Friday, May 12, 2023

What are the chances hackers will take the year off?

from here and here

There's a security vulnerability in the secure boot feature of modern computers. While the patch for this 0-day was already released, it won't be enabled by default until Q1 2024. That's a long time to wait for a fix. In theory you can probably enable this fix sooner than that, but most people aren't even going to be aware of it, so most of the vulnerable computer population will remain vulnerable for basically a year, giving attackers ample opportunity to take advantage of it.

Never tempt fate or hackers

found on Izismile

You might think that the only way they could get into your WiFi is by guessing your super powerful secret password, but not only is your password probably not as strong as you think it is, it's also probably not the only way in. WiFi routers have vulnerabilities just like other computerized systems.

Thursday, May 11, 2023

Your tradecraft is trash if you do

from here and here (image source)

I'm not saying don't use any garbage can for your dead drops, only that you shouldn't use one that is so literally under surveillance. Practice some situational awareness and recognize those cameras are a threat to the operational security of your clandestine activities.

Can You Spot The Imposter?


Watch on YouTube

Blink and you'll miss it, but those aren't all sheep. There's one good boy who can blend in quite well. Hopefully he uses that ability to help protect the sheep by sneaking up on predators.

If you succeeded, you're prepared to go look for anomalies in your network traffic or host intrusion detection system.

Wednesday, May 10, 2023

Bleed-only memory

from here and here (image source)

Making shivs out of computer memory is definitely an unusual choice. I suppose they could also make a garrote out of a USB cable, or shuriken out of DVDs.

But as far as cyberweapons go, these are as close to satisfying the criteria as anything else.

Airborne malvertising can't be far behind

found on eBaum's World

It's one thing to put some advertising slogan into the sky by flying a banner behind a plane or something. You might even fit a short URL up there that way. This, however, lowers a lot of barriers to getting your browser to their web site. That can be a boon for people advertising a legitimate product, but also to people trying to compromise your device. 

I know there's some debate about whether QR codes are dangerous from a cybersecurity perspective, and I get that in certain contexts it's relative effectiveness as an attack make it less attractive than more traditional approaches, but this is a scale that hasn't been considered before - a single QR code that can reach millions of people at once.

Tuesday, May 9, 2023

Privacy? Check!

from here (image source)

It's compliant with the privacy policy, therefore privacy has been protected, right? RIGHT?!?! 

If only things actually worked like that.

Cryptography mug

Product Page

It doesn't matter what sort of nonsense you want to say, you should have the ability to say it in secret if you want to.

Monday, May 8, 2023

Give it a funeral, it's half buried already

from here and here (image source)

If you want to know of a good product to prevent this from happening, I suggest a vacuum cleaner rather than antivirus. Antivirus cleaning has more to do with disinfection, and unless you believe in the concept of "clean dirt", no kind of disinfection is going to help here.

I see a Password111111111111111 in your future

found on Reddit

I suppose at some point you'd need to use different numbers besides just 1, because it'll become difficult to remember how many 1's you need to enter.