Newsletter: Issue 86 – State power sponsored by Coinbase

Coinbase’s sponsorship of Trump’s military parade angered some in the crypto world, who described the move as “deeply disturbing” and “an insult to everything our industry stands for”. But this is only the latest example of crypto companies aligning with state power.

Earlier this month, the cryptocurrency firm Ripple made a $9.4 million contribution to the San Francisco Police Department to fund a surveillance center outfitted with drones. “We’re going to be covering the entire city with drones,” enthused a SFPD Captain about the donation.

https://www.citationneeded.news/issue-86/

#crypto #cryptocurrency #USpolitics #USpol

[RSS] Sleepless Strings - Template Injection in Insomnia

https://tantosec.com/blog/2025/06/insomnia-api-client-template-injection/

[RSS] Exploiting the Tesla Wall connector from its charge port connector

https://www.synacktiv.com/en/publications/exploiting-the-tesla-wall-connector-from-its-charge-port-connector

👷 After 15 years of entrepreneurship and a few months of sabbatical I'm looking for a regular old job.

My ideal role would be primarily technical, aimed to dissect software to uncover vulnerabilities. Beyond bug mining I'd love to learn to mine better and make new kinds of pickaxes.

My public works and contact info are on my homepage:

https://scrapco.de

Get in touch if you want to know more!

Boosts are appreciated! #FediHire

The latest #IBMi LPE bulletins are now correctly attributed to @silentsignal :

https://www.ibm.com/support/pages/node/7236663 - CVE-2025-33108

https://www.ibm.com/support/pages/node/7237040 - CVE-2025-33122

ChatCVE

If anyone has any adb based root exploits for Android 8.1, that would be nice. Link below as an example of something i'm looking for.

https://github.com/j0nk0/GetRoot-Android-DirtyCow

no .exe files in the releases section though /s

Snatched from LinkedIn...it was a message I needed to hear today.

https://www.linkedin.com/posts/alexpyatkovsky_getting-a-job-these-daysespecially-if-you-activity-7340526541010780160-q60s?utm_source=share&utm_medium=member_desktop&rcm=ACoAAANn8noBhoatCaVRJgqSQDhHEuCUOhVPms4

Hey Andy, you should build that AI workforce _before_ you alienate the rest of your real worksforce. https://www.aboutamazon.com/news/company-news/amazon-ceo-andy-jassy-on-generative-ai

Todays Advice from Archive Andy

Check your DVD-Rs**

Don’t leave em laying about in random places

This is the only copy of a Wedding Video. Or, it was the only copy. Its got severe Disc Rot. Might be hard to see but it’s gone dark & is now unplayable

*also +R, -RW, +RW
Get the data off quick

[RSS] Unexpected security footguns in Go's parsers

https://blog.trailofbits.com/2025/06/17/unexpected-security-footguns-in-gos-parsers/

New report for the month of May: https://rust-gcc.github.io/2025/06/04/2025-05-monthly-report.html

We are making good progress on core and plan on begin testing the Rust code in the kernel at the end of the summer!

Hungarian urbexer sneaks into an operating power plant and orders pizza o.O #OT #urbex

https://www.youtube.com/watch?v=_YtzaU9d-1M

Looks like today's theme is

lol, ok!

source:

https://www.youtube.com/watch?v=bzGuq97oROc

[RSS] NHook - Minimal Inline Hooking Library for Windows x64

https://github.com/woldann/NHook

[RSS] Introduction to Kmemdump

https://www.linaro.org/blog/introduction-to-kmemdump/

"A smarter way to Capture Crash Data on Embedded Linux Devices"

Exploring fault injection on ESP32 V3!

Inspired by Delvaux work, we tested voltage #glitching as an attack vector. With advanced triggers & GDB, we achieved a ~1.5% success rate. #Hardware #FaultInjection is becoming more practical!

https://security.humanativaspa.it/fault-injection-follow-the-white-rabbit/

Oh WhatsApp, you changed. Meta got the best out of you.

"No one wakes up excited to see more advertising, no one goes to sleep thinking about the ads they'll see tomorrow.”

"Advertising isn't just the disruption of aesthetics, the insults to your intelligence and the interruption of your train of thought.“

~ WhatsApp Blog, June 18th 2012
https://blog.whatsapp.com/why-we-don-t-sell-ads

A quick-and-dirty late night blog post on discovering an nday variant in Zyxel NWA50AX Pro devices

https://frycos.github.io/vulns4free/2025/06/17/zyxel-nday-variant.html