September 6, 2022
[Substack doesn’t send emails unless you exit the editor. Even when scheduled. It doesn’t alert your either. I know this now.]
I’ll point out that weather is one of the things I mention as a sensitive indicator that should be protected (in my 2012 OPSEC talk.)
That said, I’m not blaming anyone for having mistakes in their OPSEC. Humans make mistakes. That’s life. I had poor OPSEC for a decade plus before getting more serious, but mistakes only accumulate…
I am—well, I was—great at opsec. I got doxxed on 🥝farms because someone spent 50+ hours trying to nail me down until he ultimately “compare[d] her tweets to weather history to determine her city, and complied a parametric list of all the profs in nyc and went from there.”
Aug 29, 2022
-
In related OPSEC news Signal has a new president. This role is recently created and I guess there is an interesting back story about why the organisation is doing this. I however, do not know it.
Signal >> Blog >> A Message from Signal's New President
On September 12 I’ll be stepping into the role of Signal’s President, a new position created in collaboration with Signal’s leadership. I am thrilled, and I can’t think of a more meaningful use of my time, or a greater honor. I’ve been a friend, admirer, and champion of Signal since it was RedPho...
Congratulations to the new President, Meredith Whittaker [Wikipedia]. A commenter on HN said:
“She's the lady who was fired by Google in retaliation for organizing the walkouts that protested the big payout Andy Rubin got despite being found guilty of sexual harrassment.”
-
in the 90s the internet used to scream at you when you tried to enter and they should never have taken that warning away
Sep 3, 2022
-
whats wrong babe you've hardly touched any of the domains you bought
Sep 5, 2022
-
As promised, here is my initial write-up of the ways the Seleukids are depicted in video games. It is a bit of a long one, though there is more to discuss. Come for the heated anchor discussion, stay for a sexy take on Antiokhos III in a mobile game.
Sep 2, 2022
The Seleukid Empire in Video Games
A Summation of the Digitization and Implementation of “Hellenization” *Due to the heavy amount of pictures and the formatting quirks of this site, I recommend you read this post on a ta…
-
"SOK: On the Analysis of Web Browser Security" Excellent paper on the state of the art in web browser security, putting in writing a lot of understanding and intuition about the area held by vulnerability researchers and platform developers arxiv.org/abs/2112.15561
Sep 5, 2022
-
This is exactly how emails work
Sep 5, 2022
-
Hi, I’m your waiter Jeff, let me tell you about The Specials. The Specials are an English 2 Tone ska revival band from Coventry, England…
Feb 1, 2013
-
I wrote a short piece on why the recent panic surrounding misinformation is misguided and how the concept of rationalisation markets is superior for understanding many forms of epistemic dysfunction in political and cultural media (1/17).
Sep 5, 2022
The focus on misinformation leads to a profound misunderstanding of why people believe and act on bad information
Misinformation has been a prominent paradigm in the explanation of social, political, and more recently epidemiological phenomena since the middle of the last decade. However, Daniel Williams argue…
-
-
An exploit primitive in the Linux kernel inspired by DirtyPipe A brief description of an exploitation technique inspired by the DirtyPipe vulnerability.
Sep 5, 2022
GitHub - veritas501/pipe-primitive: An exploit primitive in linux kernel inspired by DirtyPipe
An exploit primitive in linux kernel inspired by DirtyPipe - GitHub - veritas501/pipe-primitive: An exploit primitive in linux kernel inspired by DirtyPipe
-
"Examining Zero-Shot Vulnerability Repair with Large Language Models" from @kiwihammond et al (@moyix) Interesting to see recent AI advances provide massive breakthroughs solving cyber problems where formal approaches have struggled to scale arxiv.org/abs/2112.02125
Sep 6, 2022
-
After self-hosting my email for twenty-three years I have thrown in the towel 😩 Email is now an oligopoly, a service gatekept by a few big companies which does not follow the principles of net neutrality.
Sep 4, 2022
-
I've been rather glib in addressing this CN report on 'TAO' malware at Northwestern Polytechnical University in China. So what do we really learn from this?
Sep 5, 2022
-
girls who code has been funded by raytheon for a while now and i think it's the best example of how 99% of these "learn to code" institutions don't exist to help underprivileged people; they exist to get them complicit in the oppression of others
Sep 5, 2022
‘Girls Who Code’ Team Up With Tomahawk Missile Maker Raytheon
The defense manufacturer has partnered with the STEM oriented nonprofit to provide leadership and technical training to college students.
-
This paper was linked last week, but here’s some nice highlights
https://www.tandfonline.com/doi/full/10.1080/02684527.2022.2090741Some interesting quotes from the interview: "Few people in GCHQ have any idea how much information about Sigint is available in the public domain, and not many more know how much reasonable discussion is going on in the area of privacy and security."
Sep 6, 2022
"As for ‘Intelligence Studies’, I didn’t really understand the subject [...] #GCHQ, at least, is an intensely pragmatic organisation, and I don’t think that establishing theoretical constructs around the way #Sigint works connects in any realistic way to the way we work."
Sep 6, 2022
-
Having started to read the very interesting new book by @RichardKerbaj the striking thing is that the US case on the 5G question and the UK is precisely the opposite of the version that GCHQ (and former officials there) are still briefing 1/5
Sep 6, 2022
-
All I'm saying is, maybe that lamp post walked into me
Mar 18, 2015
Add a comment: