the grugq's newsletter

Subscribe
Archives
January 9, 2023

January 9, 2023

Nice work, if you can get it.

Twitter avatar for @NYDailyNews
New York Daily News @NYDailyNews
A trio of thieves steal $300,000 from an armored truck in a bold Brooklyn heist, grabbing a sack of cash while they distract a Brink’s guard by asking for directions, cops say
trib.alThieves steal bag of $300,000 cash by distracting armored truck guard outside Brooklyn Chase bankThe crooks struck when an armored truck pulled up to a Chase bank on Eighth Ave. and 55th St. in Sunset Park about 1 p.m. Friday, cops said.
2:42 PM ∙ Jan 8, 2023
49Likes29Retweets

-

Twitter avatar for @PBS
PBS @PBS
From @frontlinepbs & @FbdnStories, "Global Spyware Scandal: Exposing Pegasus" examines how the hacking tool was used to spy on journalists, activists, the fiancée of Saudi journalist Jamal Khashoggi and others. Part 2 premieres Tues. at 10/9c — stream part 1 on the PBS app now.
5:00 PM ∙ Jan 8, 2023
57Likes34Retweets

Pegasus. Pegasus. Pegasus!

Subscribe now

-

Twitter avatar for @0xTriboulet
Santos (Steve) S. @0xTriboulet
In this writeup, we leverage @rustlang's inherent obfuscation against existing AV technologies to quickly bypass all detection on VirusTotal using unsafe code blocks. We can even achieve 0-total detections with a standard MSFVenom payload! Check it out steve-s.gitbook.io/0xtriboulet/ze…
Image
7:20 AM ∙ Jan 8, 2023
373Likes117Retweets

-

A very cool article where medieval paintings of peasant homes are examined to reveal what the inside of a peasant hovel of the Middle Ages looked like. It’s actually good.

https://www.medievalists.net/2023/01/medieval-homes/

-

for those of who whom enjoyed kevin steele's previous article on the enabling-constraints of 1990s graphic design, his article on working on the Mackerel Stack is a paean to Macintosh Hypercard

http://www.kevinsteele.com/smackerel/black_white_00.html https://dialup.cafe/@vga256/109654706939140763

-

Mysterious Antennas Are Appearing in Utah's Hills and Officials Are Stumped

City officials have found around a dozen of the antennas and no one is sure what they're for. A city official said that there were no identifying marks on the antenna and that they’d been bolted into the stone and required special tools to remove. https://www.vice.com/amp/en/article/epzwya/mysterious-antennas-are-appearing-in-utahs-hills-and-officials-are-stumped

https://kolektiva.social/@chadloder/109651575114783605

-

Twitter avatar for @aaronbateman22
Aaron Bateman @aaronbateman22
Richard Aldrich’s article on GCHQ’s efforts during the Cold War to create a secure communications network is fantastic. Thanks to @FWeierud for the recommendation!
journals.sagepub.com/doi/full/10.11…
Image
11:57 AM ∙ Jan 8, 2023
75Likes23Retweets

-

Twitter avatar for @TheDreadShips
Dreadnought Holiday @TheDreadShips
Your semi-regular reminder that Henri IV here was "built to test the ideas of Louis-Émile Bertin", and that the ideas of Louis-Émile Bertin were not necessarily good ones.
Postcard of Le Henri-IV, Cuirasse d'Escadre. To be fair it's quite fetching, apart from the non-sensically low freeboard aft (Bertin would happily have had the same at the for'ard end if he wasn't sane enough to realise that would lead to submarine operations). The superstructure is almost comically narrow, so the ship's boats are cantilevered out a bizarre amount to clear the hull.
7:43 PM ∙ May 28, 2021
306Likes43Retweets

-

Twitter avatar for @ChloeCondon
Chloe Condon @ChloeCondon
Love to catch up with old friends!! ❤️ It's so beautiful how technology connects us all!!! 💌🙏
Image
Image
Image
Image
3:56 AM ∙ Nov 29, 2022
4,047Likes336Retweets

-

Twitter avatar for @RealTimeWWII
Second World War tweets from 1945 @RealTimeWWII
US Office of Strategic Services begins Operation Cornflakes: airdropping bags of fake letters near bombed Axis mail trains, getting the German postal service to collect & deliver Allied propaganda.
Image
7:58 PM ∙ Jan 8, 2023
568Likes86Retweets

-

Twitter avatar for @0xdea
raptor @0xdea
Another awesome #vulnerability #research and #exploitation writeup! LuaJIT Sandbox Escape: The Saga Ends
0xbigshaq.github.ioLuaJIT Sandbox Escape: The Saga EndsHappy holidays 🕎/🎅 and (almost) happy new year! This week I presented my LuaJIT journey at the DEFCON-Groups meetup(@dc9723): Yesterday I shared my LuaJIT journey at @dc9723 group. Thanks for everyone who attended :DCurrently working on the last blogpost of the series, which documents the exploi…
7:17 AM ∙ Jan 9, 2023
17Likes4Retweets

-

Twitter avatar for @jawnsy
Jonathan Yu @jawnsy@mastodon.social @jawnsy
A lot of great topics in this discussion with @halvarflake, which covers his career, the security industry, Prodfiler, and why their business model of payment as a proportion of costs saved didn't work:
kubernetespodcast.comKubernetes Podcast from Google: Episode 163 - Prodfiler, with Thomas DullienProdfiler is a new tool that provides fleet-wide full-system continuous profiling. It is in some ways the second act of its co-creator Thomas Dullien, who is an internationally-renowned reverse engineer and vulnerability researcher under the name Halvar Flake. Thomas joins us to discuss his career,…
9:23 PM ∙ Jan 8, 2023
21Likes4Retweets

-

Twitter avatar for @PopulismUpdates
Populism Updates @PopulismUpdates
BOLSONARO SUPPORTERS: We have taken the initiative sir. All of us have given our lives to this cause. We are fighting for God and we are not afraid to die BOLSONARO: Oh my god. So THIS is a Slurpee
10:32 PM ∙ Jan 8, 2023
14,447Likes1,182Retweets

-

Twitter avatar for @mrkoot
Matthijs R. Koot @mrkoot
Two Norwegian-Dutch spectrum monitoring military nanosatellites were launched by SpaceX (Jan 3) nlr.org/news/norwegian… Intended for e.g. detecting radar systems on land & sea. The sats are owned & operated by NL & NO (two like-minded NATO countries), which is said to be unique.
Image
Image
8:31 AM ∙ Jan 9, 2023
18Likes8Retweets

-

Twitter avatar for @M_PaulMcNamara
Paul McNamara @M_PaulMcNamara
Led me to my Amazon Review Of The Day https://t.co/O1kzAJUlbb
Image
Twitter avatar for @ChrisO_wiki
ChrisO_wiki @ChrisO_wiki
1/ Russia is reported to be considering forcing soldiers who are refusing to fight to serve in penal-style battalions under the command of the Wagner Group, which is desperate for new blood to replace its calamitous losses in the fighting in eastern Ukraine. ⬇️ https://t.co/jD5Mua30q4
7:29 AM ∙ Jan 9, 2023
93Likes10Retweets

-

Twitter avatar for @kennyog
kennyog @kennyog
We (@winterdeaf @kientuong114 and I) took a deep dive on Threema, a Swiss-made secure messaging app. We found 6 new cryptographic vulnerabilities. Full paper at breakingthe3ma.app; mini-thread follows. #threema
breakingthe3ma.appThree Lessons from Threema: Analysis of a Secure Messenger
6:28 AM ∙ Jan 9, 2023
141Likes65Retweets
https://breakingthe3ma.app/

-

The DGSE and its secret hoard in the nets of justice

Paywalled and in French. But seems like a wild story.

https://www.lemonde.fr/societe/article/h2023/01/04/la-dgse-et-son-magot-secret-dans-les-filets-de-la-justice_6156647_3224.html

-

https://mastodon.lol/@cosmicallyf/109644749764910816
Don't miss what's next. Subscribe to the grugq's newsletter:
X