Fr333k

Fr333k, 3 months ago to random

Enough Internet for today, but BOTH Harry Mack and Beardyman working together is peak everything: https://www.youtube.com/watch?v=CRDfZWwT8KI

Fr333k, 3 months ago to random

This looks really interesting, Google TAG report on commercial spyware: https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Buying_Spying_-

r1cksec, 3 months ago to infosec

A cool post about how to search for threats in Windows services🕵️‍♂️​

https://detect.fyi/threat-hunting-suspicious-windows-service-names-2f0dceea204c?gi=25697c91242b

#infosec #cybersecurity #dfir #threatintel #windows #siem

dfncert, 3 months ago to random

Security advisory for #GnuPG created smartcard keys: Smartcard generation keeps an unprotected backup key on disk

https://gnupg.org/blog/20240125-smartcard-backup-key.html

mherfurt, 3 months ago to random German

@Fr333k gratuliere Mr. Sniff0r!

mrcippy, 3 months ago to random

Samsung's Galaxy S24 Ultra is here. Literally! It's on my desk right now. I'll be testing it and reviewing it for Pocket-lint before its Jan. 31 launch. What questions do you have? I'll try to answer them in my review!

Fr333k, 3 months ago to random

I wrote a few words, about the papers of the upcoming #NDSS24 … https://schmiedecker.net/posts/2024-01-17_ndss24/

Fr333k, 3 months ago to random

Would love to be in Tokyo for #pwn2own Automotive. Maybe another time, I hope people will toot …

video/mp4

Fr333k, 4 months ago to random

Anyone claimed Bobr Kurwa forensics yet? Asking for a friend …

joebeone, 4 months ago to random

I'm excited about @NDSSSymposium 2024! The program is amazing, and we have awesome keynotes (both TBA soon).

Don't sleep on sponsorship: If you'd like to support the best in networked computer science, we'd love to add your org to the growing list: https://www.ndss-symposium.org/ndss2024/sponsorship/

cy, 4 months ago to random

@SaatChris @seecurity Nachfrage zum 37c3 talk:
woher habt ihr diese 600k KIM-Emails? habt ihr da Zugriff von der gematik bekommen oder ist das rein als Teilnehmer-Praxis ersichtlich? (und damit implizit mindestens 600k Teilnehmern (plus deren Technikern) möglich, die z.b. auch ausprobieren könnten wer da so log4shell-anfällig ist ?)

leyrer, 4 months ago to random

I want this for @emf (still not renamed to EMP) and #camp27 ;)

"I Built a Flying Umbrella"
https://www.youtube.com/watch?v=qNTv5SgM0BM

Fr333k, 4 months ago to random

I guess tomorrow will be interesting at work: https://www.nozominetworks.com/blog/vulnerabilities-on-bosch-rexroth-nutrunners

HalvarFlake, 4 months ago to random

I didn't always admire young GeoHot, but watching this interview was a lot of fun, and he has clearly matured a lot.

Or so I thought, until the last 30 seconds, which are pretty bonkers, but that doesn't devalue the stuff before 🙂

https://www.youtube.com/watch?v=rJg0hAKtzt8

dangoodin, 4 months ago to random

Researchers have unearthed nearly two dozen vulnerabilities that could allow hackers to sabotage or disable a popular line of network-connected wrenches that factories around the world use to assemble sensitive instruments and devices.

The vulnerabilities, reported Tuesday by researchers from security firm Nozomi, reside in the Bosch Rexroth Handheld Nutrunner NXA015S-36V-B. The cordless device, which wirelessly connects to the local network of organizations that use it, allows engineers to tighten bolts and other mechanical fastenings to precise torque levels that are critical for safety and reliability. When fastenings are too loose, they risk causing the device to overheat and start fires. When too tight, threads can fail and result in torques that are too loose. The Nutrunner provides a torque-level indicator display that’s backed by a certification from the Association of German Engineers and adopted by the automotive industry in 1999.

Nozomi researchers said the device is riddled with 23 vulnerabilities that, in certain cases, can be exploited to install malware. The malware could then be used to disable entire fleets of the devices or to cause them to tighten fastenings too loosely or tightly while the display continues to indicate the critical settings are still properly in place.

Bosch officials emailed a statement that included the usual lines about security being a top priority. It went on to say that Nozomi reached out a few weeks ago to reveal the vulnerabilities. "Bosch Rexroth immediately took up this advice and is working on a patch to solve the problem," the statement said. "This patch will be released at the end of January 2024."

https://arstechnica.com/security/2024/01/network-connected-wrenches-used-in-factories-can-be-hacked-for-sabotage-or-ransomware/

Fr333k, 4 months ago to random

Must be one of this weird coincidences that farmers in Germany are protesting now, instead of, I don‘t know - July to September?

video/mp4

Fr333k, 4 months ago to random

Remember when you had to install an app to turn your phone into a flashlight? Good times…

video/mp4