho Is Daria Aslamova, The Russian Journalist Expelled From Kosovo?Daria Aslamova, a Russian journalist working for the pro-Kremlin Komsomolskaya Pravda, has been arrested by Kosovar authorities and accused of working for Russian intelligence. The accusations come amid tensions on the border with Serbia, including a Kosovar police unit coming under fire.

-