December 4, 2022
-
-
-
-
https://infosec.exchange/@maxWSmeets/109450644381710828My opening statement for the PEGA Committee public hearing on:
‘Trade in zero-day vulnerabilities’ held last week:
-
https://infosec.exchange/@bcrypt/109435174431428579absolutely love this art exhibit by my friend from college. the art descriptions are generated by GPT-3 and he builds what he think the art would look like. https://areben.com/project/ai-am-i/
-
https://mastodon.social/@Pwnallthethings/109446648292712774Russia is spying on Telegram chats in occupied Ukrainian regions.
Here's how.
-
https://pdmnews.ru/25704/ https://infosec.exchange/@activemeasuresllc/109450079704978339@Pwnallthethings@mastodon.social This is a really excellent case study on Telegram and its intercept vulnerability.
It echoes what the Russian deputy chair of the Duma committee on information technology said in March:
"Durov found a compromise with the FSB. Not an agreement that he said 'come on in, do what you [FSB] want in my place," but he was convinced that the lives of people are important and terrorists' negotiations were occurring specifically on Telegram.
Queries within the framework of operational measures are passed [to Telegram] if terrorists or someone else are under surveillance [nakhoditsya na kontrolye]. Telegram placed devices so all dangerous subjects could be watched.”
-
Never-before-seen malware is nuking data in Russia’s courts and mayors’ offices
CryWiper masquerades as ransomware, but its real purpose is to permanently destroy data.
https://arstechnica.com/information-technology/2022/12/never-before-seen-malware-is-nuking-data-in-russias-courts-and-mayors-offices/ https://infosec.exchange/@activemeasuresllc/109450314148046268-
https://mastodon.social/@JoeUchill/109448083585392751As someone who has been intimately involved with hack and leak campaigns in the past (sorry, democracy!), the question I think everyone has to ask Taibbi is, receiving leaked information from a company whose employees have had to take a vow of loyalty, why do you assume the data you’ve been sent is complete?
-
-
-
blogs.microsoft.com/on-the-issues/…-
https://macaw.social/@april/109445601244493351I asked ChatGPT to write a sarcastic email to customers letting them know that their shitty IoT devices have suffered a security breach.
-
-
-
"It's clear that the time has come for us to take a hard look at the proliferation of chairs in our society and to consider the potential negative consequences of this seemingly innocent invention."-