the grugq's newsletter

Subscribe
Archives
September 19, 2023

September 19, 2023

September 19, 2023

pic.twitter.com/6hxy55UQX9

— Classical Studies Memes for Hellenistic Teens (@CSMFHT) September 18, 2023

Intelligence suggests agents of India behind killing of B.C. Sikh leader: Trudeau | Globalnews.ca

The intelligence comes as Canada has cut off trade talks with India and Prime Minister Justin Trudeau was treated to a frosty reception at the G20 summit in India.


Remember last year someone gave the Polish police a rocket launcher and they set it off?

Ujawniam najbardziej strzeżoną tajemnicę państwa PiS. Te zdjęcia nigdy nie miały ujrzeć światła dziennego.
15.X zmienimy Polskę na lepszą.#Bydgoszcz #Inowrocław #Nakło #Żnin #Świecie #Mogilno #Strzelno #Kruszwica #Tuchola #BrejzaNr3NaLiścieKOwBydgoszczyDoSejmu pic.twitter.com/le4ZWFQuaQ

— Krzysztof Brejza (@KrzysztofBrejza) September 18, 2023

#Bydgoszcz #Inowrocław #Nakło #Żnin #Świecie #Mogilno #Strzelno #Kruszwica #Tuchola #BrejzaNr3NaLiścieKOwBydgoszczyDoSejmu pic.twitter.com/SQoYup2YHb

— Krzysztof Brejza (@KrzysztofBrejza) September 18, 2023

#Bydgoszcz #Inowrocław #Nakło #Żnin #Świecie #Mogilno #Strzelno #Kruszwica #Tuchola #BrejzaNr3NaLiścieKOwBydgoszczyDoSejmu pic.twitter.com/flNxeIebp0

— Krzysztof Brejza (@KrzysztofBrejza) September 18, 2023

He said “I thought it was a fancy loudspeaker”

%% find the difference %%

Eksplozja granatnika w Komendzie Głównej Policji. Senator Krzysztof Brejza pokazał zdjęcia wykonane tuż po wybuchu - TVN24

Senator Koalicji Obywatelskiej Krzysztof Brejza ujawnił w poniedziałek zdjęcia, które mają dokumentować to, co wydarzyło się osiem miesięcy temu w gmachu Komendy Głównej Policji. W połowie grudnia w gabinecie komendanta Jarosława Szymczyka wybuchł granatnik. Brejza zamieścił wspomniane zdjęcia w mediach społecznościowych. Rzecznik Komendanta Głównego Policji inspektor Mariusz Ciarka przekazał PAP, że prokuratura ma dostęp do wszystkich materiałów związanych z tą sprawą.


“Thanks everyone for comments on the draft, here it is revised with all your edits.” pic.twitter.com/pSV16wQqca

— Ben Phillips (@benphillips76) September 17, 2023

A Danish artist has been ordered to return nearly 500,000 kroner (€67,000) to a museum after he supplied it with two blank canvasses for a project he named "Take the Money and Run".

Danish artist told to repay museum €67,000 after turning in blank canvasses - BBC News

Jens Haaning was given €71,000 by a Danish museum to create art, but sent it blank frames.


What F35 doing? pic.twitter.com/Ag2TTecEy5

— Andrew Northern (@ex_raritas) September 18, 2023

oss-sec: [CVE-2023-42752] integer overflow in Linux kernel leading to exploitable memory access


We found a public AI repo on GitHub, exposing over 38TB of private files – including personal computer backups of @Microsoft employees 👨‍💻

How did it happen? 👀
A single misconfigured token in @Azure Storage is all it takes 🧵⬇️ pic.twitter.com/ZWMRk3XK6X

— Hillai Ben-Sasson (@hillai) September 18, 2023

Your WiFi Can See You - Mr. E Reports

And it's so much worse than you think


Back when I was on a menswear forum, Michael Anton—author of the "Flight 93 Election" essay—ran a thread about how to dress with "Good Taste." He had a lot of clout on the forum, so people were eager to read his suggestions and get feedback on fit pics. This was in 2012.

If you… https://t.co/2cEpcrQ4Dm pic.twitter.com/MlRT0DEfyk

— derek guy (@dieworkwear) September 18, 2023

Pessimistic hot take: India will deny and get away with it in big scheme of things. Target community will feel “rocked” (as we’ve already heard). India might have preferred for it to stay concealed (if true of course), but exposure of unacknowledged actions isn’t all that. https://t.co/UPIlP90mjU

— Rory Cormac (@RoryCormac) September 19, 2023

Come on then, if you think you’re harden enough!

-D_FORTIFY_SOURCE=3 (or =2 for older glibcs) 
-D_GLIBCXX_ASSERTIONS 
-ftrivial-auto-var-init=pattern 
-fPIE -pie -Wl,-z,relro,-z,now 
-fstack-protector-strong 
-fstack-clash-protection 
-fcf-protection=full (x86 GNU/Linux only)

GCC Preparing To Introduce "-fhardened" Security Hardening Option - Phoronix

Following discussions among compiler developers and other stakeholders, the GNU Compiler Collection (GCC) is preparing to add a '-fhardened' compiler option that will enable various hardening features aimed at increasing the security/robustness of the generated binaries.


We're not really a religious bunch of nerds, but we'd like to take a moment and pray for Microsoft.

- July, 2023: Microsoft is compromised by Threat Group "Storm-0324", also sometimes referred to as "TA543". The Threat Group stole signing keys which they abused to forge… pic.twitter.com/nOWKKUejyt

— vx-underground (@vxunderground) September 19, 2023

NEW: Last year's PhD thesis of hacktivist Jacob Appelbaum provides some new snippets of information from the Snowden documents: https://t.co/OMwsLojEIp

— Electrospaces (@electrospaces) September 18, 2023

"Blumenthal-Hawley AI Regulatory Framework Escalates the War on Computation" - My quick take on the new #AI framework they floated yesterday. It's one of the most dangerous regulatory proposals I’ve seen in 30 yrs of covering emerging technology policy.https://t.co/LNlsERyubp

— Adam Thierer (@AdamThierer) September 14, 2023

I just posted the slides for today's collab stream with @CyanNyan6!!!

 「I hacked macOS!!!
  CVE-2022-32947
 With Lina✨ & Cyan💎」https://t.co/87UlSLuVQu pic.twitter.com/jyVqwCW6YM

— Asahi Lina / 朝日リナ // @lina@vt.social (@LinaAsahi) September 17, 2023

Op 26 september verschijnt ‘De hackers die Nederland veranderden’: over de eerste Nederlandse hackers, de oprichting van XS4ALL en de strijd voor digitale burgerrechten. Retweet, like en pre-order (bijvoorbeeld bij een Libris-boekwinkel: https://t.co/9QJjgKAhAx) pic.twitter.com/UqMtah9AXD

— Maarten Reijnders (@rohy) September 19, 2023

Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X