Turns out Flock is storing the encryption key on the device.
The hackers were able to copy the camera’s storage and recover an encryption key stored on the device, which unlocked videos of thousands of vehicle detections
3 Likes
Here’s an interesting look at a malicious NPM package:
I like this because the surface area for bugs is not infinite.
Eventually we’ll get formally verified compilers.
I worry that rowhammer and out of order execution and other technologies we’ve come to depend on will be fundamentally broken, however, but other than that danger, I’m pretty excited for the prospect of nation-states having a much harder time inserting back doors that remain undetected for years.
also, dont give LG tvs network access.
5 Likes
Or any TV for that matter.
2 Likes
Say it with me: Access Control, Access Control Access Control
Also: Dataloss prevention Which will be struck down for the management types
https://www.darkreading.com/insider-threats/blame-rogue-ai-security-failures
https://www.darkreading.com/cybersecurity-operations/swift-banking-govt-middleware-rce
1 Like
Unprecedented Cyberattack cripples supermarket fridges across Europe as hackers activate automatic defrosting — delivery and store prices also impacted by incident
France, Belgium, and the Netherlands are reportedly affected.
Technical write up: Freeze the Controller, Defrost the Food: Uncovering Vulnerabilities in Danfoss Refrigeration Controllers | Claroty
3 Likes
Proof that password rotation is a waste of time 
1 Like
Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users’ cryptocurrency wallets.