← Feed

Posts

• Post #3991256

  Modern "AI" firewalls are great except when dealing with Cloudflare. Vendor has blocked several legitimate websites at the firewall for their internal users because the sites share the same IP from Cloudflare as identified malicious websites. Tracking down the issue was challenging due to the vendor residing in a different geography than the IT MSP. IP addresses are regional from Cloudflare. #firewalls #cloudflare #ai

• Post #3833075

  RE: https://vox.ominous.net/@occult/116924039923948318 Smoke has engulfed Boston today. Air quality is crap. #boston

• Post #3833054

  @occult@vox.ominous.net Drove through visible smoke on the way to work. Will have to skip after work outdoor activities. Boo.

• Post #3786830

  RE: https://masto.hackers.town/@phaedr0s/116912149078841317 With all the news articles about Sam Neil, I do not see references to two of his better performances, Event Horizon and The Hunt for Red October. Amazing films #samneil #eventhorizon #huntforredoctober

• Post #3723276

  Computers should serve people not limit them. They are tools that can be used for good or bad, like any other item that can be a weapon. To make LLMs useful for information security research I find myself constantly lying to it to get around the seemingly arbitrary guardrails. Its social engineering against the machine on a scale that i never though I would have to engage in to get basic work done. Having studied LLMs and how to secure / hack them, they are not the world ending technol...

• Post #3676647

  Cant get the NYC Pfizer building collapse out of my head and watching and reading news / comments, these thoughts have emerged. 1. Quoting the union rep condemning the project seems pointless as they were not actively working on the project. Not saying he is wrong in his analysis, but he is obviously biased. 2. The building has been reported "stabilized" Does that mean is is not activity collapsing? The engineers have not done anything yet to support the building. Stabilize imp...

• Post #3672293

  Fake job interview requests lead to Google account credential theft. Employees responding to these job "opportunities" are reluctant to admit it to their companies once their accounts are compromised slowing down detection and response. A good social engineering campaign. https://www.bleepingcomputer.com/news/security/phishing-poses-as-big-brand-job-interview-to-steal-google-accounts/ https://gist.github.com/BushidoUK/57c38d5ee75481fb237e968a537de778 #phishing #google #jobscam #s...

• Post #3656086

  Gotta love the internet. Yesterdays experts on geo politics are todays experts on structural engineering. #nyc #collapse

• Post #2131975

  How is your Monday? I rebooted my laptop several times because I thought my docking station was not connecting, only to realize that I had turned off my monitors. #monday

• Post #2131974

  Stay classy Springfield, MA. I sympathize with the women trying to protect her friend and with her friends medical situation; but not sure she fully thought out her plan. Maybe she though the was THE BEEKEEPER (2024 film) #massachusetts #beekeeper

• Post #2131973

  RE: https://mastodon.social/@tomshw/116486823636640622 UI is adding memory surcharge to select products at checkout. This is like the airlines adding a fuel tax at checkout, keeping the advertised price low. Like the airlines, I do not expect the fee to be revoked, just increased. Its a way to adjust for inflation without on the face, adjusting for inflation. 1. This is a forward looking tax as it is on already existing products. 2. They are not modifying the list price, the tax is added at...

• Post #2131972

  RE: https://infosec.exchange/@BleepingComputer/116498212268203448 This activity does not help the Incident Response industry. #incidentresponse #ransomware

• Post #2131971

  Its that time of year where nature tries its best to make my life as miserable as possible with tree pollen. Allergies suuuuuck. #allergies #treepollen

• Post #2131970

  In many ways AI has made job placement a terrible experience for both employers and job seekers. Job seekers are often have to play the game against the gatekeeping algorithm before they have a chance to be seen by a real person. For the first time, an employer I have run into a mess of AI generated resumes and LinkedIn profiles. I opt to review all resume submissions personally as the position is specialized resulting in fewer overall applications. This time around 98% of the resumes we...

• Post #2131969

  RE: https://infosec.exchange/@Walker/116529213079432412 cont... All of them listed the same four cybersecurity masters programs in the US. They all listed reducing something by 25 - 35% All resumes listed being an expert in every tool possible, every framework, all shared the same pattern of job history, Finance -> healthcare -> IT consulting, etc. If they were linked to a LinkedIn profile, that profile was out of date or not complete. All resumes were 3.5 pages long. I...

• Post #2131968

  RE: https://infosec.exchange/@Walker/116529235627406071 Job seekers here are a few tips: 1. Keep the resume to 2 pages or less with 5 or less bullet points per job. 2. Be accurate with your skill set. There is no way for someone with 5 years of work experience to be an expert in every technology and framework ever built. You will be tested on this and the truth will come out in the interviews. 3. Tailor the resume to the job. If you are applying for a engineering position dont also highlight...

• Post #960369

  @jackryder @resonancewright People Sleeping all night, without waking? What a time to be alive.

• Post #960368

  Happy Easter! Got one more ride in and making coffee, enjoying the peace before the kids wake and the festivities begin. #easter #cycling #peloton #Sunday #eastersunday

• Post #919243

  It would be nice if you set up an ELB that all application endpoints behind it become non internet routable by default. Its bad devops but still, there is no need for the underlying EC2 to be accessible to the internet if it is placed behind a load balancer. That is my old guy yelling at clouds moment for today. #ec2 #ELB #AWS #devops

• Post #919242

  Axios NPM Malware Remediation Steps. Overnight shift reports it is already a busy day. Good Luck #incidentresponse May your coffee be strong. https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan #axios #npm #infosec

• Post #919241

  Between IT contractor fraud and NPM pipeline poisoning it would be nice if North Korea could take a break for a few months. https://therecord.media/google-links-axios-supply-chain-attack-north-korea #axios #northkorea #dprk #UNC1069 #incidentresponse #infosec

• Post #919239

  Watched the #artemis2 launch with the kids over breakfast. I felt a great sense of optimism and hope that humanity can once again return to the stars and expand our understanding of our universe. I wondered if this is what people watching the Apollo astronauts heading to the moon. https://www.nasa.gov/mission/artemis-ii/ #artemis #nasa #apollo #moon #space

• Post #919238

  Did anyone else have flashbacks of the Challenger while watching the #artemis2 launch? I did. So glad the launch went well. https://www.nasa.gov/mission/artemis-ii/ #challenger #nasa #artemis2

• Post #919237

  Happy Good Friday and Passover. Enjoying that many countries have today off. Hoping for a quiet Friday. #goodfriday #passover #Friday #christianity #judaism

• Post #797916

  Sure, cool that the FBI took down the #handala website. Yes, it makes a flashy headline, but is it really that newsworthy? An info website is like a poster hanging on a wall. It is not a heavy lift to hang another one. I get that it is hard to takedown a state actor APT group and wins are demanded by the victims and the press. But it really does not do anything to slow down the malicious activity (unless we are not being told the whole story). https://www.bleepingcomputer.com/news/secu...

• Post #797915

  Ill keep flogging this dead horse**... show me the evidence that the average person is directly installing malware APK from attackers. This has NOTHING to do with protecting users. As an Incident Responder, all the Android malware I have seen in my user community has been downloaded directly from the Google Play Store. All the scams I have seen have originated from ads within apps installed from the Google Play Store. If Google cared about scams and malware then they should get their ap...

• Post #797914

  Wife just brought me a dunks ice after returning from her appointment. The day started rough, but now things are looking up! Its 9:30AM, 3 meetings done and 5 to go. #coffee #dunks #boston #massachusetts

• Post #797913

  Pfizer Lyme Disease human vaccine trial shows promise. Its past time for an actual human Lyme vaccine. That damn spirochete. https://www.pfizer.com/news/press-release/press-release-detail/phase-3-valor-lyme-disease-trial-valneva-and-pfizer #lyme #pfizer #lymedisease #valor

• Post #797912

  Lessons and mitigations from the Stryker InTune attack. https://www.sygnia.co/threat-reports-and-advisories/identity-control-plane-attack-stryker/ #sygnia #malware #stryker

• Post #743245

  Use AI instead of hiring junior staff = stock price bump. 5 years later senior employees start to leave; there is no junior staff to promote and management panics. Management does not want to spend money on new staff so they hire expensive contractors. Contractors do a subpar job, charging 10x what an actual employee would cost (different budgets so its cool); and the company starts to go downhill and customers flee. This starts a death spiral leading to either bankruptcy, acquisitio...