modrobert @modrobert@social.cleverlibre.org

Someone has compromised a bunch of Minecraft plugin developer accounts, and has injected info-stealing malware into a number of widely used plugins for the game. Apparently, this is widespread enough that some involved in the investigation are urging people to just stay off Minecraft for now. Also, it sounds like they need some help.

More info:

https://prismlauncher.org/news/cf-compromised-alert/

More structured breakdown:

https://hackmd.io/B46EYzKXSfWSF35DeCZz9A

h/t @MrNuclearMonster

“Clickless” iOS exploits infect Kaspersky iPhones with never-before-seen malware

"Operation Triangulation" stole mic recordings, photos, geolocation, and more.

https://arstechnica.com/information-technology/2023/06/clickless-ios-exploits-infect-kaspersky-iphones-with-never-before-seen-malware/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Reversing Python Pickles with r2pickledec https://blog.doyensec.com/2023/06/01/r2pickledec.html

Good morning. You look like you could use a little therapy today.

(P.s. If you get a good one, post it below.)

https://theoatmeal.com/pages/horrible_therapist?q=q_disneyland&a=a_strapon&t=t_police_helicopters

"How I created the perfect NES sound chip" https://youtu.be/8RrQrATnXXY #chiptune #squarewave

Lol at this privilege escalation in Google #Chrome https://bugs.chromium.org/p/chromium/issues/attachmentText?aid=586678

New side channel attacks on SoCs. Yikes. https://arxiv.org/pdf/2305.12784.pdf

The EU Council is continuing to debate a law that would require communication providers to scan all communications, potentially including end-to-end encrypted conversations. And they are now debating including audio conversations as well.

I don't have much spare time, so I decided to publish the PoC of my project to get shells on a variety of archs/os like openbsd-sparc64, linux-ppc32, ...

https://github.com/trufae/quemoo

It's a PoC, but it works, and it's easy to contribute and extend, i though about rewriting it in another language like V and provide static binaries, but i guess just refactoring the makefile should be enough for 99% of the people.

Feel free to check it out and add more images and qemu oneliners to handle every single arch of your favourite unix flavour!

Initial support for SM5xx 4bit MCUs has been added on git! This is the second 4 bit architecture supported in #radare2 (after intel 4004) and it's the brain behind the nostalgic Game&Watch handheld electronic games, but also shipped in some calculators. TM1000 could be another interesting architecture to support in case anyone is in the retro field. Disassembler code was massaged from MAME and it supports a bunch of sub-models too!

What's worse?