June 24, 2022

For some research I’ve been rereading “Unrestricted Warfare” and the thinking always seems so fresh and current.

the new concept of weapons is a view of weapons in the broad sense, which views as weapons all means which transcend the military realm but which can still be used in combat operations

…

This is to say that there is nothing in the world today that cannot become a weapon, and this requires that our understanding of weapons must have an awareness that breaks through all boundaries. With technological developments being in the process of striving to increase the types of weapons, **a breakthrough in our thinking can open up the domain of the weapons kingdom at one stroke**.

[emphasis added]

https://www.c4i.org/unrestricted.pdf

-

Joe Słowik 🌻 @jfslowik

Yikes

-

-

billy leonard @billyleonard

More great work on commercial surveillance vendors from @Google TAG - @benoitsevens and @_clem1 disrupting campaigns using RCS Lab 🇮🇹 capabilities against 🍎 and 🤖 users in 🇮🇹 and 🇰🇿. blog.google/threat-analysi…

blog.googleSpyware vendor targets users in Italy and KazakhstanToday, alongside Google’s Project Zero, we are detailing capabilities provided by RCS Labs, an Italian vendor that uses a combination of tactics, including atypical drive-by downloads as initial infection vectors to target mobile users on both iOS and Android.

-

https://googleprojectzero.blogspot.com/2022/06/curious-case-carrier-app.html

-

Michael Weiss 🌻🇺🇸🇮🇪 @michaeldweiss

Many Russian Cyberattacks Failed in First Months of Ukraine War, Study Says - The New York Times

nytimes.comMany Russian Cyberattacks Failed in First Months of Ukraine War, Study SaysA report published by Microsoft also found that Moscow’s disinformation campaign to establish a narrative of the war favorable to Russia was doing better than expected.

-

Something weird happened in Kherson. There was betrayal. It is sort of the responsibility of the intelligence services to know about these things and stop them. That didn’t happen.

https://www.politico.com/news/2022/06/23/zelenskyy-top-spy-security-failures-00041794

-

vermont postsal service @ThePostsOffice

the woman in front of me at the steely dan concert is reading the wikipedia page for steely dan

-

Crac⚡ked @a_simpl_man

Asshole is not a good name for the main character in your book. The wife: look asshole It's not a book, It's my diary

-

Michael Weiss 🌻🇺🇸🇮🇪 @michaeldweiss

Iran Dismisses Revolutionary Guards’ Powerful Intelligence Chief - The New York Times

nytimes.comIran Dismisses Revolutionary Guards’ Powerful Intelligence ChiefHossein Taeb, a top official in the force, was transferred to a lower ranking job amid an escalation in Israel’s shadow war with Iran.

-

Traw @xtremepentest

sudo rm -fr / Deletes all French files from the linux server.

-

Lukasz Olejnik @lukOlejnik

Instagram to use face recognition to verify the age of users. It's quite unclear how this works with respect to privacy, sorry. Unclear who advised Instagram in this or contributed to the assessment. Also, not available for Europe. #GDPR #AIact #ePrivacy about.instagram.com/blog/announcem…

-

Crac⚡ked @a_simpl_man

"Oh the Replies You'll Get" would be a great book by Dr Seuss.

-

Jesse Dodge @JesseDodge

How much CO2 is emitted from training common AI models? New FAccT paper! *Partially* training a 6 B. param. transformer emits about as much as the average US home in a year! Smaller models? Only as much as charging a phone. What can you do? A 🧵: arxiv.org/pdf/2206.05229…

-

Dinosaur Comics! @dinosaurcomics

qwantz.com/index.php?comi… you may be wondering if in dinosaur times, Bill Gates was a hadrosaur. my friend: you are wondering correctly! he IS, he's BILL gates!!

-

Chris Wysopal @WeldPond

The long tail of a very widespread vulnerability that may never completely go away.

zdnet.comCISA: Hackers are still using Log4Shell to breach networks, so patch your systemsPatch your systems, says cybersecurity agency, because attackers are using these flaws.

-

SMAT App @SMAT_app

SMAT is crawling the “Russian Facebook”, VKontakte, to ID war criminals. So far we found: 9/10 of the “Despicable 10”, the un-named Bucha truck driver, and 700 matches total. Here we name names and share methods and findings. 🧵….. blog.smat-app.com/p/vk-war-crimi…

blog.smat-app.comWar Criminals on VKontakteNew findings from Russia’s Facebook

-

Bryce @bryceabdo

-

Crapware is the perpetual backdoor. There will always be loads of companies running a device that does something they need which is treated like a kitchen appliance when in reality it is a portal into the abyss.

Robert Knapp @power_napz

Patch your Mitel appliances ASAP, @rapid7 has observed this zero day used for initial access in a recent ransomware incident.

crowdstrike.comNovel Exploit in Mitel VOIP Appliance | CrowdStrikeCrowdStrike identified a compromised Mitel VOIP that served as a threat actor entry point using a remote code execution exploit.

-

I love this series.

https://acoup.blog/2022/06/24/collections-total-generalship-commanding-pre-modern-armies-part-iiib-officers/

-

https://harvardnsj.org/2022/06/dueling-over-dual_ec_drgb-the-consequences-of-corrupting-a-cryptographic-standardization-process/