GuardianCosmos (They/Them)

171 Followers
225 Following
60 Posts
Japan loving cybersecurity nerd | Pentesting | Forensics | Incident Response | SANS Instructor | Purple Teaming | SDLC | Partner @ Indelible.global & Solutions Architect @ Reveald | Views AMO

This is hella important. Don’t use a PC with Copilot hardware IMHO. Don’t even borrow a friend’s PC with such hardware to check email, for that matter. If they have Recall enabled, they can scroll back and read all your emails. If you get hacked on a system running Recall, months of everything you’ve ever done on the PC could be ex-filtrated in minutes for the criminals to review at their leisure.

https://doublepulsar.com/recall-stealing-everything-youve-ever-typed-or-viewed-on-your-own-windows-pc-is-now-possible-da3e12e9465e

#Copilot #Recall #Cybersecurity

Stealing everything you’ve ever typed or viewed on your own Windows PC is now possible with two lines of code — inside the Copilot+ Recall disaster.

I wrote a piece recently about Copilot+ Recall, a new Microsoft Windows 11 feature which — in the words of Microsoft CEO Satya Nadella- takes “screenshots” of your PC constantly, and makes it into an…

DoublePulsar

Yesterday's Linux DFIR command line trivia asked you to move a directory full of files named "<something>.YYYYMMDD[.gz]" into hierarchy of directories like "<newdir>/YYYY/MM/<something>.YYYYMMDD[.gz]". @apgarcia checked in with a nice solution:

for f in *; do
YMD=$(echo $f | cut -f2 -d.)
YEAR=${YMD:0:4}
MONTH=${YMD:4:2}
mkdir -p /my/new/dir/${YEAR}/${MONTH}
mv $f /my/new/dir/${YEAR}/${MONTH}
done

Great use of the "${var:offset:length}" expansion to chop up the date elements. "mkdir -p" lets you create arbitrarily deep directories with a single command.

All the solutions I received focused on parsing the file names. But what if we did something more like this:

for y in {2020..2023}; do
for m in {01..12}; do
mkdir -p /my/new/dir/$y/$m
mv *.$y$m* /my/new/dir/$y/$m
done
done

You can pick the parameters for the outer loop based on the set of files that you have. If possibly ending up with some empty directories bothers you, you can always "find /my/new/dir -type d -empty -delete" afterwards to clean things up.

It's easy to get tunnel-visioned onto a particular solution. But maybe the first way the solution suggests itself is not always the best way.

#Linux #DFIR #CommandLine #Trivia

Mysterious Leak Of Booking.com Data Being Used For Scams https://packetstormsecurity.com/news/view/34299 #news
Mysterious leak of Booking.com reservation data is being used to scam customers

Somehow, scammers keep accessing customer reservation details, other private data.

Ars Technica

Putting this back out there.

For those who don't know: @ladymerlin needs serious medical treatment.

Her disability claim and appeal were rejected, so she is on the hook for medical and living expenses. The operation is on the 25th.

https://gofund.me/cfb6550e

Alright folks, for those that would like to follow @haveibeenpwned on Mastodon, I've now set up an *official* account.

There are a bunch of fake ones around the place on other Mastodon instances, the legit one only follows my account and has a *verified* link through to the website.

Also, shoutout to me for temporarily breaking the website by linking through to the full Mastodon URL without properly escaping the @ symbol in the Razor syntax. It's been a big day 😅

https://whatsmyname.app/

A new update to the online version of WhatsMyName.

Now you can search for accounts in 500+ social networks and websites for a whole list of nicknames at once!

Creators twitter.com/osintcombine twitter.com/WebBreacher twitter.com/C3n7ral051nt4g3ncy

WhatsMyName Web

“Brave Software developers have created a new privacy-centric database query system called FrodoPIR that retrieves data from servers without disclosing the content of user queries.”

Great to see innovation in this space.

https://www.bleepingcomputer.com/news/security/brave-launches-frodopir-a-privacy-focused-database-query-system/

#dataprivacy #privacy #security #data #databases #queryoptimization

Brave launches FrodoPIR, a privacy-focused database query system

Brave Software developers have created a new privacy-centric database query system called FrodoPIR that retrieves data from servers without disclosing the content of user queries.

BleepingComputer
That's actually a great idea - Using your cat to put underground cable
Count yourself in during EFF's Year-End Challenge and help unlock bonus grants! As the number of supporters grows, EFF can unlock a series of challenge grants that increase after each milestone. No matter the size of your donation, every supporter counts. https://www.eff.org/deeplinks/2022/12/2022-year-end-challenge
Every Supporter Counts in EFF's Year-End Challenge

Do some good in the world and get an extra boost. Donate to support internet privacy & free speech by December 31, and you’ll help EFF unlock seven Year-End Challenge grants.

Electronic Frontier Foundation