Computer Newsletter Attack

Archives
Log in
Subscribe
December 9, 2022

December 9, 2022

Jan Lemnitzer

@JanLemnitzer

E-government German style: students have finally Ben allowed to apply for grants online, but since the administration was incapable of processing electronic docs extra staff had to be hired to print them out... @thegrugq @ciaranmartinoxf

Bafög-Ämter müssen Anträge ausdrucken – teils mit extra Personal

Studierende können Bafög online beantragen – aber da endet die Digitalisierung. Für Ämter bedeutet das Mehrarbeit, für Studierende längere Wartezeit. Verantwortlich sind laut Studierendenwerk die Bundesländer.

Dec 8, 2022

-

The Ruck

@TheRuckNews

NEW TODAY: @PaulSzoldra mingles with the masters of the military-industrial complex and shares the view from the wine-sipping trenches of contracts, bureaucracy, and generals being followed by people with papers vital to the national interest.

Peace through strength

Mingling with the masters of the military-industrial complex.

Dec 8, 2022

-

Jeremy Kirk (@[email protected])

@Jeremy_Kirk

.@medibank will take systems offline this weekend for security hardening, a project called Operation Safeguard. Improvements include bolstered monitoring, more detection and forensic capabilities and 3rd pty analysis support. PR here: medibank.com.au/livebetter/new… #auspol #infosec

Medibank to undertake ‘Operation Safeguard’ at the weekend

Medibank and ahm systems will be temporarily offline from 8.30pm AEDT Friday 9 December 2022 as we undertake some maintenance to further strengthen our systems and enhance security protections.

Dec 8, 2022

-

@[email protected]

@pwnallthethings

ICYMI, from two days ago: @KimZetter's great post about western cybersecurity and tech firms assisting Ukraine.

Security Firms Aiding Ukraine During War Could Be Considered Participants in Conflict

Experts say cybersecurity companies helping to defend Ukraine against Russian cyberattacks during the war could be considered direct participants in the hostilities and open themselves to attack.

Dec 9, 2022

@[email protected]

@pwnallthethings

@KimZetter It's a super interesting Q! But is it right? So, anyway, what do you have to do to become a "direct participant in hostilities"? What does it mean if you do? Does co-locating military data make that happen? And could it drag us all into war if they did?

No, Tech Companies and Cybersecurity Firms Aren’t Close to Becoming Direct Participants in the Conflict by Helping Ukraine

And it’s not particularly close. But here’s what the Laws of Armed Conflict have to say about it.

Dec 9, 2022

-

John McElhone

@johnmcelhone8

The photo of the U.S. Air Force's new stealth aircraft is on the left, taken at night, with stars in the background. We can use them to find the exact location of the jet (thread)

Dec 8, 2022

-

By popular demand, I have scanned my copy of Draft #1 of #Kernighan and #Ritchie's C Programming Language book. Here: https://drive.google.com/drive/folders/1OvgKikM8vpZGxNzCjt4BM1ggBX0dlr-y #ComputerHistory #UNIX #CLang

Tom Lyon ✅: "By popular demand, I have scanned my copy of Draf…" - Mastodon.social

Attached: 1 image By popular demand, I have scanned my copy of Draft #1 of #Kernighan and #Ritchie's C Programming Language book. Here: https://drive.google.com/drive/folders/1OvgKikM8vpZGxNzCjt4BM1ggBX0dlr-y #ComputerHistory #UNIX #CLang

-

Shared by my Daughter

"I need privacy, not because my actions are questionable, but because your judgement and intentions are"

In response to "if you have nothing to hide you have nothing to fear"

Martin Boller :debian: :tux: :freebsd: :mastodon: :heart_pride:: "Shared by my Daughter "*I need privacy, not becau…" - Infosec Exchange

Shared by my Daughter "*I need privacy, not because my actions are questionable, but because your judgement and intentions are*" In response to "*if you have nothing to hide you have nothing to fear*"

-

Well formatted free eBooks

Standard Ebooks: Free and liberated ebooks, carefully produced for the true book lover

-

Apostolos Malatras

@a_malatras

At @enisa_eu we are often asked, why is information manipulation in the threat landscape? Together with @eu_eeas colleagues and @ErikaMagonara from #ENISA we try to answer and explain how one can map the information manipulation threat landscape! Excited to hear your views!

Dec 8, 2022

-

Janus Rose

@janusrose

fyi, none of the AI ethicists i’ve spoken to are saying this. they simply recognize that automation amplifies asymmetric power at the expense of the vulnerable & marginalized — unfortunately something a lot of puzzlebrain engineering types don’t seem to understand, or care about.

Dec 8, 2022

-

Eileen Clancy

@clancynewyork

"How US police use counterterrorism money to buy spy tech." Spoiler: it's FEMA.

Dec 8, 2022

-

Everything old is new again. Sniffing ssh passwords (like from yesterday’s newsletter) on openbsd. In case you find yourself hacking into 2004 or something…

💾 Astr0 Baby

@astr0baby

@0xdea And here is how you can do this on OpenBSD

http://astr0baby.online/OpenBSD/SSH-SNOOPING/ Dec 9, 2022

-

Speaking openbsd, here’s a dive into a 24yr old bug in ping.

https://tlakh.xyz/fuzzing-ping.html

-

Seth Jenkins wrote a blog post on a new kernel exploitation technique for exploiting a temporary-increment-at-controlled-address bug without an infoleak: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html

Jann Horn: "Seth Jenkins (@jenkins) wrote a blog post on a ne…" - Infosec Exchange

Seth Jenkins (@jenkins) wrote a blog post on a new kernel exploitation technique for exploiting a temporary-increment-at-controlled-address bug without an infoleak: https://googleprojectzero.blogspot.com/2022/12/exploiting-CVE-2022-42703-bringing-back-the-stack-attack.html

-

“Fuck Nuance” by Kieran Healy

https://kieranhealy.org/publications/fuck-nuance/

"Sociologists typically use nuance as a term of praise. Almost without exception, when nuance is mentioned it is because someone is asking for more of it. I argue that, for the problems facing sociology at present, demanding more nuance typically obstructs the development of theory that is intellectually interesting, empirically generative, or practically successful."

ht @[email protected]

Alex Gantman: "swearing, but academic" - IOC.exchange

Attached: 1 image · Content warning: swearing, but academic

-

Joshua Browder

@jbrowder1

DoNotPay is building a chrome extension where you can specify something like “negotiate my Comcast bill down,” and it will use the Comcast online chat to lower your bill with GPT-3. Over time, Comcast will also use LLMs. So robots will just be negotiating with each other!

Dec 6, 2022

-

Lukasz Olejnik (@[email protected])

@lukOlejnik

In a similar vein, French DPA fined another company €300k, again highlighting an infringement during bad password management/policy. Plain-text passwords stored, and transmitted over email. France & #GDPR will kill bad passwords? Why not use article 25? legifrance.gouv.fr/cnil/id/CNILTE…

Dec 9, 2022
Don't miss what's next. Subscribe to Computer Newsletter Attack:
← Newer December 10, 2022 Older → December 8, 2022

Add a comment:

Posting this comment will subscribe you to this newsletter with the email address you enter.
Share this email:
Share on Twitter
Twitter