the grugq's newsletter

Subscribe
Archives
October 1, 2024

October 1, 2024

October 1, 2024

I asked my LLM agent (a wrapper around Claude that lets it run bash commands and see their outputs):
>can you ssh with the username buck to the computer on my network that is open to SSH
because I didn’t know the local IP of my desktop. I walked away and promptly forgot I’d spun… pic.twitter.com/I6qppMZFfk

— Buck Shlegeris (@bshlgrs) September 30, 2024


I've just published my latest research "A Practical Analysis of Cyber-Physical Attacks Against Nuclear Reactors".

A comprehensive technical analysis of hypothetical cyber-physical attacks targeting the safety systems of Nuclear Power Plants (PWRs)https://t.co/qEuL03zqqR pic.twitter.com/SH5YSsY3w3

— reversemode (@reversemode) October 1, 2024


Supply chain disruption of high quality quartz from NC is painful, but not the semiconductor Armageddon some are panicking about. There are other operational sources.https://t.co/KrlcmU5Mx9

— Rob Joyce (@RGB_Lights) September 30, 2024

There’s a lot of fear mongering surrounding high purity quartz (“HPQ”) and Spruce Pine, NC following the devastating flooding from Hurricane Helene
The area contains the purest form of natural quartz, but the significance of supply disruptions from the mines is exaggerated
1/8 https://t.co/RIYisXcwWY

— SemiAnalysis (@SemiAnalysis_) September 30, 2024


This is without question the best piece written so far this cycle on foreign disinformation operations. And about what I'd argue is only the third most important disinfo op this year.https://t.co/8BuFGDXtrA

— Kevin Collier (@kevincollier) September 30, 2024


Breaking: The seized LockBit darknet site has been resurrected for more @NCA_UK announcements, including a link between a sanctioned Evil Corp member and the ransomware scheme, plus arrests (plural!) in the UK, and maybe France too?

Information to be released tomorrow afternoon. pic.twitter.com/hIf9S69j5E

— Alex Martin (@AlexMartin) September 30, 2024


Iran's former President Ahmadinejad: "In our country we established an anti-Mossad department and after a while discovered the head of it is a Mossad agent." 😳

— Farnaz Fassihi (@farnazfassihi) September 30, 2024

Well, sure, it sounds bad when you put it that way.


Looking at an old backup, I found my first security tool:

Ms-dos (nice name). First published in June 2000, it includes over 70 denial-of-service attacks and predates Metasploit by 3 years.

I wonder if any of those 25+ year old exploits still work...https://t.co/U9oTMuwPfT pic.twitter.com/pw4zYjwMzR

— AIfredo Ortega (@ortegaalfredo) September 30, 2024


Looking at an old backup, I found my first security tool:

Ms-dos (nice name). First published in June 2000, it includes over 70 denial-of-service attacks and predates Metasploit by 3 years.

I wonder if any of those 25+ year old exploits still work...https://t.co/U9oTMuwPfT pic.twitter.com/pw4zYjwMzR

— AIfredo Ortega (@ortegaalfredo) September 30, 2024


nevermind the doomers, this is LessWrong at its absolute best (and why I will always love LessWrong) pic.twitter.com/42zxvKn5Kc

— James Campbell (@jam3scampbell) September 30, 2024

https://www.lesswrong.com/posts/rEZqP7K4MG6waC2zf/optimizing-crop-planting-with-mixed-integer-linear


If you need help locking things down after a relationship breakup, check out Certo's new Digital Breakup Assistant: https://t.co/KFTVkGHwFW

— Eva (@evacide) September 30, 2024


ICYMI: Deepfake caller posed as 🇺🇦UA diplomat to target 🇺🇸US

- Imitated former 🇺🇦UA foreign minister
- Targeted chairman of the senate foreign relations committee
- Using a Zoom call with video and audio on
- Focused on "long range missiles into Russia"https://t.co/KiSkzvBUTk

— Will (@BushidoToken) September 30, 2024


Someone gave NotebookLM a document with just "poop" and "fart" repeated over and over again.

I did NOT expect the result to be this good. pic.twitter.com/nXYJJ7QnGS

— Kuldar ⟣ (@kkuldar) September 30, 2024

https://www.reddit.com/r/notebooklm/comments/1fs9wlf/analyzing_poop_fart_written_1000_times_creating/


Hi Marc 👋 Seems like you've joined the confusingly large club of people who have strong opinions about me & what I think, despite having ~no idea what I actually think.

Happy to talk sometime if you want to fix that, otherwise, maybe pick a different villain for your fanfic? https://t.co/2Q9Rl5OIhM

— Helen Toner (@hlntnr) September 30, 2024


Exploitation of a type confusion vulnerability in v8 (Chrome, CVE-2024-5830)https://t.co/d0ZT5O8vHK

Credits @mmolgtm#infosec #chrome pic.twitter.com/yIZJHp8FyP

— 0xor0ne (@0xor0ne) October 1, 2024


https://x.com/raging545/status/1840841239895425167


I've knocked together a quick blog about doing risk assessment at an individual and GLOBAL perspective, I think as an industry we are not very good at doing this as a whole, so I've tried to put something together to make people think about how they could do this:…

— mRr3b00t (@UK_Daniel_Card) October 1, 2024


Don't miss what's next. Subscribe to the grugq's newsletter:
Start the conversation:
X