Jan 26, 2023

Fun with macOS’s SIP MetalBear 🐻 - Tools for Backend Engineers

https://metalbear.co/blog/fun-with-macoss-sip/

-

Jan Lemnitzer @JanLemnitzer

In response to Germany's decision to send Leopard 2 tanks, Russian cyber activists have called for cyber attacks against German government and banks and airports, so time to check preparations for DDoS defence! @thegrugq @ciaranmartinoxf @campuscodi

faz.netRusslands Reaktion: „Diese Panzer werden brennen“Der Kreml verbreitet trotz der Lieferung westlicher Kampfpanzer Siegesgewissheit. Das Außenministerium hält die Formel von „roten Linien“ für veraltet. Russische Hacker rufen zu Cyberangriffen gegen Deutschland auf.

-

Matthijs R. Koot @mrkoot

US Cyber Command, DARPA ink cyberwar R&D pact theregister.com/2023/01/24/us_… Interview w/manager of @DARPA's Constellation program that aims to accelerate tactical & strategic cyber capabilities from R&D phase into operational use by the military. More:

-

Great presentation documented here.

https://defcon.social/@Wednesday/109752040573322135

-

I remain, posting @gokunaruto3000

Heeey, me and my wife noticed you across the bar and thought you looked like you maybe know how to stop windows 10 updating itself to windows 11

-

Subject: Data operand dependent timing on Intel and Arm CPUs

https://www.openwall.com/lists/oss-security/2023/01/25/3

-

Burp Suite @Burp_Suite

Crawling the modern web is hard. And if your scanner can't discover something, then it can't look for bugs in it. Tom, from the Burp Scanner development team, shows you how Burp Suite navigates application paths to overcome issues like stale CSRF tokens.

youtu.beBurp Suite Shorts | Navigating application paths with Burp ScannerTom from the Burp Scanner development team uses an expired CSRF token to demonstrate that stale requests can make life difficult for web vulnerability scanne...

-

Keep it down please @InternetHippo

They taught AI how to talk like a corporate middle manager and thought this meant the AI was conscious instead of realizing that corporate middle managers aren't

-

Do Not Taunt Happy Fun Branch Predictor

https://www.mattkeeter.com/blog/2023-01-25-branch/

-

thaddeus e. grugq 🌻 thegrugq@infosec.exchange @thegrugq

Prepping for DEFCON. #OPSEC

-

el jefe @h3xenbrenner2

Well, well, well. Look who’s come crawling back. If it isn’t my one year old son I accidentally left at the park

-

@mikko @mikko

Has the case modding scene gone too far?

-

A North Korean Computer Emergency Response Team @dprkcert

Spank me harder daddy

Rewards for Justice @RFJ_USA

CONFIRMED BY THE @FBI: North Korean hacker groups stole more than $100,000,000 of virtual currency. WANTED: Information on hackers working for the benefit of the Government of North Korea. REWARD: Up to $10,000,000. Send your tips our way! https://t.co/nOLYUHcvg6 https://t.co/lwsYuWxdhq

Rewards for Justice @RFJ_USA

CONFIRMED BY THE @FBI: North Korean hacker groups stole more than $100,000,000 of virtual currency. WANTED: Information on hackers working for the benefit of the Government of North Korea. REWARD: Up to $10,000,000. Send your tips our way! rewardsforjustice.net/rewards/foreig…

-

Lukasz Olejnik (@LukaszOlejnik@Mastodon.Social) @lukOlejnik

Germany DDoSed after a decision to send tanks to Ukraine? By “Russian” k***et group, which is likely an information operation using irrelevant cyberattacks. Sure, some German sites had to cope. Still a non-event. The interesting aspect is the political one. Only that.

-