Updates tagged with infosec on Rainbow Dash Network!
rozzin: Conversations with kids, about #umwelt, #superpowers, and #infosec: "Why are they looking at me?" "Because they heard you fart." "Whhhhat do you mean?!?!" "Hearing people can hear farts." … https://www.jwz.org/blog/2018/11/tell-them-to-stop-listening-to-my-farts/ !education !parenting #poop !security
rozzin's status on Wednesday, 21-Nov-18 18:55:42 UTC
Conversations with kids, about #umwelt, #superpowers, and #infosec: "Why are they looking at me?" "Because they heard you fart." "Whhhhat do you mean?!?!" "Hearing people can hear farts." … https://www.jwz.org/blog/2018/11/tell-them-to-stop-listening-to-my-farts/ !education !parenting #poop !security
moonman: actual article https://cherryposter.club/attachment/2509489 #Pokemon #CyberSecurity #Infosec #Paninis
moonman's status on Monday, 15-Oct-18 14:36:58 UTC
actual article https://mangoposter.club/attachment/2509489 #Pokemon #CyberSecurity #Infosec #Paninis
mcscx2: @hoergen allerdings: auch sofern ein Ausschaltknopf da ist weiß man trotzdem nicht, ob das Gerät (z. B. iPhone) wirklich aus ist. Zum Beispiel könnte ein Mobiltelefon 1x täglich (unauffällig, ohne Display) hochfahren und schauen, ob es Anweisungen des Herstellers herunterzuladen gibt und sich wieder ausschalten. Es werden ja schon lange keine die-Stromversorgung-physisch-trennenden Schalter mehr verwendet. !infosec
mcscx2's status on Sunday, 10-Jun-18 10:28:35 UTC
@hoergen allerdings: auch sofern ein Ausschaltknopf da ist weiß man trotzdem nicht, ob das Gerät (z. B. iPhone) wirklich aus ist. Zum Beispiel könnte ein Mobiltelefon 1x täglich (unauffällig, ohne Display) hochfahren und schauen, ob es Anweisungen des Herstellers herunterzuladen gibt und sich wieder ausschalten. Es werden ja schon lange keine die-Stromversorgung-physisch-trennenden Schalter mehr verwendet. !infosec
mmn: RT @rysiek With all my gripes with# Signal (centralized, non-federated, server-based, Electron-based desktop app), the fact that in my circle of contacts it's not longer the "pretty good solution we should be using" but the "pretty good solution we are using but looking for something better" is such a win.I just wanted to stop for a second and appreciate that.If we're talking about the need to move to something better than Signal, we are in a pretty decent place.#infosec
mmn's status on Thursday, 24-May-18 05:48:55 UTC
RT @rysiek With all my gripes with# Signal (centralized, non-federated, server-based, Electron-based desktop app), the fact that in my circle of contacts it's not longer the "pretty good solution we should be using" but the "pretty good solution we are using but looking for something better" is such a win.I just wanted to stop for a second and appreciate that.If we're talking about the need to move to something better than Signal, we are in a pretty decent place.#infosec
rysiek: With all my gripes with# Signal (centralized, non-federated, server-based, Electron-based desktop app), the fact that in my circle of contacts it's not longer the "pretty good solution we should be using" but the "pretty good solution we are using but looking for something better" is such a win.I just wanted to stop for a second and appreciate that.If we're talking about the need to move to something better than Signal, we are in a pretty decent place.#infosec
rysiek's status on Wednesday, 23-May-18 17:33:38 UTC
With all my gripes with# Signal (centralized, non-federated, server-based, Electron-based desktop app), the fact that in my circle of contacts it's not longer the "pretty good solution we should be using" but the "pretty good solution we are using but looking for something better" is such a win. I just wanted to stop for a second and appreciate that. If we're talking about the need to move to something better than Signal, we are in a pretty decent place. #infosec
mmn: RT @rysiek Oh boy. https://github.com/signalapp/Signal-Desktop/issues/1635tl;dr Signal Desktop is based on Electron, which in turn is based on Chromium 58-59, and it seems to be affected by bugs that have been fixed in Chrome/Chromium 60-62.Gotta love #Electron. As somebody said "now everyone is running 5 different instances of old insecure versions of the most scrutinized and attacked application on Earth."#InfoSec
mmn's status on Wednesday, 16-May-18 13:20:24 UTC
RT @rysiek Oh boy. https://github.com/signalapp/Signal-Desktop/issues/1635tl;dr Signal Desktop is based on Electron, which in turn is based on Chromium 58-59, and it seems to be affected by bugs that have been fixed in Chrome/Chromium 60-62.Gotta love #Electron. As somebody said "now everyone is running 5 different instances of old insecure versions of the most scrutinized and attacked application on Earth."#InfoSec
rysiek: Oh boy. https://github.com/signalapp/Signal-Desktop/issues/1635tl;dr Signal Desktop is based on Electron, which in turn is based on Chromium 58-59, and it seems to be affected by bugs that have been fixed in Chrome/Chromium 60-62.Gotta love #Electron. As somebody said "now everyone is running 5 different instances of old insecure versions of the most scrutinized and attacked application on Earth."#InfoSec
rysiek's status on Saturday, 12-May-18 12:56:59 UTC
Oh boy. https://github.com/signalapp/Signal-Desktop/issues/1635 tl;dr Signal Desktop is based on Electron, which in turn is based on Chromium 58-59, and it seems to be affected by bugs that have been fixed in Chrome/Chromium 60-62. Gotta love #Electron. As somebody said "now everyone is running 5 different instances of old insecure versions of the most scrutinized and attacked application on Earth." #InfoSec
moonman: RT @thehatter The office has hundreds of thousands of dollars in computer equipment sitting in open cubes but the extra paper towels and tissue boxes are locked up. #infosec
moonman's status on Monday, 07-May-18 17:04:00 UTC
RT @thehatter The office has hundreds of thousands of dollars in computer equipment sitting in open cubes but the extra paper towels and tissue boxes are locked up. #infosec
thehatter: The office has hundreds of thousands of dollars in computer equipment sitting in open cubes but the extra paper towels and tissue boxes are locked up. #infosec
thehatter's status on Monday, 07-May-18 16:45:59 UTC
The office has hundreds of thousands of dollars in computer equipment sitting in open cubes but the extra paper towels and tissue boxes are locked up. #infosec
akionux: RT @aaron Comodo revoked TLS certificates for some Sci-Hub domains:https://torrentfreak.com/sci-hub-pirate-bay-for-science-security-certs-revoked-by-comodo-ca-180503/#science #infosec
akionux's status on Thursday, 03-May-18 22:38:17 UTC
RT @aaron Comodo revoked TLS certificates for some Sci-Hub domains:https://torrentfreak.com/sci-hub-pirate-bay-for-science-security-certs-revoked-by-comodo-ca-180503/#science #infosec
moonman: RT @aaron Comodo revoked TLS certificates for some Sci-Hub domains:https://torrentfreak.com/sci-hub-pirate-bay-for-science-security-certs-revoked-by-comodo-ca-180503/#science #infosec
moonman's status on Thursday, 03-May-18 22:19:38 UTC
aaron: Comodo revoked TLS certificates for some Sci-Hub domains:https://torrentfreak.com/sci-hub-pirate-bay-for-science-security-certs-revoked-by-comodo-ca-180503/#science #infosec
aaron's status on Thursday, 03-May-18 21:57:48 UTC
Comodo revoked TLS certificates for some Sci-Hub domains: https://torrentfreak.com/sci-hub-pirate-bay-for-science-security-certs-revoked-by-comodo-ca-180503/ #science #infosec
therubackup: RT @jerry Defensive Security Podcast Episode 216 http://defensivesecurity.org/defensive-security-podcast-episode-216/ infosec
therubackup's status on Saturday, 21-Apr-18 19:46:40 UTC
RT @jerry Defensive Security Podcast Episode 216 http://defensivesecurity.org/defensive-security-podcast-episode-216/ infosec
jerry: Defensive Security Podcast Episode 216http://defensivesecurity.org/defensive-security-podcast-episode-216/#infosec
jerry's status on Saturday, 21-Apr-18 19:42:24 UTC
Defensive Security Podcast Episode 216 http://defensivesecurity.org/defensive-security-podcast-episode-216/ #infosec
moonman: RT @tengu Long story short:#easterhegg #infosec
moonman's status on Sunday, 01-Apr-18 14:15:32 UTC
RT @tengu Long story short:#easterhegg #infosec
tengu: Long story short: #easterhegg #infosec
tengu's status on Sunday, 01-Apr-18 12:59:35 UTC
Long story short: #easterhegg #infosec
therubackup: RT @jerry Defensive Security Podcast Episode 214 http://defensivesecurity.org/defensive-security-podcast-episode-214/ infosec
therubackup's status on Thursday, 29-Mar-18 04:08:29 UTC
RT @jerry Defensive Security Podcast Episode 214 http://defensivesecurity.org/defensive-security-podcast-episode-214/ infosec
jerry: Defensive Security Podcast Episode 214http://defensivesecurity.org/defensive-security-podcast-episode-214/#infosec
jerry's status on Thursday, 29-Mar-18 01:13:28 UTC
Defensive Security Podcast Episode 214 http://defensivesecurity.org/defensive-security-podcast-episode-214/ #infosec
mcscx: RT @rysiek Oh... wow:https://arstechnica.com/gaming/2018/02/flight-sim-devs-say-hidden-password-dump-tool-was-used-to-fight-pirates/Flig ...
mcscx's status on Monday, 19-Feb-18 23:42:35 UTC
RT @rysiek Oh... wow:https://arstechnica.com/gaming/2018/02/flight-sim-devs-say-hidden-password-dump-tool-was-used-to-fight-pirates/Flig ...
rysiek: Oh... wow:https://arstechnica.com/gaming/2018/02/flight-sim-devs-say-hidden-password-dump-tool-was-used-to-fight-pirates/Flight-sim devs say hidden password-dump tool was used to fight piratesInstaller ran a "Chrome Password Dump" tool on copies suspected of piracy.#InfoSec #WhatTheapple
rysiek's status on Monday, 19-Feb-18 16:55:15 UTC
Oh... wow: https://arstechnica.com/gaming/2018/02/flight-sim-devs-say-hidden-password-dump-tool-was-used-to-fight-pirates/ Flight-sim devs say hidden password-dump tool was used to fight pirates Installer ran a "Chrome Password Dump" tool on copies suspected of piracy. #InfoSec #WhatThekiwi
therubackup: this seems neat https://jerrygamblin.com/2017/06/12/quickly-building-a-cloud-virtual-lab/ #infosec
therubackup's status on Sunday, 18-Feb-18 16:00:33 UTC
this seems neat https://jerrygamblin.com/2017/06/12/quickly-building-a-cloud-virtual-lab/ #infosec
mcscx: RT @galaxis Can't find an english language news source for this, but it seems that #Microsoft Defender is flagging files that conta ...
mcscx's status on Saturday, 03-Feb-18 12:02:01 UTC
RT @galaxis Can&apos;t find an english language news source for this, but it seems that #Microsoft Defender is flagging files that conta ...
galaxis: Can't find an english language news source for this, but it seems that #Microsoft Defender is flagging files that contain short strings (like "Squeamish Ossifrage" or "malicious_x = %p") from the #Spectre PoC as malware: https://m.heise.de/security/meldung/Microsoft-stuft-das-PoC-Programm-zu-Spectre-als-boesartig-ein-3959995.html This is obviously useless for actual threat detection, so are they trying to find people who are playing with the PoC code? #infosec
galaxis's status on Saturday, 03-Feb-18 11:55:51 UTC
Can't find an english language news source for this, but it seems that #Microsoft Defender is flagging files that contain short strings (like "Squeamish Ossifrage" or "malicious_x = %p") from the #Spectre PoC as malware: https://m.heise.de/security/meldung/Microsoft-stuft-das-PoC-Programm-zu-Spectre-als-boesartig-ein-3959995.html This is obviously useless for actual threat detection, so are they trying to find people who are playing with the PoC code? #infosec
hfaust: RT @rysiek #Google breaks the embargo on #kiwiWIT: https://gs.smuglo.li/url/1114888 #Meltdown and #Spectre:https://spectreattack.com/spectre.pdfhttps://meltdownattack.com/meltdown.pd#Infosec #Intel
hfaust's status on Thursday, 04-Jan-18 00:40:34 UTC
RT @rysiek #Google breaks the embargo on #kiwiWIT: <a href="https://googleprojectzero.blogspot.pt/2018/01/reading-privileged-memory-with-side.htmlhttps://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlMeet" title="https://googleprojectzero.blogspot.pt/2018/01/reading-privileged-memory-with-side.htmlhttps://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlMeet" rel="nofollow external noreferrer" class="attachment">https://gs.smuglo.li/url/1114888 #Meltdown and #Spectre:https://spectreattack.com/spectre.pdfhttps://meltdownattack.com/meltdown.pd#Infosec #Intel
moonman: RT @rysiek #Google breaks the embargo on #bananaWIT: https://kiwiposter.club/url/1419232 #Meltdown and #Spectre:https://spectreattack.com/spectre.pdfhttps://meltdownattack.com/meltdown.pd#Infosec #Intel
moonman's status on Wednesday, 03-Jan-18 23:48:20 UTC
RT @rysiek #Google breaks the embargo on #papayaWIT: <a href="https://googleprojectzero.blogspot.pt/2018/01/reading-privileged-memory-with-side.htmlhttps://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlMeet" title="https://googleprojectzero.blogspot.pt/2018/01/reading-privileged-memory-with-side.htmlhttps://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlMeet" class="attachment" rel="nofollow external">https://Potato Knishesposter.club/url/1419232 #Meltdown and #Spectre:https://spectreattack.com/spectre.pdfhttps://meltdownattack.com/meltdown.pd#Infosec #Intel
rysiek: #Google breaks the embargo on #Fluffle PuffWIT: https://googleprojectzero.blogspot.pt/2018/01/reading-privileged-memory-with-side.html https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.htmlMeet #Meltdown and #Spectre: https://spectreattack.com/spectre.pdf https://meltdownattack.com/meltdown.pd#Infosec #Intel
rysiek's status on Wednesday, 03-Jan-18 23:39:00 UTC
#Google breaks the embargo on #appleWIT: https://googleprojectzero.blogspot.pt/2018/01/reading-privileged-memory-with-side.html https://security.googleblog.com/2018/01/todays-cpu-vulnerability-what-you-need.html Meet #Meltdown and #Spectre: https://spectreattack.com/spectre.pdf https://meltdownattack.com/meltdown.pd #Infosec #Intel
archaeme: RT @munin Yo #infosec - new malware, "Petya"It's wcry again, but with the killswitch taken out and some phishing initial delivery.And by "it's wcry again" I mean it. Same exploit. Same traffic. Same everything. If your org bothered patching or mitigating, then this won't affect you.
archaeme's status on Tuesday, 27-Jun-17 20:36:46 UTC
RT @munin Yo #infosec - new malware, "Petya"It's wcry again, but with the killswitch taken out and some phishing initial delivery.And by "it's wcry again" I mean it. Same exploit. Same traffic. Same everything. If your org bothered patching or mitigating, then this won't affect you.
munin: Yo #infosec - new malware, "Petya"It's wcry again, but with the killswitch taken out and some phishing initial delivery.And by "it's wcry again" I mean it. Same exploit. Same traffic. Same everything. If your org bothered patching or mitigating, then this won't affect you.
munin's status on Tuesday, 27-Jun-17 16:03:15 UTC
Yo #infosec - new malware, "Petya" It's wcry again, but with the killswitch taken out and some phishing initial delivery. And by "it's wcry again" I mean it. Same exploit. Same traffic. Same everything. If your org bothered patching or mitigating, then this won't affect you.
mcscx: RT @rysiek Apart from ideological arguments (with which I largely agree), are there any concrete reasons/arguments to use #VeraCrypt ful ...
mcscx's status on Monday, 15-May-17 10:04:21 UTC
RT @rysiek Apart from ideological arguments (with which I largely agree), are there any concrete reasons/arguments to use #VeraCrypt ful ...
rysiek: Apart from ideological arguments (with which I largely agree), are there any concrete reasons/arguments to use #VeraCrypt full disk encryption for #Windows, rather than the integrated #BitLocker?#InfoSec
rysiek's status on Monday, 15-May-17 09:57:37 UTC
Apart from ideological arguments (with which I largely agree), are there any concrete reasons/arguments to use #VeraCrypt full disk encryption for #Windows, rather than the integrated #BitLocker? #InfoSec
cyberkiller: RT @bobjonkman ♻ @JimHarris: LOVE THIS Cartoon! Why Security & Privacy Are Essential Given The Explosion Of Data Today #BigData #infosec ...
cyberkiller's status on Monday, 15-May-17 05:58:02 UTC
RT @bobjonkman ♻ @JimHarris: LOVE THIS Cartoon! Why Security & Privacy Are Essential Given The Explosion Of Data Today #BigData #infosec ...
mcscx: RT @bobjonkman ♻ @JimHarris: LOVE THIS Cartoon! Why Security & Privacy Are Essential Given The Explosion Of Data Today #BigData #infosec ...
mcscx's status on Sunday, 14-May-17 21:47:28 UTC
bobjonkmanformer: ♻ @JimHarris: LOVE THIS Cartoon! Why Security & Privacy Are Essential Given The Explosion Of Data Today #BigData #infosec #CyberSecurity #SAPPHIRENOW https://cdn.andertoons.com/img/toons/cartoon6410.png ♻ via #Twitter !privacy
bobjonkmanformer's status on Sunday, 14-May-17 19:16:42 UTC
♻ @JimHarris: LOVE THIS Cartoon! Why Security & Privacy Are Essential Given The Explosion Of Data Today #BigData #infosec #CyberSecurity #SAPPHIRENOW https://cdn.andertoons.com/img/toons/cartoon6410.png ♻ via #Twitter !privacy
internetturtle: RT @lambadalambda #infosec https://social.heldscal.la/attachment/410580
internetturtle's status on Tuesday, 09-May-17 21:05:15 UTC
RT @lambadalambda #infosec https://social.heldscal.la/attachment/410580
takeshitakenji: RT @lambadalambda #infosec https://social.heldscal.la/attachment/410580
takeshitakenji's status on Friday, 28-Apr-17 16:08:31 UTC
delores: RT @lambadalambda #infosec https://social.heldscal.la/attachment/410580
delores's status on Friday, 28-Apr-17 16:06:51 UTC
lambadalambda: #infosec https://social.heldscal.la/attachment/410580
lambadalambda's status on Friday, 28-Apr-17 15:53:44 UTC
#infosec https://social.heldscal.la/attachment/410580
internetturtle: RT @ross Hey #infosec mastodonites, I was offline during the rust past couple days. Let me know who you are so I can follow!
internetturtle's status on Thursday, 06-Apr-17 14:25:45 UTC
RT @ross Hey #infosec mastodonites, I was offline during the rust past couple days. Let me know who you are so I can follow!
ross: Hey #infosec mastodonites, I was offline during the rust past couple days. Let me know who you are so I can follow!
ross's status on Thursday, 06-Apr-17 14:23:00 UTC
Hey #infosec mastodonites, I was offline during the rust past couple days. Let me know who you are so I can follow!
moonman: https://bananaposter.club/attachment/537838 #Infosec #CaliforniaRaisins #RaisinFandom
moonman's status on Tuesday, 04-Apr-17 20:33:45 UTC
https://grapeposter.club/attachment/537838 #Infosec #CaliforniaRaisins #RaisinFandom
takeshitakenji: RT @moonman http://u.daggsy.com/1jA #Infosec #Smokey
takeshitakenji's status on Monday, 03-Apr-17 22:58:08 UTC
RT @moonman http://u.daggsy.com/1jA #Infosec #Smokey
mcscx: RT @maloki @brokep @mmasnick I hollered at some #Infosec people earlier that they should set up another instance or two :>
mcscx's status on Monday, 03-Apr-17 22:51:23 UTC
RT @maloki @brokep @mmasnick I hollered at some #Infosec people earlier that they should set up another instance or two :>
moonman: https://Fluffle Puffposter.club/attachment/559271 #Infosec #Smokey
moonman's status on Monday, 03-Apr-17 22:27:33 UTC
https://FrankerZposter.club/attachment/559271 #Infosec #Smokey
moonman: https://Fluffle Puffposter.club/attachment/537866 #Infosec #Ernest
moonman's status on Monday, 03-Apr-17 22:26:57 UTC
https://papayaposter.club/attachment/537866 #Infosec #Ernest
maloki: @brokep @mmasnick I hollered at some #Infosec people earlier that they should set up another instance or two :>
maloki's status on Monday, 03-Apr-17 21:46:03 UTC
@brokep @mmasnick I hollered at some #Infosec people earlier that they should set up another instance or two :>
sl: What's the point of personal user accounts, if everyone knows all the passwords. I just encountered this situation. I'll be blogging about this when the project is over, but I can't go into any details right now. But the question remains very valid. Why? Before anyone asks: 1) No there's no 2FA. 2) You can't change your personal password. 3) All you need to access the system is username and password Conclusion: If my personal account is closed for whatever reason, I can use any other account just as well. Only good thing I find about this case, is that the pre-assigned passwords are proper, and not something like defaultpwd or so. I'm sure we've all seen those. #personal #password #management #user #identitymanagement #security #absurd #funny #strange #it #sysadmin #infosec
sl's status on Saturday, 17-Dec-16 07:02:59 UTC
What's the point of personal user accounts, if everyone knows all the passwords. I just encountered this situation. I'll be blogging about this when the project is over, but I can't go into any details right now. But the question remains very valid. Why? Before anyone asks: 1) No there's no 2FA. 2) You can't change your personal password. 3) All you need to access the system is username and password Conclusion: If my personal account is closed for whatever reason, I can use any other account just as well. Only good thing I find about this case, is that the pre-assigned passwords are proper, and not something like defaultpwd or so. I'm sure we've all seen those. #personal #password #management #user #identitymanagement #security #absurd #funny #strange #it #sysadmin #infosec
kzimmermann: @couldbeworse very interesting! I will definitely read up on it. I love to know more and more about #InfoSec
kzimmermann's status on Wednesday, 31-Aug-16 00:37:40 UTC
@couldbeworse very interesting! I will definitely read up on it. I love to know more and more about #InfoSec
mcscx: Windows + WinWord + Mitarbeiter die per Mail eingegangene Word-Dateien ausführen — hoffentlich gibt das nicht auch im Atomkraftwerk #infosec
mcscx's status on Tuesday, 05-Jan-16 20:14:52 UTC
Windows + WinWord + Mitarbeiter die per Mail eingegangene Word-Dateien ausführen — hoffentlich gibt das nicht auch im Atomkraftwerk #infosec