Arrigo Triulzi

@cynicalsecurity

IT Security, cynically aged. Maths. Some nukes. Longing for Symbolics and Connection Machines. Keeper of Ancient Computing Lore. Wassenaar intangible Ⓐ

156 Folgt498 Follower962 Posts

Bluesky

Ist das dein Profil?Übernimm es — dann gehört dir cynicalsecurity.dirty.social.Profil übernehmen

Arrigo Triulzi@cynicalsecurity· 8d

WUT?!? This is a joke, right?

A CAPTCHA which requires you to scan a QR code with a mobile device to "prove you are human".

Arrigo Triulzi@cynicalsecurity· 22d

If you use WireGuard on FreeBSD you urgently need to patch¹. And I mean urgently. __ ¹ security.freebsd.org/advisories/F...

II. Problem Description

After dispatching a decrypt operation to OCF and receiving the result, the wg(4) driver failed to check whether the MAC verification step succeeded.
The driver thus silently accepted packets with an invalid Poly1305
authentication tag.

III. Impact

A remote attacker who can send UDP packets to a WireGuard endpoint, and who can guess the bounds of the receiver's replay window, can inject forged or modified transport data packets into the tunnel.

A remote attacker who can intercept WireGuard packets bound for a FreeBSD host can modify the ciphertext and authenticated data without detection by the receiver.

Arrigo Triulzi@cynicalsecurity· 28d

The lyrics of "Spirits in a Material World"¹ by The Police resonate more and more… To think it was the height of the Cold War and we thought it was bad. We had seen nothing :( __ ¹ genius.com/The-police-s...

[Verse 1]
There is no political solution
To our troubled evolution
Have no faith in constitution
There is no bloody revolution

[Chorus]
We are spirits in the material world
Are spirits in the material world
We are spirits in the material world
Are spirits in the material world

[Verse 2]
Our so-called leaders speak
With words, they try to jail you
They subjugate the meek
But it's the rhetoric of failure

[Chorus]
We are spirits in the material world
Are spirits in the material world
We are spirits in the material world
Are spirits in the material world

[Verse 3]
Where does the answer lie?
Living from day to day
If it's something we can't buy
There must be another way
[Outro]
We are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world
Are spirits in the material world...

Arrigo Triulzi@cynicalsecurity· Apr 13

Reference: consginevra.esteri.it/it/servizi-c...

ATTENZIONE – NOVITÀ IMPORTANTE
A decorrere dal 1° giugno 2026 il cittadino iscritto all’Anagrafe degli Italiani Residenti all’Estero (AIRE) può presentare domanda per il rilascio della carta d’identità elettronica presso qualsiasi Comune italiano. La carta d’identità sarà consegnata con le medesime modalità previste in caso di domanda presentata tramite l’Ufficio consolare, con facoltà per l’interessato di ritirarla personalmente presso il Comune ovvero di richiederne la spedizione all’estero.

Arrigo Triulzi@cynicalsecurity· Dec 2

Mine is amber.

FreeBSD upgrade running on an amber phosphor terminal.

Arrigo Triulzi@cynicalsecurity· Dec 2

Upgrading from #FreeBSD 14.3-RELEASE to 15.0-RELEASE? Do not ignore the very important instructions in the release notes¹: freebsd-update fetch freebsd-update install on 14.3-RELEASE _before_ upgrade or else² … __ ¹ www.freebsd.org/releases/15.... ² bugs.freebsd.org/bugzilla/sho...

ld-elf.so.1: Shared object "libsys.so.7" not found, required by "libc.so.7"

Arrigo Triulzi@cynicalsecurity· Oct 29

Configuration management, the great unknown.

Arrigo Triulzi@cynicalsecurity· Sep 29

2021 cynicism. Still current.

A screenshot of a post from Twitter in 2021:

Bla bla bla "C insecure" bla bla bla "use [insert fashionable secure language]"

"Hi! How are you? I'm your remote repository you are trusting blindly during the build process!"

Arrigo Triulzi@cynicalsecurity· Aug 4

Periodic reminder about stunt hacking¹. You will get done by phishing. Nothing else matters. __ ¹ www.cs.auckland.ac.nz/~pgut001/pub...

What gets the Attention?

Consulting the OWASP top 100,000 from the Appendix to the Addendum to the Supplement to the Apocrypha, Volume 127, we see…

#17,245 Spectre
#17,246 POODLE
#17,247 Meltdown
#17,248 Rowhammer
#17,249 DROWN
#17,250 ROCA
…
What do all of these have in common?

No-one ever uses them
* there are 17,244 easier ways to carry out an attack
* this is why they've been referred to as "stunt cryptography"

Stunt cryptography attack
* You have a 0.00001% chance of recovering 2 bits of plaintext from a single message

Any of the OWASP top ten
* You have a 100% chance of recovering the plaintext of all the messages

Arrigo Triulzi@cynicalsecurity· Jun 25

Ah, there is a script for the latter bit. See en.wikipedia.org/wiki/Fascist...

Film poster for “Fascisti su Marte” (“Fascists on Mars”).

Arrigo Triulzi@cynicalsecurity· Apr 7

Una chicca per gli italiani di una certa età: l'analisi della CIA della situazione politica del '63¹ che non fa pena, fa pietà… nelle immortali parole di @abragad.bsky.social "gente pagata (in $$) per scrivere questo". Basti il "(2) Fanfani" (solo lui). __ ¹ nsarchive.gwu.edu/document/329...

$Italy With approval by the Special NSC 5412/2 Group, the Christian « Democratic Pai:_ty was supported by CIA to the tune of $1 million · in the campaign leading to the June elections (plus $600.,000 to·other political elements in Italy). CIA1s rationale for the loss of CDP strength in the elections is that (1) there was a loss of votes among the workers from the south who were given the Communist treatment when they moved to the northern cities; (2) Fanfani, and (3) -the Papal audience given to Khrushchev's son-in-law had an effect on anti-Comm~nist religious Italian·s ,, including wives or the workers who had preMiously been able to ·persuade their husbands to vote against the Communist candidates. Meanwhile the Special Group has authorized CIA to spend $125,000 to support the CDP in current developments looking toward the\ establishment of a center-left government coalition.$

Arrigo Triulzi@cynicalsecurity· Jan 14

LOL™ D. Noever et al. "Infecting Generative AI With Viruses"¹ The 1990s are calling, they want their EICAR back! __ ¹ arxiv.org/abs/2501.05542

Abstract: This study demonstrates a novel approach to testing the security boundaries of Vision-Large Language Model (VLM/ LLM) using the EICAR test file embedded within JPEG images. We successfully executed four distinct protocols across multiple LLM platforms, including OpenAI GPT-4o, Microsoft Copilot, Google Gemini 1.5 Pro, and Anthropic Claude 3.5 Sonnet. The experiments validated that a modified JPEG containing the EICAR signature could be uploaded, manipulated, and potentially executed within LLM virtual workspaces. Key findings include: 1) consistent ability to mask the EICAR string in image metadata without detection, 2) successful extraction of the test file using Python-based manipulation within LLM environments, and 3) demonstration of multiple obfuscation techniques including base64 encoding and string reversal. This research extends Microsoft Research's "Penetration Testing Rules of Engagement" framework to evaluate cloud-based generative AI and LLM security boundaries, particularly focusing on file handling and execution capabilities within containerized environments.

Arrigo Triulzi@cynicalsecurity· Jan 11

In esclusiva il Ministro dei Trasporti che via augura “Buon viaggio!”

Totò vestito da Rosario Chiàrchiaro, “lo iettatore” ne “La Patente” (1957)

Arrigo Triulzi@cynicalsecurity· Dec 16

Enjoy the Mt. Blanc this morning.

Photo of the Mt. Blanc silhouetted against the rising Sun.

Arrigo Triulzi@cynicalsecurity· Nov 26

Arrigo Triulzi@cynicalsecurity· Aug 5

So Delta lost $500M because of Clownstrike (and Microsoft…) and the CEO is upset. So upset that apparently he is "rethinking" how systems are set up in the future¹. "… I can tell you they have not delivered exceptional service..." "… we thought we had the best…" __ ¹ www.cnbc.com/2024/07/31/d...

“If you’re going to be having access, priority access to the Delta ecosystem in terms of technology, you’ve got to test the stuff. You can’t come into a mission critical 24/7 operation and tell us we have a bug,” Bastian said.

CrowdStrike has so far made no offers to help Delta financially, Bastian added, beside offering free consulting advice on dealing with the fallout from the outage. A CrowdStrike spokesperson said in an emailed statement that it has “no knowledge of a lawsuit and have no further comment.” Microsoft didn’t immediately respond to a request for comment.

Arrigo Triulzi@cynicalsecurity· Dec 14

Say that you've accidentally wiped your nginx configuration for which you have no backup because you're a pro and you don't have backups for your phishing infrastructure, not that this has happened to me of course. Well, here's how you get it back with gdb. serverfault.com/questions/36...

$# Set pid of nginx master process here pid=8192 # generate gdb commands from the process's memory mappings using awk cat /proc/$pid/maps | awk '$6 !~ "^/" {split ($1,addrs,"-"); print "dump memory mem_" addrs[1] " 0x" addrs[1] " 0x" addrs[2] ;}END{print "quit"}' > gdb-commands # use gdb with the -x option to dump these memory regions to mem_* files gdb -p $pid -x gdb-commands # look for some (any) nginx.conf text grep worker_connections mem_* grep server_name mem_*$