Apple M1 Flaw Can’t be Fixed — PACMAN Panic - Security Boulevard

MIT ARM PAC Hack: Apple’s M1 chip isn’t as safe from buffer overflows as previously thought. M1 and other designs based on ARMv8.3 can have their protections neutered.

Their #PACMAN technique is just waiting to help exploit the next zero-day.

In today’s #SBBlogwatch, we dust off our abacus. At @SecurityBlvd: https://t.co/tT9MIX33x9

— @Richi 🤓 Jennings (@RiCHi) June 13, 2022

Tesla Fails Yet Again: Hackers can Steal Cars via NFC - Security Boulevard

NFC: ‘No F***ing Chance’ it’s Secure. Tesla Models 3 and Y can be unlocked and stolen via a bug in their NFC software. Late model S and X cars are probably vulnerable, too.

@ElonMusk (pictured) needs to abuse even more engineers.

In today’s #SBBlogwatch, we lock away our NFC cards. At @SecurityBlvd: https://t.co/g48uKTVQFJ

— @Richi 🤓 Jennings (@RiCHi) June 10, 2022

DoJ, FBI, IRS Make Empty Boast: SSNDOB ‘Seized’ - Security Boulevard

Just a Speedbump on the Road to Crime: A collection of law enforcement agencies are gloating over their “seizure” of the notorious SSNDOB marketplace, which traded in stolen personal information. But the action seems too little, too late.

Not a lot.

In today’s #SBBlogwatch, we count our tax dollars at work. At @SecurityBlvd: https://t.co/p2hFQt9vmu

— @Richi 🤓 Jennings (@RiCHi) June 9, 2022

How to make C++ memory-safe? Chrome targets UAF bugs with garbage collection - develop.secure.software

Peace sign of the times:

Solution to use-after-free (#UAF) bugs is … *don’t* free memory!@ChromiumDev is latest to jump on #TemporalMemorySafety bandwagon. Perf impact of #GC seems small.

In this week’s #SSBlogwatch we give three cheers for pragmatism. At @SecuredSoftware: https://t.co/z3LJyUzoTH

— @Richi 🤓 Jennings (@RiCHi) June 9, 2022

Verizon’s Legionella Bugs | Bolt’s Dot-Bomb Echo | Yandex’s Russian CEO Quits - DevOps.com

The moral of the story: Life … is a tale told by an idiot—full of sound and fury, signifying nothing

In this week’s #TheLongView:
1⃣ @Verizon fined for allegedly spreading #disease,
2⃣ @Bolt repeats the mistakes of the past, and
3⃣ the founder of @Yandex resigns.

At @DevOpsDotCom: https://t.co/7PeUQidILz #DevOps #FinTech #RussiaUkraineWar #LegionnairesDisease @NewYorkStateAG

— @Richi 🤓 Jennings (@RiCHi) June 7, 2022