the grugq's newsletter

Subscribe
Archives
December 4, 2022

December 4, 2022

-

Subscribe now

-

Twitter avatar for @mrkoot
Matthijs R. Koot @mrkoot
How Nat'l Govt's & Research Institutions Safeguard Knowledge Development in Science & Tech. (.pdf, Nov 2022, 64pp) awti.nl/binaries/awti/… Overview & comparison of AU, CZ, DE, FI, FR, JP, TW, UK & US by @AsiaLeiden for @AdviesraadWTI. Authors: @ingriddhooghe & J. Lammertink.
Image
Image
Image
Image
1:54 PM ∙ Dec 3, 2022
2Likes1Retweet

-

Twitter avatar for @thorstenbenner
Thorsten Benner @thorstenbenner
By the end of this year, according to estimates 59% of 5G RAN in Germany (and 100% in Berlin) will be provided by Huawei. This is an abysmal failure to protect critical infrastructure, going against key intentions of law Bundestag passed against Merkel’s Huawei open door policy.
Image
10:14 AM ∙ Dec 2, 2022
1,110Likes338Retweets

-

My opening statement for the PEGA Committee public hearing on:

‘Trade in zero-day vulnerabilities’ held last week:

https://infosec.exchange/@maxWSmeets/109450644381710828

-

absolutely love this art exhibit by my friend from college. the art descriptions are generated by GPT-3 and he builds what he think the art would look like. https://areben.com/project/ai-am-i/

https://infosec.exchange/@bcrypt/109435174431428579

-

Russia is spying on Telegram chats in occupied Ukrainian regions.

Here's how.

PwnAllTheThings
Russia is spying on Telegram chats in occupied Ukrainian regions. Here's how.
Last month, a story broke in the Washington Post about “stay behind” operations by Ukraine in then-occupied Kherson. The story discusses Ihor, a Ukrainian in Kherson, who was in communication with a Ukrainian special forces officer in Ukrainian-controlled Mykolaiv called “Smoke”. Ihor, with help from Smoke, helped perform sabotage and espionage operatio…
Read more
5 months ago · 12 likes · 13 comments · Matt Tait
https://mastodon.social/@Pwnallthethings/109446648292712774

-

@Pwnallthethings@mastodon.social This is a really excellent case study on Telegram and its intercept vulnerability.

It echoes what the Russian deputy chair of the Duma committee on information technology said in March:

"Durov found a compromise with the FSB. Not an agreement that he said 'come on in, do what you [FSB] want in my place," but he was convinced that the lives of people are important and terrorists' negotiations were occurring specifically on Telegram.

Queries within the framework of operational measures are passed [to Telegram] if terrorists or someone else are under surveillance [nakhoditsya na kontrolye]. Telegram placed devices so all dangerous subjects could be watched.”

https://pdmnews.ru/25704/ https://infosec.exchange/@activemeasuresllc/109450079704978339

-

Never-before-seen malware is nuking data in Russia’s courts and mayors’ offices

CryWiper masquerades as ransomware, but its real purpose is to permanently destroy data.

https://arstechnica.com/information-technology/2022/12/never-before-seen-malware-is-nuking-data-in-russias-courts-and-mayors-offices/ https://infosec.exchange/@activemeasuresllc/109450314148046268

-

As someone who has been intimately involved with hack and leak campaigns in the past (sorry, democracy!), the question I think everyone has to ask Taibbi is, receiving leaked information from a company whose employees have had to take a vow of loyalty, why do you assume the data you’ve been sent is complete?

https://mastodon.social/@JoeUchill/109448083585392751

-

Twitter avatar for @SamBendett
Samuel Bendett @SamBendett
1/ Interesting point from one of the Russian Telegram channels that the war in Ukraine will be "the first and last in which small commercial drones have become so widespread, since the rapidly developing air defense systems will close the sky for them in the near future."
Image
2:12 PM ∙ Dec 3, 2022
228Likes52Retweets

-

Twitter avatar for @0xabad1dea
badidea 🪐 @0xabad1dea
I burned through as many open tabs of blog posts, scientific papers etc as possible today and linked all of them in one post, just in case your own backlog isn't long enough
cohost.orgabadidea on cohostThe Backlog [https://staging.cohostcdn.org/attachment/cba3b359-2afc-4e7e-b69c-c5f2249c0191/the-backlog-banner.png] there is too much to read on the internet they just keep posting Significant Progress In Backlog Accomplished But now it’s also your backlog Linguistics Ko te mōhiotanga huna o te hun…
7:41 PM ∙ Dec 3, 2022
32Likes8Retweets

-

Twitter avatar for @DanWBlack
Dan Black @DanWBlack
Good report from MSFT highlighting the contributing role cyber is playing in Russia's countervalue targeting leading into the winter, with "wiper attacks against energy, water, and other critical infrastructure organizations":
blogs.microsoft.com/on-the-issues/…
Image
9:37 PM ∙ Dec 3, 2022
48Likes29Retweets

-

I asked ChatGPT to write a sarcastic email to customers letting them know that their shitty IoT devices have suffered a security breach.

https://macaw.social/@april/109445601244493351

-

Twitter avatar for @hackerfantastic
hackerfantastic.crypto @hackerfantastic
I asked GPT3 to rewrite one of my LPE exploits in Perl, Python, Rust and Fortran. It did a remarkably good job when the C code is clear and concise, original: github.com/hackerhouse-op… GPT3 in screens below.
Image
Image
Image
Image
4:26 PM ∙ Dec 3, 2022
197Likes41Retweets

-

Twitter avatar for @kenshirriff
Ken Shirriff @kenshirriff
For more details on 8086 microcode, see my blog post:
righto.comHow the 8086 processor’s microcode engine worksThe 8086 microprocessor was a groundbreaking processor introduced by Intel in 1978. It led to the x86 architecture that still dominates de...
7:18 PM ∙ Dec 3, 2022
190Likes18Retweets

-

Twitter avatar for @TechnophobiaOrg
Technophobia.org @TechnophobiaOrg
Asked GPT-3 to write moral panic article about chairs🪑
"It's clear that the time has come for us to take a hard look at the proliferation of chairs in our society and to consider the potential negative consequences of this seemingly innocent invention."
Image
8:14 PM ∙ Dec 3, 2022
129Likes41Retweets
Twitter avatar for @TechnophobiaOrg
Technophobia.org @TechnophobiaOrg
Asked GPT-3 to write a moral panic article about writing 📝 "As a society, we have long relied on written words to communicate "recent events have sparked a growing sense of panic about the potential dangers of written words, and the negative consequences of their use."
Image
8:29 PM ∙ Dec 3, 2022
27Likes11Retweets

-

Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X