Unsupervised Learning: No. 228
MEMBER EDITION | EP. 228 | May 11, 2020
THIS WEEK’S TOPICS: Thunderbolt Attack, Celebrity Ransomware, ClearView Government, Blackhat DEFCON Virtual, War Thunder, 5G Bio Attacks, PC Game Cheating, Zoom Keybase, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…
SECURITY NEWS
There's a new physical (evil maid) attack against Windows and Linux systems that lets an attacker bypass the lock screen for a system in under 5 minutes. The research will be shown at this year's BlackHat conference, which—along with DEFCON—is now virtual. More
A major ransomware attack has been launched against a private legal firm that does work for top TV and movie celebrities, including people like DeNiro, The Weekend, and David Letterman. They're threatening to release over a terabyte of dirt on the clients unless the law firm pays the ransom. More
Clearview AI says it's only going to sell its services to government-related customers from now on. No more private sales. Interesting, but I wonder if that'll be enough to stop the deluge of lawsuits that are already inbound. More
Blackhat and DEFCON have gone virtual this year. Don't go to Vegas. It's really canceled this time. More
Officials in Seoul have re-closed their bars indefinitely because somewhere between 27 and 40 new cases of COVID-19 were associated with people gathering there. More
The US Army is using an MMO called War Thunder to train cavalry troops during the quarantine. The game allows soldiers to get familiar with multiple roles in a way that's difficult and expensive to do in real life. More
A cybersecurity company in Israel says a group of hackers called Naikon, which is thought to be associated with the Chinese military, has released a new tool called Aria-body. They say the tool uses multiple techniques to make it easy to gain control over systems and remain undetected. More
A 5G conspiracy theorist spat on a broadband engineer in London, making him very sick shortly after. Meanwhile, 77 5G towers have been attacked throughout the UK by similar ilk. More
PC games are struggling with a rise in cheating related to the pandemic and a massive surge in players. My buddy Jason and I created the OWASP Game Security Framework to start to address this kind of stuff in a structured way, but it's currently on hold while he works at a gaming company. More
Zoom has purchased Keybase, which has confused a lot of people in the industry. Including me. The Grugq thinks it's a signal that they're not going to let someone like China gain access to their data. I've not thought a lot about it, but that seems smart. More
Advisories:
vBulletin has a critical vulnerability. Patch immediately if you have it. More
Cisco has patched multiple high severity vulns in its security products. More
There's a one-MMS ownage attack against Samsung phones. More
SAP has vulns in its cloud products. More
TECHNOLOGY NEWS
Tesla just reopened its Fremont factory, against the orders of the county. And this is after Musk said he's leaving California for Texas or Florida. These types of outbursts seem to be a common downside of having that much creativity and eccentricity. More
Omilia rased $20 million to use AI for customer support. Don't worry, though, all those millions of customer service people can probably just pivot to coding. More
Amazon has just released Kendra, which is kind of like their take on Splunk, only powered on the backend by AI/NLP. So you're supposed to be able to just type what you're looking for and have it magically come back with the answer. All I can say is that I'm happy that companies like Splunk and Amazon and Google are all competing on this. More
Someone created a modular synth, called Synthspace, in virtual reality. More
Over 44 million US adults are supposedly borrowing someone else's streaming account. More
HUMAN NEWS
Finland is abandoning subject-based learning, and is moving to Phenomenal Education. where real-world phenomenon are the foundation of learning. The idea is to have the class explore a real-world situation that crosses multiple disciplines. More
ER visits are down 40-50%, and doctors are concerned. A lot of those are strokes and heart attacks, and the concern is that they're happening and people are just dying at home. More
The New York Times did a great story on job loss in April, which ended up being 20 million jobs. But the highlight was the data visualization they used for the piece. It's a chart showing losses and gains over time, with this massive red line that goes downards on the right side of the page. It looks like a margin, but it's the actual to-scale indicator of how much we've lost relative to previously. More
NASA is making a serious attempt to land a human on the moon by the end of 2024. More
IDEAS, TRENDS, & ANALYSIS
A Three-Tiered Approach to Securing Your Home Network More
Websites are starting to all look the same. More
The VR Winter, by Benedict Evans More
Peloton continues to absolutely crush it. Revenue is up 66% over last quarter. I think it hits all the notes of exercise, social interaction, and status symbol. More
I Was Tricked Into Thinking I Had Grit More
UPDATES
I just saw this article about The Last Unicorn, which massively affected me as a kid. And I just watched The Never Ending Story as well, which I also hadn't done since childhood. The Never Ending Story was particularly powerful for me, and I think it was probably the whole bridge between fantasy and reality that got me. I was devastated when Atreyu lost his horse. And the princess altered my universe long before I knew girls were a thing.
I'll be speaking at DEFCON this year in the Red Team Village. The topic will be automating recon using Linux.
DISCOVERY
A Photographer Who Tinkers With Time More
Encouraging a Culture of Written Communication. More
This guy created a blog that's powered by Google Docs. More
Now is the perfect time to memorize a poem. More
I haven't started listening yet, but I just subscribed to a podcast called War on the Rocks. It's about security, intelligence, national policy, and that sort of thing. More
This guy documents his setup of using Mutt and Vim for email. More
Celebrities are reading Harry Potter for the public. More
Vim as a Markdown editor. More
Using Nmap as a lightweight vuln scanner. More
SSHPrank — An SSH scanner and banner grabber based on Python and Masscan. More
Words Scraper — A Selenium-based web scraper to generate password lists. More
Gf-Patterns — A bunch of content specific patterns for TomNomNom's gf utility, e.g., ssrf,RCE,Lfi,sqli,ssti,idor,url redirection,debug_logic. More
RECOMMENDATIONS
As many of you know, I normally watch very little TV. But I've used the lockdown as an excuse to binge basically anything of significant reputation. In my travels so far I have three recommendations, in this order:
After Life
DEVS
Upload
The less you know the better. Just trust me. If you like this newsletter, you'll probably love these.
APHORISMS
"Success consists of going from failure to failure without loss of enthusiasm."
~ Winston Churchill