February 25, 2023

Sanctions against Russian entities

https://home.treasury.gov/news/press-releases/jy1296

Here are the ones which seem interesting (to me, anyway). Emphasis added.

0Day Technologies, a Moscow-based cybersecurity consulting firm, has provided databases of western nation citizens’ personally identifiable information to Russian intelligence.

Novilab Mobile, LLC, a Moscow-based software developer, has worked with U.S.-designated Russia-based company Advanced System Technology, AO (AST) on a project to enable mobile device monitoring. In April 2021, OFAC designated AST pursuant to E.O. 14024, E.O. 13694, E.O. 13382, and Section 224 of CAATSA for providing support to the FSB.

AO Russian High Technologies, a Russia-based information technology company, has worked on behalf of Russian intelligence services.

Forward Systems, R&DC, a Moscow-based computer programming and information technology company, has developed specialized software and algorithms in support of contracts with the Russian Federal State Unitary Enterprise (FGUP) 18th Central Scientific Research Institute (TsNII), which is part of the Russian Main Intelligence Directorate’s (GRU) efforts in offensive cyber operations.

ZAO Akuta, a St. Petersburg-based computer programming company, provided programming services for a telecommunications system for a new GRU facility in Russia.

OOO Lavina Puls (Lavina Puls) and AO Inforus (Inforus) have provided technical support to malign influence operations conducted by the GRU, including the management of false social media personas. The Kremlin has used these tools of malign covert influence to attack democracy in the United States, Ukraine, and around the world. Andrey Igorevich Masalovich (Masalovich), the head of Lavina Puls and Inforus, has worked to sell the internet monitoring and influence technology he designed for the GRU internationally.

This one seems particularly relevant following the reporting on “Team Jorge” and their AIMS tool.

-

Great thread

c0nc0rdance @c0nc0rdance

In 2018, "Parachute use to prevent death and major trauma when jumping from aircraft: randomized controlled trial" was published in the British Medical Journal.

It sought to determine if wearing a parachute when jumping from a plane had any impact on survivability.

It did not.

-

One of no doubt many retrospectives on the Year In Cyber War

A year after Russia's invasion, the scope of cyberwar in Ukraine comes into focus | CyberScoop

The Ukraine war has inspired a defensive cyber effort that government officials and technology executives describe as unprecedented.

-

Jono @whoinvitedjon

Just found out that the same ball actor from Castaway also played the volleyball in the original Top Gun

2:57 PM ∙ Feb 23, 2023

---

463Likes118Retweets

Ukraine’s War Brings Autonomous Weapons to the Front Lines | WIRED

Drones that can find their own targets already exist, making machine-versus-machine conflict just a software update away.

WIRED’s article on how having drones means that autonomous AI attack systems are next seems to skip a step or two. Autonomous attack systems are their own thing, their own development track. Drones are a platform that could be used for such systems, but vehicles and other systems are just as likely. Indeed, Russia claims they will be deploying tank killing robots. They’ve sent some prototypes to Ukraine already (according to Russian reporting.)

laundered1 @laundered11

The first four Marker robots have arrived in the region strictly on schedule. We begin downloading target images and testing algorithms of warfare within a unit of combat robots and installing powerful anti-tank armament,” Rogozin said.

-

Kim Zetter @KimZetter

Russian spies posing as diplomats uncovered in Australia as part of counter-intel probe. Job of fake Russian embassy/consular staff was to recruit Australians with access to classified info and use SIGINT capabilities to steal data

smh.com.auFake Russian diplomats revealed as heart of ‘hive’ spy ringASIO would not name the country behind the spy operation but sources confirm it was run out of Russia’s embassy.

5:16 PM ∙ Feb 24, 2023

---

99Likes57Retweets

-

UK Proposes Even More Stupid Ideas For Directly Regulating The Internet, Service Providers

UK Proposes Even More Stupid Ideas For Directly Regulating The Internet, Service Providers | Techdirt

The UK government has made no secret of its desire to convert providing encryption into a criminal act. The fact that some things are beyond the government’s reach is unacceptable. While lawm…

-

Cornelius Aschermann @is_eqv

And a cursory glance seems to indicate between most (early days) and half-ish (now) of them are due to memory unsafety & integer overflows. Very interesting dataset from the "a large org tries everything to make C/C++/objC safe, what chance do I stand to get it right"-department.

Marcel Böhme👨‍🔬 @mboehme_

Software Security in Practice:

It blows my mind that despite all mitigations, it usually takes less than 3 months from the release of a new iPhone to the first jailbreak.

Makes me wonder how secure less well-known software systems really are and what we can do about it? https://t.co/l35dJyUUc0