TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 9 stories
  3. Page 3: TLDR AITLDR AI · 10 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 9 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 14 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 11 stories
  7. Page 7: TLDR DesignTLDR Design · 12 stories
  8. Page 8: TLDR FoundersTLDR Founders · 12 stories
  9. Page 9: TLDR MarketingTLDR Marketing · 10 stories
  10. Page 10: Resources & ToolsTLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Founders · 18 stories
  11. Page 11: SponsoredTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto, TLDR Design, TLDR Founders · 10 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

GENERAL

TLDR InfoSec

TLDR InfoSec

RESTRUCTURING THE BINARY NINJA DECOMPILER

Binary Ninja uses a control graph resolution algorithm to undo compiler optimizations by collapsing conditions to generate code that is more akin to what a programmer would write. Conditional complexity explosion leads to unwieldy conditional expressions in decompiled code, which could lead to the Binary Ninja decompiler in version 4.0 and prior crashing, falling back to adding gotos, or generating unsound or inaccurate code. Binary Ninja added a new set of algorithms to transform the control graph structure to optimize control flow recovery that achieved 100% accuracy in its test suite.

binary.ninja · 12 min

TLDR InfoSec

BYPASSING OKTA'S PASSWORDLESS MFA: TECHNICAL ANALYSIS AND DETECTION

Okta FastPass is a cryptographic MFA that facilitates passwordless authentication by creating a device-bound Proof of Possession factor upon device enrollment. OktaTerrify is a tool that can be used in conjunction with OktaInk in a workflow described in the article to bypass Okta FastPass and backdoor an Okta account on a compromised host. The article also provides examples of detecting this workflow in the Okta audit log.

rezonate.io · 7 min

TLDR InfoSec

HOW TO CREATE A PIPELINE FOR HARDENING AMAZON EKS NODES AND AUTOMATE UPDATES

A blog post from AWS Security on creating a pipeline for hardening EKS nodes. The pipeline uses EC2 Image Builder to apply the CIS benchmarks for Amazon Linux to build a custom image, then uses a State Machine to update the EKS nodes, and finally creates a Lambda function to send a weekly reminder to update if a new base image is available. A CloudFormation template is included in the post.

aws.amazon.com · 5 min

TLDR InfoSec

NEW YORK GOVERNOR SIGNS BILL REGULATING SOCIAL MEDIA ALGORITHMS

Amidst increasing scrutiny on the ways that social media affects mental health, NY Governor Kathy Hochul has signed a bill to regulate how social media algorithms treat users under the age of 18. Under the SAFE For Kids Act, social media platforms will be required to display content chronologically and limit late night notifications for users under the age of 18. The New York Child Data Protection Act will restrict websites from collecting and sharing data without consent for users under the age of 18.

cnn.com · 4 min

TLDR InfoSec

ONNX STORE: PHISHING-AS-A-SERVICE PLATFORM TARGETING FINANCIAL INSTITUTION

This article discusses a Phishing-as-a-Service called ONNX that threat actors are using to orchestrate phishing attacks through embedded QR codes in PDF attachments. NNX Store is suspected to be a rebranded version of the Caffeine phishing kit that offers services like 2FA bypass mechanisms and Cloudflare protection. The platform facilitates the distribution of phishing tools and aids cybercriminals in stealing credentials for financial gain and potential ransomware attacks.

blog.eclecticiq.com · 10 min

TLDR IndexPage 5