TLDR Index
Daily Editions
Contents
  1. Page 1: Today’s IndexTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Crypto · 9 stories
  2. Page 2: TLDRTLDR · 8 stories
  3. Page 3: TLDR AITLDR AI · 12 stories
  4. Page 4: TLDR Web DevTLDR Web Dev · 9 stories
  5. Page 5: TLDR InfoSecTLDR InfoSec · 12 stories
  6. Page 6: TLDR CryptoTLDR Crypto · 11 stories
  7. Page 7: TLDR DesignTLDR Design · 11 stories
  8. Page 8: TLDR FoundersTLDR Founders · 12 stories
  9. Page 9: TLDR MarketingTLDR Marketing · 11 stories
  10. Page 10: Resources & ToolsTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Design, TLDR Founders · 12 stories
  11. Page 11: SponsoredTLDR, TLDR AI, TLDR Web Dev, TLDR InfoSec, TLDR Founders, TLDR Marketing · 9 stories
?
Keyboard shortcuts
← / →
Previous / next page
↑ / ↓
Scroll while full screen
PgUp / PgDn
Scroll by viewport
Space
Scroll down by viewport
Shift+Space
Scroll up by viewport
Home
First page
End
Last page
F
Full screen
Escape
Exit immersive mode

Daily Edition · Page 5

THE DAILY INDEX

Technology, AI, software, security, crypto and business

ATTACKS & VULNERABILITIES

TLDR InfoSec

TLDR InfoSec

BITLOCKER STALE RECOVERY KEY CLEANUP: NO MORE SILENT ENCRYPTION FAILURES

The author discusses how they discovered a new unannounced BitLocker feature in a Windows Insider Preview build that automatically cleans up stale recovery keys when the 200-key limit is reached in Microsoft Entra ID. Using IDA Pro to analyze the fveskybackup.dll file, along with Fiddler and ETL traces for monitoring API calls, the author uncovered two critical functions that handle the automatic deletion of stale recovery keys in batches of 16. This discovery points to the resolution of a long-standing issue where silent encryption would fail when hitting the key limit, eliminating the need for manual cleanup by IT administrators once the feature reaches general availability.

patchmypc.com · 7 min

TLDR InfoSec

IMPLEMENTING CLUSTERING WORKFLOWS IN ELASTIC TO ENHANCE SEARCH RELEVANCE

This blog post from Elastic walks through how machine learning models, particularly clustering techniques like k-means can be utilized in the ELK stack to improve search relevance by grouping similar documents together. To demonstrate this, the post uses a 20 Newsgroups dataset and OpenAI's text-embedding-ada-002 model, and demonstrates that clear cluster separation and accurate clustering results were achieved. The workflow showcased in this blog allows Elastic users to easily implement advanced clustering techniques for various applications, showing high performance and potential for further enhancements.

elastic.co · 7 min

TLDR InfoSec

OFFENSIVE KERBEROS TECHNIQUES FOR DETECTION ENGINEERING

As the successor to NTLM, Kerberos is the most widely used authentication mechanism for Active Directory. This article presents an in-depth overview of different attacks like Kerberoasting, unconstrained delegation, constrained delegation, and others against Kerberos and methods for detection and mitigation. Each attack includes necessary background information, a description of the attack and potential impact, and strategies for detecting the attack.

medium.com · 17 min

TLDR InfoSec

RESEARCHER OUTSMARTS, JAILBREAKS OPENAI'S NEW O3-MINI

A security researcher, Eran Shimony has successfully bypassed OpenAI's new "deliberative alignment" safety feature in o3-mini, getting it to provide Windows exploit instructions by posing as a historian. According to Shimony, OpenAI's models are particularly susceptible to natural language social engineering attacks, while Meta's Llama models are instead vulnerable to ASCII art-encoded malicious prompts, and Claude is most vulnerable to generating harmful code because it doesn't effectively classify code's potential malicious uses.

darkreading.com · 4 min

TLDR IndexPage 5