Michał Purzyński

Linux kernel retiree. Adrenaline junkie. Analog in a digital world.

❤️🖤 Raça, Amor e Paixão 🤍Hala Madrid

[Michał Purzyński @MichalPurzynski]

On late December, a polish grid was a subject to a large-scale attack.

Report below. Eng/Pl. Well written, technical, factual.

https://t.co/W1oUCuSHge

[Michał Purzyński @MichalPurzynski]

@adamhaertle @seshxxs I cała szwajcaria jeździ Jestetten odbierać paczki bo zamówienie czegoś z poza kraju za 65CHF kosztuje 30CHF w opłatach ;)

Blik >> Twint. Twint nie ma w ogóle antyfraud.

Istnienie "paczkomatu" to anomalia.

Coop to go / migros express to nie żabka.

Gdzie Ricardo do Allegro.

[Craig Gidney @CraigGidney]

Blog post: "The French have the Quantum Circuits" https://t.co/cP5hbTWl2B

André Schrottenloher just published a preprint showing how to construct quantum ECDLP circuits with costs similar to the ones in our zero knowledge proofs.

[GKS Katowice @_GKSKatowice_]

GKS KATOWICE ZAGRA W EUROPEJSKICH PUCHARACH! 🟡🟢⚫

[Open Source Security mailing list @oss_security]

Recent Linux kernel exploits, attack surface reduction, example IPSEC https://t.co/iwZJwNZh8p
Discussion thread started by @hanno. Mentions approaches and old and new tools to limit (auto-)loading of kernel modules.

[Przemysław Frasunek 🇵🇱🇪🇺 @venglin]

Full LPE chain for the FreeBSD 14.x kernel via a setcred(2) stack buffer overflow. SMAP and SMEP bypassed.

Write-up + exploits: https://t.co/a8Z3T9dTzE

[Michał Purzyński @MichalPurzynski]

@spendergrsec echo "avc_has_perm 0" ;)

[Michał Purzyński @MichalPurzynski]

XD

How many more interesting targets?

[Brad Spengler @spendergrsec]

echo "engage module_sig_check 0" > /sys/kernel/security/killswitch/control

[Michał Purzyński @MichalPurzynski]

We all know who would have given him a bonus.

[vx-underground @vxunderground]

Big news for cybersecurity geopolitics nerds

Microsoft guy in charge of Israel Microsoft division place secretly worked with Israel government to conduct illegal surveillance on people in West Bank and Gaza

Satya Nadella reportedly big mad

https://t.co/vGjTrIuU0n

[confidenceconf @CONFidenceConf]

Step beyond traditional talks and explore the new world of CONFidence Villages.

Dedicated spaces built around specific areas of cybersecurity, technology, and hands-on learning - from Radio Hacking and Hardware Hacking to IoT, Speedrunning, CTFs and more.

[Brad Spengler @spendergrsec]

https://t.co/mYKLNUsZAU Xen advisory posted, should be a kernel fix here any minute now I assume

[Michał Purzyński @MichalPurzynski]

Rust is not only memory safety.
A cool show how it boosted Cloudflare's software performance 70-100% <3

https://t.co/4f4l9a0T1o

Without Rust, their migration to Gen13 AMD would have been if not impossible then at least difficult.

[Michał Purzyński @MichalPurzynski]

You didn't agree to allow google to download a 4GB gemini for you and integrate with your chrome?

No one asked ;)

[Malwarebytes @Malwarebytes]

Surprise! Chrome silently installs a 4GB AI model you didn’t ask for.

No install prompt. No consent.

If you delete it, Chrome downloads it again.
https://t.co/LmAa3ndL7L

[Michał Purzyński @MichalPurzynski]

180 degree oposite to usa

[German Simply 🇩🇪 @GermanSimply_]

𝟭. They made university almost free.

Not as a charity.
As infrastructure.

Germany decided that an educated population benefits everyone – so everyone contributes to making it possible.

[German Simply 🇩🇪 @GermanSimply_]

𝟮. They built a word for work-life balance instead of just talking about it.

𝘍𝘦𝘪𝘦𝘳𝘢𝘣𝘦𝘯𝘥.

The sacred end of the working day.
In Germany, when work ends – it ends.

[Michał Purzyński @MichalPurzynski]

This whole thread is great.
It's obvious in Europe.

It's impossible in usa, with their live-to-work only to be laid off without medical insurance (cobra expires).

[German Simply 🇩🇪 @GermanSimply_]

German apprentices graduate
with real skills, real experience,
and zero condescension from society about not going to university.

A plumber in Germany is not looked down upon.

A plumber in Germany is someone who knows something you don't.

[Reuters @Reuters]

Google signs classified AI deal with Pentagon, The Information reports https://t.co/4ZBQDp5mfO https://t.co/4ZBQDp5mfO

[Michał Purzyński @MichalPurzynski]

https://t.co/jlL42D1Co4

[Michał Purzyński @MichalPurzynski]

https://t.co/vpPvNyhEcE

[Halvar Flake @halvarflake]

After burning $2.5k on tokens and LLM findings, I have a question about the 270 Firefox bugs: were they all attacker-reachable? The findings I got where often "legitimate bad code" but also "not reachable in any sane scenario".

[confidenceconf @CONFidenceConf]

A lot of people have been DM’ing us asking:
"What can we actually do with the #CONFibadge?"
So let us answer this one publicly.
What if you plugged in an #OBD2 adapter and explored what "car hacking" looks like - in a controlled, educational scenario?