#DFIR with a lot of focus on the IR part. Cellist, NASA Alum, Parrot lover, USAR & EMS do-er. BlueSky is @amuse.bsky.social
- Tweets 207
- Following 769
- Followers 7,029
- Likes 14,608
Now that AT&T has lost all our social security numbers in a data breach, this is a great time for regulators to NOT ask what they should have done to secure it better, but why the phone company needed your SSN in the first place.
417
6,914
59,296
3,557,006
Whoever hacked the @internetarchive needs to know that you've done the equivalent of pulling off a bank heist at a public library.
Nobody expected them to be high security, you haven't impressed anyone, and you're a jerk for messing with a public good.
55
4,119
26,526
427,185
I have a folder on my desktop named "Old Desktop"
Inside which is a bunch of stuff and a folder named "Old Desktop"
Inside which is still more stuff and a folder named "Old Desktop"
I don't even know how many layers deep it goes at this point.
555
568
10,092
568,219
Boy: I LOVE YOU
Girl: I HAVE A BOYFRIEND
Boy: SUDO I LOVE YOU
Girl: BOY IS NOT IN THE SUDOERS FILE. THIS INCIDENT WILL BE REPORTED. nitter.app/addelindh/status/97043…
63
2,183
6,526
I didn't "Become a manager", I "Was given a pay raise in exchange for agreeing to never write code again"
46
397
6,734
Time and time again, after we are told by police that they need surveillance and drones and encryption backdoors and facial recognition to keep us safe, a major event will happen that it turns out the police had specific, credible warnings about and just didn't act.
Nashville bomber's girlfriend warned police last year he was making explosives, reports show hill.cm/f2bcCYR
29
2,160
5,650
Every once in a while I'm reminded that dnsmasq, a lightweight DNS and DHCP server that's bundled into *almost every IOT thing and Linux distro*, is a hobby project maintained by one guy in the UK named Simon.
Nobody pays him and he doesn't get near the thanks he deserves.
45
663
5,525
457,383
OK What scam is this?
It's an AirBNB listing that asks me to sign this "Rental agreement" outside of the @Airbnb platform. The rental agreement appears to be... incorporating me as a temporary company for the purposes of marketing the home for sale???
69
182
4,094
797,777
Vendor: "Please have your DNS provider contact us."
Me: "I'm my DNS provider."
V: "No, the people who run the nameservers."
Me: "I run my nameserver."
V: "No not the data entry part, the people who actually provide the DNS service."
Me: "I do it. On a server."
V: "No, ...."
67
231
3,908
Is it just me or does this thing have either too many wheels on one side or not enough wheels on the other?
Is it being designed by Renault?
111
106
2,972
231,222
What's old is new again
AWS unveils the Amazon WorkSpaces Thin Client, a $195 compact computer resembling a Fire TV Cube that's meant for workers to access cloud-based virtual desktops (Maria Deutscher / SiliconANGLE)
siliconangle.com/2023/11/26/…
techmeme.com/231126/p9#a2311…
49
340
2,397
283,227
InfoSec is:
Ten percent luck
Twenty percent tools
Fifteen percent making sense of government rules
Five percent python
Fifty percent pain
And a hundred percent learning how to clearly explain
38
420
2,168
Forensics is about to get even more interesting.
"Yes those downloads were done by the user account, in their browser and by their session, but they claim the AI did it."
Claude just shipped “Computer Use” which allows an LLM to control your computer and do arbitrary things like browse websites, download and run files, and more.
A slew of startups doing browser agents feel obsolete overnight.
Seriously cool stuff.
21
124
1,030
65,586
I asked them what IP I should put in an A record and they said "Just have your provider point your DNS servers to us."
And I said "But then mail won't be delivered. You don't need to own my MX records."
And they were like "what the hell is an MX record, you just need to..."
20
13
742
2008: "I use a VPN to hide my traffic so the government can't spy on me."
2018: "I use a VPN because the internet is a regulatorily balkanized mess and I just wanted to read the news while visiting a different office."
14
282
674
PSA for Cybersecurity folk: Our co-workers are tired of being "tricked" by phishing exercises y'all, and it is making them hate us for no benefit.
I have many thoughts that won't fit in a (non-bluecheck) tweet, so you can find them here:
security.googleblog.com/2024…
35
159
597
119,263
DMARC is great. You take the simple and uncomplicated SMTP protocol, then add the simplicity and reliability of DNS! Throw in DKIM for public cryptography and you've got the unholy triumvirate of things only ancient, sun-deprived nerds care to understand or deal with.
43
53
574
29,831
Is your teen old enough to start getting invited to parties or concerts with friends? Mine is, so I made her a "Your friends are old enough to do stupid things" 2024 edition care package.
24
40
537
51,025
If you are relatively junior in tech and learning about the community by watching the behavior of seniors, please please please understand: Being technically right is 30% of the battle. Being right without being a jerk is 70%.
11
101
498
Today the security guard at Disneyland spent quite a long time trying to unfold my Yubikey into a pocket knife. Those capacitive touch sensors really fooled him!
15
18
531
47,562