December 9, 2022

William Fitzgerald @william_fitz

“This is almost like a hidden funding stream that boosts local police budgets and also feeds into this web of data abstraction, data collection and analysis, and reselling consumer data,” says Alli Finn, a senior researcher with @ImmDefense https://t.co/5WGGuOzZH2 tip @Techmeme

-

Everything old is new again. Sniffing ssh passwords (like from yesterday’s newsletter) on openbsd. In case you find yourself hacking into 2004 or something…

💾 Astr0 Baby @astr0baby

@0xdea And here is how you can do this on OpenBSD

astr0baby.onlineIndex of /OpenBSD/SSH-SNOOPING/

6:18 AM ∙ Dec 9, 2022

---

3Likes1Retweet

-

Speaking openbsd, here’s a dive into a 24yr old bug in ping.

-

Seth Jenkins wrote a blog post on a new kernel exploitation technique for exploiting a temporary-increment-at-controlled-address bug without an infoleak: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html

-

“Fuck Nuance” by Kieran Healy

https://kieranhealy.org/publications/fuck-nuance/

"Sociologists typically use nuance as a term of praise. Almost without exception, when nuance is mentioned it is because someone is asking for more of it. I argue that, for the problems facing sociology at present, demanding more nuance typically obstructs the development of theory that is intellectually interesting, empirically generative, or practically successful."

ht @albertocairo@mastodon.social

-

Joshua Browder @jbrowder1

DoNotPay is building a chrome extension where you can specify something like “negotiate my Comcast bill down,” and it will use the Comcast online chat to lower your bill with GPT-3.