Replying to @UK_Daniel_Card
Does it compute? It's a computer.
If Katherine Johnson is a computer... everything is computer.
Replying to @UK_Daniel_Card
People know how to take care of physical things. People suck at taking care of intangible things.
To quote an author I used to watch talking about books: "It requires no batteries, doesn't take time to boot up and if you spill your diet mountain dew on it, all it'll get is wet."
Replying to @UK_Daniel_Card
I have seen defensive AI convinced something was benign when it was not, more often than offensive AI being used imo. That's possibly the bigger threat right now.
Sadly I didn't make it to the after party so couldn't give my AI Karaoke entry a shot but shared a bit here as its bloody good imo (context: I lead an internal purple/red team) a stonking conf once again, lush seeing so many familiar faces, hope to see you all again next year!
Another year another cracking @steelcon honestly love this conference so much. Outstanding talks, and doom played via a 4g modem acting as a webcam over LTE - thats a new life goal for sure :)
Replying to @UK_Daniel_Card
Literally having to do "cyber training" around the threat posed exclusively by smart glasses by Meta. meanwhile, i'm walking around the office with my phone out looking like i'm texting, recording all the keyboards and all the screens. 😅
Scriptmonkey_ retweeted
Was recently tinkering with DPAPI and CREDHIST and managed to find a way to extract hashes for old passwords and recover them in a new module written for hashcat. Blog -> lrqa.com/en/cyber-labs/crack…
Replying to @rvrsh3ll @T3chFalcon
This has "Anything is a sex toy if you try hard enough" vibes.
DLP isn't going to stop you if you intend to exfil. It will prevent accidental derps, it will hamper illegitimate efforts, but it won't prevent a determined individual from achieving it.
Replying to @0xTib3rius @WifiRumHam
May I offer you a name suggestion for your merger? The Cyber Reconnaissance and Autonomous Penetration Suite for Heuristic Offensive Operations and Testing #CRAPSHOOT
Scriptmonkey_ retweeted
This is bad.
Putty level bad.
notepad-plus-plus.org/news/h…
Replying to @TNHillbillyHack @domchell
Which ethically brings it back to assume breach. Humans will fold under the right pressure, if you want to simulate the coercion of someone. You read them in and use them as your foothold. I don't need to bribe a call center employee, they just have to follow my instruction.
Replying to @Officialwhyte22
D. As you asked - most likely. The chance my mate's wifi is being targeted is low and ET will generally affect other devices and is usually accompanied by deauths. So they're targeting my device only, but at my mates? Nah.
It's D or E. My mates being a dick and fucking with me.
Replying to @UK_Daniel_Card
I don't get the need for rage. Surely it's...
From ffmpeg: "you're welcome to submit a pull request".
From sec researcher it's: "I've given <project> all the time I'm willing to. Time for a CVE."
From user it's: "ffmpeg has a vulnerability we do not like, we'll switch to xyz"
Replying to @supersat @Disneyland
The arrowhead logo denotes property of HMG.
en.wikipedia.org/wiki/Broad_…
"OpSec is hard" if you think this and you've only worked on an external team.
Just wait until you work for an internal one. 😅
Replying to @hakluke
Might be too in the weeds but the fact that for some reason it appears the world has happily renamed DLL Hijacking to DLL sideloading despite its specific meaning, and this grinds my gears.
Replying to @BaffledJimmy
Very similar to one of my favourite presenters on leadership and team dynamics: Nickolas Means youtu.be/099cHWSbAL8?si=2uXT…
He's done a few (3 mile island, fukashima, etc), might be worth a look :) would definitely watch you presenting similar at a con aimed at cyber.



