September 20, 2022

                September 20, 2022

            September 20, 2022

            Lapsus$ did Uber.
Children hacking multi billion dollar corporations by spamming MFA alerts to a phone until the user just hits Accept to make it stop.

https://www.theregister.com/2022/09/19/uber_admits_breach/

The Info Op is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber.

Patrick C Miller @PatrickCMiller
Can reflections in eyeglasses actually leak info from Zoom calls? Here's a study into it bit.lyLens reflections may betray your secrets in Zoom video callsAbout time someone shone some light onto this2:15 AM ∙ Sep 20, 2022
5Likes5Retweets
-
Dom @Tdr1nka
This has got to be the Twitter exchange of the day. 
4:38 PM ∙ Sep 19, 2022
112,468Likes10,537Retweets
-
Lily Simpson has blue hair + pronouns @LilySimpson1312
This might be the greatest paragraph ever written 
11:36 PM ∙ Sep 19, 2022
71,128Likes8,371Retweets
-
The TikTok Juror @AynRandy
imagine if you got to the front of the queue and there was none of the Queen left. you'd be absolutely starving10:08 AM ∙ Sep 19, 2022
20,014Likes1,805Retweets
-
Josh Baron @JoshuaWBaron
This is a really cool paper coming out of the @DARPA SIEVE program demonstrating how to do zero knowledge proofs of exploitability for MSP430 microcorruptions. Of note, we have several teams doing work in this “ZK proof of vulnerability/exploitability” space. 
IACR @IACR_News
#ePrint Efficient Proofs of Software Exploitability for Real-world Processors: M Green, M Hall-Andersen, E Hennenfent, G Kaptchuk, B Perez, G Van Laer https://t.co/XQRb5we53o3:08 PM ∙ Sep 19, 2022
34Likes10Retweets
-
Corey Quinn @QuinnyPig
Imagine being referred to henceforth as Mandoogle. https://t.co/RwZOlcvYIr
Kim Zetter @KimZetter
Imagine being one of the top IR companies in the world for decades and being described only as the company that discovered the SolarWinds hack  https://t.co/8yc33bgn4d3:20 AM ∙ Sep 20, 2022
20Likes2Retweets
-
Chris Carpenter @NCC800_53A
Compliance: what's the minimum I have to do for you to trust my product or service?

Security: how do I keep from losing that confidence now that I've gained it? 
Accidental CISO @AccidentalCISO
Saying that compliance doesn't equal security won't magically absolve you of creating an effective program.  Strive for both instead of making excuses for your lack of strategy and focus.
2:47 AM ∙ Sep 20, 2022
21Likes5Retweets

September 20, 2022

More US Employers Are Trapping Workers in a New Form of Indentured Servitude | Truthout

Bosses in more industries are preventing workers from quitting by charging them for training costs if they leave.