DevTestSecOps
351 subscribers
531 photos
34 videos
37 files
727 links
Forwards and notes on development, testing, security, and operations from @q587p.

About me: studied as System Architect, worked as a SysAdmin, working now as an Test Automation Engineer. Also, I'm interested in hacking (and everything related to it).

జ్
Download Telegram
Forwarded from HN Best Comments
Re: CEO fired developers to make room for AI. Developers create open source AI CEO

To be fair I think its far easier to automate leadership jobs despite how they believe in greater self-worth. As a developer I keep running into problems that require some measure of creativity to solve or workaround. And regardless of how many years I've been in the industry I'm not running out of issues. They just keep getting more obscure. On the other hand leadership communication and problem resolution seem like the exact opposite of creativity and innovation. Its all about time proven, reliable solutions. Same layoff notices, recommendations, design everywhere. Repetitive, boring, politically correct and therefore easy to automate. Accountability will likely become reason n1 for keeping leadership roles intact that is until people become accustomed to AIs everywhere. After all what's the difference between a bot showing a layoff notice at 5am or an AI generated message/video from a human doing the very same thing.

crnkofe, 1 day ago
🔥3😁3👍2
#DPRK #way

The DPRK built its cyber capability as a deliberate extension of its asymmetric deterrence doctrine, treating cyber operations as a cheap, deniable "all-purpose sword" alongside nuclear weapons to ensure regime survival against better-resourced adversaries and circumvent international sanctions.

* From roughly 2014 onward, cyber operations evolved from espionage and sabotage into a load-bearing revenue stream, bank heists, ransomware, and cryptocurrency theft, financing the very weapons programmes that international sanctions were designed to constrain.

* Even as the GRIB (ex-RGB) and NIA (ex-MSS) consistently lead DPRK cyber offensive operations, the units and bureaus beneath them are subject to constant reorganization, a deliberate control mechanism that keeps agencies competing for Kim Jong-un's favor, prevents consolidation of independent power, and complicates the attribution and sanctions-designation efforts of foreign governments.

* DPRK offensive cyber operations are distributed across APT clusters, with the former Lazarus umbrella now decomposed by Sekoia and Kudelski Security into six distinct sub-clusters, nearly all of which conduct lucrative operations, whether as their primary mandate or to self-fund espionage and sabotage campaigns.

* These APT intrusion sets are complemented by thousands of IT workers operating under false identities worldwide, who serve a dual function: remitting salaries to the regime and leveraging their insider access within contracted organizations to conduct further operations, with proceeds laundered through centralized exchanges, decentralized exchanges (DEXs), and P2P platform.

* The DPRK has constructed a complex network of educational and private intermediaries to enable its cyber operations, spanning academic institutions that both train operatives and function as operational nodes. This parallel web of third-country relays often extends to allies like China and Russia, as well as countries in Africa and Southeast Asia. Front companies across these regions participate in generating revenue and providing operational cover, while criminal networks are operationalized for money laundering.


https://www.sekoia.com/blog/beyond-lazarus-organization-of-dprk-cyber-capabilities
👀2🤔1
😁4👻2❤1😈1
💯4💔2👌1
Forwarded from Bots and Research
Please open Telegram to view this post
VIEW IN TELEGRAM
✍2👏2🔥1
😁5🔥2👏2😈2
❗️ Amazon is giving its delivery drivers smart glasses that snap photos almost constantly to help its AI map neighbourhoods, capturing people and private property across potentially several thousand images per shift.

Asked whether customers can opt out, Amazon's Viraj Chatterjee said, "We haven't thought about that."

Amazon wants 20,000+ pairs on routes by end-2027 and confirmed the images can be obtained with a warrant.
🤬4👀2😨2
😁7🍾3👨‍💻2
Forwarded from DC8044 F33d
RESPONSIBLE VULNERABILITY DISCLOSURE

Target: Yandex Data Center, Sasovo, Ryazan Region
Date: 8 October 2026

Severity: Critical
Attack Vector: Kinetic

We have identified a previously unknown vulnerability affecting the physical resilience of the Yandex data center in Sasovo.
The vulnerability allows an attacker to bypass conventional network security controls, including firewalls, EDR, MFA, and air-gapped architecture, by applying sufficient kinetic energy directly to the infrastructure.

Impact:
The affected data center is currently on fire and has reportedly stopped operating.

Consider implementing a zero-trust architecture — including for gravity, heat and incoming objects.

CVSS v4.0: 10.0 — Critical
CWE: CWE-693 — Protection Mechanism Failure
Status: Exploited in the wild.
🔥3👏2❤1😁1
🤣6💯2👨‍💻2
😁5🔥4😭3
Forwarded from Irine Nightly
💯7👌2🌚2
Forwarded from Dev Meme / devmeme
🥰4😁4👏2🔥1
A normal size for a NIST P-384 elliptic curve cryptography private key contains roughly 384 bits of entropy, a size allowing almost 2384, or a number with 116 digits, different possibilities. The private key sizes of the compromised keys ranged from 3 to 8 bits. Astonishingly, the private keys were 4, 56, 66, 115, 155, 156, 230, 237.

https://arstechnica.com/security/2026/10/the-internet-goes-on-high-alert-after-discovery-of-8-compromised-tls-certs/
https://news.ycombinator.com/item?id=50169291
😁6👏3🤯2
Forwarded from Rzeczy zabawne (?̚͢?ú̱̭̈́k ͙̱̐a ͜ṡ̜z ̖̺̝͌̕)
🤣3🙈2❤1🔥1
Forwarded from mapgleos ✙ #УкрТґ
😁7💯2💔2