November 12, 2022

‘Dark Ships’ Emerge From the Shadows of the Nord Stream Mystery | WIRED

https://www.wired.com/story/nord-stream-pipeline-explosion-dark-ships/

-

Jesus Roman @jesusfroman

🇨🇳CASC Rainbow-4 (CH-4) UCAV automatically identifying ground targets in Zhuhai Airshow 2022 (via wb/沉默的山羊)

-

British embassy security guard David Smith admits spying for Russia

https://www.bbc.com/news/uk-63602000

-

simo @_simo36

My #POC2022 slides + the iOS kernel r/w exploit can be found here :) github.com/0x36/weightBuf… Thanks @POC_Crew for a fantastic conference and truly honored to have been part of it.

github.comGitHub - 0x36/weightBufs: ANE kernel r/w exploit for iOS 15 and macOS 12ANE kernel r/w exploit for iOS 15 and macOS 12 . Contribute to 0x36/weightBufs development by creating an account on GitHub.

-

Rafael Shimunov is on Mastodon @rafaelshimunov

Incredible investors.com/news/technolog…

Rafael Shimunov is on Mastodon @rafaelshimunov

Eli Lilly stock isn't just tanking because of a satirical Tweet on Musk's hellscape, it's tanking because millions of people are asking why we have to pay for insulin, when it was made to be free. That's why other insulin stocks are falling too. Happy Disability Awareness Month

-

tef (job seeking arc) @tef_ebooks

Operations Skills: PRIMARILY KAFKA AND CASSANDRA BUT I CAN MAKE ANY SORT OF PREDICTION AND HAVE IT IGNORED BY ANY TYPE OF BUREAUCRACY

-

bandit @UtilityLimb

Programming Skills: PRIMARILY RUBY AND PYTHON BUT I CAN USE ANY TYPE OF GEM TO CONTROL ANY TYPE OF SNAKE

-

Tony Ingesson @tonyingesson

For my English-speaking intel/security people, here's a summary thread re. the GRU espionage case in Sweden that is getting significant media coverage here today:

-

Chase Mitchell @ChaseMit

Controversial take: this place is the best it’s ever been

-

Wild Geerters @steinkobbe

Spenol @SpenolPalinUSA

@steinkobbe Just one more thing: The parody account didn't tweet anything about poisoning.

-

The Death of Ronald W. Pelton

-

HD Moore @hdmoore

Bored this weekend? Check out mastodon. Recent mini-rant about arm64 devices (and a nice built-in development RAT) @ infosec.exchange/@hdm/109328476…

+

starlabs @starlabs_sg

We have just uploaded the slides by @hi_im_d4rkn3ss & @Peterpan980927 github.com/star-sg/Presen… github.com/star-sg/Presen… Thanks @POC_Crew for a fantastic conference and our team members are truly honored to participate in it.

github.comPresentations/Zhenpeng Pan.pdf at main · star-sg/PresentationsContribute to star-sg/Presentations development by creating an account on GitHub.

-

Patrick Walton @pcwalton

This paper is awesome (h/t @tqbf): usenix.org/system/files/s… Turns out that machine learning can reconstruct reasonable variable names from decompiled source! I'd love to see this integrated with Ghidra.

Omar @byte_how

@trufae @pcwalton @tqbf Source is here

github.comGitHub - CMUSTRUDEL/DIRTY: DIRTY: Augmenting Decompiler Output with Learned Variable Names and TypesDIRTY: Augmenting Decompiler Output with Learned Variable Names and Types - GitHub - CMUSTRUDEL/DIRTY: DIRTY: Augmenting Decompiler Output with Learned Variable Names and Types

Bogdan Vasilescu @b_vasilescu

@pcwalton @tqbf So would we re Ghidra! See here for why we haven’t been able to yet (help is welcome 🙏):

Dr. Claire Le Goues @clegoues

One more bit of color: the ideas are decompiler-agnostic, though we built it on HexRays. (Whomp whomp)^2 WHY NOT GHIDRA??! Here's why: https://t.co/b5fd7zg7ff Ghidra doesn't accurately import local vars from DWARF, which we need for training (NOT prediction, to be clear). 6/

-

ptr-yudai @ptrYudai

My writeups for Hack[.]lu CTF🍣 ptr-yudai.hatenablog.com/entry/2022/11/…

ptr-yudai.hatenablog.comHack.lu CTF 2022 Writeups - CTFするぞI met @keymoon at CODEBLUE conference and impulsively decided to play a CTF with him. There was Hack.lu CTF 2022 in that weekend and we played it as a team weak_ptr<moon>. Surprisingly we stood 5th place🎉 It was a fun to play a CTF with him. I solved some tasks during the CTF and I’m going to write…

-

Fascinating @fasc1nate

Lions block the road in Tanzania.

-

👨🏻‍💻☕️ @hunterwalk

Twitter Community: Knock Knock Elon: Who's there? Twitter Community: Parody Elon: Parody who? Twitter Community: Pairodeez Nuts

-

raptor@infosec.exchange @0xdea

An opinionated guide on how to reverse engineer software (part 1 and 2) by @withzombies margin.re/2021/11/an-opi…

margin.reAn opinionated guide on how to reverse engineer software, part 2The best reverse engineer is also a very capable software developer. Why you may ask? Because almost no one reinvents the wheel.

-

Brandon Hardin @hardin

elon basically forcing brands to tweet things like "we're sorry you ever thought insulin could be free," incredible scenes

Eli Lilly and Company @LillyPad

We apologize to those who have been served a misleading message from a fake Lilly account. Our official Twitter account is @LillyPad.

-

JRR Jokien (Parody) 🗡️🏹🪓 @joshcarlosjosh

me refusing to leave twitter until it blows up:

-

leon @leyawn

fuck my life

-

🚩Dan Credentials🚩 @CharlemagnumPI

TIL an Allosaurus pubic bone fossil was discovered in 1999 with a huge puncture in it and evidence of infection and enormous abscess that likely killed the animal. The injury has been interpreted as the Allosaurus getting owned straight in the dick by a Stegosaurus's tail spikes

🚩Dan Credentials🚩 @CharlemagnumPI

Cast of the wound fitted to a Stegosaur spike. Open and shut case, imo. Jesus lol

-

These are a cool example of using Concealment for security. Houses built into the landscape so the island appears deserted from the sea.

https://www.bbc.com/travel/article/20221110-the-greek-island-homes-hidden-from-pirates

https://www.kalispera.se/greece/ikaria/mavrianou-cap-house.html

https://pappaspost.com/special-visit-to-ikaria-island/

-

Got the #ProxyNotShell RCE exploit working. Pretty cool set of bugs! Just need to figure out how to hit the sink from low priv (I have an idea 👻)

https://infosec.exchange/@buffaloverflow/109328160582384462

-

Russian Memes United @RussianMemesLtd

Just look at this disgruntled martini