Jeff Moss
thedarktangent@defcon.social
<p>Founder of DEF CON & Black Hat. Maintainer of infocon.org.</p><p>Member of the UK Gov Cybersecurity Advisory Board & The Council on Foreign Relations. </p><p>Working to get Hackers and Researchers a seat at the Policy table.</p><p>I'm interested in hacking, community, technology, privacy, security policy, and the intersection of civil society. (He/Him) Opinions are my own.</p><p>Previously member ONCD (2024-2025), CISA Cyber Security Advisory Council (2021-2025), and DHS Advisory Council (2009-2020)</p>
Posts
-
Post #4364725
Looks like CyberNwes had released their #DefCon Documentary! "For the first time in over a decade since the founders' original documentary, Cybernews was granted unprecedented behind-the-scenes access to DEF CON's organizers and community." https://www.youtube.com/watch?v=pb0kJXSy64E
-
Post #4364669
The #LasVegas #Meshtastic mesh is starting to get its annual influx of users. I’m sure #Meshcore is having the same experience. #DefCon
-
Post #4334394
Heading to Las Vegas for #Hacker Summer Camp? Don't forget to backup all the things before you leave!
-
Post #4268347
I know I am in #DefCon mode because I want to drink Red Bull non-stop. I don't drink it any other time, so it's kinda a strange stress response.
-
Post #4079176
Great new feature in the latest Signal app. If you enable disappearing messages the meta data of calls and missed calls gets deleted as well. I know this was a long standing goal for them, but the engineering behind it took time. #Privacy @signalapp@mastodon.world
-
Post #3946491
Question about #RainbowTable and #PasswordCracking What is the preferred format today? RT2, RTC, RT (RT1?) and with what tools, rcrack? I'd like to convert all the https://infocon.org/ rainbow tables into whatever the best format is so everyone that downloads them doesn't have to keep duplicating work. #InfoSec #InfoCon #hacking
-
Post #3435259
For #DEFCON to do private email we would want to host our own servers to avoid the 3rd party legal doctrine, and keep them secure. No problem, we have a secure location and lawyers. Back during COVID when we were investigating this it was still possible to gather some open source info on how large other private email services were. How big was the market? Could you make enough money to hire the people and buy the servers? MailFence, Proton, and others showed it was possible if you were very e...
-
Post #2855103
The AI Security Uplift is underway.. the security fixes in the latest Nginx version is a good example. More fixes in one version than the last year. Unrelated to core Nginx there are an additional 22 fixes in the ZSTD module. https://nginx.org/en/CHANGES Like I have been saying, all boats will get lifted on a rising tide, but only if you use popular boats that everyone runs their tools against.
-
Post #2855102
Just connecting through Dubai on the way to Bahrain for some #DefCon meetings. Everything seems oddly normal at the airport, I’m not sure what I expected, and I’m curious what stories I’ll hear from locals. We plan to make a go/no-go decision the beginning of July if we hold DC Middle East the beginning of November, but either way we need to be planning now.
-
Post #2855101
Made it to Krakow for #CONFidence, looking forward to meeting everyone. 👋
-
Post #1874273
I’m really enjoying Organic Maps on iOS. For a totally free and privacy respecting app it is fantastic. I’m now using Apple Maps about 1/2 of what I used to. The one area Apple Maps is superior is awareness of bus routing and weather, but I live with that split.
-
Post #1874269
Under the giant #DefCon cube!
-
Post #1298318
With South East Asia getting around 80% oil from the Straight of Hormuz, and #Singapore around 65%, it seems prescient that back in February they had a campaign around awareness if the power goes out:
-
Post #1298316
Congratulations #Hungary! 🎉🎉
-
Post #1298315
This image from Reddit seems to pretty much sum up the situation: #USPol
-
Post #505982
RIP FX - You are a legend. Here Dino is delivering his Pwnie Award, as well as the last public post FX made last year.
-
Post #233760
Looks like someone built a tool to check your LinkedIn network for names from the Epstein documents. Soon I expect other tools will follow to work with other social media platforms. This is what the beginning of community accountability looks like. Just because the legal system is captured doesn’t mean there are zero consequences. https://github.com/cfinke/EpsteIn Yes, I know I am mentioned in the files, but I can’t control when other people mention me. #epstein
-
Post #162289
RE: https://infosec.exchange/@SecurityWriter/115969540425890734 To build on what was said below, your whole online existence is essentially three things combined: 1 - Your email account or mail server where you can get password resets. 2 - DNS that protects the mail server from being impersonated. 3 - Your domain WWW server that can publish records that your domain registrar or certificate authority trusts when issuing certificates. If you lose control of your email account or mail server, p...