February 14, 2023

Dr. Manisha Ganguly @manisha_bot

My last BBC production for BBC Eye, "Finding My Torturer", won last week for Outstanding Innovation at the BBC News Awards. This win is dedicated to the women activists who trusted us with their story, their trauma, and their lives.

Dr. Manisha Ganguly @manisha_bot

NEW from me + #BBCEye: “Putin told us to kill all of you stupid f******” The story behind the leaked audio of torture of women activists inside a Moscow police station, and the hunt for the men who did this to them. THREAD (1/4) https://t.co/UKZh06nuyE #Russia #Ukraine

Covered in the newsletter here:

OSINT natives vs ACAB

-

-

“After logging into your account, you will be redirected to your personal domain. Please keep your personal domain private! Don’t disclose your personal domain and don’t share the link to your domain, as it is protected with your own password and cannot be accessed by other users.”

https://torrentfreak.com/z-library-returns-on-the-clearnet-in-full-hydra-mode-230213/

-

A truly exceptional discussion, if I do say so myself.

Tom Uren @tomatospy

Deny! Degrade! Discombobulate! This podcast is out now: overcast.fm/+5Sl-c18EI

thaddeus e. grugq 🌻 thegrugq@infosec.exchange @thegrugq

Had a fantastic discussion with @tomatospy today on Between Two Nerds. It will be out on Tuesday and I recommend you make some time to catch it.

-

Ulrike Franke @RikeFranke

“As the world’s security elite gathers in Munich this week, they’ll be connecting their mobile phones to Chinese telecoms equipment surrounding the venue.” #msc2023

politico.euChinese mobile masts loom over the Munich Security ConferenceHuawei kit is set up around the venue, highlighting a sore point in Germany’s security ties with the US and allies.

-

Andrea Servida @ServidaAndrea

The European Digital Identity Architecture and Reference Framework is available on GitHub: A GitHub Organization named "European Digital Identity" github.com/eu-digital-ide… A public repository for the ARF with Issues enabled github.com/eu-digital-ide… #EUdID #eIDAS #eIDAS4All

github.comGitHub - eu-digital-identity-wallet/architecture-and-reference-frameworkContribute to eu-digital-identity-wallet/architecture-and-reference-framework development by creating an account on GitHub.

-

Fred 'le fourbe' fatigué par tous ces cons @FredLamboray

What's the hell ? 🤩🤩🤩🤩

It is on the pirate bay, for those who are interested.

-

OpenSSH: bug is probably not exploitable

Hackers: hold my beer…

raptor@infosec.exchange @0xdea

Of course the master heap #xdev @qualys managed to achieve significant progress in #exploiting the recent double-free #vulnerability in #OpenSSH server 9.1 (CVE-2023-25136) 💚 seclists.org/oss-sec/2023/q…

seclists.orgoss-sec: Re: double-free vulnerability in OpenSSH server 9.1 (CVE-2023-25136)

-

Bing AI Can't Be Trusted

Jon Uleis @MovingToTheSun

My new favorite thing - Bing's new ChatGPT bot argues with a user, gaslights them about the current year being 2022, says their phone might have a virus, and says "You have not been a good user" Why? Because the person asked where Avatar 2 is showing nearby

Adriana Porter Felt @__apf__

@MovingToTheSun @dfaranha oh my god this is the most human thing ever

-

jwmasek 🌻 @jwmasek

@RachelTobac overthewire and underthewire are fantastic for teaching CLI, SSH, and encouraging research overthewire.org/wargames/

underthewire.techWargames – UTW

-

Matthew Green @matthew_d_green

France attempting to train an elite cyber force by placing technological access measures between teenagers and porn.

reuters.comFrance moves to block access to pornography sites for minorsFrance will present this week a digital-certification mechanism to oblige pornography websites to effectively control the age of viewers on their sites from September, French digital minister Jean-Noel Barrot said on Monday.

-

Pinboard @Pinboard

The endpoint of this process will be a human-like instantiation of the internet that that it's possible to talk to like you would a person. But no amount of iterative self-training can train out the inherent limitations of the data set you start with.

Jack Clark @jackclarkSF

There's pretty good evidence for the extreme part of my claim - recently, language models got good enough we can build new datasets out of LM outputs and train LMs on them and get better performance rather than worse performance. E.g, this Google paper: https://t.co/0jfJIaEQR7

-

Clare Eliza @clare_eliza

In ‘sentences that would make your nan’s head explode’: I can’t update my car because I live on a hill

-

Keep it down please @InternetHippo

While [recent catastrophe] is regrettable, more government regulation isn't the answer. We have to come together as Americans and find a solution that won't cost shareholders money

-

Dr. Dan Lomas @Sandbagger_01

💬"Asio disrupted the activities of individuals who had conducted surveillance of the home of an Iranian-Australian, as well as extensive research of this individual and their family". theguardian.com/australia-news…

theguardian.comAustralia foils Iran surveillance plot and vows to bring foreign interference ‘into the light’Home affairs minister reveals incident included monitoring an individual’s home and extensively researching their family

-

Kevin @tymlaly76700

#astéroïde

miki🇮🇹🇪🇸 @elcartagenese

#manche #Normandie :#asteroide #meteoroide

-

lcamtuf (@lcamtuf@infosec.exchange) @lcamtuf

Setting up an electronics workshop. This expands on a couple of recommendations I posted on Mastodon several days ago:

lcamtuf.substack.comSetting up an electronics workshopOver the years, I learned to stay clear of most gear advice on the internet. Between paid-for reviews, gatekeeping, and outright snobbery, there’s little one can learn by asking a random photographer or a woodworker for a list of their favorite toys.

-