Liblor @liblor

Happy human liblor.ch Joined March 2016

Tweets

556
Followers

119
Following

247
Likes

765

Andrin Bertschi @andrinbertschi

a year ago

After more than 6 months of hard work, we are thrilled to disclose #AhoiAttacks that break confidential computing offered by AMD SEV-SNP and Intel TDX with malicious interrupts. ahoi-attacks.github.io

1 6 51 29K 0

koto @kkotowicz

2 years ago

See how Google's security engineering team handles rollouts at scale, so we can safely enforce Strict CSP, Trusted Types and other security features on 100s new services yearly. bughunters.google.com/blog/589651289…

1 38 74 13K 38

Dmitry Vyukov @dvyukov

2 years ago

#io_uring: runs fast, but in the wrong direction? "io_uring vulnerabilities were used in all submissions which bypassed mitigations" ChromeOS: disabled io_uring Android: restricted io_uring GKE: disabling io_uring disabled on Google servers io_uring LTS vulns no longer accepted

chompie @chompie1337

2 years ago

5 75 432 147K 79

0 12 33 8K 4

Lukasz Olejnik @lukOlejnik

2 years ago

Google will phase out third-party cookies for a testing group of 1% users at the beginning of 2024. Full deprecation of third party cookies in Q4 of 2024. The entire ecosystem is shifting. developer.chrome.com/blog/shipping-…

Lukasz Olejnik @lukOlejnik

3 years ago

1 9 15 0 12

0 9 13 9K 0

Download Image

Quentin Kaiser @qkaiser

3 years ago

You can’t make this shit up. Sophos sales: if the ransomware’d hospital had use Sophos it wouldn’t have happened. Hospital CIO: well we *do* use Sophos.

24 314 1K 365K 98

Download Image

path.eth 🛡️ @Cryptopathic

3 years ago

I think the situation at @LastPass may be worse than they are letting on. On Sunday the 18th, four of my wallets were compromised. The losses are not significant. Their seeds were kept, encrypted, in my lastpass vault, behind a 16 character password using all character types.

1 2K 6K 3.2M 864

nixCraft 🐧 @nixcraft

3 years ago

wtf? 😒

137 490 5K 0 121

Download Image

payloadartist @payloadartist

3 years ago

"How security professionals are being attacked: A study of malicious CVE proof of concept exploits in GitHub" This research paper found that ~10% PoC repositories on Github were malicious 😬 arxiv.org/pdf/2210.08374… #infosec #cybersecurity #bugbounty #bugbountytips

3 36 63 0 16

Download Image

vx-underground @vxunderground

3 years ago

Yanluowang ransomware group was ransomed (?). Their onion site was breached, displaying a message that says "time's up"[sic] and linking downloads of their leaked internal communications * Image 1 is their onion site defaced * Image 2 is all of their known public posts

7 52 256 0 13

Download Image

Romain THOMAS @rh0main

3 years ago

It's a pleasure to announce the release of open-obfuscator: a free and open-source solution for obfuscating Android and iOS applications (Java/Kotlin, C/C++/Objective-C) romainthomas.fr/post/22-10-ope… obfuscator.re

8 188 566 0 157

Download Image

Matthias @not_matthias

3 years ago

TIL that you can bypass Windows Defender by setting your computer name to HAL9TH. Who the hell thought this was a good idea?

35 386 2K 0 440

Download Image

FdeStV @Marsattaqueblog

3 years ago

Dans l'exercice Polaris 21, une frégate de la force Bleue à été détruite par la force Rouge suite à une volée (14) de missiles envoyée sur une position trouvée sur le compte Snapchat d'un marin de la frégate (selon @amiralVandier) Nouvel exercice Polaris prevu en 2023 #euronaval

22 214 1K 0 70

Shahar Tal @jifa

3 years ago

“This is not a happy talk. Apple has made things way harder for us.”

11 256 2K 0 276

Download Image

sofía celi @claucece

3 years ago

Today, we are publishing several practically-exploitable cryptographic vulnerabilities in the Matrix (@matrixdotorg) standard and their flagship client Element, with Daniel Jones (@djwj_), Benjamin Dowling (@DowlingBJ) and Martin R. Albrecht (@martinralbrecht).

10 210 632 0 118

Aura @SecurityAura

3 years ago

Every now and then I remember that client who got hit by Ransomware and lost multiple VMs because they had no backup. Then realized that TAs had exfil'd the VMs. They didn't pay the ransom, waited for their data to be leaked and downloaded the VMs to restore the lost data.

40 195 2K 0 97

Justine Tunney @JustineTunney

3 years ago

I've ported the OpenBSD pledge() system call to Linux. I think it's the fastest, simplest, most lightweight way to sandbox programs to date. justine.lol/pledge/

9 121 460 0 45

ZecOps - A Jamf Company @ZecOps

3 years ago

We're seeing many iOS attacks in the wild recently. 0-clicks and 1-clicks are actively circulated out there. Sophisticated payloads. Stay alert: watch out for issues using Microphone/Camera and sudden reboots. DMs are open. zecops.com/contact/free-t…

0 11 30 0 0

Maddie Stone @maddiestone

3 years ago

CVE-2022-26925, the bug marked as "actively exploited" in today's Patch Tuesday is the PetitPotam vuln fixed back in Aug 2021...and seems to have been reintroduced. Not sure yet whether to treat this as #itw0days & have some discussions I want to have first. WDYT?