Lmst

@screaminggoat @buherator you saw current models are affected? Or just that the old one never got fixed.

@screaminggoat not my find. I just saw the expo I’ll being used.

Johannes Ullrich (maybe not a bot) boosted:

OpenAI Scans for Honeypots. Artificially Malicious? Actions gone wild? @openai https://isc.sans.edu/diary/31196

Johannes Ullrich (maybe not a bot) boosted:

The world is 16+ hours into what looks like the biggest IT outage in history, triggered by a defective update for Crowdstrike endpoint security software for Windows machines.

https://www.helpnetsecurity.com/2024/07/19/crowdstrike-it-outage-update/

#Cybersecurity #Crowdstrike #outage #EDR

@jullrich @malwarejake @brianhonan

@heatsink will do next time. Thanks!

Johannes Ullrich (maybe not a bot) boosted:

This happened exactly 40 years ago.

via: https://www.talisman.org/

E-Mail screenshot: 19 June 1984
From: rws@mit-bold (Robert W. Scheifler)
To: window@athena
Subject: window system X
Date: 19 Jun 1984 0907-EDT (Tuesday)
I've spent the last couple weeks writing a window system for the VS100. I stole a fair amount of code from W, surrounded it with an asynchronous rather than a synchronous interface, and called it X. Overall performance appears to be about twice that of w. The code seems fairly solid at this point, although there are still some deficiencies to be fixed up.
We at LCS have stopped using W, and are now actively building applications on X. Anyone else using W should seriously consider switching. This is not the ultimate window system, but I believe it is a good starting point for experimentation. Right at the moment there is a CLU (and an Argus) interface to X; a C interface is in the works. The three existing applications are a text editor (TED), an Argus I/0 interface, and a primitive window manager. There is no documentation yet; anyone crazy enough to volunteer? I may get around to it eventually.
Anyone interested in seeing a demo can drop by
NE43-531, although you may want to call 3-1945 first. Anyone who wants the code can come by with a tape. Anyone interested in hacking deficiencies, feel free to get in touch.

Due to the June 19th holiday and travel, there will be no podcast for Wednesday and Thursday.

Good weekend with some good dog walks. Need more of it.

The mini PCs for #SANSFIRE arrived. We will give them away during our honeypot workshop and possibly for other raffles.

OS Command Injection. It doesn't get much more severe than that regarding web application/API vulnerabilities. Still, these issues keep coming up in security devices. https://isc.sans.edu/j/osinjection

Interested in joining me at #SANSFIRE? We have some great special events planned. Honeypot Fest, ISC Keynote, great classes, and more. I will be teaching SEC522.. see https://www.youtube.com/watch?v=S81x1I6Ti5c

@Marco Interesting that Europe does it better. I think they also do not allow luggage to be stored under the exit row seat.

I have traveled quite a bit over the years (less recently). Usually, I try to get an exit seat. In probably 100+ flights with different airlines, I remember only ONE instance where a flight attendant did a thorough exit row briefing. She explained how to open the door, what to watch out for, to wait for signals from the cabin crew before opening, and a couple of other things.

Usually, they do the “verbal yes” to acknowledge that you are in an exit row.

Yesterday, the flight attendant didn’t even do that and only made some jokes about the Delta credit card… no wonder most people look at their phones instead of the emergency briefing. :(

@jesterchen will try to cover this in the next episode. thanks for the pointer.

Johannes Ullrich (maybe not a bot) boosted:

My heart goes out to xz. A single maintainer, who was clearly in a rough place with mental health, screaming out to the world for some help and additional contributions, and somebody shows up wanting to help. Could you imagine how happy that maintainer was? They were no longer alone.

And it turns out the only reason somebody wanted to help them was nefarious. I can’t imagine how they feel right now as everyone is blaming them. I hope they’re ok.

@railmeat @adamshostack Agree. A win for open source and thanks to Andres for finding, and immediately reporting the issue.

A quick note about the xz-utils backdoor:
1 - luckily, no mainstream distros are affected.
2 - most run xz-utils 5.2/5.4. 5.6 is vulnerable
3 - quick check: `xz -V`
4 - This makes you wonder what else is happening. Thanks to people who paid attention
https://www.cisa.gov/news-events/alerts/2024/03/29/reported-supply-chain-compromise-affecting-xz-utils-data-compression-library-cve-2024-3094

@kohan @jullrich yes. Typo. But 404 URLs do help to get them to try multiple ways to connect and use real browsers / drop VPNs

Client Info