Marc Smeets

@marcoverip.bsky.social

Does a thing or two with red teaming @ Outflank | part time race and drift car instructor

I ran an experiment, simultaneously posting articles on Bluesky and X, and then testing to see how many people actually clicked and read them. The numbers on Bluesky are higher, both because the X algorithm downranks journalism, and because Bluesky attracts readers, not just shitposters.

Once again Saturday at the Monaco F1 GP is just pure awesomeness. Mind blowing how fast these cars go through the streets. Top notch stuff. Congrats to Norris for taking pole position.

Volkswagen fixed vulnerabilities in its mobile app that could allow attackers to hijack user accounts and retrieve car/owner details. The app lacked brute-force protection, stored internal credentials in plaintext, and exposed any car owner's details via a VIN. loopsec.medium.com/hacking-my-c...

Hacking My Car, and probably yours— Security Flaws in Volkswagen’s App

This flaw made me the owner of thousands of cars (sort of).

loopsec.medium.com

Cobalt Strike 4.11.1 is live--this out of band release addresses and issue with module stomping. Additionally, an "enable SSL" checkbox and deprecation warning for stomp loader have been added. Get more details in the blog: www.cobaltstrike.com/blog/out-of-...

Out of Band Update: Cobalt Strike 4.11.1 | Cobalt Strike

4.11.1 fixes a module stomping issue. Additionally, an "enable SSL" checkbox and deprecation warning for stomp loader have been added.

cobaltstrike.com

There's a reason the White House didn't reveal the text of the "agreement" when making their big press splash announcing their agreement: It's a cup of tea without the bag. Congrats to the journos who breathlessly reported on a US-UK deal that isn't. You got played (again).

Justin Wolfers@justinwolfers.bsky.social · last yr.

It's a "deal," not a deal: "This document serves to define the general terms for the EPD that set forth the shared desires of the US and the UK... Both the US and the UK recognize that this document does not constitute a legally binding agreement." ustr.gov/sites/defaul...