Niklaus Schiess

Microsoft's Recall is pretty late to the party. North Korean devices have been screenshotting everything you are doing for over 10 years already 🙃 @Microsoft don't be like the #DPRK.

The vendor has not patched this vuln for almost two years now, so don't expect a patch any time soon! Infos about the vuln and how to exploit CVE-2023-45239 and CVE-2023-48643 are in the repo above.

This is even more likely to run on Linux/BSD systems than the Facebook fork. Actually, Facebook forked from Shrubbery Networks. And Shrubbery Networks forked from a Cisco dev kit over 16 years ago 🙃

Another tac_plus fork, from Shrubbery Networks, is affected by the same issue as CVE-2023-45239, it is tracked under CVE-2023-48643. However, there is no patch available! More information is available here: github.com/takeshixx/tac_… #Cisco #TACACS #AAA #RCE

If you ever come across a #TACACS daemon (TCP/49) running on Linux/FreeBSD/NetBSD, there is a good chance it is affected by this: tac_plus pre auth remote command execution (CVE-2023-45239): #event-112997" target="_blank" rel="nofollow noopener">github.com/facebook/tac_p… In case you use this, you should checkout the fix!

In case you missed our report launch on digital surveillance in #NorthKorea, the video is available on the event page and on the Stimson Center’s YouTube channel. The new report by @martyn_williams and @nslavney can be found here: bit.ly/3Jk5iSX

Update your runc bits! aws.amazon.com/security/secur…

@vxunderground Let me know if you have any questions about the device, I might be able to answer some of them 🙂

We managed to get our hands on a Samjiyon Tablet from the Democratic People's Republic of Korea (DPRK) a.k.a. North Korea. These are not sold to foreigners.

Interested in North Korea? Know GIS? Come work with us on developing data and technology projects and satellite imagery analysis @38NorthNK! Please share widely! stimson.applicantpro.com/jobs/2720660.h…

🚨Come join our team at @38NorthNK! We're seeking an RA to help further develop our data, tech projects & satellite imagery analysis. Are you interested in the #KoreanPeninsula & familiar w/ #GIS + #ESRI + #ArcGIS? Then be sure to apply by Jan 30! stimson.applicantpro.com/jobs/2720660.h…

Kleber is gone. And so it went open source after all: github.com/takeshixx/kleb… Maybe one day I’ll be bored enough to rewrite it in Rust? 🤷‍♀️

Latest versions of statically compiled binaries: - Nmap v7.93SVN (github.com/takeshixx/stat…) - OpenSSH v9.1p1 (github.com/takeshixx/stat…) - Socat v1.7.4.4 (github.com/takeshixx/stat…) All three use testssl.sh's openssl-1.0.2.bad (github.com/drwetter/opens…)

Kleber is going offline at the end of the year. gg

@Enno_Insinuator Experimental

What is IPv6? Wrong answers only

38 North Fellow @martyn_williams and @ERNW_ITSec Senior Analyst @_takeshix wrote a report examining the cat and mouse game between the #DPRK and its citizens and how smartphones have proven a particularly difficult technology for the state to control. bit.ly/3L6n3Up

My latest North Korea research with @martyn_williams is now publicly available: lumen.global/reveal-report Also added it to the DB: dprktech.adversec.com/post/project-r…

Too many people dismiss North Koreans as Stalinist drones. But fascinating research shows a small, emerging hacker culture: "a step up in .. aggressiveness shown by citizens." Great work from @martyn_williams; @_takeshix; @ERNW_ITSec. lumen.global/reveal-report

Here's @wired on a new report today by myself and @_takeshix and @ERNW_ITSec on North Koreans attacking state information controls. wired.com/story/north-ko…

National media in India @DDNewslive covered our work twitter.com/DDNewslive/sta…

I moved the DPRK Tech blog to dprktech.adversec.com, dprktech.info is now registered by an email address from @BoostyLabs. They just cloned the page and added links to their site. What a scummy company.