November 7, 2022

November 7, 2022

New Perun!

-

Japan joins nato cyber defence

https://www.theregister.com/2022/11/07/japan_joins_nato_cyber_defence/

-

Dominic White @singe

Cool, @JacobTorrey and the @ThinkstCanary crew have released their latest Q3 Thinkstscapes thinkst.com/ts

They look at all the latest cyber research across cons and blogs and summarise important takeaways. Essential reading for anyone trying to keep up.

thinkst.comThinkst Applied ResearchCreators of the much loved Thinkst Canary. With products deployed on all 7 continents, and over two decades of published research presented around the world. We exist to work on difficult problems, and to solve them. No problem can withstand the assault of sustained thinking.

-

Byron Wan @Byron_Wan

🇨🇳 Harbin Engineering University announced on Nov 4 that test flights of 长弓1号 (Changgong / Longbow 1) and 长弓2号 (Changgong / Longbow 2) — two transmedium drones that can cruise underwater and fly in the air — had been successfully completed.

-

Dreadnought Holiday @TheDreadShips

My timeline is currently full of tweets about a dangerously unstable Captain, doomed by an inability to listen to expert advice. And once again I'm stunned that the Victorian navy is going viral.

So in a rare attempt at relevance, let's talk about Elo- sorry, HMS Captain.

Early photograph - as we're about to discover, there was no chance for late photographs - of HMS Captain. It's a three-masted sailing ship with a long black hull, and the turrets concealed a lot lower down than you'd expect.

-

Rory Cormac @RoryCormac

“Intelligence agencies reveal that the Kremlin and the Chinese politburo regard western nations’ attractiveness to refugees and illegal migrants as our most acute strategic vulnerability”

Matthew Syed @matthewsyed

Limiting refugee numbers is not illiberal, it’s vital to our survival

https://t.co/Bk9iZ2TIzi

-

Blogs of War @BlogsofWar

“A former #Twitter executive says that Saudi dissidents should consider dropping their use of the social media platform in light of the outside role that a prominent Saudi billionaire…has in the newly organized company under Elon Musk.”

news.yahoo.comEx-Twitter executive: Saudi dissidents should be wary of Elon Musk takeoverFormer Twitter executive Vivian Schiller believes Saudi dissidents should consider dropping their use of the social media platform in light of the outside role that Saudi Prince Alwaleed bin Talal has in the newly organized company under Elon Musk.

-

Ben Collins @oneunderscore__

Like I always say with content moderation, every social media site owner who is “pro free speech” meets their line eventually.

For 4chan, it was anime child porn. For Facebook and YouTube, it was white nationalist terror. For Elon, it was people making fun of him.

Elon Musk @elonmusk

Going forward, any Twitter handles engaging in impersonation without clearly specifying “parody” will be permanently suspended

-

ʰᵃᶜᵏ.ʰⁱˢᵗᵒʳʸ  @realhackhistory@chaos.social @realhackhistory

#Hackers (1995), alternate posters & VHS covers

-

The Real Patrick Star from SpongeBob, Not a Parody @IRHotTakes

There are man-made metal leviathans lurking at the bottom of the ocean built to drop miniature stars on people, with their time underwater limited only by the needs of their mortal crew.

BRCloth @brclothwrites

What is a fact that blows your mind every time you think about it?

-

Janel Comeau @VeryBadLlama

Elon finding out the hard way that we’re not trapped in here with him, he’s trapped in here with us

-

Mick Ryan, AM @WarintheFuture

For some time now, the Chinese and the PLA have been slowly increasing the tempo of operations around Taiwan. This is a deliberate strategy by China to normalise aggression, and continuously raise the bar for what is considered ‘aggression’ by Western politicians. https://t.co/tCxWlteojj

國防部 Ministry of National Defense, R.O.C. 🇹🇼 @MoNDefense

46 PLA aircraft and 4 PLAN vessels around our surrounding region were detected today (Nov. 6, 2022) until 1700(GMT+8). #ROCArmedForces have monitored the situation and responded to these activities with aircraft in CAP, naval vessels, and land-based missile systems. https://t.co/MGetrZobu7

-

Text-To-Speech speaks pwned | Flanker Sky

Text-To-Speech engine is a default enabled module in all Android phones, and exists up to Android 1.5 HTC era, even acting as a selling point at that time. But various vendor implementations may le…

Via:

Dimitrios Valsamaras: "https://blog.flanker017.me/text-to-speech-speaks-…" - Infosec Exchange

https://blog.flanker017.me/text-to-speech-speaks-pwned/

-

Tom Nichols @RadioFreeTom

A short thread here about why so some scholars including in intl relations are saying useless things about the Ukraine war. Nearly thirty years ago, political science as a field became obsessed with being "scientific." That is, one of the human sciences got tired of humans. /1

-

Matt Suiche @msuiche

BlackByte is bringing light to kernel-mode anti-analysis and defensive evasion. ETW/Callback bypass limits traditional logging and memory analysis a must for detection.

Now please stop using raw dumps because, use crashdumps, and read this 2019 blogpost:

comae.comHow to Solve the Blindspots of Event-Driven DetectionA while back, I discussed how memory could be used as an ultimate form of the log as long as the analysis workflow and process is smooth. This blog post will start by explaining the blind spots created by event-driven detection solutions such as Endpoint Detection & Response (EDR), and how this can…

-

Project Zero Bugs @ProjectZeroBugs

Windows Kernel registry use-after-free due to bad handling of failed reallocations under memory pressure

bugs.chromium.org2330 - project-zero - Project Zero - Monorail

-

Joxean Koret (@joxean@mastodon.social) @matalaz

This is something that only China does. You know. LOL!

"China is likely stockpiling and deploying vulnerabilities, says Microsoft"

theregister.comChina likely is stockpiling vulnerabilities, says MicrosoftIncrease in espionage and cyberattacks since law requiring vulnerabilities first be reported to Beijing

-

Don't miss what's next. Subscribe to the grugq's newsletter: