clearbluejar

@clearbluejar

Cheers to @itm4n for inspiration, @topotam77 for PetitPotam, and @tiraniddo for NtObjectManager. New post detailing #RPC auditing with NtObjectManager

From NtObjectManager to PetitPotam

Windows RPC enumeration, discovery, and auditing via NtObjectManager. We will audit the vulnerable RPC interfaces that lead to PetitPotam, discover how they have changed over the past year, and overcome some common RPC auditing pitfalls.

Jun 24, 2022

-

Apple Is Not Defending Browser Engine Choice - Infrequently Noted

Some folks claim that Apple's mandated inadequacy for browsers and their engines is somehow beneficial to the cause of ensuring a diverse pool of web engines. Nothing could be farther from the truth, but to understand why, we need to understand how browsers are funded. With that understanding, we can see that not only has Apple has starved its own browser team of resources, but has done grevious damage to Mozilla along the way.

-

Cristiano Lima

@viaCristiano

Inbox: After Roe is struck down, @RonWyden calls on Congress to pass "legislation protecting people’s data so their web searches, text messages" and tech companies to "limit the collection and retention of customer data"

Jun 24, 2022

-

The Anonymous collective assembled for Ukraine against Russia will include people who are angry about the Roe v Wade decision, and the accompanying banning of abortion rights. Hacktivists have a history of social justice action, and it is reasonable to assume this will be no different.

-

Elliot Hentov

@hentove

I co-wrote a paper on USD dominance in age of financial sanctions. TLDR: there cannot be a major shift away from the USD any time soon. In many ways, the Ukraine War is paradoxically underpinning the existing monetary order, rather than undermining it. 1/

Weaponization of US Dollar | State Street Corporation

Read about the extraordinary weaponization of the USD in the Ukraine war and the economic impact of dollar’s decline on the financial world order.

Jun 24, 2022

-

Paul Melson

@pmelson

PowerShell scriptblock logging plus real-time detection for the use of System.Reflection.AssemblyName() takes so many tools and techniques off the table for attackers and has a very low false positive rate. I cannot recommend this approach enough.

Jun 24, 2022

-

Dr. Jeffrey Lewis

@ArmsControlWonk

The new solid-propellant short-range ballistic missile. has a range of 110 km and an apogee of 25 km. (North Korea may have tested it again on June 5.) It is explicitly designated as being nuclear-armed.

(2nd LD) N.K. leader inspects new tactical guided weapons test to improve nuke efficiency | Yonhap News Agency

(ATTN: UPDATES throughout with more info; RECASTS headline)By Yi Wonju and Song Sang-ho ...

Jun 23, 2022

-

-

Friday’s glasshouse session is up on YouTube

-

GitHub - drduh/macOS-Security-and-Privacy-Guide: Community guide to securing and improving privacy on macOS. · GitHub

Community guide to securing and improving privacy on macOS. - drduh/macOS-Security-and-Privacy-Guide

-

The USB drive with files on 460k people that was lost after a guy went out drinking and slept on the street, has been found! Yay.

-

Weird and interesting

The Cultural Tutor

@culturaltutor

Quick guide to figuring out the age of an English church. There's one element which tells you more than anything else: the windows. It's not foolproof, since every church is a palimpsest built over centuries, but it's a good bet.

May 12, 2022

-

Dreadnought Holiday

@TheDreadShips

This here is Liberté. Many of you will notice that's a foreign word today. I'm sorry.

Jun 24, 2022

-

Tonya Riley

@TonyaJoRiley

Multiple tech companies are saying they'll pay for employees to travel for abortions. (Employees who probably already have resources to do so unlike many Americans.) I've heard zero about how these companies intend to protect user data from being used to criminalize abortion.

Jun 24, 2022

-

InQuest

@InQuest

Microsoft Office has been a long favorite delivery mechanism for malicious payloads, from pen-testers to nation-state threat actor groups, and for good reason. Look back over the years detailing some of the most abused vulnerabilities. inquest.net/blog/2022/06/2… #malware #Follina

Jun 23, 2022

-

Starfish Who Just Wants To Grill

@IRHotTakes

I know it’s been Discoursed to death already, but it’s still very funny that all these other blockbusters are green screened to the point of using simulacrums of dead people instead of real actors and Tom Cruise was like “yeah, I’m gonna need an actual aircraft carrier.”

Jun 24, 2022

-

hannah 💫

@hcohenwriter

and you could have it all my empire of Bert

Jun 22, 2022

-

Matthew Green

@matthew_d_green

I have to post this HN comment describing (allegedly) the ensuing police press conference.

Jun 24, 2022

-

Share this, if you need something to give to ppl.

Don’t post about crimes.

@KateRoseBee

We've updated our Abortion & Pregnancy Privacy Guide with this quick mobile settings graphic to save and share. These tips can help ensure these sensitive experiences are less able to be easily accessed by looking through your device. Full instructions at: digitaldefensefund.org/abortion-priva…

May 6, 2022

-

Some sleuthing.

-

they/them might be giants ☭

@babadookspinoza

It’s 2027. Insurance only covers fentanyl exposure and Havana Syndrome. A cop tries to plant a Schedule I cigarette on you but finds some baking powder in your pocket and falls on his back, writhing on the ground. You run, through streets littered with dead cops. It always works.

Jun 24, 2022

-

JoHo

@JHowardBrainMD

I can predict the future by reading the @WSJopinion and knowing the opposite will come true.

Jun 24, 2022

-

DirectoryRanger

@DirectoryRanger

Offensive Windows IPC Internals, by @0xcsandker Part 1: Named Pipes csandker.io/2021/01/10/Off… Part 2: RPC csandker.io/2021/02/21/Off… Part 3: ALPC

Offensive Windows IPC Internals 3: ALPC · csandker.io

Jun 24, 2022

-

DW News

@dwnews

Berlin Mayor Franziska Giffey spoke for 15 minutes with a man posing as Kyiv Mayor Vitali Klitschko, before suspecting she's talking to a deepfake.

Vitali Klitschko fake tricks Berlin mayor in video call | DW | 24.06.2022

Berlin Mayor Franziska Giffey spoke for 15 minutes with a man posing as Kyiv Mayor Vitali Klitschko. But then the suspicion arose that her counterpart was a deepfake.

Jun 25, 2022

-

No Context Brits

@NoContextBrits

Jun 3, 2022

-

-

Shashank Joshi

@shashj

“to former intelligence officials, Cherkasov fits a well-known pattern: Russia, among other foreign powers, seeks to place young intelligence operatives in American academic institutions to help build their deep cover identities.”

Suspected Russian spy was well-liked by classmates, but something just seemed a little off

Victor Muller’s accent just didn’t sound right.

Jun 25, 2022