K. Reid Wightman :verified: 🌻 :donor: :clippy:
reverseics@infosec.exchange
<p>Tinker, Sailor, Biker, Hi</p><p>I do industrial security research for a living, mostly looking for <a href="https://infosec.exchange/tags/vulnerabilities" class="mention hashtag" rel="tag">#<span>vulnerabilities</span></a> in all of the wrong places. I like reverse engineering how PLC logic systems function under the hood, learning how safety instrument protocols work, and figuring out what malicious threat groups are doing and can do with access to such systems. A long time ago, I invented the term 'foreverday' to describe unfixable vulnerabilities.</p><p>Occasionally I analyze <a href="https://infosec.exchange/tags/industrial" class="mention hashtag" rel="tag">#<span>industrial</span></a> <a href="https://infosec.exchange/tags/malware" class="mention hashtag" rel="tag">#<span>
Posts
-
Post #4500531
i wish summer was longer. #sailing
-
Post #4445195
This makes me giggle in ways that are difficult to describe. #startrek #startrektng https://www.youtube.com/watch?v=XPuFItRTxdw
-
Post #4436107
I went to a really nice tech talk at SecDSM last night. It was on PLC insecurity, how to build a trainer kit for building your own simple process control experiment with an HMI, etc. https://github.com/oniskin/PLC-Trainer-Kit is the writeup, and Oren even posts little videos on how to get started. One of the neater things was showing a modern functioning arp poison attack to blind operators (thanks to no integrity in the control systems protocols). I liked Oren's approach, which let you spe...
-
Post #4335031
Apparently turning it off and then on again also works for Ethernet switches. That was an annoying hour of time spent with the ethernet cable tester that I'd like to have back, please.
-
Post #4325589
Dang. RIP Vlad Chaloupka (aka Vlad the Astrophysicist). I never knew the guy, but that Peter Mulvey tune tells me we would have gotten along just fine. https://obituaries.seattletimes.com/obituary/vladimir-chaloupka-1093895849
-
Post #4325588
If your PLC had its password set by a hacktivist, you might be tempted to get your hands on some sketchy password reset/password retrieval software for it. We looked at one of those a bit ago and while it did what it said (retrieved the password using an undisclosed bug in the plc comms protocol) it also came with some C2 software. You wanted malware with your PLC password retrieval, right? I mention this as a piece of software that I've been hunting for, which claims to retrieve passwords...
- Post #4174132
-
Post #4146739
:thisisfine:
-
Post #4121730
in my infosec-based magic system, fae are beings with very subtle control of time, who are also all somewhere on the autism spectrum. you can make deals to get things done in the past but you wont understand the true interpretation and repurcussions until years after the change. and your true name is a fursona. so basically it is just infosec.
-
Post #4103054
@Viss@mastodon.social @jalefkowit@hachyderm.io Lincoln Logs: The Saga Begins
-
Post #4047865
@Viss@mastodon.social @krypt3ia@infosec.exchange dare to dream…
-
Post #4042786
I just discovered @dotdotslash_bot@infosec.exchange and it is worth a follow if you enjoy #directorytraversalmemes (and also enjoy reading about new CVEs that are CWE-22 or CWE-22-adjacent).
-
Post #4025293
@krishean@tech.lgbt Shush ;-).
-
Post #4018371
Finally a reasonable answer to 'why the iran war': https://www.youtube.com/watch?v=vey4Rnid1QU
- Post #3995937
-
Post #3943182
impromptu 90 mile ride today. i didnt really plan it, just kinda kept going…
-
Post #3922389
cc @jfslowik@infosec.exchange casey says I needed to share this with you.
- Post #3798752
-
Post #3787378
Occam's Cyber: If Cyber is a competing theory for an event, then it must have been Cyber.
-
Post #3705118
I remember listening to Joshua Johnson on 1A, and I never put it together that he's the same guy reading the news for The Onion News Network (under the name Dwight Richmond). What a strange and fun planet we live on sometimes... https://www.pbs.org/newshour/show/what-political-satire-can-reveal-about-the-strength-of-a-democracy?utm_medium=activitypub
-
Post #3695392
When worlds collide: I bought an AIS (Automatic Identification System) transponder for my sailboat. If you don't know what these are, they are a doohickey that transmits your boat GPS position, speed and direction (among other bits of data like name and boat size and stuff). It's how sites like marinetraffic.com get populated with live ship position feeds. It also lets you set up computers on your boat to warn you if you are on a collision course with another boat that has AIS. For exam...
-
Post #3610821
@neurovagrant@masto.deoan.org I just rewatched the scene where Lone Starr reveals his origin. He says he was found on the doorstep of a monastery, but he does not mention what age he was when he was found this way. For all we know he was an adult who simply had his memory wiped... Spaceballs is officially part of the Independence Day extended universe.
-
Post #3604699
Getting @catandgirl@socel.net in the mail is one of life's greatest little pleasures. Thank you Dorothy for decades of humor (some of which I have to read wikipedia to get, but that is part of the fun ;-)).
-
Post #3526621
13/10 sailing today. 10ish knots of wind out of the southwest most of the day, with a few gusts of 15. It was the first time I was actually warm on Lake Superior. We did about 30 miles. 15 reaching, then beating back to the start. I also replaced the aged tachometer in the boat with a fancy VDO tach that includes an hour meter. Figuring out the wiring was annoying but I even got the backlight working with the original Yanmar instrument panel light switch. And I put the first hour on the inboard...
- Post #3377519
-
Post #3345952
This meme never gets old.
-
Post #2768891
Ballet Des Moines is still my fave cultural thing in this town. Got to see their take on Cinderella (complete with pit orchestra) tonight. It was aces.
-
Post #2768890
I think we need a new version of that 'cybereveryword' account that is instead 'vibeeveryword'.
-
Post #2768889
If the robots come for you, just run up some stairs I guess.
- Post #2768888