lavalamp (@_lavalamp) header
lavalamp (@_lavalamp) profile picture

keyboard cowboy

Los Angeles, CA
Joined April 2011
Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)Photo by lavalamp (@_lavalamp)
Me using Claude Opus 4.8 to rename a file
1,698
9,066
1,499
74,054
44,432,805
Do I have any connections to folks working at #github in my network? Looking to have a ticket escalated and not having much luck through standard support channels!
31
lavalamp retweeted
Replying to @github
holy shit, how did the attackers find a large enough uptime window to get in?
174
686
128
14,219
962,621
lavalamp retweeted
People spending the past decade knowingly training AI by swapping their face with their dog’s in some phone cancer app and being like “why does this trash hallucinate all the time”
1
4
511
To check if your Google Workspace has been compromised by the same tool that compromised Vercel: 1. Go to admin.google.com/ac/owl/list… - This is Google Admin Console > Security > Access and Data Control > API Controls > Manage app access > Accessed Apps 2. Filter by ID = 110671459871-30f1spbu0hptbs6… - This is the ID of the compromised OAuth app If you see an app after filtering, you have potentially been compromised
61
729
62
4,396
1,060,055
Two weeks without mobile internet improved mental health more than antidepressants and reversed roughly 10 years of attentional decline. Screen time dropped 49% (314 to 161 min/day).
251
2,113
187
17,939
1,458,470
It's November 2001. Chop Suey is playing in xmms on your Sun workstation. You fire up IE5 and point it at your just-finished PoC – a buffer overflow in gopher handling, of all things. The calculator pops up. You don't know it yet, but this is the best computing will ever be
26
80
13
733
49,237
Has anyone else noticed a huge uptick in notifs for tweets that have an exclamation but lack context?? Ie: “Wow look at this”? Forcing you to open the app to learn more? Guessing it’s a good way to game usage metrics (ex: app opens) without actually improving @Twitter product.
1
I may not be qualified for much, but messing with bot authors is something that I've gotten somewhat good at these last few years. "How" you ask?? Listen in :)
Bots can be fun... but they can also be massively destructive. If you're having to fight bots (or want to know some effective tactics) the this week's episode is for you! securityexplained.fm/1245467… #bots #hacking #infosec #defense #cybersecurity
Listening to @SecExplained to get caught up about Uber’s ex-CISO getting charged. Definitely not surprised and glad @_lavalamp @IAmRedShift broke down the indictment before I started reading the overhyped mess that is #InfosecTwitter
1
1
1
I have to admit I was drawn into the FUD around this case, but once you dig into the facts it seems pretty clear that Joe's actions were criminal. Company lawyers can't protect you from #criminal convictions.
No, the conviction of Joe Sullivan in relation to a 2016 data beach at #Uber doesn't change the risk profile of being a #CISO. Unless, of course, you're committing criminal offenses. securityexplained.fm/1245467… #uberhack #uberbreach
A lot of FUD going around re: the recent #twitter #whistleblower report and we attempted to sort through it as best we could. Special episode for me as @dotMudge is one of the reasons I have the job I do today.
TWICE IN ONE WEEK!! It's not often that news cycles bare so much fruit, but this week is one of those times :P This episode we talk about the recent #twitter #whistleblower report coming from @dotMudge securityexplained.fm/1245467…
I find it hard to believe that the extent of access the attackers seemed to have achieved would not result in access to user data... but hey part of a strong security program requires a good PR team :P We're back for season 5!
#Uber got #hacked and it looks bad. Like... a successful pentest outbrief bad. We're back with our fifth season of Security Explained and this time we're discussing the #uberbreach! securityexplained.fm/1245467…
Credit repair companies offer to “fix your credit,” for hundreds or thousands of dollars. We sent a DoNotPay employee to interview for jobs at credit repair companies to figure out how they do it so that we can automate it and replace them. This is what we discovered:
103
3,435
315
18,424
This was an interesting one - covering some of the novel electronic warfare that has been observed in the conflict.
Join us for this episode on electronic warfare observed in the Russian invasion of Ukraine! securityexplained.fm/1245467… #UkraineUnderAttack #UkraineWar #warfare #hacking #infosec #privacy
Loved this one
We're back in action for season 4! We're kicking things off with a sit-down with our friend @samykamkar and chatting about his journey in the world of infosec. Enjoy! securityexplained.fm/1245467… #hacking #privacy #infosec #samykamkar
0x92103AF67e940191f06B6e2cA8B2F92654B9F3C8
1
It's always a pleasure to chat with someone who influenced my journey into the world of security, so this conversation with @KimZetter was particularly fun! Join us as we discuss #surveillance programs and the #Pegasus malware. #infosec #hacking
In our most recent episode we sat down with the one and only @KimZetter to learn about government #surveillance programs and #pegasus. Come learn how these surveillance programs affect individuals across the globe! securityexplained.fm/1245467… #hacking #infosec #nsogroup
1