I made my VM think it has a CPU fan | mindless-area

...so the malware would finally shut up and run

The Journey of Bypassing Ubuntu’s Unprivileged Namespace Restriction

Root Shell on Credit Card Terminal

Siguza’s Blog

Siguza’s Blog

Driving forward in Android drivers

Posted by Seth Jenkins, Google Project Zero Introduction Android's open-source ecosystem has led to an incredible diversity of manufactu...

Yellow Flag (@WPalant@infosec.exchange)

German law is making security research a risky business. Current news: A court found a developer guilty of “hacking.” His crime: he was tasked with looking into a software that produced way too many log messages. And he discovered that this software was making a MySQL connection to the vendor’s database server. When he checked that MySQL connection, he realized that the database contained data belonging to not merely his client but all of the vendor’s customers. So he immediately informed the vendor – and while they fixed this vulnerability they also pressed charges. There was apparently considerable discussion as to whether hardcoding database credentials in the application (visible as plain text, not even decompiling required) is sufficient protection to justify hacking charges. But the court ruling says: yes, there was a password, so there is a protection mechanism which was circumvented, and that’s hacking. I very much hope that there will be a next instance ruling overturning this decision again. But it’s exactly as people feared: no matter how flawed the supposed “protection,” its mere existence turns security research into criminal hacking under the German law. This has a chilling effect on legitimate research, allowing companies to get away with inadequate security and in the end endangering users. Source: https://www.heise.de/news/Warum-ein-Sicherheitsforscher-im-Fall-Modern-Solution-verurteilt-wurde-9601392.html

What went wrong with Horizon: learning from the Post Office Trial

This Post Office trial has revealed what is likely the largest miscarriage of justice in UK legal history. Hundreds of individuals who operated Post Office branches (subpostmasters) were convicted on fraud and theft charges on the basis of missing funds identified by the Horizon accounting system. T

Google's Waymo says insurance data shows its driverless cars are safer than humans

Hundreds of driverless cars are now an everyday part of traffic in San Francisco, but how safe are they and how do they compare to human drivers? Google’s Waymo, one of the largest driverless car companies in the city, just released a new study that attempts to shed light on its own track record.

When your classmates threaten you with felony charges | R. Miles McCain

A few weeks ago, I was part of a talk at DEF CON 31 called The Hackers, The Lawyers, and the Defense Fund.

stepping down as lead developer of GrapheneOS · thestinger/daniel.micay.dev@79e44b4

Personal website. Contribute to thestinger/daniel.micay.dev development by creating an account on GitHub.