Collaborate Disseminate
Here’s a fun thought experiment. UDP packets can be sent with an arbitrary source IP and port, so you can send a packet to one server, and could aim the …read more Continue reading This Week in Security: Loop DOS, Flipper Responds, and More!
One of the simplest ways of keeping a computer system secure is by using an air gap — that is, never actually connecting the system to the network. This can …read more Continue reading Photoresistors Provide Air Gap Data Transfer, Slowly
OK, that headline is a bit of a cheap shot. But if you run the curl binary that Apple ships, you’re in for a surprise if you happen to use …read more Continue reading This Week in Security: Apple Backdoors Curl, Tor’s New Bridge, and GhostRace
The temptation to “take the money and run” was apparently too much for the leadership of the AlphV ransomware crime ring. You may have heard of this group as being …read more Continue reading This Week in Security: Blame the Feds, Emergency Patches, and the DMA
With the recently introduced SecOC (Secure Onboard Communication) standard, car manufacturers seek to make the CAN bus networks that form the backbone of modern day cars more secure. This standard …read more Continue reading Extracting SecOC Keys From a 2021 Toyota RAV4 Prime
MFA, or multifactor authentication, is a standard security feature these days. However, it can be a drag to constantly reach into one’s pocket, scroll to Google Authenticator (other MFA applications …read more Continue reading An ESP32 MultiFactor TOTP Generator
We have been alerted to a fun tool, a DJI DroneID spoofer software for ESP8266/ESP32 and some other popular MCUs. Last year, we’ve told you about DJI DroneID — a …read more Continue reading Can’t Disable DJI Drone ID? Spoof It With An ESP!
Psst! Hey kid! Want to reverse-engineer some iPhones? Well, did you know that modern iPhones use PCIe, and specifically, NVMe for their storage chips? And if so, have you ever …read more Continue reading iPhone 6S NVMe chip Tapped Using a Flexible PCB
Github is struggling to keep up with a malware campaign that’s a new twist on typosquatting. The play is straightforward: Clone popular repositories, add malware, and advertise the forks as …read more Continue reading This Week in Security: Forksquatting, RustDesk, and M&Ms
Here in the hacker community there’s nothing we love more than a clueless politician making a fool of themselves sounding off about a technology they know nothing about. A few …read more Continue reading An Automotive Locksmith On The Flipper Zero And Car Theft