[RSS] Attacking the Samsung Galaxy A* Boot Chain

http://blog.quarkslab.com/attacking-the-samsung-galaxy-a-boot-chain.html

[RSS] Linux kernel instrumentation from Qemu and Gdb

http://blog.quarkslab.com/linux-kernel-instrumentation-from-qemu-and-gdb.html

[RSS] Evaluating tail call elimination in the face of return address protection, part 1

https://devblogs.microsoft.com/oldnewthing/20241017-00/?p=110380

[RSS] Finding and exploiting CVE-2024-28578 with fuzzing

https://www.mayhem.security/blog/cve-2024-28578-test-third-party-image-libraries-with-mayhem

[RSS] Hackaday Hacked!

https://hackaday.com/2024/10/19/hackaday-hacked/

By default, Kagi Image Search downranks images from websites with a high proportion of AI-generated content.

You can also use the AI images filter to completely exclude websites with AI-generated images from your image search results.

More info: https://help.kagi.com/kagi/features/exclude-ai-images.html

#Kagi #AdFree #Search #AI

Somehow, I don't think that 2024's richest man in the world, who also is an immigrant, would ever think of using his money to create something like this.
https://www.npr.org/2013/08/01/207272849/how-andrew-carnegie-turned-his-fortune-into-a-library-legacy

Currently trying to repair this device. Can you deduct or guess what it is? #NameThatWare

As always, hide your replies behind a CW to not spoil others.

@Viss now I *so* want to play some Red Alert!

Was that non-admin x-user exploit @gossithedog talked about[1] ever released?

https://digitalmarketreports.com/news/25091/microsoft-recall-feature-on-windows-11-not-removable-after-all/

[1] https://infosec.place/notice/AieooVB1w6sCv45MFE

@mttaggart @AAKL @jerry Don't get me wrong, I really enjoy the convos I have here! But I definitely don't see the expert2expert interactions (usually not involving me :)) that were usual on Twitter. I don't have numbers, and I also rarely go there, but my _impression_ (this is what counts right?) is that such conversations still happen more on the birdsite, and there's also interesting research _only_ posted there.

@AAKL @jerry True, but part of the problem is that somehow much of the infosec discussions still don't seem to happen here. I'm usually astonished by the amount of content I have to x-post from X...

Tired of using outdated languages for #Ghidra scripting or a REPL that you can't even properly paste into? @tmr232 and I wrote a plugin to embed a #Jupyter #Kotlin kernel for a full Notebook environment alongside your GUI.
https://github.com/GhidraJupyter/ghidra-jupyter-kotlin

@jerry @AAKL I created my account on Akkoma because it had a more sensible approach to search back in the day and I also have an acc on infosec.exchange (Mastodon) just for search. Last time I checked none of them worked as I expect them to work (like I'm unable to find stuff by searching for exact phrases). I know people who don't use Fedi because of this.

It also seems to me that while I follow almost exclusively infosec people, much of the content I see is about unrelated and mostly depressing topics like war, climate change, etc. I get these are important topics, but I guess the last app anyone wants on their phone is a Bad News Machine.

@joeycastillo So glad you are working on this, having some sample code at hand for the accelerometer would be extremely useful!

@infosecdj That's what I feared :( thanks for the feedback!

Internet Archive breached again through exposed access tokens https://www.bleepingcomputer.com/news/security/internet-archive-breached-again-through-exposed-access-tokens/?utm_source=dlvr.it&utm_medium=mastodon ( :-{ı▓

I stand with @internetarchive 🏛️