the grugq's newsletter

Subscribe
Archives
August 4, 2023

August 4, 2023

August 4, 2023

Cyberspace Administration of China wants providers of smart devices to bar users under 18 from accessing the internet from 10pm to 6am.

Users aged 16 - 18 would be allowed 2 hrs/day, children aged 8 - 16 get 1 hr while children under 8 get just 8 mins.https://t.co/ceMJM0dOxQ

— Byron Wan (@Byron_Wan) August 3, 2023

Wake up babe, new groverhaus just dropped pic.twitter.com/OlvlKvV6sC

— HotOpossum 🐀☀️ (@AnAngryOpossum) August 3, 2023

Hackers manage to unlock Tesla software-locked features worth up to $15,000 | Electrek

A group of hackers have exposed an exploit that can unlock Tesla’s software-locked features worth up to $15,000. Free heated...

Black Hat USA 2023 | Briefings Schedule

Black Hat

For this, we are using a known voltage fault injection attack against the AMD Secure Processor (ASP), serving as the root of trust for the system. First, we present how we used low-cost, off-the-self hardware to mount the glitching attack to subvert the ASP’s early boot code. We then show how we reverse-engineered the boot flow to gain a root shell on their recovery and production Linux distribution.

Second, it will enable us to extract an otherwise vehicle-unique hardware-bound RSA key used to authenticate and authorize a car in Tesla’s internal service network.


Data leak at Éric Caire's Ministry of Cybersecurity and Digital

Fuite de données au ministère de la Cybersécurité et du Numérique d’Éric Caire | JDM

Les employés du ministère chargé de la sécurité informatique de l’État québécois ont été victimes d’une fuite de données.


Russian local authorities have begun distributing machine guns to civilian forces in the south-west of the country for the first time since the Ukraine war began

I mean, what could possibly go wrong?

with @courtney_ft https://t.co/dhWkvWfWXB

— Anastasia Stognei (@NastyaStognei) August 2, 2023

‼️ Jinchao Wei aka Patrick, a petty officer stationed on USS Essex in San Diego, provided a 🇨🇳 intel officer technical and mechanical manuals that detailed the operations of multiple systems on Essex and similar ships, including power, steering, aircraft and deck elevators. Wei… pic.twitter.com/mPtPA1kjwQ

— Byron Wan (@Byron_Wan) August 3, 2023

Awesome. https://t.co/tvghWklhHz

— Peter Frankopan (@peterfrankopan) August 4, 2023

In exchange for destroying Ukrainian opportunities the IT Cyber Army is making milk scarce in Russian stores for a few days, and disrupting an app’s two for one hotdog deal. Really great work their guys. Excellent equities assessment.

https://t.co/MB1udwtHdz

— Dr. Dan Lomas (@Sandbagger_01) August 4, 2023

“This article will explore the internal workings of the CIA’s language learning programs. https://t.co/dVGgIUCRIB

— 𝙰𝚕𝚎𝚡 𝙱𝚕𝚊𝚌𝚔𝚠𝚎𝚕𝚕 (@alexrblackwell) August 3, 2023

We want to order a SAR (synthetic aperture radar image) from a literal Spy Satellite. A few years ago this only available to a few governments, and now for $500 you can queue your own photo at@SkyfiApp
/ thread https://t.co/wsjT7yQgFp pic.twitter.com/Mgk84Hb339

— The Radio Research Group (@radio_research) August 2, 2023

Home | Chrultrabook Docs

Centralized documentation for the Chrultrabook project.


To trust or to restrict? – mapping professional
perspectives on intelligence powers and oversight
in the Netherlands using Q-methodology (Oomens et al., 2023) https://t.co/DdA9UOedtn (open access)

Published online on 2 Aug 2023 in @IntelNatSecJnl. pic.twitter.com/lPSUcedBCg

— Matthijs R. Koot (@mrkoot) August 4, 2023

I CAUGHT ANOTHER ONE pic.twitter.com/Wz31ABYAr0

— Tyler Glaiel (@TylerGlaiel) August 4, 2023

A great (new) guide and overview on securing LLM systems against prompt injection by @nvidia

We did a webinar on prompt injection a few months and the main takeaway was more awareness was needed around this. Great to see posts like this doing thathttps://t.co/334tYjB5Ss

— Harrison Chase (@hwchase17) August 3, 2023
Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X