modrobert @modrobert@qoto.org

Today's threads (a thread)

Inside: The Sacklers woulda gotten away with it if it wasn't for those darned meddling feds; and more!

Archived at: https://pluralistic.net/2023/08/11/justice-delayed/

#Pluralistic

1/

"Latest updates on Flat_z’s PS5 Exploit chain" https://wololo.net/2023/07/29/latest-updates-on-flat_zs-ps5-exploit/

I’m just catching up on Web Integrity but it looks really concerning. Basically adds DRM to your browser so only approved browsers can access certain sites. https://twitter.com/nearcyan/status/1684242509847822336?s=46&t=sPOl9bVNdjREujwiUeFx1g

John Romero plays MYHOUSE.WAD: https://www.youtube.com/watch?v=gIl_TqFJNO8
A perfect circle :)
#Doom #Retrogaming #JohnRomero

Someone has compromised a bunch of Minecraft plugin developer accounts, and has injected info-stealing malware into a number of widely used plugins for the game. Apparently, this is widespread enough that some involved in the investigation are urging people to just stay off Minecraft for now. Also, it sounds like they need some help.

More info:

https://prismlauncher.org/news/cf-compromised-alert/

More structured breakdown:

https://hackmd.io/B46EYzKXSfWSF35DeCZz9A

h/t @MrNuclearMonster

“Clickless” iOS exploits infect Kaspersky iPhones with never-before-seen malware

"Operation Triangulation" stole mic recordings, photos, geolocation, and more.

https://arstechnica.com/information-technology/2023/06/clickless-ios-exploits-infect-kaspersky-iphones-with-never-before-seen-malware/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social

Reversing Python Pickles with r2pickledec https://blog.doyensec.com/2023/06/01/r2pickledec.html

Good morning. You look like you could use a little therapy today.

(P.s. If you get a good one, post it below.)

https://theoatmeal.com/pages/horrible_therapist?q=q_disneyland&a=a_strapon&t=t_police_helicopters

"How I created the perfect NES sound chip" https://youtu.be/8RrQrATnXXY #chiptune #squarewave

Lol at this privilege escalation in Google #Chrome https://bugs.chromium.org/p/chromium/issues/attachmentText?aid=586678

New side channel attacks on SoCs. Yikes. https://arxiv.org/pdf/2305.12784.pdf

The EU Council is continuing to debate a law that would require communication providers to scan all communications, potentially including end-to-end encrypted conversations. And they are now debating including audio conversations as well.