Between Two Nerds: Is cyberespionage actually signals intelligence?
I really enjoyed this conversation with Tom and I highly recommend listening to it.
-
@cynicalsecurity @thegrugq @taurus_hq we already have @thegrugq's spirit with us when we do key ceremonies in that room – and @dystopiabreaker's too
-
Russia says it will fast-track testing of tank-killing robot in Ukraine
https://taskandpurpose.com/news/russia-ukraine-marker-tank-ugv/
-
#Fortinet #FortiNAC CVE-2022-39952 #Vulnerability Deep-Dive and IOCs by @Horizon3Attack
Writeup:
horizon3.ai/fortinet-forti…
PoC:
github.com/horizon3ai/CVE…
-
China is using its courts and patent panels to pry technology from Western nations. Some U.S. and European companies are crying foul. wsj.com/articles/u-s-c… via @WSJ
-
They'd be a bit wet, might need a boat.
Headline just underlines my irritation with labelling any intelligence related as "spies".
-
Solid research on using LLMs to improve code coverage via test case generation. LLM’s are going to continue changing how code is written and tested… and yes, fuzzed.
Caroline Lemieux @cestlemieux
https://www.carolemieux.com/codamosa_icse23.pdf
-
Hacker Uncovers How to Turn Traffic Lights Green With Flipper Zero
Kind of a cheat. It’s using the flipper zero to control the strobing of an IR light, and the IR light triggers the traffic lights.
https://www.thedrive.com/news/hacker-uncovers-how-to-turn-traffic-lights-green-with-flipper-zero
-
Prompt Engineering Guide
https://github.com/dair-ai/Prompt-Engineering-Guide
-
Ukrainian charity wants to raise 1.3 million for cyber offence
I guess they want to buy an exploit?
https://therecord.media/ukraines-largest-charity-wants-to-raise-1-3-million-for-cyber-offensive/
-
-
In this paper, published in #areajournal, I examine the (geo)political relationship between malware authors, computer materials, and their ecologies. These produce 'grammars' shaping computational agency prior to, and including, cyber operations and the algorithmic.
RGS-IBG Higher Ed @RGS_IBGhe
-
When someone shits on the floor this thing is going to smear it everywhere then track it through the building.
Robot cleaning bathrooms!
Another job that goes to automation.
Looks like the inventor has been working on this for over 5 years!
-
-
Anybody who thinks Seymour Hersh might be onto something with his explanation for the Nord Stream pipeline explosions should read this extraordinarily thorough and forensic demolition job by @OAlexanderDK https://t.co/FuUSFbrzlh
Oliver Alexander @OAlexanderDK
-
Former Danish defense minister Claus Hjort Frederiksen has been charged with revealing state secrets, allegedly by admitting that Danish intelligence cooperates with the NSA in a cable tapping operation:
-
A 1.5 meter (4.9ft) sphere appeared today at Enshuhama Beach in Hamamatsu, Japan.
Police have surrounded the area and cordoned off a perimeter of 200 meters until they determine what the object is.
What the hell do we think this is?
https://www.vice.com/en/article/m7gmga/japan-investigate-mysterious-sphere-beach
-
https://github.com/horizon3ai/CVE-2022-39952
Bugs happen
Bugs are a pain
Bugs can be prevented
CVE-2022-39952 is a fascinating bug that sheds light into the rather frustrating world of enterprise security products and a lack of robust engineering approaches.
The issue is within the keyUpload scriptlet, keyUpload.jsp.
cool cool, no auth request comes in and it parses to look for a file in the key parameter, and if found, bish bash bosh it writes it to /bsc/campusMgr/config.applianceKey.
ok so far(ish)...
-
One hacker group called Conti even laid off 45 call-center operators last year who were working as part of an apparent scheme to spread ransomware attacks after the call centers failed to make money,
-
ANSI C89 hello world program with no whitespace in the source except the trailing newline and without assuming ASCII
x,y;main(void){for(y=0;y<5;y++)putchar("hello"[y]);for(x=0;!isprint(x)||isgraph(x);x++);putchar(x);for(y=0;y<6;y++)putchar("world\n"[y]);}
noop_noob @noop_noob
-
-