May 16, 2022
The Ukrainian military is extremely good at enabling lower echelon leaders to operate independently with initiative. Russia has a more Soviet style top down military which fails to respond dynamically when the situation changes from the plan. Why is this a problem? No plan survives first contact with the enemy.
This mindset is prevalent among ground forces, too. A Ukrainian army lieutenant told me: “We manage to take the initiative and destroy the enemy as it is convenient and safe for us.” /2
May 15, 2022
The world is rushing into the future pretty damn fast.
This is amazing, a company from the Netherlands had developed a drum magazine system for dropping mortar rounds from commercial drones. The future battle field is going to be about countering drones. t.me/razved_dozor/1…
![]()
May 14, 2022
Watch my professional review here: youtube.com/watch?v=Fcx65u…
May 15, 2022
-
Seamus is always worth listening to.
A short thread on Buffalo, the shooter and what we can learn. 🧵
May 16, 2022
-
"Johnny Cash mural is leaking from a crude spot after Arkansas water tower gets shot" kansascity.com/news/nation-wo…
May 15, 2022
-
This is an enthralling read. History of a glyph and what and why design decisions were made. Trust me.
The shape of the new 1E9E LATIN CAPITAL LETTER SHARP S | LucasFonts
At the October 2018 Berlin Typostammtisch, Luc(as) gave a presentation about the capital eszett, past and present. Have look at what he had to say!
-
Thread.
One of the most frustrating things about the present war, & to a wider extent the natsec policy space, is the inability of so many involved to envision entirely foreseeable scenarios & their outcomes. The failed RF bridging at Siverskyi Donets on 11May is a classic exemplar case
May 15, 2022
-
-
Finding bugs at the protocol level.
NCC Group's Sultan Qasim Khan has developed a generic link layer relay technique for Bluetooth Low Energy which satisfies the latency requirement. We worked with the Bluetooth SIG (who don't make relay resistance claims) and suggested they inform vendors as to the risk.
May 16, 2022
-
Microsoft says relay attack vulnerability is actually a feature, WONTFIX. Developer releases PoC.
Not sure people have realised how much of a dumpster fire this one is.
Jul 21, 2021![]()
GitHub - topotam/PetitPotam: PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions.
PoC tool to coerce Windows hosts to authenticate to other machines via MS-EFSRPC EfsRpcOpenFileRaw or other functions. - GitHub - topotam/PetitPotam: PoC tool to coerce Windows hosts to authenticat...
One Year Later…
Microsoft has fixed a “new” relay attack vulnerability!
New is doing a lot of heavy lifting here... and it shouldn't be. Also, I'm not sure how this got a new CVE.
May 16, 2022![]()
Microsoft fixes new PetitPotam Windows NTLM Relay attack vector
A recent security update for a Windows NTLM Relay Attack has been confirmed to be a previously unfixed vector for the PetitPotam attack.
-
the most consequential figures in the tech world are half guys like steve jobs and bill gates and half some guy named ronald who maintains a unix tool called 'runk' which stands for Ronald's Universal Number Kounter and handles all math for every machine on earth
Sep 2, 2021
Add a comment: