the grugq's newsletter
Archives
Search...
Subscribe
November 11, 2024, redux
November 11, 2024
November 10, 2024
November 10, 2024
November 10, 2024 Sorry about November 9th’s newsletter. I’ve raised the issue with Buttondown support and hopefully they’ll fix it. I got out of my Waymo to...
November 9, 2024 redux
November 10, 2024
November 9, 2024 iOS 18.1 added an implementation of the auto-reboot timer for locked devices we've been using in GrapheneOS since June...
November 9, 2024 redux
November 9, 2024
November 9, 2024 iOS 18.1 added an implementation of the auto-reboot timer for locked devices we've been using in GrapheneOS since June...
November 8, 2024
November 8, 2024
November 8, 2024 https://t.co/VB3CnETxc0 is free (not $5 or $10), clean, doesn't have ads, and works anywhere btw https://t.co/nuhRyoVcQ9...
November 7, 2024
November 7, 2024
November 7, 2024 As promised, I just dropped a dozen new sandbox escape vulnerabilities at #POC2024 If you missed the talk, here is the blog...
November 6, 2024
November 6, 2024
November 6, 2024 Resources on Satellite hacking CTFs Satellite Hacking Demystified: https://t.co/hGDo9jKO7W Hack-a-sat writeups: https://t.co/PIkGXuAKSN...
November 5, 2024
November 5, 2024
November 5, 2024 Don’t look too closely at the code here. You might not be able to recover https://t.co/47RIUcnETk— Theo - t3.gg (@theo) November 4, 2024 💡In...
November 4, 2024
November 4, 2024
November 4, 2024 Mind the v8 patch gap: Electron's Context Isolation is insecure Electron uses V8 isolates for context isolation, but the v8 patch gap allows...
November 3, 2024
November 3, 2024
November 3, 2024 reminder that the bcrypt hash function ignores input above a certain length! so if you do bcrypt(username || password) for some reason, a...
November 2, 2024
November 2, 2024
November 2, 2024 Project Zero blog: LLMs find 0days now! 👀 And: our fuzzer setup did not reproduce it! https://t.co/xz6j2fzrWe pic.twitter.com/i6PZX9jFFB—...
November 1, 2024
November 1, 2024
November 1, 2024 Inside Sophos' 5-Year War With the Chinese Hackers Hijacking Its Devices | WIREDSophos went so far as to plant surveillance “implants” on...
October 31, 2024
October 31, 2024
October 31, 2024 Boo. I hope you enjoyed the Halloween content I prepared for you, now back to the regular scheduled newsletter. Three-year prison sentence...
October 30, 2024
October 30, 2024
October 30, 2024 An air "battle" between a Ukrainian FPV and an enemy reconnaissance drone equipped with a rear camera with an AI module for evasion....
October 29, 2024
October 29, 2024
October 29, 2024 NEW: hackers from #China were capturing call audio from US political figures.#SaltTyphoon gathered other unencrypted communications, too....
October 27-28, 2024
October 28, 2024
October 27-28, 2024 In the mid-1920s, Germany taxed radios based on the number of vacuum tubes in the receiver. In 1926 Loewe Radio decided they could make a...
October 26, 2024
October 26, 2024
October 26, 2024 After 2.5 years 4 REvil case defendants sentenced in RU Zaets & Malozemov got 4.5 & 5 years for illegal turnover of payment means (art 187...
October 25, 2024
October 25, 2024
October 25, 2024 Let's say about 90% of incidents are auth based (that's a high level number based on CISA data and my view of the world) telling people to...
October 24, 2024
October 24, 2024
October 24, 2024 My talk on finding security vulnerabilities by combining classical symbolic reasoners with modern-day LLMs: Recording:...
October 23, 2024
October 24, 2024
October 23, 2024 Introducing Nova, a series of foundation models for binary/assembly code. We have also released fine-tuned models for binary code...
Newer archives
Older archives