November 28, 2022

Not Phishing. Honest!

Administrivia:

Sorry everyone. I’m not sure what happened to make Google decide the November 27 newsletter was a phishing attack. If you didn’t get the newsletter, check your spam folder. I have a suspicion that the cause was a link to a Google page for Otto Dix’s painting Der Krieg. Going forward, no more iconic WW1 art.

-

Here is the new Perun, again, for anyone that doesn’t want to hunt for yesterday’s newsletter.

-

-

Terminally Online Leftist 🥂 @terminallyOL

gm

-

Sorrow-scopes @Sorrowscopes

Scorpio: Nietzsche said, "Battle not with monsters, lest ye become a monster" meaning you should only battle robots because how cool would it be to turn into a robot?

-

Joseph Menn @josephmenn

Just wrote about Chinese accounts spamming city names in a suspected attempt to keep citizens from learning about the historic protests. An outgunned Twitter staff fought back.

washingtonpost.comTwitter grapples with Chinese spam obscuring news of protestsLinks to adult content overwhelmed other posts from Chinese cities where rallies escalated.

-

Reuters Pictures @reuterspictures

The Villarrica volcano is seen at night from Villarrica area, Chile. More photos of the week: reut.rs/3F2pbNa 📷 Cristobal Saavedra Escobar

-

Tim Strazzere @timstrazz

This is a pretty nifty tool to visualize file formats in a fast manner or parse specific matching files via grepping

github.comGitHub - wader/fq: jq for binary formatsjq for binary formats. Contribute to wader/fq development by creating an account on GitHub.

-

Binary Tools Summit 2022

Check out some of the cool talks they had at this conference.

https://binary-tools.net/summit.html

-

Yarden Shafir @yarden_shafir

Did not expect to find an AI engine inside office. Is Microsoft building a sentient version of Clippy?

-

Alex Stamos @alexstamos

Last week, I discussed the risks @elonmusk was taking running with a skeleton crew with @ReedAlbergotti, including no threat intel team: semafor.com/newsletter/11/… Looks like we might have the first major failure to stop gov interference in the Musk era:

Joseph Menn @josephmenn

Just wrote about Chinese accounts spamming city names in a suspected attempt to keep citizens from learning about the historic protests. An outgunned Twitter staff fought back. https://t.co/OdwqL8qne5

-

Dave Aitel @daveaitel

politico.com/news/2022/11/2… these are national security stories whether you want them to be or not.

politico.comConservative states are blocking trans medical care. Families are fleeing.From Texas to Florida, families with kids who are medically transitioning say state policies limiting gender-affirming care are forcing them to flee.

-

Matthias Schulze @perceptic0n

“Since 2018, we have done 37 operations, 20 nations, on 55 different networks,” Nakasone said in October on #persistentEngagement

c4isrnet.comAdvance work in Ukraine blunted Russian cyber advantage, US saysThe Pentagon sought $11.2 billion for cyber in fiscal 2023. That’s $800 million, or nearly 8%, over the Biden administration’s previous ask.

-

Daniel Cuthbert @dcuthbert

This entire post from @crashappsec resonates with me. The good enough approach is one I see being popular next year, as we've got too many damn security tools right now and not all are working as the marketing teams proclaims

blog.crashoverride.comA Security Tools Crash Is ComingAn explosion of security startups and the economic climate are colliding and going to result in a train wreck. This post dives deeper in this that a recent short post in LinkedIn.

-

Dare Obasanjo 🐀 @Carnage4Life

What’s hard in programming is often unintuitive to lay people. I remember crypto folks saying NFTs make it easy to reuse items across games and the reality being proving carnage4life owns the +1 sword of smiting is 1% of the work of reusing it across MW2 and World of Warcraft.

Alex Blechman @AlexBlechman

Programming is chaotic magic. There are no rules. You ask a game dev “Can the player summon a giant demon that bursts from the ground in an explosion of lava?” and they’ll say “sure, that’s easy” and then you’ll ask “can the player wear a scarf?” and they’ll go “oof”

-

ringzerø.training @_ringzer0

🤔 Want a little taster before you commit? Check out @hahnakane’s workshop “Hands-on Machine Learning for Automated Program Analysis” from last December! 🎥 vimeo.com/showcase/89966…

vimeo.comWORKSHOP // Hands-on Machine Learning for Automated Program Analysis // Hahna LatonickThe first of a series of 5 workshops for the Ringzer0 2021 Workshops Advent Calendar leading up to #CATCH2022. This workshop features a practical hands-on approach…

-

Nathan Law 羅冠聰 @nathanlawkc

Students from the elite school Tsinghua University protested with Friedmann equation. I have no idea what this equation means, but it does not matter. It's the pronunciation: it's similar to "free的man" (free man)—a spectacular and creative way to express, with intelligence.