Replying to
@jtig@infosec.exchange
@jtig@infosec.exchange
Noyb probably likes to hear from you 😆
Remote
13reak 
@13reak@infosec.exchange
Incident Responder interested in #DFIR #malware #reverseengineering #pentesting and #purpleteam . #fedora and #opensource fan
Proud of #EU
0
Followers
0
Following
37
Posts
Joined January 31, 2023
Posts
Replying to
@ironicbadger@techhub.social
@ironicbadger@techhub.social
It's an online service that basically scans the entire global network and has a database on every device that is connected to it. Thus, you find hidden devices (also shadow IT or wrongfully connected printers etc) and vulnerabilities on shodan.
If you have an account, you can set up monitoring for your own IP range.
Replying to
@Ichinin@infosec.exchange
@Ichinin@infosec.exchange sorry, only saw your message just now
Shodan lifelong membership is currently only $5!
#shodanio #shodan #infosec #cybersecurity #vulnerability #vulnerabilityscanning #osint #dfir
Replying to
@FuturisticRobert@infosec.exchange
@FuturisticRobert@infosec.exchange @chrissanders88@infosec.exchange
Also get the scheduled task and check it's content. Is there scripting code in the scheduled task?
Replying to
@chrissanders88@infosec.exchange
@chrissanders88@infosec.exchange
Since most of it is PowerShell or HTA, I'd first check Powershell logs and then check the file system for new HTA files: NTFS, Journal, sysmon, evidence of execution.
If there's Defender for Cloud, it's worth a look.
And ofc check RunMRU (commands of run dialog) for common lolbins.
#DFIR #analysis #incidentresponse #cybersecurity #infosec
Replying to
@13reak@infosec.exchange
Politics
Hover or focus to reveal
Sensitive
Jens Spahn should not step down cause of the child but because of his connections to Peter Thiel and the mask scandal...
#JensSpahnRuecktritt #JensSpahn #CDU
Replying to
@13reak@infosec.exchange
And the next nail in the coffin: Jens Spahn is using a surrogate mother while his own party forbids that in Germany.
"Some animals are more equal than others..."
#JensSpahnRuecktritt
I cannot remember the last time I was on time taking the train...
It's sad that DB nowadays has at minimum 1h delay. My last travels were: +1h, +1h, +3h, +1h 😮💨
#deutschebahn #DB_Bahn
Replying to
@tobykurien@mastodon.social
@tobykurien@mastodon.social
What's the main difference to Matrix?
(I know lots of people at CCC use Matrix cause it's decentral. Delta chat is also decentral. So I was wondering which feature made you choose Delta chat)
RE: https://toot.wales/@Walrus/116907886410842308
Oh look, Jens Spahn is on the bro-list of Peter Thiel...
How often do we need to see his name in scandals before he is removed from the government for being a corrupt p... olitician.
Replying to
@newsguyusa@flipboard.social
@newsguyusa@flipboard.social
There's an easier option to opt out: delete Instagram and use Pixelfed.
Replying to
@superruserr@infosec.exchange
@superruserr@infosec.exchange
Switch job if you're in a dead end (it kills careers to stay) Certifications can open doors to better jobs that give better work experience it's worth even paying for certain certifications yourself if the company doesn't pay (especially for the first good course/certificate - SANS comes to mind) work experience can just be earned by working, preferably in a good job (bad jobs are just a waste of time and you don't learn much)
Replying to
@avuko@infosec.exchange
@avuko@infosec.exchange
Problem with TOR is that the US authorities see it as fair game to attack anyone on TOR "cause it's just used by criminals".
Plus, it is not trivial to use. E.g. by default it covers TCP. UDP etc. packages are not automatically routed through it. So one small unintentional mistake (or an intentionally injected JavaScript?) de-anonymizes you.
It's possible to use it safely, yes, but it's not that easy.
PS: I am speaking from experience. I already got the real IP of an attacker using TOR to attack a customer. Also, once one of our pentesters was identified early due to a small TOR mistake.
Replying to
@jwildeboer@social.wildeboer.net
@jwildeboer@social.wildeboer.net
"Ja, aber..." ...warum eigentlich nicht? 😁
Replying to
@doctormo@floss.social
@doctormo@floss.social
Apologies for reinterpreting the question a bit but I genuinely thought this might help:
I switched from LibreOffice to Grist. It has a python/plugin interface, so you can do anything you can imagine. Also, you find plugins on GitHub. Maybe it's worth a shot for you too.
Replying to
@r@glauca.space
@r
Why should a website program microcontrollers or access the bootloader of my phone?
Rather sounds like a bad idea from security perspective...
Men cannot leave Germany any more without permission from the military? 🤦♂️ When do we fire Pistorius and SPD?
Since there is more awareness of neurodiversity, my employer was thinking about a diversity statement on website/careers page that (among other things) addresses this and maybe change the interview process a bit.
It might be just a drop in the ocean and only help a little, but I think it's a step into the right direction and I'd like to support this and encourage it.
So, #askfedi : what would actually help you (neurodivergent folks) during job interviews or at work in general? What could an employer realistically do? And what would encourage you to apply?
E.g. would a buddy help? More time/pauses? Online/(partly) written interviews? Dim lit, quiet rooms?
Good that I use Firefox/LibreWolf...
Replying to
@QasimRashid@mastodon.social
@QasimRashid
Yeah, we should give him a peace nobel for all the good deeds he did in Iran, Gaza, Lebanon, Venezuela, and the world. 🤦♂️
Replying to
@kajer@infosec.exchange
@kajer
We already outsourced our useless notes to management 😉 they are far better at that
Searching for an open source alternative to Jira. I tried Nextcloud Deck but it is a bit lacking.
Does anyone know a good open source kanban software that can do sub-tasks?
AfD und CDU stimmen Bürgerpatrouillen zu. Yay, ICE in Deutschland... 😓
Or like engineers building bridges... How often did we hear about "one pillar" of a bridge collapsing vs "one directory" of a firewall being reachable.
Replying to
@pheonix@hachyderm.io
@pheonix
I'm not surprised...
A simple cat on the command line can also compromise your system. If you're unsure, you should therefore use cat -v when I'm not mistaken.
RE: @earthbeingx@mastodon.world
You can see the public (and leaked) Epstein files under the link below. It also includes WhatsApp chats and pictures.
WARNING: some of these pictures are disgusting. If you do not want to see that, don't go there.
Exposure and public discussion helps putting pressure on the perpetrators and jurisdiction though.
Link: https://www.jmail.world/
I once talked about bug bounty platforms and warned the community about them.
There are deeper issues with these platforms:
Platforms are paid by vendors, so they listen to vendors. A lot of these vendors abuse the platform to silence offensive researchers and the platforms don't care.
➡️ My recommendation remains ⬅️
- contact vendors directly via email
- use your national CERT for escalations
If you're in Europe: you're in luck, from 2027 the Cyber Resilience Act (CRA) will make it mandatory to have a responsible disclosure process, so European vendors have to answer to the national CERT (or get fined).
#PenerationTesting #pentesting #responsibledisclosure #infosec #cybersecurity #CRA #CyberResilienceAct
For everyone who needs encrypted communication in crisis times: Briar has an offline mode and works via Bluetooth and WiFi.
It also works if someone turns off the Internet or cellphone connection. 😉
(Of course it only works over large areas if lots of people have it installed)
Spread the word!
#crisiscommunication #messaging #communication
Replying to
@adastra1930__dup_21983@mastodon.social
@adastra1930@mastodon.social
Why am I not surprised that pedophiles want to access baby cams?
Replying to
@netzpolitik_feed@chaos.social
@netzpolitik_feed@chaos.social
Das ist krass und schade, vielen Dank für die Berichterstattung!
Replying to
@claudius@darmstadt.social
Replying to
@girlgerms@infosec.exchange
@girlgerms@infosec.exchange
You don't need to pay money for link shorteners here. All links count the same length within mastodon no matter how long they are 
Replying to
@dee@grafana.social
@dee@grafana.social
Unfortunately, I strongly believe this is not the only project that looks like this. Companies only use open source and hardly support it. But when there's a vuln, the outcry to the maintainer is big.