Last newsletter of the year, unless inspiration strikes.

-

Matthew Green

@matthew_d_green

I think we’re about to see an explosion of new end-to-end encrypted cloud services.

Google introduces end-to-end encryption for Gmail on the web

Google announced on Friday that it’s adding end-to-end encryption to Gmail on the web, allowing enrolled Google Workspace users to send and receive encrypted emails within their domain and outside their domain.

Dec 17, 2022

-

Matthew Green

@matthew_d_green

This letter is pretty amazing. It’s from a Senate Armed Services member explaining how they’re going to build the infrastructure to monitor most Internet users, network-wide using private DNS metadata. https://t.co/zy8eh59hvu

Dec 17, 2022

-

Wolfie Christl

@WolfieChristl

Neustar operates a giant identity surveillance system called 'OneID' that contains personal information on the whole US population. It's being used to recognize, track and follow people across myriads of services and to exchange digital profiles on them. mmaglobal.com/files/webinars…

Aug 30, 2022

-

Randall Munroe

@xkcd

Gravity xkcd.com/2712/ Today’s comic is interactive! Click the image on xkcd.com and use arrow keys or tap to fire thrusters.

Dec 17, 2022

-

An alleged Russian smuggling ring found in N.H. town

US authorities indict seven people tied to a global ring that allegedly funneled ‘military-grade’ parts to Russia

N.H. man Alexey Brayman allegedly part of Russian smuggling ring

The charging documents outline a plot pulled straight from “The Americans” TV series, about KGB agents raising a family near Washington, D.C.

-

Dino A. Dai Zovi

@dinodaizovi

This tailnet lock design and whitepaper by @Tailscale is *really* *really* good:

Tailnet lock white paper

This white paper on tailnet lock is a draft. It is shared to solicit feedback on the design and implementation of tailnet lock. Abstract Modern VPNs have made large headways in reducing the attack surface of the networks they protect, by using modern cryptography for end-to-end encryption, and co…

Dec 17, 2022

-

Brendan Dolan-Gavitt

@moyix

Using ChatGPT to clean up bad decompiler output seems to work quite well! Left: original Ghidra decompilation; right: cleaned up version, with an explanation for why it's better.

Dec 16, 2022

-

Christiaan Triebert

@trbrtc

For those new to openly available flight tracking data, make sure to check out @gianfiorella's “A Beginner Guide to Flight Tracking” on @bellingcat.

A Beginner’s Guide To Flight Tracking - bellingcat

Translations:English (UK)EspañolFlight tracking is an accessible and useful tool for open source investigators. Being able to track the movements of aircraft belonging to powerful individuals and armed forces can add important details to stories, or even uncover entire new narratives. There are seve…

Dec 16, 2022

-

Werner Vogels

@Werner

Apparently #ChatGPT is more than willing write jokes about me. As the brilliant replies show. But this one beats it all. Thanks @indygupta.

Dec 17, 2022

-

RetroTech Chris Is Celebrating #DOScember2022

@RetroTechChris

So, this is fun! I connected a DOS PC to a Windows XP system using a null modem cable. I can browse the web and share files!

Dec 18, 2022

-

joshua steinman (🇺🇸,🇺🇸)

@JoshuaSteinman

Germans going to get absolutely owned (industrial/diplomatic espionage) with this terrible decision. Would not be surprised if Chinese give RU access as well. ⁦@RichardGrenell⁩ and I worked for years to convince them to use European mfg’rs.

Germany ups reliance on Huawei for 5G despite security fears -survey

Germany has become even more dependent on Huawei for its 5G radio access network equipment (RAN) than in its 4G network despite growing worries about Chinese involvement in critical infrastructure, according to a new report.

Dec 17, 2022

-

An easy-to-miss, but pivotal, change has just been committed to the MAME source repository: https://github.com/mamedev/mame/tree/new68k

This is a brand new Motorola 68000 emulation core, using the actual 68000 microcode to generate the emulation code from a roughly 2400-line Python script.

Beyond having a positive impact on how granular MAME can get in emulating arcade games, this allows for cleaner handling of *any* system that used /DTACK. Low-level emulation of the CD-i peripheral controller is on the horizon.

-

Reverse Engineering of a Not-so-Secure #IoT Device #reverseEngineering #infosec

Reverse Engineering of a Not-so-Secure IoT Device | MCU on Eclipse

The ‘Internet of Things’ is coming! It started as an overused marketing hype with no real use case (who needs internet connected fridges? Who wants the internet connected toilet paper?)…

-

thaddeus e. grugq 🌻 @[email protected]

@thegrugq

Use mem safe languages Architect systems for impact containment Reduce attack surface Increase telemetry Maximise attacker costs & risks https://t.co/oOENCXysgR

Oct 11, 2017