July 13, 2022

A great fact check on the misplaced nostalgia for USIA. I’ll admit to not knowing enough about the organisation, just thinking that it was the closest thing the US had to a counter propaganda agency. But apparently they weren’t really that. The West needs better coordination and control over their counter propaganda efforts. Like, to actually have one worth the name would be a great start.

https://www.19fortyfive.com/2022/07/the-irony-of-misinformation-usia-myths-block-enduring-solutions/

-

FatMan @FatManTerra

Thought it would be fun to share a story from last year where I watched a friend of mine pump a sh*tcoin on Binance by buying billboards and a BitBoy Crypto video. Nothing we don't already know, but I found it fascinating to watch in real time. (1/9)

-

Matthew Green @matthew_d_green

It’s July 2022 and still no end-to-end encrypted iCloud backups, not even as an option. Thanks Apple.

vice.comAlleged Hunter Biden Leak Shows iCloud Can Be iPhone Security’s Weak LinkiCloud doesn’t have to be dangerous, as long as you use the right precautions and security mechanisms.

Matthew Green @matthew_d_green

I don’t really care about the Hunter Biden angle on this, but Apple pushing their users into iCloud backups and then refusing to protect them, that’s a thing I wish more people would talk about.

-

Yannayl @Yannayli

Everybody warns you how terrible it is when they kill your 0days. Nobody warns you how horrible it is to maintain them for years across 20 versions, 4 OS, 3 allocators and 2 ISAs.

-

Duffel Blog @DuffelBlog

Analysts from the Central Intelligence Agency and other representatives of the U.S. Intelligence Community warned today that China may be able to develop its own Top Gun movie in as little as two years.

duffelblog.comChina close to developing own ‘Top Gun’ filmNipping at our heels.

-

Shashank Joshi @shashj

SVR's Aleksandr Shcherbakov got $7m package for identifying Robert Hanssen. "The moral weariness of the late Cold War and thereafter shows that money has replaced ideology as a motive for espionage, and catching spies requires a lot of cold, hard cash." tandfonline.com/doi/full/10.10…

-

Lord Hugh Mungus @PoodleSnarf

I’m already scared

-

New working speculative execution attack sends Intel and AMD scrambling

Both companies are rolling out mitigations, but they add overhead of 12 to 28 percent.

Computers were a mistake.

https://arstechnica.com/information-technology/2022/07/intel-and-amd-cpus-vulnerable-to-a-new-speculative-execution-attack/

And here’s the original post:

https://comsec.ethz.ch/research/microarch/retbleed/

-

l0ss @mikeloss

Hey kids, you ever wanted to use Snaffler or Group3r via inlineExecuteAssembly or whatever, but couldn't because it used Environment.Exit() and that would kill your beacon? Well, I fixed that, so now it's not a problem any more. github.com/SnaffCon/Snaff… and

github.comGitHub - Group3r/Group3r: Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did. - GitHub - Group3r/Group3r: Find vulnerabilities in AD Group Policy, but do it better than Grouper2 did.

-

Art Manion @zmanion

A short and incomplete thread about national law affecting coordinated vulnerability disclosure (CVD). (If you want actual legal advice, talk to a lawyer.) 1. EU NIS2 requires CVD, Articles 5,6,10, call this one intentional and a win!

-

reverseame @reverseame

How to Reverse Engineer and Patch an iOS Application for Beginners: Part I

inversecos.comHow to Reverse Engineer and Patch an iOS Application for Beginners: Part ISo you want to reverse and patch an iOS application? I got you >_< This blog is focused on reversing an iOS application I built for th...

-

-

ςεяβεяμs - мαℓωαяε яεsεαяςнεя @c3rb3ru5d3d53c

Apparently #GCHQ in #TheUndecidedWar cannot even afford #IDAPro for #malware #reverse engineering. 🤣

-

Matthijs R. Koot @mrkoot

Europe's PegasusGate - Countering spyware abuse (July 2022) epthinktank.eu/2022/07/07/eur… New report by Hendrik Mildebrath (@h_mildebrath) for the European Parliamentary Research Service (EPRS / @EP_ThinkTank). Direct link to report (2.1MB .pdf, 122 pages) europarl.europa.eu/RegData/etudes…

European Parliamentary Research Service @EP_ThinkTank

3️⃣ challenges to combat #spyware abuse in the EU ⏹️halt internal spyware ⏹️curb external (3rd-country) abuse ▶️ensure adequate, uniform policy in all domains https://t.co/DpfFgrXIFZ #PegasusGate @SophieintVeld @BirgitSippelMEP @JFLopezAguilar @rozathun @EvaKaili @katarinabarley

-

Aidan Moher @adribbleofink

How it started vs. how it's going

-

Joshua Zitser @mrjoshz

It’s all kicking off in ‘Princess Diana - Keep Her Memory Alive’