December 13, 2022
The last Between Two Nerds of the year was just released. This is a really good discussion on how countries should approach cyber grand strategy. Some counterintuitive conclusions, and a great conversation overall. This one goes to 11.
Between Two Nerds: The US has it all wrong on cyber - Risky Business Media
-
The stuff uncovered in the Twitter whistleblower report is much crazier than anything in the "Twitter files" but it's much less politically/tribally salient so it got no attention. Going to do a thread on some of the craziest things, in no particular order.
Dec 12, 2022
-
Why hack the info when you can just ask?
Dec 12, 2022
North Korean cyber spies deploy new tactic: tricking foreign experts into writing research for them
When Daniel DePetris, a U.S.-based foreign affairs analyst, received an email in October from the director of the 38 North think-tank commissioning an article, it seemed to be business as usual.
-
-
NSA Releases Series on Protecting DoD Microelectronics From Adversary Influence (Dec 8) nsa.gov/Press-Room/New… * FPGA Overall Assurance Process, 19pp * FPGA Best Practices - Threat Catalog, 25pp * FPGA LoA1 Best Practices, 90pp * Third-Party IP Review Process for LoA1, 23pp
Dec 11, 2022
-
Fortinet CVEs.
PSIRT | FortiGuard Labs
None
-
Cool work to create a pattern that prevents AI from detecting “human” but doesn’t attract attention from humans. Camouflaged camouflage, if you will.
https://petapixel.com/2022/12/12/71-coat-makes-wearers-invisible-to-ai-security-cameras/-
-
Red Team lab automation by @PenTestPartners
"In this post I’ll detail how, using Packer, Terraform, and Ansible, to go from an empty ESXi server to an up and running Windows domain in minimum time."
Red Team lab automation | Pen Test Partners
It’s not uncommon for red teamers to regularly tear down and rebuild their test labs, I know I do on a sometimes daily basis. It keeps things fresh and manageable, and now, using Infrastructure as Code (IaC), we can create a consistent environment to test tools and techniques in. If we break something it’s fine, […]
Rey Bango 🌻🇺🇦: "Red Team lab automation by @PenTestPartners "In…" - Infosec Exchange
Red Team lab automation by @PenTestPartners "In this post I’ll detail how, using Packer, Terraform, and Ansible, to go from an empty ESXi server to an up and running Windows domain in minimum time." https://www.pentestpartners.com/security-blog/red-team-lab-automation/
-
What a bad idea. Aside from the fact that many courts ban the use of electronics in them, how exactly do you wear Air Pods without the judge seeing them and 1) telling you to remove them or 2) figuring out the scheme you’ve got going on and punishing you for it?
Dec 13, 2022
-
It's an Updated Turing Test: ChatGPT Successfully Imitates a Talented Sociopath with Too Many Lawyers reason.com/volokh/2022/12… Episode 434 of the Cyberlaw Podcast
Dec 13, 2022
ChatGPT Successfully Imitates a Talented Sociopath with Too Many Lawyers
It’s been a news-heavy week, but we have the most fun in this episode with ChatGPT. Jane Bambauer, Richard Stiennon,...
-
Understanding Clausewitz is table stakes in the study of conflict. Whether one agrees or disagrees with translating 18thC mil thinking into contemporary environment, the debate sparks insight. Here consider cyber as a defensive problem akin to the swamp & marshes. https://t.co/r9ry4PefNA
Dec 13, 2022
-
Their Bionic Eyes Are Now Obsolete and Unsupported
Dec 13, 2022
Their Bionic Eyes Are Now Obsolete and Unsupported
These early adopters found out what happened when a cutting-edge marvel became an obsolete gadget... inside their bodies.
-
Humans pretending to be AIs who are pretending to be humans. theguardian.com/technology/202…
Dec 13, 2022
-
Very big deal. The US, Japan and Netherlands build pretty much all advanced semiconductor equipment used to manufacture chips. China is now in a real bind
https://www.bloomberg.com/news/articles/2022-12-12/japan-is-said-to-join-us-effort-to-tighten-chip-exports-to-china Dec 13, 2022
-
Add a comment: