Bacon (@Bacon) profile picture

I do stuff. a lot of it has to do with engineering and technology in one way or another.

Joined February 2007
Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)Photo by Bacon (@Bacon)
You should buy a hot tub.
3
2
1
4
That was a two person dingleberry.
4
1
3
Changing my teams name to
21
145
25
1,063
Trees are pretty rad.
1
*You* get a javelin, and *you* get a javelin. Everybody gets a javaliiiiiin!
2
1
17
I think I can attribute a lot my professional success (although possibly not happiness) to disliking ambiguity.
2
Let it be known: I have crafted a zesty dipping sauce.
1
4
Emergency maintenance to the printing server.
1
… and that is how we taught them an important lesson about UTF-8
I accidentally the whole thing.
1
3
“We breached a single point of control that you chose to trust completely” software has bugs. Sometimes those bugs get fixed quickly, sometimes they don’t. Build a system that reflects and embraces that reality.
Replying to @campuscodi
I can just imagine how that pentest report went. Red Team: We successfully broke through your perimeter then laterally moved till we finished our scope. Customer: How though? We were fully patched, everything configured properly and none of our tools alerted?
100% this. If you’re upset by this, you should really sit down and reflect on what actually bugs you. 0-day is hard and “just patch your shit” does not generally lead to durable change.
Going on record: we need MORE red teams that use their own 0-days in their engagements. This is behavior to celebrate, not castigate. Our security programs need testing by trusted adversaries, including not just the protection phase but detection and response.
2
Woah. Nice work! I miss you guys.
Announcing CVE-2021-3064: a CVSS 9.8 unauthenticated RCE in @PaloAltoNtwks GlobalProtect VPN devices discovered and disclosed by @RandoriSecurity. Read on for our advisory and stay tuned for further technical details. randori.com/blog/cve-2021-30…
That moment when you notice that the awesome album you stumbled on and have had on repeat is just “volume 1”.
It’s all a circle-jerk of productivity.
I just bought a tractor.
1
5
I hope to some day be described as “eccentric”.
1
2