HNHacker News
TopNewBestAskShowJobs

campuscodi

5,014 karma · joined May 7, 2012

Newsletter and podcasts at RiskyBiz.

Previous bylines as a cybersecurity reporter for The Record, ZDNet, Bleeping Computer, and Softpedia.

_____________________

Newsletter: https://news.risky.biz

Bluesky: https://bsky.app/profile/campuscodi.risky.biz

Mastodon: https://mastodon.social/@campuscodi

Twitter: https://twitter.com/campuscodi

_____________________

submissionscomments
campuscodi··on Western men are going abroad to find traditional wives
This entire manosphere thing is so silly
campuscodi··on Type designers have created a free font that "poisons" AI
Doesn't look too bad either
campuscodi··on White House Unveils President Trump's Cyber Strategy for America
My thoughts exactly. Half of these items seem to directly contradict what this administration is doing behind the scenes, or publicly for that matter.
campuscodi··on US tech firms pledge at White House to bear costs of energy for datacenters
I've read so many of these pledges before.... tl'dr: no, they won't
campuscodi··on Whistleblower details how DOGE may have taken sensitive NLRB data
DOGE staff are just behaving like a foreign cyber-espionage group at this point
campuscodi··on Hezbollah pager explosions kill several people in Lebanon
Looks like a hardware supply chain attack: https://goachronicle.com/hezbollah-members-pagers-exploded-i...

>>GoaChronicle through its intelligence network has learned that Israeli intelligence successfully intercepted a shipment of pager batteries that had been ordered from B&H Photo. The order was placed from Lebanon. Acting on a confirmed tip, the intelligence agency seized the shipment and covertly modified the batteries. Small, undetectable explosives known as Kiska 3 were inserted into the battery casings and connected to the battery wires via a discreet chip. The pager model was Rugged Pager AR924 IP67. The operation code word was ‘Below the Belt’.

campuscodi··on NIST Draft Guidance Inherently Hostile to Open-Source AI Models
That's why their draft documents, so you can make public comments. If the drafts are getting hostile, means most feedback has pushed them that way.
campuscodi··on Iran hunts regime traitors with ads and fake recruiting sites
Editorialized title because the original one was too generic.

Also related to this 2022 article: https://www.thedailybeast.com/shady-network-of-fake-mossad-j...

Via: https://x.com/craiu/status/1829067371648061902

campuscodi··on Tens of thousands protest in Germany against the rise of the far right
Why are posts here about the far-right and nazis getting immediately reported, "flagged," and removed?
campuscodi··on Adobe's buy of Figma is 'likely' bad for developers, rules UK regulator
It was an easy decision. You can't allow one single company to own all the major web dev tools. I'm surprised they actually decided this, since the EU has a history of turning a blind eye to some of these deals.
campuscodi··on Sony just spilled confidential Playstation information because of a Sharpie
Warzone was free to play and actually very good at that time. I can see why.
campuscodi··on Russia says U.S. accessed thousands of Apple phones in spy plot
Non-paywall: https://archive.ph/BrXyi

Or read the FSB press release: http://www.fsb.ru/fsb/press/message/single.htm%21id%3D104397...

campuscodi··on Australians scour desert for dangerous radioactive capsule smaller than a penny
A dingo will eat it, transform into Fenrir, and that's how Ragnarok starts
campuscodi··on Dutch forensic lab says it has decoded Tesla's driving data
lol... this is not a Reuters "exclusive"

We had this on The Record half a day before them: https://therecord.media/dutch-forensic-lab-decrypts-teslas-d...

modern-day journalism, smh

campuscodi··on Academics discover hidden layer in China’s Great Firewall
Not that much, surprisingly, especially if you control your IDX points like China.
campuscodi··on REvil ransomware executes supply chain attack via malicious Kaseya update
My article isn't meant to serve as an IR report. There are links in it for incident responders looking for IOCs, but they are not the intended audience.
campuscodi··on Google says Rowhammer attacks are gaining range as RAM is getting denser
Yes, Rowhammer can bypass ECC. Forgot to include this in the article, mainly because there's so much Rowhammer research.

See here: https://www.vusec.net/projects/eccploit/

campuscodi··on Google says Rowhammer attacks are gaining range as RAM is getting denser
I'm the author of the article.

With all due respect, but I will have to push back on your categorization as 'slightly misleading' here. Your explanation effectively explains the headline and is also what Google researchers said. How is the headline misleading?

campuscodi··on EU extends sanctions against Chinese, Russian, N.Korean hackers for another year
Not that much. Sanctions are used as a political tool and to signal that certain lines have been crossed.
campuscodi··on MobiKwik investigating data breach after 100M user records found online
Please tell me you don't believe that :))
campuscodi··on Hackers hide web skimmer inside a website's CSS
Fixed. Thanks.
campuscodi··on EU Draft Council Declaration Against Encryption [pdf]
Just a draft for now. Answer expected next week.
campuscodi··on Twitter Could End the Office as We Know It
Will it now... cause I remember Automattic and GitHub doing this for years now
campuscodi··on Can QUIC match TCP’s computational efficiency?
Shouldn't we be waiting for QUIC to pass IETF before we go diving into performance benchmarks?
campuscodi··on RIP Syd Mead (Blade Runner, TRON Designer)
Confirmed here: https://www.facebook.com/groups/syd.mead/permalink/101580502...
campuscodi··on Two malicious Python libraries caught stealing SSH and GPG keys
To search your own projects for the malicious libraries:

pip3 freeze | grep -i jeIlyfish

pip3 freeze | grep -i python3-dateutil

campuscodi··on Google has handed information related to my account to the DoJ
A PACER search didn't return anything for the case number referenced in the email.

Although, the user did post an update later on: https://twitter.com/SomersetBean/status/1201913860745236481

campuscodi··on Amtrak Could Turn a Profit for the First Time
I'm pretty sure they'll find a way to lose more money by next Saturday.
campuscodi··on Encrypted web traffic now exceeds 90%
No, it didn't. NetMarketShare has a very limited view into these things. Actual data from browser makers

Firefox - 80% https://letsencrypt.org/stats/

Google -- 88% on Android; 84% on Windows; 91% on Mac; 73% on Linux https://transparencyreport.google.com/https/overview?hl=en

campuscodi··on Vulnerabilities exploited in VPN products used worldwide
The APT referenced in the NCSC alert is APT5: https://www.zdnet.com/article/a-chinese-apt-is-now-going-aft...
Page 1 of 6Next →