the grugq's newsletter
Subscribe
RSS
Archive
March 1 more time, 2024
March 2, 2024
March 1, 2024 Dan Geer keynote from 2023 From 28 March 2023: Whither Software? Cloud Threats & Vulnerabilities Summit, San Francisco, California,...
March 1, 2024
March 1, 2024
March 1, 2024 Dan Geer keynote from 2023 From 28 March 2023: Whither Software? Cloud Threats & Vulnerabilities Summit, San Francisco, California,...
February 29, 2024
February 29, 2024
February 29, 2024 Administrivia: lots of words due to the editor on Friday. Reduced newsletter until then. Thank you for your understanding. I recently found...
February 28, 2024
February 28, 2024
February 28, 2024 Administrivia: the deadline for my final draft to get to the editor is the 1st. The 28th and 29th will probably be very short. Thank you...
My Thoughts on the Utility of Offensive Cyber
February 28, 2024
Offensive Cyber, utility of. This is a fundamental misunderstanding of how offensive cyber works. NEW by @CarlyPage_: The feds took down LockBit, now LockBit...
February 27, 2024
February 27, 2024
February 27, 2024 It’s interesting that many developers have high faith in their compilers and it’s moderately rare to come across bugs as a dev. However,...
February 26, 2024
February 26, 2024
February 26, 2024 And if you're looking for something automated and sustainable: https://t.co/Z6sb4c6M5n— Jay Lagorio Ⓥ (@jay.lagor.io on the blue app)...
February 25, 2024
February 25, 2024
February 25, 2024 Tired of “LLM hacking” hype with no code? Here’s a breath of fresh air. https://t.co/GAs2gtXz21 1. Challenges: open source ✅ 2. Solution...
February 24, 2024
February 24, 2024
February 24, 2024 Every. Single. New. Google. Product. pic.twitter.com/7XAaKknrOQ— Marcos Besteiro 👧🏻👶🏻 (@MarcosBL) February 23, 2024 Secure By Default: I...
February 23, 2024
February 23, 2024
February 23, 2024 cat is the most misused thing by programmers new to linux. I cringe every time someone uses it wrong in a bash script. Thread below with...
February 22, 2024
February 22, 2024
February 22, 2024 Consumers: oh no, my PC game has horse armor microtransactions Industrial equipment folks: pic.twitter.com/IRGTbPJRhQ— lcamtuf...
February 21, 2024
February 21, 2024
February 21, 2024 Your fingerprints can be recreated from the sounds made when you swipe on a touchscreen — Chinese and US researchers show new side channel...
February 20, 2024
February 20, 2024
February 20, 2024 Lockbit ransomware groups website has been seized by EUROPOL. pic.twitter.com/Z4UTRy25z6— vx-underground (@vxunderground) February 19, 2024...
February 19, 2024
February 19, 2024
February 19, 2024 #threatintel someone just leaked a bunch of internal Chinese government documents on GitHubhttps://t.co/BO8N64A7kF— 安坂星海 Azaka 🐼 VTuber...
February 18, 2024
February 18, 2024
February 18, 2024 Science fiction writers: The legal case for robot personhood will be made when a robot goes on trial for murder. Reality: The legal case...
February 17, 2024
February 17, 2024
February 17, 2024 Anyone seen this? Can’t quite figure it out….https://t.co/hrgm47qPiv— Charl van der Walt 🌻 (@charlvdwalt) February 16, 2024 A fun UX I've...
February 16, 2023
February 16, 2024
February 16, 2023 GitHub - apernet/OpenGFW: OpenGFW is a flexible, easy-to-use, open source implementation of GFW (Great Firewall of China) on LinuxOpenGFW...
February 15, 2024
February 15, 2024
February 15, 2024 European Court of Human Rights delivers a landmark ruling that data retention is unlawful, and end-to-end encryption is upheld as a right...
February 14, 2024
February 14, 2024
February 14, 2024 Happy St. Valentine’s Day Massacre Day Wi-Fi jamming to knock out cameras suspected in nine Minnesota burglaries -- smart security systems...
February 13, 2024
February 13, 2024
February 13, 2024 FuckStalkerware pt. 4 - the truth come out: does TheTruthSpy is secure #FuckStalkerware pt. 4 - the truth come out: does TheTruthSpy is...
February 12, 2024
February 12, 2024
February 12, 2024 SPY NEWS: 2024 — Week 6. Summary of the espionage-related news… | by The Spy Collection | Feb, 2024 | MediumSummary of the espionage-...
February 11, 2024
February 11, 2024
February 11, 2024 "This included £10 million from Huawei, the tech firm banned in 2020 from Britain’s 5G networks. Overall, about a third of all Chinese...
February 10, 2024
February 10, 2024
February 10, 2024 sometimes propaganda and counter-propaganda simply comes down to an age old question: [FCO 1971] pic.twitter.com/wchEbj0fFm— Rory Cormac...
February 9, 2024
February 9, 2024
February 9, 2024 Today I, a professional astrophysicist, learned that Venus has a moon (sort of), and that it’s called Zoozve (sort of). Wonderful thread...
February 8, 2024
February 8, 2024
February 8, 2024 New: I've confirmed that the viral story where 3 million smart toothbrushes were hijacked and formed a DDoSing botnet didn't happen, isn't...
February 7, 2024
February 7, 2024
February 7, 2024 Exclusive: Andrey Kharchenko, one of the Russian attendees of a much-scrutinized 2018 meeting in a Moscow hotel with Lega leader Matteo...
February 6, 2024
February 6, 2024
February 6, 2024 Excellent blog post by @sec_consult about reverse engineering custom ASICshttps://t.co/zx4Lr16zxJ#reverseengineering #cybersecurity...
February 5, 2024
February 5, 2024
February 5, 2024 Found some interesting bugs in Excalidraw used in @Meta Messenger (w @naglinagli and @0xteknogeek) as well as Microsoft Whiteboard some time...
February 4, 2024
February 4, 2024
February 4, 2024 Analyzing the Historical Rate of Catastrophes Twitter's AI bot problem: Pic 1: spam account posts AI-generated description of an image...
February 3, 2024
February 3, 2024
February 3, 2024 Some classic hacker folklore here. http://www.catb.org/jargon/html/appendixa.html Really insightful article. Compares the “fall of Rome” to...
February 2, 2024
February 2, 2024
February 2, 2024 Today is an interesting day! I read a report about a threat actor, and for once I'm impressed! This is the first I can remember in which a...
February 1, 2024
February 1, 2024
February 1, 2024 In this article in @IntelNatSecJnl, I try to answer the question: Why are #Russian #covertoperations so easily unmasked. The answer is a...
January 31, 2024
January 31, 2024
January 31, 2024 You probably want to know about the future of mobile phones on the battlefield. You’re in luck! That was the topic for Between Two Nerds...
January 30, 2024
January 30, 2024
January 30, 2024 I am on the Adventures of Alice and Bob podcast discussing some cool cyber operations and hacking failures. I think it is well worth a...
January 29, 2024
January 29, 2024
January 29, 2024 I looked through attacks in my access logs. Here's what I found I looked through attacks in my access logs. Here's what I foundI've been...
January 28, 2023
January 28, 2024
January 28, 2023 The perfect ending to this investigation. https://t.co/WRnm0N60hN pic.twitter.com/TklRkWZaGG— Christo Grozev (@christogrozev) January 27,...
January 27, 2024
January 27, 2024
January 27, 2024 very funny to me that the inventor of the .webp file extension actively tries to defend himself on this website pic.twitter.com/8AmjopLW9W—...
January 26, 2024
January 26, 2024
January 26, 2024 https://www.reuters.com/business/aerospace-defense/aviation-sector-seeks-urgent-solutions-gps-interference-2024-01-24/...
January 25, 2024
January 25, 2024
January 25, 2024 President Bongbong Marcos of the Philippines has been criticized for using the presidential helicopter to attend a Coldplay concert. Marcos...
January 24, 2024
January 24, 2024
January 24, 2024 I have acquired the fabled NSA "FURBIE ALERT" memo. I have a significant amount of documentation that came back on an FOIA and I'll be...
Kerckhoffs's Principle at War
January 23, 2024
Kerckhoffs's Principle at War How WW2 US Paratroopers Secured Their Blind Recognition Protocol Before the D-Day landings, the 101st paratrooper division...
January 23, 2024
January 23, 2024
January 23, 2024 Trying to imagine what precedent they'd argue allows this. Is this same as grabbing small part of fingerprint, using AI to complete...
January 22, 2024
January 22, 2024
January 22, 2024 Apologies for tweets not getting embedded and lack of previews recently. I’ve raised a support ticket with ButtonDown to get it resolved....
January 21, 2024
January 21, 2024
January 21, 2024 No, you’re freaking out because it’s already three weeks into 2024! Hans reiser on the removal of Reiserufs...
January 20, 2024
January 20, 2024
January 20, 2024 Comparing the 1970’s Cray-1 supercomputer against the Raspberry Pi single-board computer range Comparing the 1970’s Cray-1 supercomputer...
January 19, 2024
January 19, 2024
January 19, 2024 Reverse engineering expert system by @juanandres_gs free to play with (ChatGPT plus subscription required) at https://t.co/haFXmZWEnw...
January 18, 2024
January 18, 2024
January 18, 2024 https://blog.quarkslab.com/pixiefail-nine-vulnerabilities-in-tianocores-edk-ii-ipv6-network-stack.html 1/ A technical writeup on @Meta’s...
January 17, 2024
January 17, 2024
January 17, 2024 Ostorlab/ostorlab: Ostorlab is a security scanning orchestrator for the modern age. GitHub - Ostorlab/ostorlab: Ostorlab is a security...
January 16, 2024
January 16, 2024
January 16, 2024 https://x.com/cglyer/status/1747089928196882880 https://x.com/volexity/status/1747043129293758687 Work Is Work | codahale.com In which...
January 15, 2024
January 15, 2024
January 15, 2024 Nervous about heading thru the Bab? Just punch in "ALL CHINESE CREW" and enjoy the ride. pic.twitter.com/C4uCFTG0iI— TankerTrackers.com,...
Newer archives
Older archives