Cal Leeming

🔍If you are looking for a comprehensive overview of the current #3CX supply chain attack, I created a diagram that shows the attack flow!💥I'll update as soon as the analysis progresses. Stay tuned for the MacOS edition! #cybersecurity #infosec #supplychainattack #3CXpocalypse

Some excellent writeups by @chompie1337, particularly this local priv esc for io_uring. Highly recommended reading for anyone who enjoys diving deep into the abyss of kernel space and beyond. chompie.rip/Blog+Posts/Put…

Finally get to release the video for my Recon2022 talk: Breaking the Glass Sandbox - Find Linux Kernel Bugs and Escape. It's awkward - A/V issues with slides. But, I expand on much more than what my slides contain. And the slides are edited back in 😎😌youtube.com/watch?v=2R46lJ…

@cybergibbons Slightly off topic - Railway electrics are straight up wild. There was a video last year (sadly now taken down) by a railway sparky showing earth leakage in double digit amps when the train went through a station. In some places I think they're still using X.25 to TCP converters.

Can anyone explain this electrical installation?

@Jhaddix @superevr That's.... actually a really good point. Damn.

@superevr 99.9% of programs, right now, would not accept it. OOS or NA, and then they would talk to the user to fix it behind the scenes. Or platform triage would NA it before the customer even saw it.

Imagine you ran LastPass’s bug bounty program and someone submitted a report that an employee was running an old version of Plex on their home network. Would you have closed the report as out of scope?

@Evil_Mog Reading through the Cisco 2600 spec sheet brings back a flood of memories! E1 ATM cards, fax out, G.711 and 100mbps as standard. And these were firmware supported up until 2007 as well! #nm-xe1-ima" target="_blank" rel="nofollow noopener">cisco.com/web/ANZ/cpp/re…

I did my original network engineer training on these

@infiltrator86 Funny you should mention textfiles.com, I've spent a ridiculous amount of time over the last few weeks reading through some of those again. Looking at shell dumps of ancient systems is a nostalgic dream, and fondly remember some of the file names!

@sleepycal I was there, east coast, and just the right age. Much is stored at internet archive and textfiles.com. Jason was there too. Also, hacker message board messages etc from, well, take a look! If you can't find it, let me know. :)

It's fascinating to hear stories from those early in the hacking scene. I have memories of l0pht and others from reading ezines and staying up until 4am on IRC as a 10 year old kid. It was, and still is, a mesmerizing world. For me, an escape from early life through a terminal.

Reviewing the commits in git reddit.com/r/programmerhu…

@AnotherMrEchs Perhaps writing in C also helps give an appreciation for how much we take for granted in scripting languages! Struggled to find C or Rust books or material aimed at kids though. There's some interesting ones here though: theschoolrun.com/best-childrens…

Call for advice! I'm trying to find books and learning material on programming and technology for my 8-year old. He's been asking a lot of questions recently about what I actually do (which is mostly coding), how technology works and maths. I'll post a few I found.

@AnotherMrEchs That jump is something I've been struggling to find a solution for them too. Going from droping blocks, to typing into a text editor, especially while learning how to type quickly enough to not get frustrated. Also reminds me of this

@AnotherMrEchs Also funnily enough, I started coding at age 12 in mIRC script lmao (this was back in... '99). I remember the older generation teasing me for being a script kiddie. But it helped embed basic programming concepts which followed me for the rest of my life.

@AnotherMrEchs Oh that's interesting, what was it like for them learning C and Rust? I've been doing a lot of C recently and was wondering when would be a good age to introduce a low level language, or if they'd be better with something like Python to start with.

"Ghost in the Wires" by @kevinmitnick - fascinating insight into Kevin's story, with a decent split of info between the human story vs technical detail. amazon.co.uk/Ghost-Wires-Ad…

"Understanding the Digital World" - covers a large number of areas in a dense style and does a good job of explaining basic principles and history etc. amazon.co.uk/Understanding-…

It's crazy to think less than a decade ago these sort of stereotypes were running wild. There are some amazing teachers in this world who truly do their best to encourage all their children in their dreams. But sadly, it's a lottery as to the quality of teaching you get.

😂😂😂😂