May 6, 2022
back in my day, money had pictures of apes on them and ape holders could use multiple slurp juices on a single ape! 'give me three apes for 1 astro ape and 3 slurps' you'd say, provided of course, you didn't get a common slurp at the mint eve-[my family turns off my life support]
May 4, 2022
Cloud hacking tools, cool.
🚨Cloud Hacking Tools🚨 AWS - github.com/RhinoSecurityL… GCP - github.com/RhinoSecurityL… Azure - github.com/Azure/Stormspo… Multi Cloud - github.com/nccgroup/Scout… Multi Cloud - github.com/aquasecurity/c… #bugbountytips #bugbounty #redteam #Pentesting #PenTest #infosec #aws #gcp #Azure
May 5, 2022
GitHub - aquasecurity/cloudsploit: Cloud Security Posture Management (CSPM)
Cloud Security Posture Management (CSPM). Contribute to aquasecurity/cloudsploit development by creating an account on GitHub.
Cyber war was calvinball first!
Your periodic reminder that national security law is a game of Calvinball invented as a jobs program for bored Ivy Leaguers who think they're too special for McKinsey
May 5, 2022
Here’s some nightmare fuel. Exploiting ad tech to find women who’ve had abortions and collect the $10k Texas bounty at scale. As just one example…
I do think that people are really underestimating the risk in a post-Roe world that ad tech poses to women. It isn't just Law Enforcement has an easier time accessing your phone than your home and it isn't just data brokers. States now have private-citizen bounties, remember?
May 5, 2022
Everything is cyber, so everything can be used for warfare. Cyber warfare is hectic.
Some legal analysis. One thing I’ll say is that for the last few years the people freaking out on twitter have been more accurate than the experts…
There's a lot of speculation that if the Court is going to overturn Roe/Casey in Dobbs, other precedents, such as those involving gay marriage or even contraception, are next. I doubt that, for a few reasons.
May 4, 2022
Reverse engineer cars.
If you’ve ever wanted to know how modern gearboxes work, Ash is doing a great job reverse engineering them and making an opensource implementation
May 5, 2022
The 5×5—Addressing the global market for offensive cyber capabilities - Atlantic Council
Five experts unpack the global market for offensive cyber capabilities and the implications associated with the proliferation of hacking tools.
Here’s an explainer on how your phone is tracking everything
Crypto. Scam. Fraud. Plot twist, this time it’s PGP.
This is a fantastic case study in how complexity (the super-flexible packets design), lack of robustness (no encryption authentication), and multiple options (ECDSA can be broken because DSA is supported) lead to vulnerabilities.
May 5, 2022
US and Ukraine intelligence cooperation
Bottom line up front: It's another wave of President Biden's information offensive. I count at least 3: 1. Setting up the information theater before the war to expect Russian disinformation and false flags. 2. Preventing a chemical weapons attack. 3. Preparing for Victory Day.
May 6, 2022
A researched informed analysis of what probably happened to Moskva. Hint, the radars are in the stowed away not doing anything, position.
Warship Moskva was Blind to Ukrainian Missile Attack, Analysis Shows - USNI News news.usni.org/2022/05/05/war…
May 5, 2022
Meta née Facebook is still a garbage company.
WOW, this is low even for @Meta. according to whistleblowers, when Australia moved to make FB share profits from news aggregation with journalists, they *deliberately* cut off access to hospitals, emergency services & charities as a negotiating tactic. wsj.com/articles/faceb…
May 5, 2022
There was a supply chain vulnerability in ruby gems. There’s no indication it has been exploited in the wild.
Unauthorized gem takeover for some gems · Advisory · rubygems/rubygems.org · GitHub
### Impact Due to a bug in the yank action, it was possible for any RubyGems.org user to remove and replace certain gems even if that user was not authorized to do so. To be vulnerable, a gem n...
Ghidra plug-in for improved graph layout
Even if I love #Ghidra, I'm not a huge fan of its default function graph view, I built a plugin that is based on @rizinorg layout. This is very far from perfect, but if you want to give it a try : github.com/sar5430/RizinL…
May 5, 2022
Stop this timeline. I want to get off. What a world where this is actually relevant in 2022.
Hi there unencrypted communications providers. 👋 If you haven't done so already, prepare for when - not if - you receive a preservation demand or warrant for the account and messages of a woman who is seeking abortion services in a state that has criminalized her decision. 1/3
May 5, 2022
@FCDserviceA_llc @thegrugq RU to UA: "Did the US give you our coordinates?" UA: "Sorta..." RU: "Sorta?" UA: "Here, let me show you. Siri, where are my headphones?" Siri: "<exact coordinates> <boom> Siri: "I'm sorry, I can no longer find those devices." RU: ... UA: 🤷♂️
May 6, 2022
I am deeply sceptical about this. Zach is a good journalist so I’ll give him the benefit of the doubt. But it seems very unlikely to me.
Again, I tend to think this official DOD News article has been overlooked. On record confirmation that the USG has helped train the Ukrainians in launching cyber operations.
May 5, 2022
Ukraine-California ties show worth of National Guard program
When Russia invaded Ukraine with more than 150,000 troops Feb. 24, most people — especially Russian President Vladimir Putin — expected a Russian cakewalk.The men and women of the
Why even if a logless VPN were truly logless, it still is not a privacy layer.
If you think a VPN provides anonymity, know that you can get access details without even needing a court order, it’s pretty routine in cybersecurity circles. Quick thread. Starting point, ISPs sell or give customer Netflow data to security firms.
May 5, 2022
How Data Brokers Sell Access to the Backbone of the Internet
ISPs are quietly distributing “netflow” data that can, among other things, trace traffic through VPNs.
Nakasone stays on.
NASHVILLE — USCYBERCOM and NSA chief Gen. Paul Nakasone has been asked to remain in his post for another year, extending a term that has seen the organizations expand their missions to include election security and combating ransomware. therecord.media/nakasone-to-re… @TheRecord_Media
May 6, 2022
Nakasone has been asked to remain at helm of NSA, Cyber Command
U.S. Cyber Command and National Security Agency chief Gen. Paul Nakasone has been asked to remain in his post for another year, according to two senior defense officials, extending a four-year term that has seen the organizations expand their missions to include election security and combating ranso…
Add a comment: