July 15, 2022

A pretty good idea. Huawei is owning the Linux kernel security bug contest… or as I’ve recently begun calling it, Linux kernel plus security bugs.

Patrick Howell O'Neill @HowellONeill

New: DARPA's quest to understand the most important software on earth -- and the people behind it all: “This is a critical infrastructure problem. We don’t have a grip on it. We need to get a grip on it."

technologyreview.comThe US military wants to understand the most important software on EarthOpen-source code runs on every computer on the planet—and keeps America’s critical infrastructure going. DARPA is worried about how well it can be trusted

-

Emad Shanab - أبو عبد الله @Alra3ees

Log4Shell arsenal:- github.com/pentesterland/…

-

chompie @chompie1337

she’s a 10 but she uses Ghidra

-

bernat 👍🏻 @kozackkk

osti tu que animat està el panorama si han hagut de posar això

-

-

Chris Stringer @ChrisStringer65

Some of Us Are Part-Neanderthal, And It Could Affect How You Process Medicines

sciencealert.comSome of Us Are Part-Neanderthal, And It Could Affect How You Process MedicinesLife on the blood-thinning agent warfarin involves the careful calculation of each dose. Too little, and it could be ineffective. Too much, and there is the risk of uncontrollable bleeding.

-

https://www.zerodayinitiative.com/blog/2022/7/13/cve-2022-30136-microsoft-windows-network-file-system-v4-remote-code-execution-vulnerability

-

Jackie BOO 👻 @jbowocky

We need more mediocre security engineers youtu.be/3YmixOGqylY Thank you @BSidesSF for giving me your stage💗

youtu.beBSidesSF 2022 - Keynote: We Need More Mediocre Security Engineers (Jackie Bow)Jackie Bow - Keynote: We Need More Mediocre Security EngineersThe field of information security remains one of the most isolated - and at times, elitist - ba...

-

Devansh (⚡, 🥷) @0xAsm0d3us

A powerful and open-source toolkit for hackers and security automation github.com/We5ter/Scanner…

-

Thomas H. Ptacek @tqbf

A popular message board argument about @kennyog et al’s MEGA attack was that it required an unrealistic number of customer logins to worry about exploitation. Welp. Not so much!

eprint.iacr.orgCryptanalyzing MEGA in Six Queries

-

Liam O 🦆 @liamosaur

TIL that CWE-655 "Insufficient Psychological Acceptability" is a thing, and yelled "yes... YES!!" at the screen as I was reading it

-

SondraDee @SondraDeeMe

The anonymous phone call in 1995 about my refrigerator running still haunts me. We were both so empty inside, I didn't even try to catch it.

-

Dead Pan Nick @Contwixt

You're only as smart as the dumbest thing you've ever said on the Internet.

-

A report on trickbot.

https://www.cyjax.com/2022/07/15/who-is-trickbot/