Archive (Page 14) • the grugq's newsletter

February 4, 2023

I suspect this wasn’t the secret service. They’re a bit busy these days, what with the war and all. olexander scherba🇺🇦 @olex_scherbaNice. Ukraine’s security...

February 3, 2023

Twitter is ending free API access. jenny_tightpants🪑 @halomancer1@TwitterDev 7:48 AM ∙ Feb 2, 202310,472Likes1,317Retweets - Subscribe now Tavis Ormandy...

February 2, 2023

Wondering how, exactly, your phone is tracked at all times, with locations made available to law enforcement? This video tutorial from a creepy surveillance...

February 1, 2023

February 1, 2023

More stuff on detecting AI written text vs human written text. First is from OpenAI, who are probably geniuses. They create a problem and then show up with...

January 31, 2023

The Info OpDeterrence in Space Deterrence doesn’t work in any domain that isn’t existential in my opinion. The US kept bombing groups in Syria and Iraq to...

January 31, 2023

SH1MMER53 is an exploit capable of completely unenrolling enterprise-managed Chromebooks. https://sh1mmer.me - Yandex ‘leak’ reveals 1,922 search ranking...

January 30, 2023

This is very interesting. Russia is sending combat robots to Ukraine for testing. It will be interesting to see how they perform, their capabilities and...

January 29, 2023

- Abe Goldfarb @AbeGoldfarbsorry but nothing else comes close 💛 Julia Marchese 💛 @juliacmarcheseWhat film has the best tagline? #filmtwitter #movietwitter...

January 28, 2023

Obviously Everyone... @OMGSoOverItI tell all 3 of my kids that they are the password child.5:04 PM ∙ Jul 18, 2022557Likes186Retweets - ESET Research...

January 27, 2023

Gabriel Landau @GabrielLandauThink spoofed call stacks are clever? There's truth in the shadows. tiny.ccFinding Truth in the ShadowsLet’s discuss three...

January 26, 2023

Fun with macOS’s SIP MetalBear 🐻 - Tools for Backend Engineers Fun with macOS's SIP MetalBear 🐻 - Tools for Backend Engineers How we dealt with macOS's SIP...

January 25, 2023

Inside a Soviet analog computer for space navigation. This thing is glorious Inside Globus, A Soviet-Era Analog Space Computer | Hackaday Whenever [Ken...

January 24, 2023

Always a good time to rewatch Mickens - Runa Sandvik @runasandFascinating story from @MarshallProj about how some prisoners in the U.S. use contraband cell...

January 23, 2023

Matthijs R. Koot @mrkootSurveillance Technologies Are Imbedded into the Fabric of Modern Life - The IC Must Respond (Jan 2023) mitre.org/news-insights/… 👏...

January 22, 2023

- Y Ddraig Gawl @MaiaFranklynmakes me laugh when someone tries to sell a horror thing by going 'this'd give *H.P. Lovecraft* nightmares!!' as if H.P....

January 21, 2023

Suspected Chinese Threat Actors Exploiting FortiOS Vulnerability (CVE-2022-42475) Suspected Chinese Threat Actors Exploiting FortiOS Vulnerability...

January 20, 2023

Exploiting null-dereferences in the Linux kernel Project Zero: Exploiting null-dereferences in the Linux kernel Posted by Seth Jenkins, Project Zero For a...

Nations without borders

January 20, 2023

Photo by Robert Schöller on Unsplash Recently I was skimming the European Data Protection Supervisor’s 24/2022 Opinion on the Proposal for a Regulation...

January 19, 2023

Jimmy Rushton @JimmySecUKTwo Marines defeated the AI detection system of a military robot by... hiding in a cardboard box and walking right up to it....

January 18, 2023

KillNet claims to have hacked 198 million records from the IRS including sensitive “personal information like usernames and passwords.” Which sounds a bit...

January 17, 2023

The Record From Recorded Future News @TheRecord_MediaA cybersecurity researcher went undercover to get the inside details about LockBit — a group that has...

Spying through gaming

January 17, 2023

Tanker Lesbian Elize/Standing with Ukraine 💙💛 @Tankgorlif I had a nickel every time somebody leaked classified documents on War Thunder forums I would have 4...

January 16, 2023

Supply Chain Attack Using Identical PyPI Packages, “colorslib”, “httpslib”, and “libhttps” Supply Chain Attack Using Identical PyPI Packages, “colorslib”,...

Will hackers defeat time trackers?

January 15, 2023

This case of a woman who slacked off, got fired, and then sued for wrongful dismissal is pretty interesting. She lost because the audit software monitoring...

January 15, 2023

- Clément Canonne (@ccanonne@mathstodon.xyz) @ccanonne_I'm trying to understand memory accesses in C. Any pointers?4:17 AM ∙ Jan 13, 20231,366Likes71Retweets...

January 14, 2023

Ted Xiao @xiao_ted🚨New RL impact just dropped🚨 1) My friend is a high level Rocket League player and just alerted me that an open-sourced agent trained with...

January 13, 2023

𝓦𝓾𝓵𝓯𝓼𝓲𝓰𝓮 🐺 @wulfsige79Stay diligent my fellow network engineers! These things are out there! Context: bootleg compromised network gear in our corporate...

I refuse to bow to our AI overlords

January 13, 2023

There’s been a lot of commentary by security nerds about how ChatGPT et alia ( GPT chat services ) are cause for concern and raising the threat level for...

January 12, 2023

stoned cold fox @roastmalone_When you’re Godzilla every city is a walkable city8:35 PM ∙ Jan 9, 202314,659Likes2,649Retweets - Dan Black @DanWBlackThis...

January 11, 2023

January 11, 2023

Using ChatGPT to Visualize Ransomware Leak Site Data This site is really cool. Using ChatGPT to Visualize Ransomware Leak Site Data | Colins Security Blog...

January 10, 2023

January 10, 2023

Gregory Schnakenberg @GSchnakenbergWhile working in our archives, I found an old metal box. Inside was a long-forgotten roll of silent 8mm film marked "The...

January 9, 2023

January 9, 2023

Nice work, if you can get it. New York Daily News @NYDailyNewsA trio of thieves steal $300,000 from an armored truck in a bold Brooklyn heist, grabbing a...

January 8, 2023

(On a personal note, I just want to say how proud I am to have not sent out a newsletter with 2022 in the date.) - Rory Cormac @RoryCormacRemarkable story...

January 7, 2023

James Pearson @pearswickTHREAD: Meet Andrey Korinets - 35-year-old bodybuilder and IT admin by day, member of Russian intelligence-gathering hacking team,...

January 6, 2023

I’m gonna do a manual quote here to say that this is exactly the type of stuff we predicted, and especially with automation bias with people overtrusting...

AI masks for online criminals?

January 5, 2023

Apps that can edit video streams and change a face to be unrecognisable already exist. What are the use cases for privacy, security, and maliciousness? A few...

January 5, 2023

January 5, 2023

- The Info Op is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. Jan Lemnitzer...

January 4, 2023

January 4, 2023

Military Intelligence Museum @mi_intelOur First #ObjectOfTheWeek for 2023 is a British bug detector kit. A bug is a covert listening device which combines a...

January 3, 2023

January 3, 2023

- The Info Op is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. Intel Takes...

January 2, 2023

January 2, 2023

Jayson Geroux @JaysonGeroux1/5 Short🧵with attached video. Even the fighting for this small Ukrainian town highlights some of the phases, challenges &...

January 1, 2023

January 1, 2023

Happy New Year! Time to get back to regular posting. Subscribe now - It’s amusing that one of the better military analysis channels on YouTube is a puppet...

December 30, 2022

December 30, 2022

- Matthew Green @matthew_d_greenThe NSA maintained a $250m/year “SIGINT Enabling Project” that inserted vulnerabilities into US cryptographic technology, and...

December 28-29, 2022

December 30, 2022

Matthijs R. Koot @mrkootEspionage by Europeans 2010–2021. A Preliminary Review of Court Cases (May 2022) foi.se/en/foi/news-an… Direct link to report (1.2MB...

December 26-27, 2022

December 28, 2022

Mykhailo @mxpoliakovI received bizarre microchips from the downed Russian SU-24M near Bakhmut. Research revealed that at least one microchip is part of the...

December 25, 2022

December 25, 2022

Merry Christmas, and seasons greetz to * Adam Cerious @Browtweatengrinch: I'm so glad we changed and became nice scrooge: and now our names will only be used...

Local news to big picture

December 24, 2022

Sending holiday greetz to all! I just wanted to shoot out a quick post on an observation I made while doing research. I’ve been looking a little bit at a...

December 23-24, 2022

December 24, 2022

- The Info Op is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. Lukasz Olejnik...

December 22, 2022

December 22, 2022

- The Info Op is a reader-supported publication. To receive new posts and support my work, consider becoming a free or paid subscriber. Oedipus, told with...

December 21, 2022

December 21, 2022

Asymmetric Cyber Vulnerability A unique property of cyber power is that it is available without significant upfront capital expenditure. Here is an...

December 20, 2022

December 20, 2022

Jameson Lopp @loppThis video of cops in Nevada searching a suspect and finding a seed phrase is pretty wild. Imagine having your seed phrase become part of...