the grugq's newsletter

Subscribe
Archives
October 15, 2023

October 15, 2023

October 15, 2023

Great writeup about reverse engineering MikroTik router by @hgarrereyn and @__comedian

Blog post: https://t.co/K5Dm9iQzZP
Slides (RECon): https://t.co/dCqQQS1g0n#iot #embedded #mikrotik #reverseengineering #cybsersecurity pic.twitter.com/2QKJQIqyJA

โ€” 0xor0ne (@0xor0ne) October 14, 2023

๐Ÿ˜‚ pic.twitter.com/QdbelqXi6m

โ€” MalwareHunterTeam (@malwrhunterteam) October 14, 2023

Blue team you might want to bookmark this one... for reasons that may become clear in about a week. ๐Ÿ“ˆ๐Ÿƒ https://t.co/6ynDbtUIAy

โ€” Beau Bullock (@dafthack) October 13, 2023

Itโ€™s funny how this news excites the CTI and crypto community for different reasons https://t.co/lqvEzwEObI

โ€” J. Burns Koven (@JBurnsKoven) October 14, 2023

Only in Russia: the FSB chief in charge of recruiting the Ukrainian VIPs to ensure the three-day victory Putin expected, instead enriched himself with luxury real estate that he registered incl. in the name of the Ukrainian assets he was supposed to run.https://t.co/FUqOb3dM0S

โ€” Christo Grozev (@christogrozev) October 13, 2023

You may also want to see the video version of this story for some incredible fly-on-the-wall footage (@the_ins_ru always "have a clip") of the general clomping about in his pool and flying around on private jets as Russia's invasion was grinding to a halt. https://t.co/1XG2TOzL0l

โ€” Christo Grozev (@christogrozev) October 13, 2023

by prohibiting jews from protesting against the abuses of palestinians, the german government has managed the impossible task of being antisemitic and islamophobic at the same time. kudos to germany, still the undisputed champion of this kind of thing

โ€” Seva (@SevaUT) October 15, 2023

There are a lot of hacktivist groups and known adversaries engaged in the cyber conflict around the #IsraelPalestineConflict.@CrowdStrike pulled together a graphic to highlight some of what we're seeing. pic.twitter.com/emX92SI0EL

โ€” adam_cyber (@Adam_Cyber) October 13, 2023

I have a new hero pic.twitter.com/sEXoBlrUnJ

โ€” Dr Helen Ingram (@drhingram) October 14, 2023

Not one, but two new #bindiffing tools landed this week. Sweet!

// HT @clearbluejar @4Dgifts https://t.co/T4AjXqJcnQhttps://t.co/CX8ANTcubp

โ€” raptor@infosec.exchange (@0xdea) October 14, 2023

Apparently the EU Commissioner has begun a micro-targeting campaign on Twitter/X in favor of her content scanning regulation, and it explicitly *excludes* people who care about privacy or are skeptical of the EU. https://t.co/YgeEhJVjre pic.twitter.com/CqR8QGzdDT

โ€” Matthew Green (@matthew_d_green) October 14, 2023

The Intel 386 processor (1985) was the first 32-bit processor in the x86 line. Let's take a close look at the processor dies, seeing how Intel shrunk the chip, created new versions, and why the 386 SL jumped from 285,000 transistors to 855,000 transistors. 1/9

โ€” Ken Shirriff (@kenshirriff) October 14, 2023

Thread by @kenshirriff on Thread Reader App โ€“ Thread Reader App

@kenshirriff: Credits: thanks to @Siliconinsid for the die images. The wall-sized 386 photo is from Intel's 1985 annual report. Thanks to Pat Gelsinger who sent me copies of his 1985 papers on the 386. 9/9โ€ฆ


#SpyNews - week 41 (8-14 October):
A summary of 97 espionage-related stories from week 41 coming from ๐Ÿ‡ท๐Ÿ‡บ๐Ÿ‡จ๐Ÿ‡ญ๐Ÿ‡ฟ๐Ÿ‡ฆ๐Ÿ‡ฎ๐Ÿ‡ฑ๐Ÿ‡ฎ๐Ÿ‡ท๐Ÿ‡ถ๐Ÿ‡ฆ๐Ÿ‡บ๐Ÿ‡ธ๐Ÿ‡บ๐Ÿ‡ฆ๐Ÿ‡ฉ๐Ÿ‡ช๐Ÿ‡ซ๐Ÿ‡ท๐Ÿ‡ธ๐Ÿ‡ช๐Ÿ‡ฌ๐Ÿ‡ง๐Ÿ‡ฑ๐Ÿ‡พ๐Ÿ‡น๐Ÿ‡ท๐Ÿ‡ช๐Ÿ‡ฌ๐Ÿ‡ป๐Ÿ‡ณ๐Ÿ‡น๐Ÿ‡ผ๐Ÿ‡ฆ๐Ÿ‡ช๐Ÿ‡ต๐Ÿ‡ฐ๐Ÿ‡ฌ๐Ÿ‡ท๐Ÿ‡จ๐Ÿ‡ณ๐Ÿ‡ง๐Ÿ‡ช๐Ÿ‡ธ๐Ÿ‡พ๐Ÿ‡ฌ๐Ÿ‡ง๐Ÿ‡ฌ๐Ÿ‡พ๐Ÿ‡ซ๐Ÿ‡ฎ๐Ÿ‡ณ๐Ÿ‡ด๐Ÿ‡ฐ๐Ÿ‡ต๐Ÿ‡ณ๐Ÿ‡ฑ๐Ÿ‡ฆ๐Ÿ‡บ๐Ÿ‡ฎ๐Ÿ‡ณ๐Ÿ‡ฑ๐Ÿ‡ง๐Ÿ‡จ๐Ÿ‡พ๐Ÿ‡ฐ๐Ÿ‡ท๐Ÿ‡ธ๐Ÿ‡ฉ๐Ÿ‡น๐Ÿ‡ฏ๐Ÿ‡จ๐Ÿ‡ฆ๐Ÿ‡ฆ๐Ÿ‡ฟ๐Ÿ‡ฐ๐Ÿ‡ฟ๐Ÿ‡ป๐Ÿ‡ณ๐Ÿ‡ฏ๐Ÿ‡ต๐Ÿ‡ฟ๐Ÿ‡ฆ๐Ÿ‡ณ๐Ÿ‡ฎ๐Ÿ‡ต๐Ÿ‡ญ๐Ÿ‡ซ๐Ÿ‡ฎ๐Ÿ‡ช๐Ÿ‡ช๐Ÿ‡ฆ๐Ÿ‡ฑ๐Ÿ‡ณ๐Ÿ‡ฌ๐Ÿ‡ต๐Ÿ‡ฑ๐Ÿ‡ง๐Ÿ‡พ https://t.co/ZT5yGmNT9n#Espionage #OSINT #HUMINT #SIGINT #Spy

โ€” Spy Collection (@SpyCollection1) October 15, 2023

One of my favorite encounters with a Japanese developer was when I was doing bugtesting and submitted an issue about how pressing the AltGr key could trigger a crash. 12 hours later I got the message "Japanese keyboards don't have AltGr." and they marked the issue as solved.

โ€” Andrew 'Steiner' Hodgson (@DistantValhalla) October 14, 2023

I smell quite some FUD about the alleged Signal 0day.

The recommendation is to turn off link previews, however link previews are generated on the sender side. Just tested, with link previews turned off youโ€™ll still receive them from a device that sends those. 1/2

โ€” joernchen (@joernchen) October 15, 2023

I think this would mean either:

* Turning off link previews isnโ€™t a sufficient mitigation
or
* The vuln is triggering on the sender side that means someone needs to convince you to create a message containing a malicious link
or
* The whole wis fake and just a nice troll
2/2

โ€” joernchen (@joernchen) October 15, 2023

๐Ÿšจ๐Ÿšจ"Our thesis is that a primary cause of the rise in mental disorders is a decline over decades in opportunities for children and teens to play, roam, and engage in other activities independent of direct oversight and control by adults." ๐Ÿšจ๐Ÿšจ(1/2) pic.twitter.com/6C2bRVHxzk

โ€” Athan Koutsiouroumbas (@Athan_K) October 15, 2023

this week has actually made me less worried about AI disinfo, people seem perfectly willing to believe the dumbest things without getting the computers involved

โ€” Seva (@SevaUT) October 14, 2023

Cheap beats deep.

If you have to tell someone youโ€™re famous, youโ€™re not.

This is a bit cringey. Borrell begs Beijing to take EU seriously as a great powerโ€”but true great powers never need to say that. pic.twitter.com/uZfYpCrrhN

โ€” Theresa Fallon (@TheresaAFallon) October 15, 2023

Emulate Ghidra p-code for fuzzing with AFL++
Ghidralligator tool by @AirbusCyber

Github Repo: https://t.co/RzvtuaGVFz#ghidra #fuzzing #infosec pic.twitter.com/ZssF5P3StE

โ€” 0xor0ne (@0xor0ne) October 15, 2023

Most sane media critic: pic.twitter.com/NVTtApT9Ez

โ€” Georgina Rose โ˜€๏ธ๐ŸŒ™ (@daatdarling) October 13, 2023

everyone forgets the true meaning of Halloween these days smh pic.twitter.com/A0mVa5vHNq

โ€” ๐ŸŒˆDr. Frizzle (@Swilua) October 14, 2023

This is the high quality linguistics research the journals don't want you to see pic.twitter.com/SXNW3UT0ZS

โ€” Ryan Rhodes (@wavyphd) October 14, 2023

Don't miss what's next. Subscribe to the grugq's newsletter:
Start the conversation:
X