modrobert @modrobert@social.cleverlibre.org

New CPU side-channel dropped!

https://collidepower.com/

"Latest updates on Flat_z’s PS5 Exploit chain" https://wololo.net/2023/07/29/latest-updates-on-flat_zs-ps5-exploit/

I’m just catching up on Web Integrity but it looks really concerning. Basically adds DRM to your browser so only approved browsers can access certain sites. https://twitter.com/nearcyan/status/1684242509847822336?s=46&t=sPOl9bVNdjREujwiUeFx1g

John Romero plays MYHOUSE.WAD: https://www.youtube.com/watch?v=gIl_TqFJNO8
A perfect circle :)
#Doom #Retrogaming #JohnRomero

Someone has compromised a bunch of Minecraft plugin developer accounts, and has injected info-stealing malware into a number of widely used plugins for the game. Apparently, this is widespread enough that some involved in the investigation are urging people to just stay off Minecraft for now. Also, it sounds like they need some help.

More info:

https://prismlauncher.org/news/cf-compromised-alert/

More structured breakdown:

https://hackmd.io/B46EYzKXSfWSF35DeCZz9A

h/t @MrNuclearMonster

“Clickless” iOS exploits infect Kaspersky iPhones with never-before-seen malware

"Operation Triangulation" stole mic recordings, photos, geolocation, and more.

https://arstechnica.com/information-technology/2023/06/clickless-ios-exploits-infect-kaspersky-iphones-with-never-before-seen-malware/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Reversing Python Pickles with r2pickledec https://blog.doyensec.com/2023/06/01/r2pickledec.html

Good morning. You look like you could use a little therapy today.

(P.s. If you get a good one, post it below.)

https://theoatmeal.com/pages/horrible_therapist?q=q_disneyland&a=a_strapon&t=t_police_helicopters

"How I created the perfect NES sound chip" https://youtu.be/8RrQrATnXXY #chiptune #squarewave

Lol at this privilege escalation in Google #Chrome https://bugs.chromium.org/p/chromium/issues/attachmentText?aid=586678

New side channel attacks on SoCs. Yikes. https://arxiv.org/pdf/2305.12784.pdf

The EU Council is continuing to debate a law that would require communication providers to scan all communications, potentially including end-to-end encrypted conversations. And they are now debating including audio conversations as well.

I don't have much spare time, so I decided to publish the PoC of my project to get shells on a variety of archs/os like openbsd-sparc64, linux-ppc32, ...

https://github.com/trufae/quemoo

It's a PoC, but it works, and it's easy to contribute and extend, i though about rewriting it in another language like V and provide static binaries, but i guess just refactoring the makefile should be enough for 99% of the people.

Feel free to check it out and add more images and qemu oneliners to handle every single arch of your favourite unix flavour!