December 23-24, 2022

-

Lukasz Olejnik (@LukaszOlejnik@Mastodon.Social) @lukOlejnik

US Army official job titles of cybersecurity roles. They even released numbers of people assigned to specific duties, like offensive tasks? Huh. gao.gov/assets/gao-23-…

-

Blake Allen @Blake_Allen13

Germany has arrested a Russian spy who was operating in its foreign intelligence agency, the BND, for years. He’s been arrested and the offices of the BND searched. It appears to have been a major security breach. The agent has been charged with treason

spiegel.de(S+) BND: Mutmaßlicher russischer Spion beim Bundesnachrichtendienst enttarntEin Spionagefall erschüttert den deutschen Auslandsgeheimdienst: Nach SPIEGEL-Informationen soll ein BND-Mitarbeiter Staatsgeheimnisse an Russland verraten haben. Der Beamte wurde festgenommen, Büros des BND wurden durchsucht.

-

Emulating an iPod Touch 1G and iPhoneOS 1.0 using QEMU (Part I)

https://devos50.github.io/blog/2022/ipod-touch-qemu/

-

Jon Hawkes @JonHawkes275

The French Boirault Machine from WW1, flagrantly abusing the definitional boundaries of a tracked vehicle. The later v2 had an armoured structure, but neither took off on account of little to no steering, slow, fragile, and generally mad/rubbish.

-

Luis Batalha 🇵🇹🇺🇸 @luismbat

Who would have thought that adding a Sierpinski Triangle Fractal as musical notes would actually sound good!😅

-

PyPI malware creators are starting to employ Anti-Debug techniques

https://jfrog.com/blog/pypi-malware-creators-are-starting-to-employ-anti-debug-techniques/

-

Jacob Baines @Junior_Baines

It's ridiculious that neither the Linux kernel devs or @thezdi requested CVE for ZDI-22-1690. Thanks to Marcus Meissner for actually caring.

seclists.orgoss-sec: Re: Details on this supposed Linux Kernel ksmbd RCE

-

Japan going full anime

誤字脱字な研究室@気ままに運用中 @gozidatuzinaLab

令和5年度の防衛予算の概要（mod.go.jp/j/yosan/yosan_…）から気になるのを少しだけ。 レールガンのイメージきましたよ！　ゲームでよく見る感じそのままだねw 予算額も160億円と相当なので力の入れようを感じる。 従来のミサイル主体の防衛では費用対効果が悪いので新技術で大幅な改善に期待したい。

-

Richard Socher @RichardSocher

Today, youChat goes live. Open, broadly capable, conversational AI for search with knowledge of recent events and citations of sources. Search and chat of the future: you.com/search?q=what+…

-

John Lyon @JohnLyonTweets

There's nothing like the joy on a kid's face when he first sees the PlayStation box containing the socks I got him for Christmas.

-

I wrote about the “Dick’s Sporting Goods” Yeti cooler scam, why it has slipped past Google’s most sophisticated machine learning tools, and what it means for the future of email spam https://www.wired.com/story/email-scam-dicks-sporting-goods-yeti-cooler/

https://mastodon.social/@laurengoode/109563328211555451

-

TikTok banned on government devices until after the pass spending bill

I guess this is related to the viral ‘pork barrel budget allocation challenge’?

https://www.cnbc.com/2022/12/23/congress-passes-spending-bill-with-tiktok-ban-on-government-devices.html

-

Reverse engineering TikTok VM obfuscation

https://nullpt.rs/reverse-engineering-tiktok-vm-1

-

path.eth 🛡️ @Cryptopathic

I think the situation at @LastPass may be worse than they are letting on. On Sunday the 18th, four of my wallets were compromised. The losses are not significant. Their seeds were kept, encrypted, in my lastpass vault, behind a 16 character password using all character types.

-