July 3, 2022

Event-level prediction of urban crime reveals a signature of enforcement bias in US cities.

https://www.nature.com/articles/s41562-022-01372-0

-

widberg @w1db3rg

Remember the first rule of memory safety is to have fun!

-

Matthijs R. Koot @mrkoot

Outsourcing the Cyber Kill Chain: Reinforcing the Cyber Mission Force & Allowing Increased Contractor Support of Cyber Operations (.pdf, June 2022, 28 pages) jnslp.com/wp-content/upl… Student Notes in @NatSecLaw by Homer A. La Rue, JD candidate at Georgetown U. /c @thegrugq

-

Joe Słowik 🌻 @jfslowik

Thankfully not my place, but some #CTI shops all like:

-

%

Allaboutclait @allaboutclait

Rogue HackerOne employee steals bug reports to sell on the side bleepingcomputer.com/news/security/… #infosec

bleepingcomputer.comRogue HackerOne employee steals bug reports to sell on the sideA HackerOne employee stole vulnerability reports submitted through the bug bounty platform and disclosed them to affected customers to claim financial rewards.

-

HostileSpectrum @HostileSpectrum

This case of apparent extortion like behavior with actor trying to both arbitrage reportedly stolen bugs between bounty programs whilst directly engaging impacted clients is such a sad sordid little drama. Especially given competitive red team industry dynamics underlying it all

-

Gavin Buckingham @DrGBuckingham

Oh this is MELTING MY BRAIN by Niko22966

-

Scott P Johnson @Vortex_Egg

W/out commenting on the specifics of moderation policies here, this is an example of something noted in the content moderation literature—opaque moderation actions lead to the formation of folk lore and conspiracy theories about moderation that feeds back into the public debate.

Andrew Couts @AndrewCouts

.@telliotter got to the bottom of Meta deleting "abortion pills can be mailed" posts on Facebook and Instagram. Turns out, it was just scattershot AI moderation that's been happening for years https://t.co/nTha12aZSh

-

Lazarus is going hard for DeFI and putting together some sophisticated operations, linking multiple parts together to achieve their objectives.

https://www.theregister.com/2022/07/01/lazarus-crypto-hack-harmony/

-

Ciaran Martin @ciaranmartinoxf

Very enjoyable critique of #theundeclaredwar by the legendary Sir David Omand

telegraph.co.ukFact-checking The Undeclared War: ‘A hacker could turn off the lights in Putin’s office’Is Channel 4’s chilling new cyber-attack drama far-fetched? Not in the least, says former GCHQ chief David Omand

-

vx-underground @vxunderground

Large update to the Windows malware paper collection... New sections: -Data Theft -Evasion: EDR & AV specific -Evasion: Process Creation & Shellcode Execution -Evasion: Syscalls & Memory Evasion -Initial Access Malcode -Network Communications and more... vx-underground.org/windows.html

-

Can Ukraine Win?

-

Nicolas Tenzer @NTenzer

If you only read one essay today, read this response from @TimothyDSnyder to Habermas (who had justified Scholz's procrastination in defending #Ukraine). A historical/philosophical rebuttal of his arguments & one of the most powerful texts on Putin's war.

faz.netJürgen Habermas and Ukraine: Germans have been involved in the war, chiefly on the wrong sideJürgen Habermas defends the German Chancellor’s hesitating attitude towards Ukraine. But his historical errors minimize Germany’s responsibility for the current state of affairs. An answer to Habermas.

-

Sticking with a theme, here is the latest Perun video, which covers the Germany military.

-

Kevin Beaumont @GossiTheDog

Microsoft have found it. Raspberry Robin has a UAC bypass I’ve not seen before, still works.

bleepingcomputer.comMicrosoft finds Raspberry Robin worm in hundreds of Windows networksMicrosoft says that a recently spotted Windows worm has been found on the networks of hundreds of organizations from various industry sectors.

-

✨V✨ @coolauntV

thinking about the time my ex demanded I see a therapist and then the therapist told me to dump him

-

Article on the paper linked earlier on economics, showing that queen Victoria’s years of mourning disrupting the mating rituals of aristocrats leading to fewer of them. All of which then impacted the politics of Britain.

https://www.axios.com/2022/07/02/what-happened-when-the-rich-stopped-intermarrying

-

if I could go back to when I was in my twenties, I’d tell myself to travel more, to always live in the moment, and, most important, not to empty out my savings account to start an alpaca farm just because I read an article that said that “alpaca fleece is the future of the clothing industry.”

https://www.newyorker.com/humor/daily-shouts/eight-things-i-wish-id-known-in-my-twenties-before-i-blew-my-life-savings-on-an-alpaca-farm

-