December 14, 2022

Dec 14, 2022

Administrivia: The holidays are coming up fast and output from the infosec community is slowing down. I will be taking time off as well. I haven’t figured out the exact dates, but definitely for 24th through the 2nd. Possibly a reduced posting schedule until then.

Justine Tunney @JustineTunney

My dream has finally come true. I've been working on a 160kb virtual machine named Blink. It's now capable of emulating programs as complex as GCC and Qemu. We can now vendor Linux toolchain binaries in our build configs and have them run across platforms. github.com/jart/blink

pourmecoffee @pourmecoffee

This should be every lede in 2022.

Mobile tech is a duopoly run by two companies - Google and Apple - with a combined market cap of $3.5 trillion. Each company uses a combination of tech, law, contract and market power to force sellers to do commerce via an app, and each one extracts a *massive* commission on all in-app sales - 15-30%!
1/

https://mamot.fr/@pluralistic/109508291802115793

Tashy McTashface @TashP351

My friends daughters hamster has been missing and feared dead for almost 2 weeks now. Last night she forgot to wash up the paint tray after a day of decorating. We now think the hamster may still be alive…

Rskvp93 @rskvp93

MSRC released the patch for our "TabShell" vulnerability (msrc.microsoft.com/update-guide/e…). This is a nice bug chain to RCE Exchange on-premises, Exchange Online, Skype for Business Server (may be SFB Online+Teams too but can't find its powershell remote endpoint) with @_q5ca @hoangnx99

msrc.microsoft.comSecurity Update Guide - Microsoft Security Response Center

Bert Hubert 🇺🇦 @bert_hu_bert

In the world of high-tech, Europe is exceptionally weak at innovating. We often blame this on regulation. Here I want to talk about how we may only have ourselves to blame by underpaying technologists and not really valuing technology anyhow:

berthub.euIs Europe Just Not Good at Innovating? - Bert Hubert’s writingsThis article is part of a series on (European) innovation and capabilities. Feedback is very welcome on bert@hubertnet.nl. I’d also like to thank the many proofreaders, but all mistakes remain mine! In the world of (high) technology, Europe is exceptionally weak at innovating. There are many ways to…

A look at why so much spam is getting through Gmail recently.

https://www.cnbc.com/2022/12/12/why-youve-been-getting-so-much-gmail-spam-about-yeti-coolers-.html

Via: https://infosec.exchange/@Ginger_hax/109511847409279018

To this day one of the most common typos on vendor assessment questionnaires is the question “do you check your environment for rouge wireless access points?”, and the only acceptable way to answer is “yes, our bleu team does this quarterly”

https://infosec.exchange/@SecureOwl/109510717621851113

Fantastic talk by @Quinnypig@awscommunity.social on failure. True to style this is very different to the usual inspirational talks on these topics, but at the same time connects more profoundly and personally than most like it. Well worth the 20 minutes.