December 13, 2022

The last Between Two Nerds of the year was just released. This is a really good discussion on how countries should approach cyber grand strategy. Some counterintuitive conclusions, and a great conversation overall. This one goes to 11.

https://risky.biz/BTN16/

-

Avid Halaby @AvidHalaby

The stuff uncovered in the Twitter whistleblower report is much crazier than anything in the "Twitter files" but it's much less politically/tribally salient so it got no attention. Going to do a thread on some of the craziest things, in no particular order.

-

Chris Wysopal @WeldPond

Why hack the info when you can just ask?

reuters.comNorth Korean cyber spies deploy new tactic: tricking foreign experts into writing research for themWhen Daniel DePetris, a U.S.-based foreign affairs analyst, received an email in October from the director of the 38 North think-tank commissioning an article, it seemed to be business as usual.

-

Existential Comics @existentialcoms

Philosophically Arguing With the Referee - existentialcomics.com/comic/476

-

Matthijs R. Koot @mrkoot

NSA Releases Series on Protecting DoD Microelectronics From Adversary Influence (Dec 8) nsa.gov/Press-Room/New… * FPGA Overall Assurance Process, 19pp * FPGA Best Practices - Threat Catalog, 25pp * FPGA LoA1 Best Practices, 90pp * Third-Party IP Review Process for LoA1, 23pp

-

Fortinet CVEs.

https://www.fortiguard.com/psirt/FG-IR-22-398

-

Cool work to create a pattern that prevents AI from detecting “human” but doesn’t attract attention from humans. Camouflaged camouflage, if you will.

https://petapixel.com/2022/12/12/71-coat-makes-wearers-invisible-to-ai-security-cameras/

-

EL BARTO ANTI-WORK @ElBartoArmy

db @tier10k

Members of the inner circle of power at FTX formed a chat group called “Wirefraud” and were using it to send secret information about operations in the lead-up to the company’s spectacular failure. https://t.co/4nlXcFcdaS https://t.co/pHmAobtjQ0

-

Red Team lab automation by @PenTestPartners

"In this post I’ll detail how, using Packer, Terraform, and Ansible, to go from an empty ESXi server to an up and running Windows domain in minimum time."

https://www.pentestpartners.com/security-blog/red-team-lab-automation/

https://infosec.exchange/@reybango/109504196481068128

-

Kim Zetter @KimZetter

What a bad idea. Aside from the fact that many courts ban the use of electronics in them, how exactly do you wear Air Pods without the judge seeing them and 1) telling you to remove them or 2) figuring out the scheme you’ve got going on and punishing you for it?

Joshua Browder @jbrowder1

Anyone with a speeding ticket hearing coming up, please DM me. We want to build a @donotpay bot that listens to the court hearing via your AirPods and whispers what to say with GPT-3 and LLMs. We just want to experiment and will pay the ticket, even if you lose!

-

stewartbaker @stewartbaker

It's an Updated Turing Test: ChatGPT Successfully Imitates a Talented Sociopath with Too Many Lawyers reason.com/volokh/2022/12… Episode 434 of the Cyberlaw Podcast

reason.comChatGPT Successfully Imitates a Talented Sociopath with Too Many LawyersIt’s been a news-heavy week, but we have the most fun in this episode with ChatGPT. Jane Bambauer, Richard Stiennon,...

-

JD Work @HostileSpectrum

Understanding Clausewitz is table stakes in the study of conflict. Whether one agrees or disagrees with translating 18thC mil thinking into contemporary environment, the debate sparks insight. Here consider cyber as a defensive problem akin to the swamp & marshes. https://t.co/r9ry4PefNA

Task Force Phoenix (Phoenix Cast) @USMC_TFPhoenix

New cast alert! We were re-joined by the amazing @teaandtactics and discussed Clausewitz and Cyber, this time focusing on the defense. Hope you enjoy listening as much as we did recording it. https://t.co/t74o22NYPy

-

switched @switch_d

Their Bionic Eyes Are Now Obsolete and Unsupported

spectrum.ieee.orgTheir Bionic Eyes Are Now Obsolete and UnsupportedThese early adopters found out what happened when a cutting-edge marvel became an obsolete gadget... inside their bodies.

-

Shashank Joshi @shashj

Humans pretending to be AIs who are pretending to be humans. theguardian.com/technology/202…

-

Dmitri Alperovitch @DAlperovitch

Very big deal. The US, Japan and Netherlands build pretty much all advanced semiconductor equipment used to manufacture chips. China is now in a real bind

bloomberg.comBloomberg - Are you a robot?

-