Unsupervised Learning No. 244

News & Analysis

MEMBER EDITION | EP. 244 | August 31, 2020

Russian attempted hack of Tesla, New Zealand SE DDoS, Drone Assassinations, China Unified Social Credit System, Cisco Sabotage, Stolen Gaming Accounts, Technology News, Human News, Ideas Trends & Analysis, Discovery, Recommendations, and the Weekly Aphorism…

SECURITY NEWS

A Russian hacker group tried to pay a Russian-speaking immigrant employee at Tesla $1,000,000 to install malware on the Nevada factory's network. What's interesting to me is that the representative was in-country, and actually met with the employee he was trying to bribe, which is quite spy-tradecraft-like. The attack would have performed data exfiltration leading to a ransomware attack, but the employee went to the FBI who arrested the group's representative at the airport as he tried to leave the country. More

The New Zealand stock exchange was hit twice in two days by DDoS attacks, which made cash market trading unavailable. More

Drug cartels are doing assassinations using drones carrying bombs. More

China is rolling out a new blockchain-based technology to link together its various provisional social credit systems. More

A Cisco ex-employee deleted 465 VMs that powered 16,000 customer Webex accounts, resulting in around $2 million dollars in damage. More

The FBI is warning about online romance scams that are costing nearly $500 million a year. The attacker basically finds lonely people and starts up a fake relationship, and at some point they ask for money. It's a very old scam, but obviously very effective right now due to COVID. More

Stolen gaming accounts for games like Fortnite, Minecraft, and Runescape are part of a $1 billion dollar market. More

Vulnerabilities:

  • Cisco fixed some high severity bugs in its switches and fibre storage products. More

  • Slack fixed a critical RCE vulnerability in its desktop app that was found through a HackerOne bounty. More

  • Three vulnerabilities have been discovered in MicroTik's routers. More

Companies:

  • Congrats to Signal Sciences for getting picked up by Fastly for $775 million. More

TECHNOLOGY NEWS

A team from MIT has successfully used radio signals and deep learning to identify what people are doing in a room without the use of cameras. More

Musk's Neuralink demo was interesting but not a major victory, largely because the subjects were pigs. It turned out to mostly be a recruiting pitch. More

Amazon is delivering nearly two-thirds of its own packages. More

LG is releasing a wearable air purifier. It uses HEPA filters and LED lights to kill bacteria. More

Internet Explorer is finally dead. Officially at least. More

Some Canon cameras can now upload their images straight to Google Photos. More

Companies:

  • Grid is an Iceland-based company that turns spreadsheets into visual narratives. More

  • Snowflake IPO'd, and here's some analysis of the filing. More

  • Salesforce has cut around 1,000 jobs and had a great earnings report that pushed its stock up by 26%. More

  • Okta's stock has doubled since March due to increased remote auth requirements from COVID. More

SOCIETY NEWS

One theory says the reason we feel so bad is that we've exhausted our "surge capacity" due to serial catastrophes. More

Germany's largest trade union is looking to propose 4-day work weeks to help prevent layoffs. More

New Yorkers are fleeing to the suburbs. The story is about New York, but I imagine the data will soon show that many big cities are doing something similar. More

50 new planets were discovered using machine learning. More

China has recently built at least 200 prison and internment camps to hold tens or hundreds of thousands of Muslims. More

IDEAS, TRENDS, & ANALYSIS

Why Understanding Beats Knowledge More

GPT-3 might represent new challenges for law firms. More

Data Scientists Should Be More End-to-End More

Zoom is Now Critical Infrastructure. More

UPDATES

After discussing it with our community in the UL Slack channel, I decided to update our subscription pricing to match a few other creators and make it weighted heavier towards annual subs. So if you're doing monthly, we're moving from $5 a month to $9.99, which is $120/year. But subscribing for a year takes that down by half to $59.99. If you're already on the annual plan your price will go up by $0.83 cents per month, which is hopefully tolerable. : ) Once again, thank you all for being supporters. It means a great deal to me that you find my work valuable.

I was rather affected by the loss of Chadwick Boseman. On Twitter I wrote: "I feel ashamed to be so affected by his loss, given that the way I learned about him is through Black Panther—a comic book movie. But he did such a great job of conveying kindness and strength. It was just beautiful. Fiction matters. He was brilliant. He’ll be missed." More

I've changed the theme for UL from security, tech, and humans....to security, tech, and society. Many have complained that "humans" was a bit ambiguous, so hopefully "society" both implies the human element while making it clear that it's also about how humans interact with each other.

Last week I said that Sullivan—the former CISO at Uber—was arrested for the handling of their breach announcement, but in fact he was just charged, not arrested. Engadget got the story wrong, and I trusted them as a reputable source. This is why we must remain vigilant over our delicate web of trust. Apologies.

DISCOVERY

I just bought NOMAD's new wireless charging mat, the Base Station Pro. The big feature for me was the ability to drop your device anywhere on the mat, as opposed to having to perfectly align it. More

How to Write in Plain English More

A stellar 85-megapixel image of the moon. More

Common mistakes made during interviews. More

Riot released a Game Design curriculum for free. More

Cory Doctorow has released a new book called How to Destroy Surveillance Capitalism, and he's put it out as a blog post as well. More

Meditation as a shield against the attention economy. More

Vuln Cost — An open-source security scanner for VS code. More

URLGrab — A Go-based web spider. More

Parth — Heuristic Vulnerable Parameter Scanner More

RECOMMENDATIONS

The Bellingcat Podcast — A podcast about using Open Source Intelligence to track down nearly impossible clues to solve mysteries. If you're into OSINT, Recon, Intelligence, or anything of the like—you'll love this. More

APHORISMS

“Character is simply a habit long continued.”

~ Plutarch

Thank you for supporting this work.