Device vendor placed deliberate backdoor in device, and doesn't provide updates anymore. Assuming no hacky stuff, if you want a not backdoored device you throw the one you bought in trash and buy a new one.

Can you sue in EU in 2024?

https://isc.sans.edu/diary/rss/31442

@screaminggoat @jullrich I just tested this, seems immortal (no fw upgrades since 2012, latest affected) in WR841N.

SANS ISC: Ancient TP-Link Backdoor Discovered by Attackers
@jullrich did you want to report this vulnerability to MITRE (or be credited)? Using CWE-912: Hidden Functionality and sekurak's entry as vulnerability details, this should be a quick CVE submission.

#tplink #backdoor #vulnerability #cve

It’s finally landed! You can now watch “Listen to the whispers: web timing attacks that actually work” on YouTube: https://youtube.com/watch?v=zOPjz-sPyQM

Could someone from @Rapid7Official shut this spammer up?

RE: https://infosec.place/objects/43b8b113-fa3b-4fcf-b893-e61261304e7e

Evasive ZIP Concatenation: Trojan Targets Windows Users

https://perception-point.io/blog/evasive-concatenated-zip-trojan-targets-windows-users/

Parser differentials FTW :)

[RSS] Cute trick to mark parts of a C structure read-only

https://dustri.org/b/cute-trick-to-mark-parts-of-a-c-structure-read-only.html

[RSS] Beyond good ol' Run key, Part 144

https://www.hexacorn.com/blog/2024/11/15/beyond-good-ol-run-key-part-144/

@shellsharks I think I did but couldn't see my posts syncing yet

Hey #infosec folks, if you've bridged your account to #Bluesky using BridgyFed (https://fed.brid.gy/) let me know so I can add that bridged account to a starter pack there. 👍

Would be great to highlight the infosec people who are here, over there.

Boost around so I can nab everyone! 🚀

- Why was ollydbg discontinued?
- Not enough ollyfans

@TarkabarkaHolgy I wasn't prepared for this!
https://www.amazon.com/gp/product/B08DHSNXFK

@TarkabarkaHolgy I googled the series title and I'm unable to process

https://www.amazon.com/dp/B0BGYRPZBG

NEW: WhatsApp forced a judge to release previously non-public court documents, which include a ton of details on how NSO's spyware works.

The documents show how NSO targeted WhatsApp, the number of customers the company had to cut off because of abuse, and more.

Here are the biggest revelations.

https://techcrunch.com/2024/11/15/nso-group-admits-cutting-off-10-customers-because-they-abused-its-pegasus-spyware-say-unsealed-court-documents/

After several hours my polite little #bsky xposter is still rate limited... someone plz tell them they need a user base before starting #enshittification!

Slides for my @ekoparty talk "Advanced Fuzzing
With #LibAFL"

• >https://docs.google.com/presentation/d/1ILXdsBx6JJbsf3uq-_hSeYux-a0DRRPxebOY65EDE5o/edit?usp=sharing

A bit of history.

On September 5, 1977,
the Voyager 1 hardware
was yeeted towards interstellar space.

Four years later, in 1981, the backup S-band portion of the communications hardware was shut off.

In October of 2024, after a partial degradation of the primary X-band communications interface, the backup S-band communications automatically came back online due to the fault, after a period of 43 years offline.

THAT is appliance-grade engineering.