Archive (Page 9) • the grugq's newsletter

October 6, 2023

October 6, 2023 Joe :fedora: :debian: :ferris:: "Today I found out that google docs infects html e…" - Fosstodon Today I found out that google docs infects...

October 5, 2023

October 5, 2023 Here's my POC for CVE-2023-4911. It's a little rough, so PR's are definitely welcome 😁https://t.co/xsVyhJv4Kk pic.twitter.com/wXVxQDwtwh—...

October 4, 2023

October 4, 2023 Hear me out: Beeker of the House pic.twitter.com/t9cfcRtEr5— Paranormal Warren G. Harding Activity (@PopeAwesomeXIII) October 4, 2023 Study...

October 3, 2023

October 3, 2023 🧙‍♀️ CISO Story Time This is not exaggeration. I have a good friend. He's a CISO of a multinational organization in the technology sector. We...

October 2, 2023

October 2, 2023 Luke Talbot hacks rental bikes so homeless people can charge phones Central Saint Martins graduate Luke Talbot has created a portable charger...

September 30, 2023

September 30, 2023 Richard Stallman, the man behind GNU, copyleft, and way too many others accolades to even list, announced at GNU 40 that he has cancer....

September 29, 2023

September 29, 2023 ICYMI earlier. Officers investigating vandalism of #SycamoreGap tree arrest 16-year-old.https://t.co/dgyiCAfqP3— Metro Radio News...

September 28, 2023

September 28, 2023 I accidentally knocked New Zealand off the Internet. I was in California at the time and I only knew when they phoned me up....

September 27, 2023

September 27, 2023 🎉🇨🇭The Swiss Parliament voted to adopt a motion (144 yes vs 24 no) to protect Swiss Internet users from indiscriminate scanning of private...

September 26, 2023

September 26, 2023 girlfriend asked me about the roman empire pic.twitter.com/Swh4EtTid7— Dan Toomey (@dhtoomey) September 24, 2023 At the risk of making...

September 25, 2023

September 25, 2023 A wartime poster warning of female spies being used by the enemy in Britain, especially against men in the Royal Navy....

September 24, 2023

September 24, 2023 Need a comparative/dual biography of Dzerzhinsky and J. Edgar Hoover pic.twitter.com/VH2B6ON3j7— Mathias (@bucephalus424) September 23,...

September 23, 2023

September 23, 2023 Today, @Mandiant, collaboratively with @Google’s TAG, is releasing research on APT29’s increased pace of phishing activity against...

September 22, 2023

September 22, 2023 Want to see a crazy trade? Yesterday, someone OPENED $SPLK 127 calls, for $22,000, expiring tomorrow. Then today Cisco Systems $CSCO...

September 21, 2023

September 21, 2023 Six fundamental beliefs that bias our view of the world: 1. My experience is a reasonable reference. 2. I make correct assessments of the...

September 20, 2023

September 20, 2023 NEW BLOG: VulnCheck's CTO @Junior_Baines examines CVE-2023-36845, revealing a new path to code execution that doesn't require a file...

September 19, 2023

September 19, 2023 pic.twitter.com/6hxy55UQX9— Classical Studies Memes for Hellenistic Teens (@CSMFHT) September 18, 2023 Intelligence suggests agents of...

September 18, 2023

September 18, 2023 In their DEFCON talk Viasat provided interesting details about the additional attacks that successfully disconnected target modems by...

Lessons in Thai

September 17, 2023

Lessons in Thai This tweet reminded me of a story about when I was learning Thai. Strip club in Las Vegas offering… free lap dances to customers impacted by...

September 17, 2023

September 17, 2023 So, amongst other things, apparently France wants [platforms] to log and block people who use VPNs to access the platforms and use that...

September 16, 2023

September 16, 2023 Android 14 Still Allows Modification of System Certificates Tim Perry recently claimed in an article that “Android 14 blocks all...

September 15, 2023

September 15, 2023 One thing I have learnt over the last years is that - while I am technically pretty solid - I am surprisingly good at product. It's a...

September 14, 2023

September 14, 2023 Pegasus “appears to have been installed while…Galina Timchenko, owner of the news outlet Meduza, was in Germany for a meeting with other...

September 13, 2024

September 13, 2023

September 13, 2024 Despite Musk's best efforts, this website continues to deliver jaw-dropping moments. pic.twitter.com/SvYS0XD2nr— Daniel Sugarman...

September 12, 2023

September 12, 2023 New—one of the biggest secrets in law enforcement has been which country helped the FBI wiretap the world. One country intercepted tens of...

September 11, 2023

September 11, 2023 Dug up some bones in the garden and I’ve tried to recreate what sort of animal they might have been from. Looks like some sort of snake...

September 9a, 2023

September 10, 2023

September 9a, 2023 Take two. Not sure what happened with the original Sept 9 newsletter. Think about your 3 best friends. If none of them are beetles You are...

September 10, 2023

September 10, 2023 The flight tracking community is more skilled than we're given credit for. If you're going to fake an ADS-B flight, you need to do a lot...

September 9, 2023

September 9, 2023 Think about your 3 best friends. If none of them are beetles You are the beetle pic.twitter.com/7Yj628lhl4— Entomemeology (@entomemeology)...

September 8, 2023

September 8, 2023 Apparently, no one in my office appreciated the interpretive dance routine I did with my middle fingers this morning.— 𖤐 Father Red McGee 𖤐...

September 7, 2023

September 8, 2023

September 7, 2023 Exclusive: the government has conceded that technology to scan encrypted messages does not currently exist and powers in the online safety...

September 6, 2023

September 6, 2023 Electrospaces.net: On the 10th anniversary of the Snowden revelations A weblog about Signals Intelligence, Communications Security and top...

September 5, 2023

September 5, 2023 You think you have it bad? My wife's in infosec. I'm in software. I have to constantly pretend that I don't make apps poorly. One day she's...

September 4, 2023

September 4, 2023 If you've done Cybersecurity introductory courses and you're looking for a course in ethical hacking, there's one on Cisco's Skills For All...

September 3, 2023

September 3, 2023 Mikhail Matveev, an internationally wanted cyber criminal on the FBI's Most Wanted list - is seriously producing (and considering selling)...

September 2, 2023

September 2, 2023 Offensive uses of web browser fingerprinting. Malvertising campaign (malware-served-via ad networks) uses fingerprinting (originally, a...

September 1, 2023

September 1, 2023 My friend released an MTKPI tool - Multi Tool Kubernetes Pentest Image. Inspired by botty, hacker-container, alpine-containertools. PR will...

August 31, 2033

August 31, 2023

August 31, 2033 SPECIAL REPORT: An 18-month investigation by Military Times and @TexasTribune reveals how a group of intelligence officers from the Texas...

August 30, 2023

August 30, 2023 I don't want to hear companies whining about adblockers anymore. You failed to police your ad networks, they became attack platforms, and now...

August 29, 2023

August 29, 2023 NEW: Hackers breached WebDetective, a Portuguese-language stalkerware app that was used to monitor 76,000 Android phones in recent years. The...

August 27, 2023

August 27, 2023 because keysmash looks different on different keyboards, "asdfghjkl" has a Japanese translation pic.twitter.com/5N581puyA1— depths of...

August 26, 2023

August 26, 2023 Introducing: "Prompt Injection Primer for Engineers" 🚀 One of my big take-aways from the AI Village at @defcon was the confusion around...

August 25, 2023

August 25, 2023 ... and this is pretty cool!#Ghidralligator is a C++ multi-architecture pcode emulator based on the #Ghidra libsla designed for #fuzzing with...

August 24, 2023

August 24, 2023 the state’s new science textbooks are full of all sorts of helpful tips like this pic.twitter.com/yBPmg3noOZ— Uncle Duke (@UncleDuke1969)...

August 23, 2023

August 23, 2023 Ghidralligator is a tool by @AirbusCyber to emulate Ghidra p-code for fuzzing with AFL++ Github Repo: https://t.co/RzvtuaGVFz#ghidra #fuzzing...

August 22, 2023

August 22, 2023 Court order pic.twitter.com/M0oqMSsJMR— Ben Zaehringer (@benzaehringer) August 21, 2023 This joint @GeopolDecanted and @riskybusiness podcast...

August 21, 2023

August 21, 2023 media.ccc.de - Sex Workers Versus Surveillance Sex workers have always been at the vanguard of technology—in ways that protect and restrict...

August 20, 2023

August 20, 2023 646-869-7538 Weird and wonderful number to call. It rings up an ELEVATOR somewhere in Midtown Manhattan. Your voice booms out over a security...

August 19, 2023

August 19, 2023 There once was a cat by the name of Tombili (a common Turkish name that is given to chubby pets) who lived in the Kadiköy district of...

August 18, 2023

August 18, 2023 British Museum: "We swear that all these lovely things were acquired totally legally, honestly, and not at all lootedly and please don't ask...