White House said to use Rust - ThreatWire
Вставка
- Опубліковано 31 тра 2024
- ⬇️ OPEN FOR LINKS TO ARTICLES TO LEARN MORE ⬇️
Support ThreatWire → / threatwire
@endingwithali →
Twitch: / endingwithali
Twitter: / endingwithali
Everywhere else: links.ali.dev
[❗] ThreatWire Patreon has moved to → / threatwire
0:00 - Intro
0:11 - LockBit Update
1:23 - White House recommends Rust
2:54 - Apple Quantum Safe
4:03 - Outro
LINKS
🔗 Story 1: LockBit Update
www.hackread.com/lockbit-rans...
www.hackread.com/nca-lockbit-...
www.justice.gov/opa/pr/us-and...
therecord.media/lockbit-relau...
www.reuters.com/technology/cy...
🔗 Story 2: White House Recommends Rust
• National Cyber Directo...
www.bleepingcomputer.com/news...
www.whitehouse.gov/oncd/brief...
www.whitehouse.gov/wp-content...
🔗 Story 3: Apple Quantum Safe
security.apple.com/blog/imess...
www.schneier.com/blog/archive...
____________________________________________
Founded in 2005, Hak5's mission is to advance the InfoSec industry. We do this through our award winning educational podcasts, leading pentest gear, and inclusive community - where all hackers belong. - Наука та технологія
I want the Whitehouse to endorse the game Rust
lol yo imagine though, whitehouse and underground map in dc in rust would slap
@@cexeodussecret government bunker... hahah that would be awesome
As a software engineer, I never heard about that whitehouse press release regarding rust, c++ etc. But we just build web apps using PERN stack so probably not the target demo.
After a decade I have never even considered what the Whitehouse recommends. I also don't think many developers are gonna change because of it. 😂
Think of all the time you wasted debating what technology to use with your peers... hahahah
Don't worry. I'm a software engineer who uses c++ pretty exclusively. Everyone who programs with c++ didn't either, and on top of that most laughed when everyone I know heard of it. C++ hasn't been replaced after many decades, and isn't looking to change because the WH begs of it.
Don't worry. She doesn't actually read any of the technical reports. More like just reads the headlines and "reports" it.
@@heyguesswhat_69 you mean the new host?
@@BeWhoYouWant2yeah. I'm not expecting hacker of the year, but she doesn't even give off script kiddie knowledge level. Hak 5 has some decent tools, but is this the best they could find? If I hadn't personally used their tools I wouldn't try them now.
I mean, I was pretty excited to get my hands dirty on rust soon, but coming from white house tends to make me be a bit more skeptical! lol
Try nim
@@FranzAntonMesmer Nice, now I've to read the whole assembly version of my codes :)))
@@glowingone1774thanks for recommending, now i am learning it. rust is to big
The evolution of this videos are pretty impressive. Cheers
Amazing channel loving the news!
I love how she says don't get caught. 😂
Yeah not don't break the law 😂
whaddya know thats the same policy as the IDF
I see it in Google news feeds. Makes me wonder nefarious things are baked into rust when the gov is pushing certainlanguages🤔
It is the first time I have heard of C++ being replaced with ADA. Oh, did I say ADA? I meant Rust:-)
php is the worst when it comes to security
Keep it updated bro
I teach Gov students and this is the first I heard of it and I try to stay abreast of ONCD. I do not think this is the most efficient method of spreading the word, but that's a constant challenge for them.
Hak5 has seriously taken a nose dive off the quality hill.
including minecraft very cool
These were some interesting stories.
I have been recommending Rust for the last 5 years. Specifically , I was mapping CVE's to the program languages, versions, and libraries. This impacts included, user layer applications, operating systems, and protocol standards (ieee Ethernet, Bluetooth, near field, wifi, and much more.
Anything the gov't tells me to do, I'm suspect of.
Forget Rust, everyone should be using HolyC instead
Agreed
💯
RUST MENTIONED POG
This is the 3rd time hearing the white house press release but it does say like programing languages like Rust at the bottom.
apple has numerous backdoors into iphone, so chat security means NOTHING
My cloud was rebuilt in rust to keep the sunlight out of unauthorised drivers eyes.
i miss Shannon :-(
Me too... This lady is so hard to understand if you are no native speaker...
I can see the White House logic, but as a developer I can not agree. There is no language that can even come close to C++, it doesn't have any alternative. And remember any buffer overflow is a bug in the source code, so it's more important to just focus on code quality. I think the real answer is using memory safe APIs, but that is more difficult to do then switching the language. For example always using templates to deduce the array or buffer size is a good way to think about the problem, but only works with a C++ API and not with a C API
That was mint.
This was Jolly smile☺
what happened to the other girl with the cats? she could read and knew about tech - not just reading prompts... damn - you dropped the ball...
Idk why but she does her own UA-cam channel now separate from this.
Good luck with Net Gala!
This is news to me! 🎉
goated cybersec updates
Is the specification (and reference implementation) for Apple's PQ3 protocol publicly available? If not, I'd count it as "security by obscurity" for now.
Whitehouse throwing shade on C and C++ again, become an annual thing.
Edit: Oh my mistake, was the NSA Nov. of 2022.
Throwing shade? Is that eubonics?
@bearwolffish that you bear? She doesn't read the articles.
If someone isn't mem safe in C/C++ by now they deserve what happens.
Rust can ligma
Signal was the first to reach the peak security, whatnot - didn't Apple just make up its own scale and put itself arbitrarily at the top of it?
C is useful for teaching because it does exactly that! I allows you memory access. That is why it's all CS programs and probably not going anywhere.
Check you out, going pro!
what a wild idea, whitehouse
Did Whitehouse say Rust or memory safe?, are Garbage collected languages memory safe?
Big fan of these eye-glasses because my daughter - who told me she "lost all respect of (me)" when I wore the same, says "they look good on her" without any irony. Really? Seriously, though, the grainy AND moving background on text-overs with outline font is quite distracting. No, I've never heard of any announcement from the White House regarding language - or software technique in general. Aren't there plenty of other government agencies who are more suited for such recommendations?
Apple should secure their M3 first
We knew lockbit wouldn't gone long, simply too few arrests for that.
Those of us in the Security sphere have know about Rust for many years (look in any CISSP manual), but Devs don't care, and that's where the push needs to go.
Oh a word to wise, NEVER announce that something is uncrackable. I remember as a nipper being told reversing a hash would take longer than the life time of the Universe... a couple years later my humble laptop could do just that in seconds. Point being, we can only keep kicking the crypto can down the road.
Good job diamond
baad trip on ecstasy in 1999 mitsubishi arrows atrak help!
If they endorse rust and quantum encryption... We should avoid them.
Quantum encryption is the inevitable future of public key crypto. RSA and x25519 will be entirely ineffective against quantum computing eventually. It's important to move on from these protocols now, before they become ineffective to prevent harm in the future.
@@leepicstitch your being played.
@@tacticalcenter8658 ...right. Can't save you from yourself.
@@leepicstitch you don't realize they are lying. That is not safe at all. They always lie.
Really? Echoing Apple's announcement as true valid and good news is not journalism
I like how she reads the script in front of her.
lol
Challenges
For the algorithm
Ayo
As an android user since forever.. I'm impressed by apples software security and it gives me a reason to want to switch
the chips have backdoors... the 'spooks' have been in 'bed' with the tech for ...ever?
PQ3 eh? well....
Uncle
omg rust is a prank
These have become so difficult to watch. 😣
So they can jack into it.
memory safe is great, but hardly addresses the actual problem, lacks or totally lacking network security and or any attempts at updating and maintaining 20-30 year old software stacks, it matters nought whether the industry in general starts shifting towards memory safe languages, or it the existing languages as they are are hardened in that regard, both are viable tracks towards increasing memory safety, and would not require software re-writes, only minor modifications and a re-compile. again, running a major software distribution ( download) outlet on a simple ftp server that had a very trivial password, anyone could perform a man in the middle attack on that, and inject any anything they want into that package, and that wasn't the weakest point in the chain. Running an outdated version of php , like why? memory safely doesn't even get to play here, if you don't keep your systems up to date. running ancient software on ancient windows to control critical infrastructure , yea, tell me about memory safety? update first, set your network security up properly, yada yada yada, nobody listens
adorable
Idgaf what anyone says, you're killing it as the threatwire host!! Woo 🎉
😂 people think vx is one person 😂 wow thats a new thing i never heard 😂
awesome host! thank you
i will never use rust
For a not English native speaker Sharon was much better to understand...
How to destroy a channel jeez...you ever just wonder how some people landed a job?
AVOIDING RUST AT ALL COSTS. COPY THAT.
omg this was hard to watch. girl chill and slow down.
Please, it's not "the Ukraine".
This has been a grammatical correction for over 5 years now and the error is very insulting to Ukrainians if you get it wrong.
The article "the" denotes the noun is part of a larger system and denies independence.
Ukraine was a part of the Soviet Union, that's when the term was correct.
Ukraine has been independent for 30+ years and the only people using the definite article are those that use it to deny Ukraine's independence while it fights a genocidal war!
From the way it’s looking, it won’t be free for long 😂
Also, no one cares about that kind of grammar. She’s just trying to run a podcast
the ukraine is a nazi hotspot(which is why weev ran off there) so I don't care.
imessage proprietary piece of crap
😛😧
Cracks me up about Rust as you can simply use unsafe as many apps have in the past and no different than C. Should we remove knives from households because you could hurt yourself or others or trust you to use the knife to prepare food?
How did PHP ever get to be THE language to use for web programming? It's literally the worst garbage ever.
1st?
kek, i write my software in the langauges i want, wether it be python or made up hyroglyphs as long as it does what it need to it nobody should even care
We care if you want us to use it.
dont worry most of the stuff i write doesnt even leave my machine @@tacticalcenter8658
There is no chance I'm going recommend Rust as a programming language. I'll fire any Senior Developer that even mentions it.
A Whitehouse recommendation just signed a death warrent on Rust. We are all wondering what vulnerabilities the NSA or CIA have slipped into Rust now?
this channel has gone down hill :( i miss the old ways.
Ali gets way hotter every episode
Creepy
@@tacticalcenter8658 Heterosexual
@@coolergappney1943You can be heterosexual without seeming creepy. In fact, that’ll probably lead to not needing to be creepy on the internet because women may actually want to talk to you.
@@NinjaRunningWild Whatever you wanna believe white knight 🤣 if you honestly think commenting on youtube is going to pick you up a girlfriend then you probabaly have you're own issues to contend with before solicitng advice.
Bro💀💀💀
Can we please get a better host!!! I didn't know this was a high school talent show. I thought this was a professional platform
Gosh I hate to say it because she so new, but your kinda right.
If this was the first time seeing this channel , that's what I would have thought.
Ill cut her some slack, Ill just pay attention to the content......for now
Whats so bad ?
@@naesone2653 The problem is that they can't concentrate on the news, and not her.
@@naesone2653She just seems like a giggly valley girl, despite her acumen.
dont need to be so perfectionist, did you get the news? if so, the task is done.
Meanwhile the gov uses languages like ADA on it's own projects. I think rust shot itself in the foot when they went nuclear on their trademark crackdown. Unstable language, unstable management team. You might as well code in Java v.1, we know how secure that turned out to be. Personally I think all non-C languages should compile to C, and then compile to a specific platform. Only then can we see the unmade bed they call a "uniform". Or at least use a compiler we are familiar with and "t-rust"?
You should probably review this prior to posting. A little hard to listen to with so many mispronunciations. Not trying to be rude but you should know.