HoodSec

CitySec meetup for Information Security professionals/hoodlums in Oakland/East Bay. Meets last Thursday of every month at Radio Bar unless otherwise specified.

[Halvar Flake @halvarflake]

Understanding that every compressor is a machine learning predictor, and vice versa, was the single most important insight I learnt about between 2019 and now.

[Halvar Flake @halvarflake]

In the early 2000s @StephWehner did malware classification using gzip distance. I felt it was a cute trick but didn't take it too seriously, but more than a decade later I still use the trick of concat/compress to measure pairwise similarity of arbitrary data.

[Halvar Flake @halvarflake]

And understanding that a state-of-the-art compressor is our best approximation of an upper bound of Kolmogorov complexity.

[🧗‍♂️ Matt Holt @mholt6]

So I just woke up and apparently I inadvertently discovered a zero-day RCE in https://t.co/Byl6l73Yet, and caused a Chinese CA to shut down overnight.

Props to the @neilpangxa of https://t.co/Byl6l73Yet for the quick fix! https://t.co/cvbLrRzW8o

[🇺🇦 Andrei Alexandrescu 🇺🇦 @incomputable]

So I gave ChatGPT4 this prompt: Implement strstr() using brute force in C++. Be portably efficient. Do no unnecessary work. Keep the implementation short and clear but give priority to efficiency. 1/

[Cory Doctorow NO LONGER ON TWIT TER @doctorow]

So there's a great Thai restaurant in my neighborhood called Kiin. Yesterday, I searched for their website to order some takeout. Here's the Google result.

[vx-underground @vxunderground]

How the New York Post discovered it was breached:

[President Biden Archived @POTUS46Archive]

As I’ve said before, no one should be in jail just for using or possessing marijuana.

Today, I’m taking steps to end our failed approach. Allow me to lay them out.

[yan @bcrypt]

if true, this thread has scary implications for anyone who contributes to open source privacy software. basically you can be arrested if criminals use it and the authorities can’t figure out who else to arrest.

[HoodSec @hoodsec]

@3141592f @encthenet @st0rmz It's a loose group that still attends, but actively looking for someone to take the reins and consistently run it (I have since moved from the area)

[Rolf Rolles @RolfRolles]

This blog entry (by two talented authors) breaks new ground by being the first foray into applying equality saturation to deobfuscation. Definitely give it a look if that overlaps with your interests!

[mdowd @mdowd]

Oh man, I think we have a winner for best conference presentation title

[Nicolas Krassas @Dinosn]

Chrome Android and Windows 0day RCE SBX https://t.co/S6yjERvRbE (The one used at https://t.co/v2K96tFjjO)

[Rolf Rolles @RolfRolles]

Today is the 25th anniversary of the first time I ever reverse engineered a piece of software. It's been gratifying and rewarding, but I hope to retire from public life before it's time to celebrate the 30th.

[//Ascor @AscorGames]

@McGrewSecurity

[chompie @chompie1337]

new Chinese 0day just dropped

[Covid Radicals 🇺🇦 @CovidRadicals]

Now this is a Freedom Convoy

[HoodSec @hoodsec]

Currently reminiscing about the #hoodsec Halloween crawl of 2019... Feels like so long ago!

[pookie @0xpookie]

October has been wild, but we're still doing #hoodsec this month!

You can find us from 8-9:30 at Cafe Van Kleef Tomorrow night (10/28)

Requirements:
- proof of vaccination
- a positive attitude

Optional:
- a rad costume