Jan 24, 2023

January 24, 2023

Always a good time to rewatch Mickens

-

-

-

-

Report from Ukraine on how the Russian cyber offensive is integrated into the “special military operation.”

And an article on the report:

-

WiFi Routers Used to Produce 3D Images of Humans

-

-

People have been asking me about Bitwarden ever since LastPass has been breached. While I never took an in-depth look, I now at least evaluated the claims regarding their encryption:

https://palant.info/2023/01/23/bitwarden-design-flaw-server-side-iterations/

While the password manager being completely open-source with the option to self-host is great, otherwise I’m not too impressed.

-

Pwning Google phone using a bug in Mali

-

Activation Context Cache Poisoning: ZDI Sr Vuln Research Simon Zuckerbraun details this new class of privilege escalation vulnerabilities that has already been used in the wild. He also looks at the code changes #Microsoft has introduced in response. https://www.zerodayinitiative.com/blog/2023/1/23/activation-context-cache-poisoning-exploiting-csrss-for-privilege-escalation

…

-

-

-

A thought provoking thread.

Some security thoughts on a super strange topic: how rationalists and nihilists have it wrong, and why the infosec community is ahead of the curve.

This is going to be a weird thread tying together an epic James Mickens USENIX Security keynote, Ken Thompson's classic Turing Award speech, Chapman's insights on the failure of modernity and rationalism and postmodernity, and more. So, let's begin.

-

Paper on undefined behavior in C.

-

did you know you can infer what version of Windows an executable was built on (or at least what version of the Windows SDK was targeted) by how many fields its load configuration directory has?

the structure remained unchanged from WinXP, until Win8.1 Update 3 when they added new fields for Control Flow Guard support. the same fields were used in the initial Win10 release (version 1507)

the structure was iteratively expanded in versions 1511, 1607, 1703, 1709, 1803, 1809, 21H1, 21H2, and 22H2.

-

China is inviting experts to come to China and provide consultations to the gov. Apparently it was consultations with foreigners that led to the removal of all Covid restrictions in December.

If you want a full or part time contract with China they prefer STEM academics in Health, International Relations, and Security. Meetings take place face to face in China. Oh, and no US persons.

-

-

Reply

or to participate.