April 20, 2022

My own view is this: the state is, by its nature, a violence machine. It exists to limit violence by channeling it; it is a necessary evil - without the state, you get even more violence. But that means every state generates violence on its conceptual fringes.

4:55 PM ∙ Apr 19, 2022

---

97Likes13Retweets

Project Zero’s year in review of 0day caught in the wild, 2021.

Out of the 58 in-the-wild 0-days for the year, 39, or 67% were memory corruption vulnerabilities:

17 use-after-free

6 out-of-bounds read & write

4 buffer overflow

4 integer overflow

https://googleprojectzero.blogspot.com/2022/04/the-more-you-know-more-you-know-you.html

More on 0days in a handy up to date database with email alerting. Interesting paper too. Keep in mind, of course, that this is not a complete coverage of all 0day that we’re in use during the time periods covered.

https://www.zero-day.cz/research/

Apparently pwn2own is happening now. It’s the one where the Chinese don’t compete, so it’s a different set of targets.

The Ukrainian counterintelligence service has caught a GRU controlled agent. He was operating for 8 years. During that time the GRU helped to manage his career, and he became quite successful. A detailed look at a classic espionage operation.

Telling your Uber driver and his camera about your criming is a bad idea.

The latest Jan. 6 defendant, busted via Uber cam.

4:27 PM ∙ Apr 19, 2022

---

6,017Likes1,298Retweets

Some initial Russian successes in Ukraine were due to treason.

More details here.

https://www.thenation.com/article/world/kherson-ukraine-russia/

The current (public) issue of the CIA’s studies in intelligence.

https://www.cia.gov/static/58097b25db4cfed1c5b116688fbc000d/StudiesExtracts-March2022-Vol66No1-4.pdf

Keen Labs has released a security tool for finding vulns.

https://github.com/KeenSecurityLab/BinAbsInspector

Micah has been collecting a long list of all the hacks against Russia.

NSO is getting hammered again, along with the entire cyber surveillance industry.

An example of why using cryptocurrency for actually currency is a bad idea.

April 9, 2022 web3isgoinggreat.com/?id=first-cryp…