-
iPhone Triangulation attack abused undocumented hardware feature | iPhones are “secure” except for the magic keys which are left underneath an undocumented doormat
Exploiting the flaw allows an attacker to bypass hardware protection on Apple chips that prevent attackers from obtaining complete control over the device when they gain read and write access to the kernel memory, which was achieved using the separate CVE-2023-32434 flaw. https://www.bleepingcomputer.com/news/security/iphone-triangulation-attack-abused-undocumented-hardware-feature/
-
It’s the winter perineum so I get time to read books because of extra toddler help; this year I’m reading several books on “the future of the internet” dating from 1998-2008, and doing so reminds me of USENET…
…as there used to be a joke about USENET where topical groups were disparaged: sci.physics: physics as understood by computer science majors soc.politics: politics as understood by computer science majors Etc; then, as now, this was not a fair characterisation but it had some truth. Equally now, these books I’m reading can and should be…
-
Thousands of private camera footages from bedrooms hacked, sold online
“Let’s put an online webcam into our bedroom, what’s the worst that could happen?” Untold hours of private camera footage from bedrooms, changing rooms, toilets and massage parlors in Vietnam have been hacked and put on sale online. https://e.vnexpress.net/news/crime/thousands-of-private-camera-footages-from-bedrooms-hacked-sold-online-4688865.html
-
Hacking my “smart” toothbrush | …absolutely fascinating breakdown of DRM coming to electric toothbrushes
Also, don’t buy Philips Sonicare electric toothbrushes: https://kuenzi.dev/toothbrush/
-
How to amuse your small geeks over Christmas | Matt Blaze: The Cryptography of Orphan Annie and Captain Midnight
The Orphan Annie and Captain Midnight decoders were based on a combination of two basic cryptographic techniques – the Caesar cipher and the fully permuted monoalphabetic substitution cipher. https://www.mattblaze.org/blog/badges/
-
The discreet charm of the perfect martini | BFI | …on martinis
make sure the ice is about twenty degrees below zero (centigrade). Don’t take anything out until your friends arrive; then pour a few drops of Noilly Prat and half a demitasse spoon of Angostura bitters over the ice. Stir it, then pour it out, keeping only the ice, which retains a faint taste of both.…
-
Why I’m not even slightly scared about the future | …good read + a thought-provoking observation from Femi Oluwole; I wonder why power may be afraid of TikTok & Social Networks?
https://www.independent.co.uk/voices/independent-thinking/why-i-m-not-even-slightly-scared-about-the-future-b2450318.html
-
Merry Christmas: “Stalkers ‘exploit face recognition site designed to stop revenge porn’”
From Le Times cometh yet another education in dual-use goods; as ever the problem is “if you ban dual-use software — i.e. all software —then you’ll end up banning everything“: PimEyes is intended to be used to combat revenge porn and identity theft. Users can upload a picture of someone to its website, which reveals…
-
Migrate your podcast shows from Google Podcasts to YouTube Music (US Only) | …sigh, another trainwreck
https://support.google.com/youtubemusic/thread/249139848/migrate-your-podcast-shows-from-google-podcasts-us-only-%F0%9F%87%BA%F0%9F%87%B8?hl=en