the grugq's newsletter

Subscribe
Archives
June 5, 2023

June 5, 2023

June 5, 2023

How malicious extensions hide running arbitrary code | Almost Secure

Eight malicious extensions still remain in Chrome Web Store. These use some interesting tricks to keep running arbitrary code despite restrictions of Manifest V3.


im sorry but this is the nightmare of every introverted homebody who has an extroverted outdoorsy friend https://t.co/Pg267n45jP pic.twitter.com/H9GXCnuP4H

— derek guy (@dieworkwear) June 3, 2023

The United States Military is using 4chan propaganda to recruit internet nerds. pic.twitter.com/TzB51jKneU

— vx-underground (@vxunderground) June 4, 2023

Here come the privacy coin bans. https://t.co/5wkYvNQQzD

— Matthew Green (@matthew_d_green) June 4, 2023

Tor now has a PoW based DoS mitigation feature in v0.4.8.1 alpha https://t.co/ZbBYQJcDwp, Equi-X designed by tevador in 2020, who also was the creator of RandomX used in Monero.https://t.co/SVCqIkxr44

— Paul Janowitz (@janowitz) June 3, 2023

(walking up to don quixote) hi i’m a huge fan

don quixote: *eyes narrowing* you’re a What?

— anna worm ✨🌸✨ @ frogs4girls on bsky (@frogsforgirls) June 3, 2023

A minimal operating system (2K LOC) on #QEMU and a RISC-V board

“This project's vision is to help every college student read all the code of an operating system.” 👏 https://t.co/lpYyHJRgly

— raptor@infosec.exchange (@0xdea) June 4, 2023

Here's a fantastic graphic explaining why low Panama Canal depth constrains the amount of goods volume that can flow through https://t.co/7u9a0ijiYv pic.twitter.com/UWBwuRoR8K

— Joe Weisenthal (@TheStalwart) June 4, 2023

pic.twitter.com/lp3E6XcwxE

— non aesthetic things (@PicturesFoIder) June 4, 2023

“This was one of the largest paramilitary operations in CIA history,” David Robarge, chief historian at the CIA... noting that over 50,000 Hmong were involved in the operation over the course of a decade'https://t.co/Xkgj3hBPE7

— Rory Cormac (@RoryCormac) June 5, 2023

More shell, less egg - All this

Another great post


Cable TV channels in Crimea hacked and allegedly broadcast a message of (!!) Ukraine's Ministry of Defence about upcoming Ukraine (counter-)offensive. Looks like a well-executed (lawful) information warfare activity. The signal was cut by RU 'authorities' https://t.co/Yi0DkQzmoH pic.twitter.com/R1odDtw93a

— Lukasz Olejnik, Ph.D, LL.M (@lukOlejnik) June 5, 2023

Blink 1.0

Blink is a brand-new unprivileged userspace virtual machine that can emulate x86-64-linux binaries on any POSIX platform. It's basically a 220kb dependency-free static binary that implements about 600 x86 instructions and 180 Linux system calls, which makes Blink pretty good at running simple command line programs.

Release Blink 1.0 · jart/blink · GitHub

The Blink Team (short for Blinkenlights) is proud to announce its first milestone release, version 1.0. Blink is a brand-new unprivileged userspace virtual machine that can emulate x86-64-linux bin...


Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X