Oneironaut

@Oneironaut@infosec.exchange
13 Followers
95 Following
1.4K Posts
GRC advocate. Cyber adjacent. Celine Dion fan

Latest Marks and Spencer update is pretty crazy.

M&S haven't been able to supply sales data - so the British Retail Consortium (BRC) - used by the UK government as as economic indicator - basically made up figures for M&S and didn't tell people they had done this.

https://www.telegraph.co.uk/business/2025/06/24/retail-lobby-group-accused-of-ms-cyber-cover-up/

Retail lobby group accused of M&S cyber cover-up

British Retail Consortium published ‘made-up’ sales figures following attack on high street giant

The Telegraph
Worth noting that every write up says this vuln applies to the management interface - but that isn’t true, it’s because the initial CVE entry was wrong, and nobody does CVE entry updates in write ups.

I think what makes me so incredibly angry about AI is that it’s not there to reduce *your* work. It’s there to reduce the amount of labor that CEOs have to pay for.

There’s no world in which doing *your* job a little faster is worth the trillions of dollars in investment; this is entirely predicated on eliminating working class jobs.

And *no one* should be excited about that, except for billionaires.

@campuscodi

Apparently, the issue that led to the certificate revocation is ScreenConnect storing configuration data in an available area of the installer that is not signed.

Attackers are changing the configuration data to suit their needs, without affecting the signature.

It's been happening for months, it seems.

https://www.helpnetsecurity.com/2025/06/11/connectwise-is-rotating-code-signing-certificates-what-happened/

Connectwise is rotating code signing certificates. What happened? - Help Net Security

Connectwise is updating the digital signing certificates used in ScreenConnect, Automate, ConnectWise RMM due to security concerns.

Help Net Security

@SecurityWriter I honestly don't know how anyone could even possibly see it as anything BUT a manufactured tech bubble. Like, let's ignore, for a moment, the very real and urgent problems with the falsehoods it spews, the resources it gobbles up for dubious-at-best value, and the wrecking-ball it's taken to entire sectors of the economy.

We shouldn't. But let's do so, just for a moment.

These models rely on the massive use of GPU chips. Conveniently, shortly before GenAI bubbled up, there was another tech bubble grift that made heavy use of them: NFTs. And, conveniently, shortly before *those* bubbled up, there was *another* tech bubble grift that relied heavily on GPU chips: crypto mining.

How do people not see that this all just... props up tech stocks so that techbro venture capitalists can continue to generate exponential returns in the stock market now that Moore's Law has collapsed, and those techbro investors can't make exponential returns the old-fashioned way?

https://cap.csail.mit.edu/death-moores-law-what-it-means-and-what-might-fill-gap-going-forward

The Death of Moore’s Law: What it means and what might fill the gap going forward

CSAIL Alliances

New blog post: "Big Enough to Fail".

I think some services/companies have grown so big that blame actually goes *down* during large scale outages.

https://willgallego.com/2025/06/21/big-enough-to-fail/

Big Enough to Fail – Will Gallego

YouTube’s new anti-adblock measures

Over the past few months, YouTube has been trying another round of anti-adblock measures. Currently the anti-adblock stuff is being A/B tested, and one of my accounts is in the experimental group. I wrote a filter that partially avoids one of the anti-adblock measures, fake buffering, on uBlock Origin (and Brave browser, since it uses the same filter rules). (It’s

https://www.osnews.com/story/142624/youtubes-new-anti-adblock-measures/

#Google

YouTube’s new anti-adblock measures – OSnews

It was a headline this week, but the world shrugs (while visiting violence upon others):

An update by climate scientists who know what they're doing reveals: the "remaining" carbon budget for staying below 1.5C is now only 130 GtCO2. We emit that in ~3 yrs.

We always said the window is closing. It is. (Nobody can say they didn't know.)

We now need to track cumulative overshoot budgets. Keep them small. And link responsibility to the mind-blowing damage caused.

https://essd.copernicus.org/articles/17/2641/2025/

Indicators of Global Climate Change 2024: annual update of key indicators of the state of the climate system and human influence

Abstract. In a rapidly changing climate, evidence-based decision-making benefits from up-to-date and timely information. Here we compile monitoring datasets (published at https://doi.org/10.5281/zenodo.15639576; Smith et al., 2025a) to produce updated estimates for key indicators of the state of the climate system: net emissions of greenhouse gases and short-lived climate forcers, greenhouse gas concentrations, radiative forcing, the Earth's energy imbalance, surface temperature changes, warming attributed to human activities, the remaining carbon budget, and estimates of global temperature extremes. This year, we additionally include indicators for sea-level rise and land precipitation change. We follow methods as closely as possible to those used in the IPCC Sixth Assessment Report (AR6) Working Group One report. The indicators show that human activities are increasing the Earth's energy imbalance and driving faster sea-level rise compared to the AR6 assessment. For the 2015–2024 decade average, observed warming relative to 1850–1900 was 1.24 [1.11 to 1.35] °C, of which 1.22 [1.0 to 1.5] °C was human-induced. The 2024-observed best estimate of global surface temperature (1.52 °C) is well above the best estimate of human-caused warming (1.36 °C). However, the 2024 observed warming can still be regarded as a typical year, considering the human-induced warming level and the state of internal variability associated with the phase of El Niño and Atlantic variability. Human-induced warming has been increasing at a rate that is unprecedented in the instrumental record, reaching 0.27 [0.2–0.4] °C per decade over 2015–2024. This high rate of warming is caused by a combination of greenhouse gas emissions being at an all-time high of 53.6±5.2 Gt CO2e yr−1 over the last decade (2014–2023), as well as reductions in the strength of aerosol cooling. Despite this, there is evidence that the rate of increase in CO2 emissions over the last decade has slowed compared to the 2000s, and depending on societal choices, a continued series of these annual updates over the critical 2020s decade could track decreases or increases in the rate of the climatic changes presented here.

Suricata Book news:

I took a bit of time and I made some lab setup recommendations in the form of network diagrams.

There's a minimal, mid-tier, and the fuck you, I want it all version.

Got asked to review a book proposal for "A Guide to Prompt Engineering".

More accurate title: "A Guide to Poking at the Environmentally Disastrous Racist Pile of Linear Algebra Trained on Stolen Data and Exploitative Labor Practices to Produce Outputs You're Too Lazy to Learn to Evaluate"

×

Suricata Book news:

I took a bit of time and I made some lab setup recommendations in the form of network diagrams.

There's a minimal, mid-tier, and the fuck you, I want it all version.

I'm not gonna go super in-depth on how to set all of this up. I have a whole other book for that. These are just ideas that readers can run with or just say 'nah man. I'll do something else.'