08:15 <pie_> for your consideration https://www.zdnet.com/article/google-reveals-sophisticated-windows-android-hacking-operation/ https://googleprojectzero.blogspot.com/2021/01/introducing-in-wild-series.html

08:16 <pie_> you want the latter deeplink tbh

08:16 <pie_> partnering with the Google Threat Analysis Group (TAG), one of the first results of this initiative was the discovery of a watering hole attack in Q1 2020 performed by a highly sophisticated actor.

08:16 <pie_> Unfortunately, public 0-day reports rarely include captured exploits, which could provide invaluable insight into exploitation techniques and design decisions made by real-world attackers. In addition, we believe there to be a gap in the security community’s ability to detect 0-day exploits." "Therefore, Project Zero has recently launched our own initiative aimed at researching new ways to detect 0-day exploits in the wild. Through

08:17 <pie_> We discovered two exploit servers delivering different exploit chains via watering hole attacks. One server targeted Windows users, the other targeted Android. Both the Windows and the Android servers used Chrome exploits for the initial remote code execution. The exploits for Chrome and Windows included 0-days. For Android, the exploit chains used publicly known n-day exploits. Based on the actor's sophistication, we think it's likely that

08:17 <pie_> they had access to Android 0-days, but we didn't discover any in our analysis. [...] We understand this attacker to be operating a complex targeting infrastructure, though it didn't seem to be used every time. [...] We believe that teams of experts have designed and developed these exploit chains. We hope this blog post series provides others with an in-depth look at exploitation from a real world, mature, and presumably well-resourced

08:17 <pie_> actor.

08:18 <pie_> hm strange, isnt this actually news from yesterday? :P

17:59 <pie_> I wonder if one of these days google is going to end up writing their own font renderer

21:11 <pie_> does anyone have a threat model for text editors?

21:11 <pie_> https://github.com/zyedidia/micro/pull/1451

23:11 <ashkitten> pie_: didn't they already write their own font renderer?

23:11 <ashkitten> skia