Dark mode: ON

Infosec Decoded Season 3 #30: Machine Learning

With @sambowne@infosec.exchange

Apr 14, 2023

Sam Bowne

‘Overemployed’ Hustlers Exploit ChatGPT To Take On Even More Full-Time Jobs
"ChatGPT does like 80 percent of my job," said one worker. Another is holding the line at four robot-performed jobs. "Five would be overkill," he said.

Machine Learning Projects With Videos
At RSA in Dark Arts Village on Thursday Morning

Meet PassGAN, the supposedly “terrifying” AI password cracker that’s mostly hype
AI cracking is on par with conventional methods. It generates password guesses after autonomously learning the distribution of passwords by processing the spoils of previous real-world breaches.

I built a Zero Day virus with undetectable exfiltration using only ChatGPT prompts
Very weak stuff, demonstrating nothing more than Stack Exchange-level coding assistance. Only notable because Fox News has a screaming panic headline about it as clickbait.

HBOT Linked to Significant Reduction in PTSD Symptoms
Hyperbaric oxygen therapy (HBOT) demonstrated a significant drop in post-traumatic stress disorder (PTSD) symptoms and suicidal ideation in a new study of military personnel, according to a study published in Medical Gas Research.

Irrigation Systems in Israel Disrupted by Hacker Attacks on ICS
Farms were warned by Israel’s National Cyber Directorate prior to the incident, being instructed to disable remote connections to these systems due to the high risk of cyberattacks. Roughly a dozen farms in the Jordan Valley and other areas failed to do so and had their water controllers hacked. This led to automated irrigation systems being temporarily disabled, forcing farmers to turn to manual irrigation. The impacted farms likely left their ICS exposed to the internet and used default passwords, allowing hackers to easily gain access.

Short-Form Videos Degrade Our Capacity to Retain Intentions: Effect of Context Switching On Prospective Memory
We conducted a between-subjects experiment (N=60) investigating the impact of engaging with TikTok, Twitter, and YouTube while performing a Prospective Memory task (i.e., executing a previously planned action). The study required participants to remember intentions over interruptions. We found that the TikTok condition significantly degraded the users' performance in this task. None of the other conditions (Twitter, YouTube, no activity) had a similar effect.

By popular demand: Windows LAPS available now!
Local Administrator Password Solution is used to manage the password of a specified local administrator account by regularly rotating the password and backing it up to Active Directory (AD).

Hijacking Arch Linux Packages by Repo Jacking GitHub Repositories
Repo jacking is an attack on GitHub repositories, where attackers are able to hijack GitHub repositories by reregistering previously used usernames. In short, when a GitHub user renames their account, others are able to reregister the original username and create repositories previously created by the original user. This effectively hijacks the repositories of the original user, without their knowledge. This is called repo jacking.