April 13
April 13
Raid forums has been shut down and a 21yr old indicted as the admin. Raid has been up some years, so this entrepreneurial genius has been taking it in since he was 16.
@vxunderground @b3ard3dav3ng3r Raid Forums founder Diogo Santos Coelho who is 21 and hails from Portugal was arrested along with two accomplices. c/o Alex Martin
Apr 12, 2022
Russia jamming gps? That’s cool.
Russia is jamming GPS satellite signals in Ukraine, US Space Force says | Space
'Ukraine may not be able to use GPS,' a Space Force official told NBC.
Ukraine suggesting they’ll go full Israel on the Butchers of Bucha
Advisor to Zelensky, @Leshchenkos, on how he thinks Ukraine will get justice for what happened in Bucha: “I think Ukraine will form—or maybe it will form on its own—a group that will seek revenge all over the world, the same way Israel does.”
Apr 11, 2022
Life and Death and in Between in Kyiv
Many Ukrainians are in a state of shock after the atrocities in Bucha. For Volodymyr Zelensky’s inner circle, horror has given way to a powerful new conviction.
War on the rocks has a guide to the Ukraine Russia war. Including cyber.
Understanding the Russo-Ukrainian War: A Guide From War on the Rocks - War on the Rocks
For War on the Rocks members Keep up to date on Russia and Ukraine A members-only podcast and newsletter that follow the war closely. Listen to The Russia
A look at how E2EE is understood and maps to tools and how actual cryptographers understand and think about things. …I think?
I wrote a note on end-to-end encryption (E2EE) with Britta Hale, in which we review how intuitive notions of E2EE do or do not map onto existing notions of encryption.
https://eprint.iacr.org/2022/449 Apr 12, 2022
Cyber vigilantism. Now that hackers aren’t demanding Bitcoin, but an end to war, they’re ok! Or maybe it’s because they’re on our side? I’m not very good at splitting hairs…
Here is some legal analysis on hacktivist paramilitary activity. I’m no expert, but it seems to suggest to me, at least, that states have a duty to shutdown vigilantes. Which, you know, given how good they are at stopping hackers in general is probably trivial.
"Cyber vigilantism in support of Ukraine: a legal analysis" - Ann Väljataga, Law Researcher @ccdcoe ccdcoe.org/library/public…
Apr 13, 2022
Vaguely on topic, here’s the John Oliver segment on data brokers. Future clandestine operators will have to clear cookies after they join CIA otherwise LinkedIn will burn them.
If you create stuff and you’re in the meta verse, you get taxed 50% off the top by our cyber overlords.
The rent in the metaverse is too damn high. I wrote about Meta, Microsoft, and Roblox all taking nearly half of creators’ earnings platformer.news/p/is-the-metav…
Apr 12, 2022
Atlassian has been down for a week or two. The report on why is … definitely on topic.
From the Atlassian outage report¹. I'm still screaming in shock and despair. __ ¹ atlassian.com/engineering/ap…
Apr 13, 2022
PoC
Analysis of a load of crypto code reveals that it isn’t secure because of bad ransomness. Apparently.
Your code might be vulnerable! Our cryptography team has discovered a number of Fiat-Shamir vulnerabilities affecting proof systems such as Bulletproofs and PlonK. Check out this blog series for details and contact us if you think your codebase might be…
Apr 13, 2022
Coordinated disclosure of vulnerabilities affecting Girault, Bulletproofs, and PlonK
By Jim Miller Trail of Bits is publicly disclosing critical vulnerabilities that break the soundness of multiple implementations of zero-knowledge proof systems, including PlonK and Bulletproofs. T…
This is just good news. Though of course the fact that it is necessary in the year of our lord two thousand and twenty two is a fucking tragedy.
NEW: In an incredibly unusual move, the Air Force is making a point to let its hundreds of thousands of personnel know that it will provide families with medical + legal help if they are being hurt by new state laws attacking gay and transgender children.
Apr 13, 2022
Air Force Offers Help To Military Families Hurt By States’ New Anti-LGBTQ Laws
In an unusual move, the U.S. military service is offering medical and legal aid to affected personnel — or a way to leave those states entirely.
You down with RCE?
Yeah you know me
You down with RCE?
Yeah you know me
CVE-2022-24543: Windows Upgrade Assistant Remote Code Execution Vulnerability I was assigned a second Microsoft Product Remote Code Execution CVE.
Apr 13, 2022
Add a comment: