the grugq's newsletter

-

Twitter avatar for @Dave_Maynor
David Maynor @Dave_Maynor
Crazy story. I started with just this image. I used the magic iPhone extract text. And got the pre post post assembly. Then I wanted to see if #ChatGPT could figure it out. It required some #promptengineering but it eventually got there. #ai #hack
Image
Image
Twitter avatar for @0xdea
raptor @0xdea
When an N-Day turns into a 0day by @b1ack0wl

"Exodus Intelligence disclosed a vulnerability that affected the WR940N V5 and WR941ND V6 routers made by TP-Link. This bug is labeled as an Uninitialized Pointer Vulnerability."

https://t.co/pShdEIGx3B https://t.co/7hvZ0RYgAa

11:10 PM ∙ Dec 30, 2022
14Retweets

-

-

Twitter avatar for @0xdea
raptor @0xdea
Another cool #IoT #vulnerability #research and #exploitation writeup

HiSilicon DVR hack by @an0n_r0

github.com/tothi/pwn-hisi…

Image
8:22 AM ∙ Dec 31, 2022
10Retweets

-

You can get fired from a ransomware group. Apparently.

Twitter avatar for @vxunderground
vx-underground @vxunderground
Lockbit ransomware group issued a public apology to SickKids. SickKids is a Canadian based hospital and ranked #1 for Pediatric healthcare.

December 29th, 2022, the pediatric hospital was ransomed. Lockbit has issued the decryptor for free and has allegedly fired the affiliate.

Image
6:55 PM ∙ Dec 31, 2022
340Retweets

-

Twitter avatar for @rickhholland
Rick Holland @rickhholland
Life imitates art: “Inspired by ‘Office Space’ film, Washington software engineer steals over $300K from employer, prosecutors say” cnn.com/2022/12/30/us/…
Im_done GIF
2:24 PM ∙ Dec 31, 2022
4Retweets

Seems like he should’ve watched The Wire too

Twitter avatar for @rickhholland
Rick Holland @rickhholland
A OneNote document on Castro’s work laptop called “OfficeSpace Project” was found through the investigation, and in it, a “scheme to steal shipping fees,” was outlined, according to the report.
2:24 PM ∙ Dec 31, 2022
2Retweets

-

Twitter avatar for @vxunderground
vx-underground @vxunderground
As we conclude 2022 we have produced a small slide-show-like video illustrating key moments in malware, cyber crime, and vx-underground.

This is the best-of 2022.

Cheers -vx-underground staff

*music by @Laughing_Mantis

youtube.comvx-underground 2022 summaryvx-underground presents a summary of 2022! Packed with the greatest and most interesting activities in malware related acitivities.Thanks Jenny for allowing ...
2:41 AM ∙ Jan 1, 2023
39Retweets

-

Twitter avatar for @JeffreyMogul
Jeff Mogul @JeffreyMogul
Use “JE”, which is both an integer, and French for “I”.
Twitter avatar for @paulvixie
Paul Vixie @paulvixie
@iAmSujitMemane but how then is the fortran compiler going to know it's an integer?
2:30 AM ∙ Jan 1, 2023
4Retweets

-

Twitter avatar for @0xdea
raptor @0xdea
You perhaps know @antirez because he’s one of the best Italian #hackers, the author of #hping and #redis.

Well, he recently published a hard sci-fi novel titled #wohpe and it’s very good. There’s also an English version available.

goodreads.comWohpeFine del XXI secolo. L’intelligenza artificiale forte è vietata da vent’anni, ma ora i cambiamenti climatici sono inarrestabili, la civil...
6:59 AM ∙ Jan 1, 2023
8Retweets

-

Twitter avatar for @parth007_96
Parth Thakkar @parth007_96
A while back I'd done some shallow reverse engineering of Copilot

Now I've done a deeper dive into Copilot's internals, built a tool to explore its code, and wrote a blog answering specific questions and pointing out some tidbits.

thakkarparth007.github.io/copilot-explor…

Do read, might be fun!

Twitter avatar for @parth007_96
Parth Thakkar @parth007_96
@moyix I scanned through the minified extension.js file & found a few interesting things. Everything's an educated guess:

Prompt length=2048 Prompt includes: - Language ID - Up to 20 files of same language. Sorted by access time. - relative paths of files included - Github repo name

5:05 PM ∙ Dec 17, 2022
186Retweets

Don't miss what's next. Subscribe to the grugq's newsletter:
Find the grugq's newsletter elsewhere: Twitter