Mastodawn

Simon Springall (he/him). #FBPE Dec 18, 2024

Simon Springall (he/him). #FBPE Dec 5, 2024

Looks interesting.. or scary https://www.tomshardware.com/tech-industry/cyber-security/o-mg-usb-c-cable-ct-scan-reveals-sinister-active-electronics-contains-a-hidden-antenna-and-another-die-embedded-in-the-microcontroller

USB-C cable CT scan reveals sinister active electronics — O.MG pen testing cable contains a hidden antenna and another die embedded in the microcontroller

A small package with a huge malicious potential.

Tom's Hardware

Simon Springall (he/him). #FBPE Nov 16, 2024

@ap.brid.gy @bobegan.bsky.social

Simon Springall (he/him). #FBPE Nov 16, 2024

@app.brid.gy @oleander0.bsky.social

Show thread

Simon Springall (he/him). #FBPE Nov 16, 2024

@shellsharks I think so https://bsky.app/profile/simonspringall.infosec.exchange.ap.brid.gy

Simon Springall (he/him). #FBPE (@simonspringall.infosec.exchange.ap.brid.gy)

American, Brit, European. In Ireland. 🇺🇲🇬🇧🇮🇪🇪🇺🌍 Software Engineer, Cloud Solutions Architect, Cybersecurity. Still sore about Brexit. #wokerati [bridged from https://infosec.exchange/@simonspringall on the fediverse by https://fed.brid.gy/ ]

Bluesky Social

Simon Springall (he/him). #FBPE Nov 16, 2024

shellsharks Nov 16, 2024

Hey #infosec folks, if you've bridged your account to #Bluesky using BridgyFed (https://fed.brid.gy/) let me know so I can add that bridged account to a starter pack there. 👍

Would be great to highlight the infosec people who are here, over there.

Boost around so I can nab everyone! 🚀

Bridgy Fed

Bridgy Fed is a bridge between decentralized social networks like the fediverse, Bluesky, and web sites and blogs.

Simon Springall (he/him). #FBPE Nov 16, 2024

Ray [REDACTED]Nov 16, 2024

This is a gentle but important video reminder for anyone who has cheered on the videos of my teenage son, especially those of you who got out of bed at 3AM to do so.

(btw, the video contains a little surprise at the end!)

Simon Springall (he/him). #FBPE Nov 16, 2024

@bsky.brid.gy @noelzia.bsky.social

Simon Springall (he/him). #FBPE Nov 16, 2024

@bsky.brid.gy https://bsky.app/profile/cgallia.bsky.social

Charles Galllia (@cgallia.bsky.social)

Bluesky Social

Simon Springall (he/him). #FBPE Nov 29, 2023

Jake Williams Nov 26, 2023

This should be getting a lot more attention. NXP chips are in a lot of products. It's likely the TA knows of specific flaws reported to NXP that can be leveraged to exploit devices the chips are embedded in, and that's assuming they didn't implement backdoors themselves. Over 2.5 years (at least), that's not unrealistic.
https://www.tomshardware.com/news/chinese-hackers-steal-chip-designs-from-major-dutch-semiconductor-company

Chinese hackers steal chip designs from major Dutch semiconductor company — perps lurked for over two years to steal NXP's chipmaking IP: Report

The full extent of the security breach is unknown.

Tom's Hardware