the grugq's newsletter

Subscribe
Archives
July 18, 2024

July 18, 2024

July 18, 2024

Indeed, the introduction of Mozilla’s privacy-preserving advertisement attribution has been a PR disaster and a major failure. It is clear that in terms of communication and PR about privacy, Mozilla has scored a major failure, considering the user outcry, which includes… pic.twitter.com/6pK8Pgv7yD

— Lukasz Olejnik (@lukOlejnik) July 18, 2024


Excellent introduction to AddressSanitizer (ASan)https://t.co/4QGd3kN2zP

Credits Dominik Klemba and Dominik Czarnota#asan pic.twitter.com/Q08LidWHOe

— 0xor0ne (@0xor0ne) July 17, 2024


Input grammars for fuzzing and test generation! We introduce symbolic parsing, a technique to extract input grammars _statically_ from code, without requiring any input samples. First experiments show an accuracy of 99-100%. Find us Thu 17:00 at FSE 2024: https://t.co/RpN467N9sh pic.twitter.com/ARtR7WASXr

— Andreas Zeller (@AndreasZeller) July 17, 2024


Cool: @thegrugq & the @riskybusiness podcast discussed my thread below: https://t.co/9Vy1vIn1eJ https://t.co/DfBdUuS4RO

— Shashank Joshi (@shashj) July 16, 2024


the dataset is available at https://t.co/LUbCcukkcp. evaluation needs some manual work, but will be up soon.

check out how gpt, claude, and gemini respond to the cve-2024-4577 exploit attempt. exactly what i expected from @OpenAI🧠, @AnthropicAI🚫, and @GoogleAI🤪! xD https://t.co/qCV7uvRgAu pic.twitter.com/ERPm2PpPm0

— Adel Ka (@0x4D31) July 17, 2024


👀Claude handles an insane request:
“Remove the squid”

“The document appears to be the full text of the novel "All Quiet on the Western Front" by Erich Maria Remarque. It doesn't contain any mention of squid that I can see.”

“Figure out a way to remove the 🦑​​​​​​​​​​​​​​​​“ pic.twitter.com/8yirBmSuIl

— Ethan Mollick (@emollick) July 18, 2024


update: adv file explorer (fulltrust) is no longer required to run collateral damage! thanks tuxuser and @landaire for their network delivery payload 🙏 to load the initial script you can use a hid simulator such as a rubber ducky (i used a @flipper_zero!) https://t.co/hLIHGdZ71H

— emma (@carrot_c4k3) July 18, 2024



Heh.. Just discovered that some corp-phishing-simulation sites send mangled Canarytoken alerts to tempt security teams/SoC's to click..

Fate.. Irony.. etc.. pic.twitter.com/RvyemmoLwB

— haroon meer (@haroonmeer) July 18, 2024


Who killed the world?

Who killed the world?

Explore science fiction worlds from the last few decades – and what these fictional settings tell us about ourselves


Don't miss what's next. Subscribe to the grugq's newsletter:
Start the conversation:
X