- The Grugq's Newsletter
- Posts
- Jan 23, 2023
Jan 23, 2023
Surveillance Technologies Are Imbedded into the Fabric of Modern Life - The IC Must Respond (Jan 2023) mitre.org/news-insights/… 👏
Re: collection of identities, locations, & connections by ad tech: e.g. SDKs, APIs, apps, UAs, device fingerprinting.
By @Kir@KirstenHazelrigITRE. http
— Matthijs R. Koot (@mrkoot)
6:36 PM • Jan 22, 2023
-
New @SilveradoPolicy 40+ page research report is out where we dive into detailed data on Russian trade imports to determine how Russia is working around Western sanctions and export controls
Key findings: 🧵
silverado.org/news/report-ru…
— Dmitri Alperovitch (@DAlperovitch)
5:11 AM • Jan 23, 2023
-
NSA IPv6 Security Guidance (.pdf, Jan 2023) media.defense.gov/2023/Jan/18/20…
- deny by default, allow only authorized IPv6 src
- DHCPv6 or RFC 4941 (SLAAC leaks MAC)
- dual stack: ensure IPv6 >= IPv4 security
- RA Guard, DHCPv6 Shield
- split DNS for AAAA
- no tunnels
- no NAT64, 464XLAT htt— Matthijs R. Koot (@mrkoot)
7:26 AM • Jan 23, 2023
-
Yesss, expose this fraud.
"Girl asks police to run DNA test on Christmas cookie for evidence of Santa Claus" npr.org/2023/01/22/115…
— pourmecoffee (@pourmecoffee)
1:56 AM • Jan 23, 2023
-
Hostile takeover: Kraken hacks rival darknet market Solaris. At stake is the shar of a market that can add up to billions of dollars for whichever platform is able to facilitate the flow of everything from illegal drugs and malware to fake ID and stolen payment card data.
-
Discussed a bit more in depth previously:
-
"The closure came after planning documents were published by bumbling council bureaucrats that revealed in detail a series of costly, new additions to the building".
via @MailOnline— Dr. Dan Lomas (@Sandbagger_01)
8:19 AM • Jan 22, 2023
-
So basically subscribe to T-Mobile and get free credit monitoring for life?
— Justin Elze (@HackingLZ)
1:36 AM • Jan 20, 2023
-
This chart explains exactly why the Darwin Awards are a thing…
— David Kanter (@TheKanter)
3:14 AM • Jan 23, 2023
-
#Exploiting null-dereferences in the #Linux#kernel
// by Project Zero
googleprojectzero.blogspot.com/2023/01/exploi…
— [email protected] (@0xdea)
7:22 AM • Jan 23, 2023
-
Lol. "0days"...
Here's a post from 2015 about messages being unencrypted on signal desktop.
t.co/OOPmW8P4vf
— dade (@0xdade)
6:25 PM • Jan 22, 2023
-
The iOS and macOS stock kernel can create debug messages, allowing the root user to observe which functions are called in the kernel. How can you record kernel debug messages & map trace codes to the actual functions called?
#rev#reversingshortspyoutu.be/0B9M0qolfxgp— @[email protected] (@naehrdine)
2:24 PM • Jan 22, 2023
-
Last week I was a student for five days, five hours per day—with ChatGPT fully integrated into teaching. Here's what we learned, just in time for Spring Term (which starts tomorrow. Class was Malware Analysis, taught by @juanandres_gs@alperovitch)
— Thomas Rid (@RidT)
2:33 AM • Jan 23, 2023
-
top left can get me CIA classified documents in minutes
— JP (@jpbrammer)
2:10 PM • Jan 22, 2023
pov: you're hiring an engineer but the only thing that's revealed to you during the interview process is what their setup looks like.
who u choosing & why http
— dounbug (@d0unbug)
3:41 AM • Jan 17, 2023
-
OpenOffice won't print on Tuesday 😱
— [email protected] (@0xdea)
7:26 AM • Jan 23, 2023
Reply