Mastodawn

Aaron Sep 15, 2023

Dan Goodin Sep 14, 2023

Yo dog, we heard you liked patches, so we're gonna make you update every piece of software that renders Webp images.

https://arstechnica.com/security/2023/09/with-0-days-hitting-chrome-ios-and-dozens-more-this-month-is-no-software-safe/

With 0-days hitting Chrome, iOS, and dozens more this month, is no software safe?

With 70 zero-days uncovered so far this year, 2023 is on track to set a new record.

Ars Technica

Aaron Sep 15, 2023

I'm looking at moving to infosec.exchange can I move my posts over?

Aaron Sep 8, 2023

NGL being able to play cyberpunk on a handheld is one of the most surreal things I've ever done and I've had this handheld for almost a year. It still shocks me that something like this is possible

The steam deck is awesome

Aaron Jul 23, 2023

Sometimes I wonder how oracle OCI is maintainable and then I see that its always free stuff is never readily available. I guess that's one way to do it

Aaron Jun 13, 2023

Show thread

Kevin Beaumont Jun 5, 2023

Microsoft are attributing the #moveIT zero day attacks to cl0p ransomware group.

I’ve been tracking this - there are a double digit number of orgs who had data stolen, that includes multiple US Government and banking orgs.

Aaron Jun 13, 2023

I need to get back into hackthebox

Aaron May 15, 2023

Sergey Tomilin May 15, 2023

it's 2023, so how about a security vuln in a guitar processor? (I know, I know, it's not a "guitar processor", they call it "modeller". anyway)

ping @GossiTheDog
https://neuraldsp.com/news/statement-regarding-a-quad-cortex-security-vulnerability

Statement regarding a Quad Cortex security vulnerability

Aaron May 14, 2023

Nick @ The Linux Experiment May 9, 2023

Apparently, there are people who are happy that they won’t be able to install optional third party stores on iOS because they don’t live in the EU.

Like, why?! “Oh I’m sure glad this option to get more apps that Apple might have not allowed doesn’t come to MY phone!”

Aaron May 12, 2023

Alright guys what's the absolute BEST mastodon app for Android? I have tried the official one and fedilab. They're both nice but I wanna see what options I got

Aaron May 11, 2023

Ars Technica May 11, 2023

Leak of MSI UEFI signing keys stokes fears of “doomsday” supply chain attack

With no easy way to revoke compromised key, MSI is in a real pickle.

https://arstechnica.com/information-technology/2023/05/leak-of-msi-uefi-signing-keys-stokes-concerns-of-doomsday-supply-chain-attack/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Leak of MSI UEFI signing keys stokes fears of “doomsday” supply chain attack

With no easy way to revoke compromised keys, MSI, and its customers, are in a real pickle.

Ars Technica