September 9, 2022
There are a surprising number of fans of cryptocurrency who complain about not being taken seriously as a financial product, but scoff at the idea of being regulated like one.
Jeff Stein @JStein_WaPo
-
"Bob Jervis made important contributions to research on cyber conflict because he knew that, although it was fought using new kinds of tools, it was still conflict"
Honored to share reminiscences & contributions from Bob @SIWPSColumbia
-
Much praise from the (policy) community with respect to Albania cutting diplomatic ties with Iran over the July cyber attacks.
But there are lot of open questions here regarding scale, response & motive
A thread 🧵
-
A strange fact from history that highlights the unique reverence ascribed to the monarchy and the its relationship with the press:
King George V (Elizabeth’s grandfather) was euthanized with a lethal dose of morphine so that his death could be reported in the morning papers.
-
Two reads in @intl_spectator 57:3 (2022), Open Access:
Contesting Western & Non-Western Approaches to Global Cyber Governance beyond Westlessness doi.org/10.1080/039327…
China’s Approach to Cyber Governance & Its Implications for the Western Model doi.org/10.1080/039327…
-
.@WSJ scoop: The Twitter whistleblower filed his complaint days after reaching a $7M settlement with the company.
He is set to testify before a Senate committee Tues — one of the few venues in which he is allowed to discuss the confidential settlement.
-
I strongly condemn the recent cyber attack on #Albania, which Tirana & other Allies have attributed to Iran. #NATO & Allied experts are providing support. NATO is committed to continue raising our guard: to deter, defend against & counter cyber threats.
-
According to investigation made by Microsoft Detection and Response Team (DART), Iranian TAs used Microsoft SharePoint Remote Code Execution Vulnerability (CVE-2019-0604) against the Albanian government.
microsoft.com/security/blog/…
Kevin Beaumont @GossiTheDog
-
"Unfortunately, at the time of writing, some HP enterprise devices (laptops and desktops) have still not received updates to patch these vulnerabilities, despite them being publicly disclosed for over a month...."
BINARLY @binarly_io
-
Do you enjoy being right and being ignored? Do I have the job for you!
Sherrod DeGrippo 📬 @sherrod_im
-
There is some great information in here.
-
-
Curious about exploiting VMs or memory bugs in a safe language? Read my new blog post, where I attack Firecracker, AWS' VMM written in Rust. Learn about the various layers of virtualization + the attack surface, and how design decisions impact security.
-
The United States congress is considering banning cryptocurrency mining to combat climate change.
Image via @BitcoinMagazine 
It was mentioned that “all US mining uses 100% renewables. This is to have them show receipts to prove it.” And honestly, I’m kinda ok with that. OTOH, it’s renewables that isn’t being used for regular stuff and thus forces non renewable use, but I think it probably also provides strong incentives to increase renewable deployment (and pay for it). Which lowers costs of renewables which helps get them more widely deployed fast… assuming that is the second order effect, it’s probably net positive?
-
When SIGINT meant hawks. (Not actually in here, just amusing)
-
People adjust their opinions to match everyone else’s opinions. But they also badly misjudge what everyone else’s opinions are.
https://www.pnas.org/doi/10.1073/pnas.2107260119-
Microsoft Detection and Response Team (DART) was engaged to lead the investigation on destructive cyberattacks launched against the Albanian government in mid-July. We assess that the attack was launched by an Iranian state-sponsored actor. Full report:
-
security.googleblog.com/2022/09/fuzzin… We will pay rewards for sanitizers that can find non C/C++ specific vulnerabilities such as SQLI, XSS, and SSRF.
-
Bret Devereaux is a very insightful scholar and everyone should read his blog acoup.blog
He discusses pre modern logistics and warfare on this podcast, and it’s great.
Don't miss what's next. Subscribe to the grugq's newsletter: