December 11, 2022

New Perun

-

Lodestar Finance (💙,🧡) @LodestarFinance

Protocol was exploited and deposits have been drained. We have set all interest rates to 0 so that supply and borrow balances are not moving while we weigh recovery options. What we know right now:

-

-

lcamtuf (@lcamtuf@infosec.exchange) @lcamtuf

This is worth reading if you need a mental framework to reason about the output of ChatGPT: arxiv.org/pdf/2212.03551… ChatGPT *looks* like magic, and for magical technologies, it takes time for limitations to snap into view. But it's probably not the end of days.

-

j͕̠̦̪͕̓͛̊̾̄ͅw̧̧̳̪̘͊̋͗̾͢͠z̢̘̞͈̺̞̩̓̽̐̋͗̆̋̚͟͜ @jwz

MAME now emulates a Stasi numbers-station speech synthesizer. Gerät 32620 was a digital speech generator, developed in the early 1980s [...] and was used by the Stasi for sending secret coded messages via the mysterious numbers stations that used to... jwz.org/b/yj7T

MAME now supports emulating an East German numbers station speech generator, if that's something you need to have handy for any reason

https://mastodon.social/@revenant/109490865251086192

-

Zero Day Initiative @thezdi

And that's a wrap! Congrats to DEVCORE and @orange_8361 for winning Master of Pwn for Toronto 2022. Thanks to all who participated and special thanks to #Google and #Synology for co-sponsoring the event.

Pwn2Own has finished. 63 0day earned 989k. Congrats everyone

https://www.bleepingcomputer.com/news/security/hackers-earn-989-750-for-63-zero-days-exploited-at-pwn2own-toronto/

-

On news that Philadelphia is getting free pay phones.

Spending too much time in Philly soon to be not only a sign of questionable judgement (@adamrawnsley@mstdn.social) but also a CI indicator.

https://www.inquirer.com/business/technology/philtel-free-pay-phones-philadelphia-20221203.html

https://infosec.exchange/@activemeasuresllc/109490581985776157

-

Job interviewer: So in your resume, it says you’re a creative person.

Me: Yes

Job interviewer: What do you create?

Me: *nervous chuckle* Technical debt

https://mastodon.social/@nixCraft/109482289497669949

-

The latest New York times article on spyware is as muddled as its usual reporting is, but it's a good reminder that the drug war has distorted our entire view of what government should be doing.

Below you can see that nobody within the entire chain of the New York times writing and editing through understands what SS7 is. Just one of many things in the article that is a bit frustrating since I know a lot of people still trust the New York times for some reason.

https://mastodon.social/@dave_aitel/109484173487231066

-

Unsafe at any speed

https://socialnotwork.net/@Kclemson/109493206337683456

-

tom mckay @thetomzone

this couldn't possibly be new twitter head of trust and safety Ella Irwin (@ellagirwin) letting Bari Weiss rifle around in a backend tool that clearly says "Direct Messages" in the sidebar could it? 🤔

➖Dustin Miller➖ 💙💛 @spdustin

@44 @emptywheel eirwin4903ZWlyd21u863, repeated over and over on all the screenshots from that internal tool. https://t.co/2g8VHW4qzy

-

Dare Obasanjo 🐀 @Carnage4Life

Airlines fired lots of pilots during the pandemic and so many of them retired. There’s now a pilot shortage as you can’t just mint people with the required 1,500 hours of flight experience overnight. So now airlines are lobbying to get rid of copilots. 😬 cbsnews.com/news/one-pilot…

cbsnews.comAirlines are lobbying for a change to federal regulations that could put one pilot in the cockpitThe move could help solve the staffing crisis caused by the pilot shortage, but the pilots unions argue it would make the skies less safe.

-

JD Work @HostileSpectrum

It is bitterly ironic that ransomware groups should adopt memory safe programming languages faster than the enterprises that recent executive attention has sought to encourage in ecosystem shift.

-

Blacktop @blacktop__

The cross-platform APFS parsing embargo is OVER thanks to Ernesto at @CorelliumHQ !!! github.com/eafer/libzbitm… 🤯❤️👀

github.comGitHub - eafer/libzbitmap: LZBITMAP compression libraryLZBITMAP compression library. Contribute to eafer/libzbitmap development by creating an account on GitHub.

-

Benedict Evans @benedictevans

What's the most American part of this story - that a hospital's marketing director kept a weapons cache in his office, or that a hospital would have a 'marketing director'?

arstechnica.comGun stockpile in hospital closet leads to $63K in fines from NJ health dept.It remains unclear what the hospital’s marketing director was doing with the guns.

-

Benedict Evans @benedictevans

The interesting things about long-term technology predictions is not so much that the predictions are wrong as that we tend to predict the wrong things in the wrong order. We'll have interstellar rocket ships, with paper star charts and punch cards.

Benedict Evans @benedictevans

This is s RAND study from 1964. It might take until 2020 to 'fax' a newspaper to your home, and automatic wiretapping might be impossible, but automatic doctors, radar implants for the blind, household robots and machine translation would be all done by 1990.

https://www.ben-evans.com/benedictevans/2017/01/11/wrongquestions

-

Dan Marshall @danthat

Video game tutorials

-