March 7, 2023
@IanColdwater I curated an list from my past experience that included all the best videos. I recommend A-Z of B & E from the late eighties!
Mar 6, 2023
GitHub - dom-sec/awesome-physec: Repository containing useful links for all things Physical Security. Please contribute!
Repository containing useful links for all things Physical Security. Please contribute! - GitHub - dom-sec/awesome-physec: Repository containing useful links for all things Physical Security. Pleas...
-
A big shout out to all the organizers for making this happen! Keeping my fingers crossed for all fuzzers including AFLSmart++, which is my extension of #aflsmart. I hope it will outperform its original version to achieve my design goals. Regarding its final ranking, who knows? ;)
Mar 7, 2023
-
Hats off to the forward thinking hackers posting tons of broken code in lots of different places for LLMs to parse and remember as suggestions years from now.
Mar 7, 2023
-
-
“Occurred on November 4, 2022 / Manchester, Ohio, USA We had contracted a demolition company to set off explosives on a controlled demolition. The contract was only to control blast 4 towers but as the 4th tower started to fall it switched directions and took out the scrub tower”
Dec 11, 2022
-
-
This sounds like a hackers dream. I can think of several scenarios these features could be used maliciously. @0xcharlie is probably thinking, challenge accepted. #Vulnerability #hacking #cybersecurity #infosec
Mar 6, 2023
-
Introducing "Untidy," a newsletter where I make sense of big claims about cybersecurity. First up, a look at Jonathan Scott's report on spyware in Morocco.
Mar 6, 2023
Fact Check: Jonathan Scott’s report on Morocco
On February 18, Jonathan Scott published a report that he says disproves years of research by Amnesty International and Citizen Lab into use of sophisticated spyware in and/or by Morocco to target activists, journalists, politicians, and others. A week later, Scott spoke at an in-person hearing in M…
-
Some parts of Twitter may not be working as expected right now. We made an internal change that had some unintended consequences. We’re working on this now and will share an update when it’s fixed.
Mar 6, 2023
@TwitterSupport Apropos of nothing, we recently added the word “hellscape” to the dictionary.
Mar 6, 2023
Definition of hellscape | Dictionary.com
Hellscape definition, a bleak landscape or one that resembles hell: a post-apocalyptic hellscape. See more.
-
TIL Building entry devices to allow emergency response crews to access buildings during a fire or similar conditions have Bluetooth support . 🤨🧐
Mar 6, 2023
Lol what's better is apparently this box holds a key fob to access the building. However the box doesn't prevent me reading the keyfob stored inside it. Just took a flipper zero around the box and was able to get the fob to be read. 💀💀💀💀
Mar 6, 2023
-
-
Atlantic Council had a group of experts mark up the new 2023 US National Cybersecurity Strategy. The group included: Maia Hamin, Trey Herr, Danielle Jablanski, @webjedi @loomisoncyber @thedarktangent @likethecoins @marcwrogers Stewart Scott & @WeldPond
Mar 6, 2023
How will the US counter cyber threats? Our experts mark up the National Cybersecurity Strategy
On March 2, the White House released the 2023 US National Cybersecurity Strategy. Read along with CSI staff, fellows, and experts for commentary on the document and its relationship with larger cybersecurity policy issues.
-
https://infosec.exchange/@hdm/109979752192232352I love crypto research that demonstrates practical attacks. The paper `A Vulnerability in Implementations of SHA-3, SHAKE, EdDSA, and Other NIST-Approved Algorithm` by Nicky Mouha and Christopher Celi demonstrates RCE (!) through controlled memory corruption in the final-round update of the Keccak code used by SHA-3. This implementation bug affected Python, PHP, and the SHA-3 Ruby package: https://eprint.iacr.org/2023/331
Bonus points for dropping a Metasploit reverse TCP payload!
-
Mar 7, 2023
US sees China propaganda efforts becoming more like Russia’s
WASHINGTON (AP) — China has long been seen by the U.S. as a prolific source of anti-American propaganda but less aggressive in its influence operations than Russia, which has used cyberattacks and covert operations to disrupt U.S.
-
Something deeply satisfying about the inverted pyramid of one engineer running a Twitter feature and half a dozen Twitter-addicted journalists waiting for the site to come back up to promote thinkpieces about it.
Mar 7, 2023
-
-
German government plans to ban the use of Huawei and ZTE components in the 5G network since dependency on these 'unwelcome' producers poses incalculable risks. Already installed parts are to be ripped out and replaced. @thegrugq @ciaranmartinoxf
Mar 7, 2023
5G: Bundesregierung will Komponenten chinesischer Hersteller verbieten
In Großbritannien und den USA wurden chinesische Hersteller wie Huawei und ZTE aus dem 5G-Netzausbau verbannt. Die Bundesregierung scheint folgen zu wollen. Auch bereits verbaute Teile könnten betroffen sein.
-
The city of Rotterdam used an " AI " algorithm to flag people for possible social fraud. Wired et al figured out how this algorithm mostly flagged the most vulnerable people: young single moms with a low income and only basic knowledge of Dutch.
Inside the Suspicion Machine | WIRED
Obscure government algorithms are making life-changing decisions about millions of people around the world. Here, for the first time, we reveal how one of these systems works.
Joris Meys: "I take my hat off for all people involved in this…" - Mastodon 🐘
I take my hat off for all people involved in this investigation by WIRED and Lighthouse Reports. The city of Rotterdam used an " #AI " algorithm to flag people for possible social fraud. Wired et al figured out how this algorithm mostly flagged the most vulnerable people: young single moms with a low income and only basic knowledge of Dutch. Impressive journalism, showcasing the dangers of politicians not understanding hypes. Via @[email protected] (give him a follow!) https://www.wired....
-
Add a comment: