Alessio

That's what I do. I drink, and I know things. 🍷

Security @ AWS

[Alessio @santoru_]

H1 Report Test - On

[Matthew Prince 🌥 @eastdakota]

Yesterday a quasi-judicial body in Italy fined @Cloudflare $17 million for failing to go along with their scheme to censor the Internet. The scheme, which even the EU has called concerning, required us within a mere 30 minutes of notification to fully censor from the Internet any sites a shadowy cabal of European media elites deemed against their interests. No judicial oversight. No due process. No appeal. No transparency. It required us to not just remove customers, but also censor our 1.1.1.1 DNS resolver meaning it risked blacking out any site on the Internet. And it required us not just to censor the content in Italy but globally. In other words, Italy insists a shadowy, European media cabal should be able to dictate what is and is not allowed online.

That, of course, is DISGUSTING and even before yesterday’s fine we had multiple legal challenges pending against the underlying scheme. We, of course, will now fight the unjust fine. Not just because it’s wrong for us but because it is wrong for democratic values.

In addition, we are considering the following actions: 1) discontinuing the millions of dollars in pro bono cyber security services we are providing the upcoming Milano-Cortina Olympics; 2) discontinuing Cloudflare’s Free cyber security services for any Italy-based users; 3) removing all servers from Italian cities; and 4) terminating all plans to build an Italian Cloudflare office or make any investments in the country.

Play stupid games, win stupid prizes. While there are things I would handle differently than the current U.S. administration, I appreciate @JDVance taking a leadership role in recognizing this type of regulation is a fundamental unfair trade issue that also threatens democratic values. And in this case @ElonMusk is right: #FreeSpeech is critical and under attack from an out-of-touch cabal of very disturbed European policy makers.

I will be in DC first thing next week to discuss this with U.S. administration officials and I’ll be meeting with the IOC in Lausanne shortly after to outline the risk to the Olympic Games if @Cloudflare withdraws our cyber security protection.

In the meantime, we remain happy to discuss this with Italian government officials who, so far, have been unwilling to engage beyond issuing fines. We believe Italy, like all countries, has a right to regulate the content on networks inside its borders. But they must do so following the Rule of Law and principles of Due Process. And Italy certainly has no right to regulate what is and is not allowed on the Internet in the United States, the United Kingdom, Canada, China, Brazil, India or anywhere outside its borders.

THIS IS AN IMPORTANT FIGHT AND WE WILL WIN!!!

[Alessio @santoru_]

@evilsocket AWS has a bunch of L5/L6 job posting for different roles in AI/GenAI teams. Happy to refer if you’re interested

[Alessio @santoru_]

@FebshoDaGoat @altstoreio Figured out myself you can use the email you have as “contact” on Apple Pay as login email and will return you the subscription details and download link

[Alessio @santoru_]

@formularacers_ Why you need to announce everything as “BREAKING”? It’s planned since months, how’s that supposed to be breaking news…

[Alessio @santoru_]

@evilsocket Is that on the latest Flipper’ firmware release? :D

[Alessio @santoru_]

@nikgraf Thank you! 😃

[Alessio @santoru_]

@evilsocket https://t.co/IEW6xIQ9xX Thanks for the amazing research!

[Microsoft Threat Intelligence @MsftSecIntel]

Microsoft discovered a high-severity vulnerability in the TikTok Android application that could have allowed attackers to compromise accounts with a single click. Learn more about CVE-2022-28799, which is now fixed, via our latest blog post: https://t.co/0PaWJ5cFYj

[Patrick Wardle @patrickwardle]

"The Art of Mac Malware" (Volume I: Analysis) is published, shipped ...and is now arriving!! 📚🥂

I'm traveling, so have yet to receive my copies 😭
...so please share photos of yours, so I can live vicariously thru you all😅🤩

(Mahalo @nicholasraba for sharing 🙏🏽) @nostarch

[Cas van Cooten @chvancooten]

A story in three parts 😶 #log4j

[ℵ₁ @[email protected] @aleph_one]

Today Smashing the Stack for Fun and Profit is 25 years old. Older than I was when I wrote it.

[Alessio @santoru_]

@newsycombinator Define replaceable

[Alessio @santoru_]

@pimskeks Looks like he’s really trying hard to win that prize

[Alessio @santoru_]

Very interested to see the PoC of this exploit! RCE via crafted PDF

[Patrick Wardle @patrickwardle]

Ah, more iOS vulnerabilities being exploited as 0days in the wild 😱😭

See iOS 14.8 security notes:
https://t.co/qhM0yQ3FLS

[Alessio @santoru_]

@ON8CB @WABetaInfo @WhatsApp Exactly this. Probably @WABetaInfo knows better but as far as I know chat metadata are not encrypted. This means that WhatsApp doesn’t know what are you writing to a person, but knows to who and when. Also this screenshot clearly state what data WhatsApp collect and link to ppl

[HackerOne @Hacker0x01]

This week @Hacker0x01 is releasing 5 videos covering the basics of #iOS #hacking with your professor @dawnisabel! Learn how an IPA file is structured, the parts of the Mach-O binary format & how to ascertain the application’s functionality. https://t.co/FAnhczn6U1

[Alessio @santoru_]

@david_colombo_ Hi, the domain is currently not for sale.