Election hacking, Kernel Security, MDS Attacks and Github's Security Lab
Watch the DAY[0] podcast live on Twitch (@dayzerosec) every Monday afternoon at 12:00pm PST (3:00pm EST)
Or the video archive on Youtube (@DAY[0])
- [00:02:09] Thousands of hacked Disney+ accounts are already for sale
- [00:06:33] Faking an iVote decryption proof
- [00:16:20] "robot deployed at the famous Robot Hotels in Japan can be converted to offer anyone remote camera/mic access to all future guests."
- [00:30:13] "A stack-based buffer overflow could be triggered in WhatsApp by sending a specially crafted MP4 file"
- [00:35:42] HHVM Security Update
- [00:38:18] Symantec Endpoint Protection - Self-Defense Bypass - CVE-2019-12758
- [00:38:27] McAfee - All Editions - Self-Defense Bypass - CVE-2019-3648
- [00:43:26] Imperceptible Adversarial Attacks on Tabular Data
- [00:48:48] 5GReasoner: A Property-Directed Security and Privacy AnalysisFramework for 5G Cellular Network Protocol
- [00:55:26] Fuzzing Qualcomm Secure Execution Environment and CVE-2019-10574
- [01:00:32] TPM-Fail
- [01:08:54] Mitigations for Jump Conditional Code Erratum
- [01:14:35] More MDS Attacks
- [01:22:55] Tianfu Cup
- [01:27:48] Protecting against code reuse in the Linux kernel with Shadow Call Stack
- [01:34:04] Security things in Linux v5.3
- [01:50:36] A Security Perspective on Unikernels
- [01:54:26] Announcing GitHub Security Lab: securing the world's code, together
- [02:09:32] Huawei introduces new invite-only bug bounty program
- [02:12:37] Interpol plans to condemn encryption spread, citing predators, sources say
- https://www.youtube.com/watch?v=VPBH1eW28mo
- [02:17:33] How a turf war and a botched contract