July 13, 2022
A great fact check on the misplaced nostalgia for USIA. I’ll admit to not knowing enough about the organisation, just thinking that it was the closest thing the US had to a counter propaganda agency. But apparently they weren’t really that. The West needs better coordination and control over their counter propaganda efforts. Like, to actually have one worth the name would be a great start.
The Irony of Misinformation: USIA Myths Block Enduring Solutions - 19FortyFive
The United States stands to learn from the failures of the USIA—which was ultimately an agency born out of trying to work around, rather than through, how it conducts foreign affairs.
-
Thought it would be fun to share a story from last year where I watched a friend of mine pump a sh*tcoin on Binance by buying billboards and a BitBoy Crypto video. Nothing we don't already know, but I found it fascinating to watch in real time. (1/9)
-
It’s July 2022 and still no end-to-end encrypted iCloud backups, not even as an option. Thanks Apple.
I don’t really care about the Hunter Biden angle on this, but Apple pushing their users into iCloud backups and then refusing to protect them, that’s a thing I wish more people would talk about.
-
Everybody warns you how terrible it is when they kill your 0days. Nobody warns you how horrible it is to maintain them for years across 20 versions, 4 OS, 3 allocators and 2 ISAs.
-
Analysts from the Central Intelligence Agency and other representatives of the U.S. Intelligence Community warned today that China may be able to develop its own Top Gun movie in as little as two years.
-
SVR's Aleksandr Shcherbakov got $7m package for identifying Robert Hanssen. "The moral weariness of the late Cold War and thereafter shows that money has replaced ideology as a motive for espionage, and catching spies requires a lot of cold, hard cash." tandfonline.com/doi/full/10.10…
-
-
New working speculative execution attack sends Intel and AMD scrambling
Both companies are rolling out mitigations, but they add overhead of 12 to 28 percent.
Computers were a mistake.
New working speculative execution attack sends Intel and AMD scrambling | Ars Technica
Both companies are rolling out mitigations, but they add overhead of 12 to 28 percent.
And here’s the original post:
Retbleed: Arbitrary Speculative Code Execution with Return Instructions - Computer Security Group
Retbleed (CVE-2022-29900 and CVE-2022-29901) is the new addition to the family of speculative execution attacks that exploit branch target injection to leak information, which we call Spectre-BTI. Unlike its siblings, who trigger harmful branch target speculation by exploiting indirect jumps or calls, Retbleed exploits return instructions. This means a great deal, since it undermines some… Read
-
Hey kids, you ever wanted to use Snaffler or Group3r via inlineExecuteAssembly or whatever, but couldn't because it used Environment.Exit() and that would kill your beacon? Well, I fixed that, so now it's not a problem any more. github.com/SnaffCon/Snaff… and
-
(If you want actual legal advice, talk to a lawyer.)
- EU NIS2 requires CVD, Articles 5,6,10, call this one intentional and a win!
Start the conversation: