“Kare-eda ni / karasu no tomarikeri / aki no kure.“

Welcome to the middle of October! There was no Berlin Bassline Brief last week because I was under the weather, and a human writes this newsletter. But, I'm feeling a bit better now, and there have been some stories!

Security, General:

There was an attack on the refrigeration controllers (reportedly Danfoss controllers) of French supermarket chains including Intermarché, resulting in a large amount of spoiled food. There was a coordinated research disclosure and fix of a similar theoretical attack last year, but it isn't known if this was the same attack used. https://therecord.media/cyberattack-disrupts-refridgeration-in-france

Security, Apple Platforms:

Multiple sources report that Magnet Forensics may have a bypass for the "inactivity reboot" designed to protect user privacy from state forces with physical possession of the phone: https://www.404media.co/cops-can-bypass-iphone-automatic-inactivity-reboot-graykey/

Interesting Paper:

“Users are worried, but we are confused”: Exploring the Privacy, Security, and Safety Perspectives and Practices of FemHealth App Product Team Members, by Chenkai Ma, Shijing He, Ina Kaleva, Alisa Frik, Jose Such and Ruba Abu-Salma: https://pdfs.semanticscholar.org/d89b/11f7e4472adf12bfb5445539916f08df7ef3.pdf

Interesting Tool:

Appearing mere moments after my nono sandbox post (https://theoffcuts.org/posts/local-llm-vulnerability-detection-and-sandboxing-on-underprovisioned-silicon-part-2/) is SideKernel, a microVM approach to the agent sandbox problem: https://sidekernel.com, from Dimitrios Prasakis

Apple Platforms Security Concept of the Week:

Upcoming changes to Full Disk Access: https://developer.apple.com/news/?id=p6zjojqw