infosec
Discussions about information security, applied cryptography, and privacy-preserving technology
m_j_r pfp
0 reply
0 recast
3 reactions
Ed O'Shaughnessy pfp
0 reply
1 recast
0 reaction
Mantej Rajpal pfp
1 reply
1 recast
8 reactions
Daniel Lombraña pfp
Apple's Find My Network Exploit Lets Hackers Silently Track Any Bluetooth Device 9to5Mac reports: Although AirTag was designed to change its Bluetooth address based on a cryptographic key, the attackers developed a system that could quickly find keys for Bluetooth addresses. This was made possible by using "hundreds" of GPUs to find a key match. The exploit called "nRootTag" has a frightening success rate of 90% and doesn't require "sophisticated administrator privilege escalation." In one of the experiments, the researchers were able to track the location of a computer with an accuracy of 10 feet, which allowed them to trace a bicycle moving through the city. In another experiment, they reconstructed a person's flight path by tracking their game console. https://yro.slashdot.org/story/25/02/28/013227/apples-find-my-network-exploit-lets-hackers-silently-track-any-bluetooth-device?utm_source=rss1.0mainlinkanon&utm_medium=feed
1 reply
0 recast
1 reaction
Ed O'Shaughnessy pfp
0 reply
0 recast
1 reaction
Mantej Rajpal pfp
1 reply
1 recast
2 reactions
Mantej Rajpal pfp
0 reply
0 recast
3 reactions
Daniel Lombraña pfp
0 reply
0 recast
3 reactions
Mantej Rajpal pfp
1 reply
0 recast
3 reactions
Daniel Lombraña pfp
0 reply
0 recast
3 reactions
Mantej Rajpal pfp
1 reply
2 recasts
5 reactions
Daniel Lombraña pfp
0 reply
0 recast
1 reaction
Mantej Rajpal pfp
1 reply
6 recasts
12 reactions
Ed O'Shaughnessy pfp
1 reply
0 recast
0 reaction
▫️Onyx pfp
🚨 HackManac Reports OpenAI Data Breach! A threat actor is allegedly in possession of login credentials tied to 20 million OpenAI user accounts. A sample dataset has been released, with additional credentials reportedly being sold for a nominal fee. The validity of these claims remains unconfirmed at this time. If you’ve only ever signed in using Google or Apple Single Sign-On (SSO) (meaning you never created a standalone OpenAI password) your risk would be comparatively lower. ChatGPT users around the globe experienced issues with the OpenAI chatbot late Wednesday. *(Translated from original source)* "When I realised that OpenAI might have to verify accounts in bulk, I understood that my password wouldn’t stay hidden. I have more than 20 million access codes to OpenAI accounts. If you want, you can contact me - this is a treasure, and Jesus thinks so too"
0 reply
0 recast
1 reaction