(On a personal note, I just want to say how proud I am to have not sent out a newsletter with 2022 in the date.)

-

Rory Cormac

@RoryCormac

Remarkable story this. By way of comparison, MI6 had a secret slush fund chest” after WW2. Rather than investing it in a notorious conman and losing it all, they just spent it on covert ops…Far more boring

The con artist and the WWI war chest: How the French secret service wound up in a blackmail scandal

It has all the elements of the perfect spy novel – a secret war chest, an immoral businessman and daring blackmail attempts. An explosive investigative report on Wednesday blew the lid off of what may be…

Jan 7, 2023

-

raptor

@0xdea

Nice comprehensive #vulnerability #research writeup on #googlehome Turning Google smart speakers into wiretaps for $100k

Turning Google smart speakers into wiretaps for $100k

I was recently rewarded a total of $107,500 by Google for responsibly disclosing security issues in the Google Home smart speaker that allowed an attacker within wireless proximity to install a “backdoor” account on the device, enabling them to send commands to it remotely over the Internet, access…

Jan 8, 2023

-

-

Interesting concept. China’s weird approach to Covid means that they’re now losing a huge swathe of their intellectual capital.

-

Wild Geerters

@steinkobbe

The Romanian authorities have wiretaps of Andrew Tate saying "I'm making money from doing crimes" and his defenders are still going to be like they got him because he was exposing the feminist agenda

Jan 7, 2023

-

Longhorn

@never_released

Another very interesting ML licensing situation: - code is Apache2: great - license for the parameters is custom and contains: > You will not use the Software for any act that may undermine China's national security and national unity [...] in the license.

Jan 7, 2023

-

steven monacelli

@stevanzetti

Running from DPD? Here's what you need to do to out maneuver the average Dallas police officer.

Jan 6, 2023

-

Hurt CoPain

@SaeedDiCaprio

my life is a movie

Jan 8, 2023

-

Andrey Fedotov

@anfedotoff

CASR is open-sourced: github.com/ispras/casr Triage crashes, estimate their severity, and collect reports cargo install casr #rust #fuzzing

GitHub - ispras/casr: Collect crash reports, triage, and estimate severity.

Collect crash reports, triage, and estimate severity. - GitHub - ispras/casr: Collect crash reports, triage, and estimate severity.

Oct 21, 2022

-

femb✦t

@__femb0t

“Make better choices”

Jan 5, 2023

-

Gi7w0rm

@Gi7w0rm

The #TabShell #vulnerability has dropped. Its a form of #PriviligeEscalation which allows breaking out of the redtricted Powershell Sandbox after you have successfully gained access through #OWASSRF . For a detailed write see this blogpost: blog.viettelcybersecurity.com/tabshell-owass… #Exchange

The OWASSRF + TabShell exploit chain

We see that one of our vulnerabilities is exploited in the wild Link. So we decided to public the detail analysis of our two bug chains. Any customer has enough information to mitigate these bugs. The vendor also released all patches a week ago. This blog post shares the detail

Jan 6, 2023

-