October 21, 2022
A lot of analysis on the Russian missile attacks against civilians have focussed on the similarities to strategic warfare and/or vengeance weapons. I think this analysis is wrong, or at least misguided. The correct way to understand why Putin is bombing Ukrainian civilians is see things from his perspective.
The video below makes a lot of good insightful points. A short summary of part of his analysis:
He has a number of competing internal political forces he needs to balance. Hardline military bloggers demanding a total war, and the general population who are being reassured that the war is under control. By escalating the air campaign Putin can show the hardliners he is getting tough on Ukraine, while also showing the general population that everything is going well. Specifically, “due to the war things are worse for Ukrainians than for Russians.”
In contrast, there is a new blog post from Bret Devereaux on strategic air war. An excellent post, of course, but the link to what is happening in Ukraine is more complicated than “Russia is pursuing strategic air warfare.” Rather, as above, Russia is dealing with its own internal politics. However, the repercussions of their strategic-air-war-like actions will be the same as strategic air war. Namely suffering, death, and hardened resolve. All at high cost to everyone.
Collections: Strategic Airpower 101 – A Collection of Unmitigated Pedantry
This week, I’m going to offer a fairly basic overview of the concept of strategic airpower, akin to our discussions of protracted war and nuclear deterrence. While the immediate impetus for t…
-
..and the trapdoor in the kitchen floor that concealed a powerful radio transmitter. That machine beamed secrets stolen from the Navy's top-secret Underwater Defence Establishment (UDE) in Portland, Dorset to Moscow. Cc @RadioHacking
Oct 19, 2022
MI5 files reveal secret life of Portland spy ring couple
From their home in Ruislip, west London, Morris and Lena Cohen helped to orchestrate what became one of the biggest Cold War espionage scandals. Above: A police car outside the home in 1961.
-
Microsoft downplays padding oracle exploitability 12 years after "THE" ASP .NET bug (CVE-2010-3332): “attacker would need to perform 128 attempts per byte of plain text to decrypt .. We view putting this combination of qualifiers together for an attack to be rare”(CVE-2022-30187)
Oct 20, 2022
-
🧵There are multiple red flags in The Wire's reports. I spoke to @debayan0, @alexstamos, @elegant_wallaby and @matthew_d_green to understand the biggest ones. 🚩1. Entire process relies on screenshots and videos that can be easily faked.
Oct 20, 2022
-
-
Super excited to announce that @Google donated ko, tool for simple, fast, and secure container image building, to @CloudNativeFdn. We are excited to see how the broader open source community will continue innovating with the ko project.
Oct 18, 2022
ko applies to become a CNCF sandbox project
-
If you spent any time on China-watching Twitter in 2021, you probably came across these two women. Party-state media, Chinese diplomats & foreign vloggers tried to make out they were just an ordinary account. We took a closer look & found out that wasn't quite right. 🧵
Oct 20, 2022
-
Microsoft have had some sort of breach due to a misconfigured system, which has exposed customer data
https://msrc-blog.microsoft.com/2022/10/19/investigation-regarding-misconfigured-microsoft-storage-location-2/ Oct 19, 2022
The Microsoft bucket has been publicly indexed for months, it's called olyympusv2 hosted on Azure blob storage - it was publicly readable. It's even in search engines. buckets.grayhatwarfare.com/bucket/507619/0
Oct 20, 2022
-
I’m way behind on the offensive cyber services market, but this stuff is pretty cool.
https://grayhatwarfare.com/-
Pro tip for Windows kernel researchers: read the Linux kernel docs. Yes, seriously.
Oct 20, 2022
@EmericNasi Most new Windows kernel features I see nowadays are identical to features that were implemented in the Linux kernel 6-24 months ago
Oct 20, 2022
-
When We Say "Security," What Do We Mean? (Track I) | @swagitda_
Oct 20, 2022
When We Say “Security,” What Do We Mean? (Track I)
This essay serves as an introduction to our semantic safari of the word ‘security,’ starting with the Latin word ‘securus.’ It is Track I of the literary concept album ‘When We Say Security, What Do We Mean?’
-
My son has lived through four chancellors, three home secretaries, two prime ministers and two monarchs. He's four months old.
Oct 19, 2022
-
-
No install, no registration. Remembers where you've been and how you got to do^H^H interesting sites. Invaluable for online investigations / research. We call it history graph. Get now - vortimo.com/osint-tool-ext… #OSINT-tool.com v3 extension.
Oct 20, 2022
-
Looks like Britain's embracing a Zero Truss architecture
Oct 20, 2022
-
A case that illuminates the ways in which cyber infrastructure intersects with society. People became used to having anonymity via multiple accounts on the app. Then all the account data ends up public and now all those “secret” accounts are being linked tougher.
Anonymity is hard.
https://www.allkpop.com/article/2022/10/kakaotalks-crash-spreads-panic-as-countless-multi-profiles-are-leaked-and-reveals-peoples-heavy-reliance-on-the-apps-
I have my PhD in "AI" & spent my career in tech as an engineer & then researcher. The skills required to understand how a system harms society aren't the same as those required to build it. Ppl don't need to know how face recognition works to know that it harms them.
Oct 20, 2022
-
“Golang’s core team released a patch that fundamentally changes how that language parses URLs. Before version 1.17, Golang considered semicolons within a URL query portion as a valid delimiter” Easy to miss but good vector for auth/authorization bypass!
Oct 20, 2022
“ParseThru” – Exploiting HTTP Parameter Smuggling in Golang
Oxeye’s security research team has found a security vulnerability in Golang-based applications. Under certain conditions, it lets a threat actor bypass validations based on HTTP request parameters due to the use of unsafe URL parsing.
-
TIL that you can bypass Windows Defender by setting your computer name to HAL9TH. Who the hell thought this was a good idea?
Oct 20, 2022
Source:
-
It appears @instagram is making changes to how DMs work in response to our Hidden Hate study on misogynist DM abuse, which we did with @RachelRileyRR, @realamberheard and more. Read the research that led to these changes: counterhate.com/research/hidde…
Oct 20, 2022
Instagram’s surprising strategy for bullies: Tell them to be nice
New features that nudge users to rethink posting mean comments or messages seem to work in some cases.
-
-
Add a comment: