the grugq's newsletter

Subscribe
Archives
September 30, 2023

September 30, 2023

September 30, 2023

Richard Stallman, the man behind GNU, copyleft, and way too many others accolades to even list, announced at GNU 40 that he has cancer.

Fortunately, he reports that it is slow growing and completely manageable. He says he isn't going anywhere.

He is 70. pic.twitter.com/ZI5Qfofkhz

— vx-underground (@vxunderground) September 29, 2023

Long blog post about Cloudflare’s new “encrypted client hello” protocol for TLS. https://t.co/Havkd0yDRE

— Matthew Green (@matthew_d_green) September 29, 2023

A wise person once said that you will experience climate change through a series of increasingly wild videos, until you are the one taking the video.pic.twitter.com/aagZg9g7yd

— Dr. Lucky Tran (@luckytran) September 29, 2023

Reliable exploit engineering and Linux kernel bug hunting
Presentation slides from OffensiveCon 2023
Credits @saidelike and @alexjplaskett (@NCCGroupInfosec)https://t.co/P81V5uRT8k#Linux #kernel #cybersecurity pic.twitter.com/XcOEb4g1mP

— 0xor0ne (@0xor0ne) September 29, 2023

proposal: TS // NOFOR // NOWARTHUNDER

— blake (@badtakeblake) September 28, 2023


BREAKING: #SCOTUS to hear challenges to TX and FL statutes aimed at regulating social media companies' content moderation policies, which some conservatives say amount to censorship. The firms say the laws intrude on publishers' 1st amendment rights

— Josh Gerstein (@joshgerstein) September 29, 2023

BREAKING: India's indigenous BharOS Leak shows its a literally fork of GrapheneOS

BharOS source-code has been leaked as its GitHub repositories has been made public

It was indigenously developed by IIT Maras & it took 1yr to develop the system
More info: https://t.co/XqQyeTbwmV pic.twitter.com/Hu6SDzjdGE

— Tech and Leaks (@TechLeaksZone) September 28, 2023

In summary, I'd advise against using BharOS.

They not only forked GrapheneOS but also inadvertently exposed the source code to everyone to see their string replace. "graphene" -> "bhar". then tried to delete it, but failed. the code is now available.

What would be laughable… https://t.co/8Z0aYr7ujV

— taha (@lordx64) September 29, 2023

When your cat knows more about Buffer Overflow than you. https://t.co/eseIER8VrP

— Orange Tsai 🍊 (@orange_8361) September 29, 2023

WS_FTP Server Critical Vulnerabilities

CVE-2023-40044 (CRITICAL) RCE CVSS: 10
CVE-2023-42657 (CRITICAL) CVSS: 9.9 https://t.co/zeHPSHOcaY

via @KorbenD_Intel pic.twitter.com/RwsdlPj5Bc

— Florian Roth (@cyb3rops) September 28, 2023

Thank you @syr0_ for this wordlist, it will help many people.https://t.co/AlCojpbtzr

— vx-underground (@vxunderground) September 29, 2023

https://scholarworks.montana.edu/xmlui/bitstream/handle/1/9021/jamming.pdf


On reverse engineering drone controllers (DJI RM500 Smart Controller) and exploit them for privilege escalation (from an ADB shell)
Very interesting blog post by @PD0WMhttps://t.co/cTNHYATN2E#infosec #dji #reverseengineering pic.twitter.com/zeKSLhC5oa

— 0xor0ne (@0xor0ne) September 29, 2023

Want to learn about firmware (in)security without ever touching a soldering iron? 💡🧑‍💻

Learn how to write, emulate, and pwn a UEFI module with @ert_plus!

➡️ https://t.co/neOYCPiU8S pic.twitter.com/xS8Q0UAhPP

— Margin Research (@Margin_Research) September 29, 2023

Playing NES ROMs with Ghidra's PCode Emulator

GitHub - nevesnunes/ghidra-plays-mario: Playing NES ROMs with Ghidra's PCode Emulator

Playing NES ROMs with Ghidra's PCode Emulator. Contribute to nevesnunes/ghidra-plays-mario development by creating an account on GitHub.


Wifi can read through walls | The Current

UCSB researchers’ new method enables high-quality imaging of still objects with WiFi by using the Geometrical Theory of Diffraction and the corresponding Keller cones to trace edges of the objects.


The Carrington Event of 1859 Disrupted Telegraph Lines. A “Miyake Event” Would Be Far Worse - JSTOR Daily

The Carrington Event of 1859 Disrupted Telegraph Lines. A “Miyake Event” Would Be Far Worse - JSTOR Daily

We don't know what causes Miyake events, but these great surges of energy can help us understand the past—while posing a threat to our future.


Frontiers | The computational power of the human brain

At the end of the 20th century, analog systems in computer science have been widely replaced by digital systems due to their higher computing power. Nevertheless, the question keeps being intriguing until now: is the brain analog or digital? Initially, the latter has been favored, considering it as a Turing machine that works like a digital computer. However, more recently, digital and analog processes have been combined to implant human behavior in robots, endowing them with artificial intellig...


A somewhat strange, but still interesting Wikipedia article about "proactive cyber defence"https://t.co/AfkCTiRGSs

— Electrospaces (@electrospaces) September 30, 2023

A tool for checking the security hardening options of the Linux kernel

GitHub - a13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel

A tool for checking the security hardening options of the Linux kernel - GitHub - a13xp0p0v/kernel-hardening-checker: A tool for checking the security hardening options of the Linux kernel


Don't miss what's next. Subscribe to the grugq's newsletter:

Start the conversation:

Be the first to share your thoughts

X