@osxreverser have you seen this post? Would like to hear your thoughts
https://blog.mozilla.org/en/firefox/hardening-firefox-anthropic-red-team/
Yeah writing exploits is still hard and LLMs can't do it, but attackers can now find lots of bugs cheaply? On security engineering side, this should help to find and patch things in bulk too. Does anything change in the real world security though?
We carefully control our own supply chains to optimize value and security, implement rigorous secure product development and testing processes, and take timely and appropriate action to mitigate known vulnerabilities. We constantly assess potential security risks to our U.S. operations, customers, and supply chain.
Good morning. Starlink has now launched more than TEN THOUSAND satellites into orbit. Nearly 1400 have already been burned up in the atmosphere so far.
Here's a "lovely" image from my Kuiper Belt discovery program with dozens of satellite streaks in a 3 hour stacked exposure from CFHT. This was from 2022, when there were thousands fewer satellites... This is dumb.
Image credit: P. Cowan/W. Fraser/S. Lawler/CLASSY Survey Team
(The small streaks that are similar lengths are actually asteroids!)
CVE-2024-32896 which is marked as being actively exploited in the wild in the June 2024 Pixel Update Bulletin is the 2nd part of the fix for CVE-2024-29748 vulnerability we described here:
https://grapheneos.social/@GrapheneOS/112204428984003954
As we explained there, none of this is actually Pixel specific.
Bulletin:
https://source.android.com/docs/security/bulletin/pixel/2024-06-01
Attribution to us:
https://source.android.com/docs/security/overview/acknowledgements
April release of the Pixel boot chain firmware includes fixes for 2 vulnerabilities reported by GrapheneOS which are being actively exploited in the wild by forensic companies: https://source.android.com/docs/security/bulletin/pixel/2024-04-01 https://source.android.com/docs/security/overview/acknowledgements These are assigned CVE-2024-29745 and CVE-2024-29748.
i got this Nokia N900 a couple of weeks ago! a very cool smartphone that (I think) feels more like a mini computer in some ways
i've had a lot of fun tinkering with this, exploring the original Maemo OS (with the older software that was ported to it in the repos), as well as installing postmarketOS. I'll definitely try out Maemo Leste (the updated community version of Maemo) as well at some point
@jeromesegura @ericlaw Also worth noting is that any A/V engine that listens to the AMSI data stream will also be able to block the copy + pasted code before it runs. Most engines do this nowadays.
https://learn.microsoft.com/en-us/windows/win32/amsi/antimalware-scan-interface-portal
Zack Whittaker
Prof. Sam Lawler
Dan Sanderson
Brian Marick
GrapheneOS
alex tuckey
Lee Holmes 
