May 16, 2022

The Ukrainian military is extremely good at enabling lower echelon leaders to operate independently with initiative. Russia has a more Soviet style top down military which fails to respond dynamically when the situation changes from the plan. Why is this a problem? No plan survives first contact with the enemy.

Nolan Peterson @nolanwpeterson

This mindset is prevalent among ground forces, too. A Ukrainian army lieutenant told me: “We manage to take the initiative and destroy the enemy as it is convenient and safe for us.” /2

---

Matthew McCormack @historymatt

On my bike ride this morning, saw a delivery robot lost in the woods

---

The world is rushing into the future pretty damn fast.

Def Mon @DefMon3

This is amazing, a company from the Netherlands had developed a drum magazine system for dropping mortar rounds from commercial drones. The future battle field is going to be about countering drones. t.me/razved_dozor/1…

---

lcamtuf @lcamtuf

Watch my professional review here: youtube.com/watch?v=Fcx65u…

lcamtuf @lcamtuf

It took me a while, but finally found the right pocket multi-tool https://t.co/RWymOBjnvL

-

Seamus is always worth listening to.

Seamus Hughes @SeamusHughes

A short thread on Buffalo, the shooter and what we can learn. 🧵

-

pourmecoffee @pourmecoffee

"Johnny Cash mural is leaking from a crude spot after Arkansas water tower gets shot" kansascity.com/news/nation-wo…

-

This is an enthralling read. History of a glyph and what and why design decisions were made. Trust me.

http://www.lucasfonts.com/learn/1E9E

-

Thread.

HostileSpectrum @HostileSpectrum

One of the most frustrating things about the present war, & to a wider extent the natsec policy space, is the inability of so many involved to envision entirely foreseeable scenarios & their outcomes. The failed RF bridging at Siverskyi Donets on 11May is a classic exemplar case

-

Ned Pyle @NerdPyle

Is this billboard trying to phish me or

-

Finding bugs at the protocol level.

Ollie Whitehouse @ollieatnccgroup

NCC Group's Sultan Qasim Khan has developed a generic link layer relay technique for Bluetooth Low Energy which satisfies the latency requirement. We worked with the Bluetooth SIG (who don't make relay resistance claims) and suggested they inform vendors as to the risk.

NCC Group Research & Technology @NCCGroupInfosec

Technical Advisory – Tesla BLE Phone-as-a-Key Passive Entry Vulnerable to Relay Attacks, by Sultan Qasim Khan https://t.co/MoN9K38abv

-

Microsoft says relay attack vulnerability is actually a feature, WONTFIX. Developer releases PoC.

Kevin Beaumont @GossiTheDog

Not sure people have realised how much of a dumpster fire this one is.

github.comGitHub - topotam/PetitPotam: PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other fu…PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions. - GitHub - topotam/PetitPotam: PoC tool to coerce Windows hosts to authenticat...

One Year Later…

Microsoft has fixed a “new” relay attack vulnerability!

Kevin Beaumont @GossiTheDog

New is doing a lot of heavy lifting here... and it shouldn't be. Also, I'm not sure how this got a new CVE.

bleepingcomputer.comMicrosoft fixes new PetitPotam Windows NTLM Relay attack vectorA recent security update for a Windows NTLM Relay Attack has been confirmed to be a previously unfixed vector for the PetitPotam attack.

-

Druthers Haver @6thgrade4ever

the most consequential figures in the tech world are half guys like steve jobs and bill gates and half some guy named ronald who maintains a unix tool called 'runk' which stands for Ronald's Universal Number Kounter and handles all math for every machine on earth