June 22, 2022

“I learned it from watching you!”

Matthijs R. Koot @mrkoot

U.S. DOJ: Deputy U.S. Marshal charged w/unlawfully obtaining cell phone location info (Jun 14) justice.gov/opa/pr/deputy-… He obtained location of phones of personal associates, incl. relationships & their spouses. Indictment (.pdf, 16 pages) justice.gov/opa/press-rele… /c @thegrugq

-

Jack Detsch @JackDetsch

NEW: Ukrainian military officials are increasingly worried that U.S.-provided Gray Eagle strike drones would get shot down by reinforced Russian air defenses in the Donbas region. "It’s not Afghanistan here," said one Ukrainian pilot.

foreignpolicy.com‘It’s Not Afghanistan’: Ukrainian Pilots Push Back on U.S.-Provided DronesBoth the Biden administration and Ukraine are worried that American strike drones would get shot down quickly.

-

-

This is amazing

-

PunishedDreams @PunishedNightm3

The notion of AIs developing their own kinds of magic is terrifying

-

Wayfarer’s Agony @TH0MASBAHAMA

April - 1805…Napoleon is master of Europe…only the British fleet stands before him…ball is now life https://t.co/gzuL6L53zy

UB1UB2 @UB1UB2

A full-size floating basketball court created by Hennessey is traveling down the River Thames in London to celebrate the NBA's 75th Anniversary Season and the 2022 Finals https://t.co/D5jL2eVjqX

UB1UB2 @UB1UB2

A full-size floating basketball court created by Hennessey is traveling down the River Thames in London to celebrate the NBA's 75th Anniversary Season and the 2022 Finals

-

Richard Crowley @rcrowley

Has software naming ever topped Nero Burning ROM?

-

Anastasios Pingios @xorlgr

Believe it or not there are still ShadowBrokers leaks that haven't been analysed. Here's the SUAVEEYEFUL, a FreeBSD software implant targeting MiraPoint email appliances and used (in the 2000s) by #EQGRP #APT to spy on a Japanese university and China's MFA

xorl.wordpress.comThe forgotten SUAVEEYEFUL FreeBSD software implant of the EQUATION GROUPI was checking the 2017 ShadowBrokers leaks when I noticed that one of the EQUATION GROUP tools leaked back then has no public references/analysis (at least as far as I can tell). So, here is what …

-

Head of Ofcom, about to have new powers over social media, won’t use Twitter because of the level of harassment she gets. So, that’s a good sign.

https://www.bloomberg.com/news/articles/2022-06-22/ofcom-ceo-melanie-dawes-bio-the-woman-regulating-uk-social-media-companies

-

Smerity @Smerity

Referenced re: "Experimenting with Rust in Chromium", 2014's Chrome had "nearly 25000 (!!) allocations ... for every keystroke in the Omnibox (search box)". Whilst Chrome will have improved since I've no doubt we're surrounded by other dark rabbit holes.

groups.google.comBe careful when using std::string

-

OSINTtechnical @Osinttechnical

A Ukrainian PD-1 drone hit the Russian Novoshakhtinsky refinery in Rostov Oblast. A very deep strike within Russian territory.

-

Ben Wagner @benwagne_r

So, a brief thread on the European Parliament @EP_PegaInquiry hearing yesterday evening with NSO, @Edin_O @skirchy and me speaking and many great questions from MEPs. 1/x

PEGA Committee Press @EP_PegaInquiry

Reminder - coming up tomorrow (21/6): - Discussion with Chaim Gelfand (Chief Compliance Officer, @NSOGroup) and external legal advisor Nicola Bonucci - Public hearing "Stocktaking of EU spyware providers" w/@Edin_O, @skirchy & @benwagne_r More info: https://t.co/w9zvAM4pqS

-

Federico Dotta @apps3c

A few @semgrep rules to find SQL injection, XSS and authorization bypass in PHP lang and in PHP Yii framework

security.humanativaspa.itSemgrep rules for PHP security assessment - hn securityHi! According to the official documentation, Semgrep […]

-

EU Council Press @EUCouncilPress

.@EUCouncil conclusions on a Framework for a coordinated EU response to hybrid campaigns. Full text here 👇 consilium.europa.eu/en/press/press…

consilium.europa.euCouncil conclusions on a Framework for a coordinated EU response to hybrid campaignsCouncil conclusions on a Framework for a coordinated EU response to hybrid campaigns

-

Apparently the russians have been defeated in the cybers by western tech agencies. Wonder why that didnt do that before? 

https://www.washingtonpost.com/opinions/2022/06/21/russia-ukraine-cyberwar-intelligence-agencies-tech-companies/

I have opinions on this. I’m trying to write them up, although I get so angry from the fractal of wrong and the complete bull shit.

thaddeus e. grugq 🌻 @thegrugq

Curious why the Russian cybers have been so weak? Wonder no more! - public private partnerships - information sharing - the power of friendship Read all about it:

washingtonpost.comOpinion | How Russia’s vaunted cyber capabilities were frustrated in UkraineBig Tech, Western intelligence and a homegrown army of Ukrainian hackers pull off one of the biggest surprises of the war.

-

There’s another paper that is worse, so bad that I won’t even link it. It’s truly terrible.