Walker

Use AI instead of hiring junior staff = stock price bump.

5 years later senior employees start to leave; there is no junior staff to promote and management panics.

Management does not want to spend money on new staff so they hire expensive contractors.

Contractors do a subpar job, charging 10x what an actual employee would cost (different budgets so its cool); and the company starts to go downhill and customers flee.

This starts a death spiral leading to either bankruptcy, acquisition, or restructuring.

The original management who approved the AI have all gone and cashed in their stock.

Just a guess at what is about to happen across the industry.

https://forums.theregister.com/forum/all/2026/03/16/servicenow_grad_jobs_ai/

#ai #servicenow #hiring #bankruptcy #aislop #salesforce

FFS its not "Sideloading", its installing applications on a device I own.

#android #google #scams #malware #fdroid #foss #privacy #lineageos #grapheneos

Did anyone else have flashbacks of the Challenger while watching the #artemis2 launch? I did.

So glad the launch went well.

https://www.nasa.gov/mission/artemis-ii/

#challenger #nasa #artemis2

How is your Monday?

I rebooted my laptop several times because I thought my docking station was not connecting, only to realize that I had turned off my monitors.

#monday

Cant get the NYC Pfizer building collapse out of my head and watching and reading news / comments, these thoughts have emerged.

1. Quoting the union rep condemning the project seems pointless as they were not actively working on the project. Not saying he is wrong in his analysis, but he is obviously biased.

2. The building has been reported "stabilized" Does that mean is is not activity collapsing? The engineers have not done anything yet to support the building. Stabilize implies work has been done. Maybe use "not actively collapsing"

3. Experts say that the building has to be partly demolished as sagging concreate floors and stressed / bent steel beams have lost their structural integrity. But the Development company says everything is fine and a only needs a few support beams. I dont really trust the Development company on this.

4. As a layperson, it seems that any efforts to add support could shift the weight causing additional problems. I am curious to see how they manage to "stabilize" the building to then fix the problem.

5. Hate on Pfizer for all sorts of justifiable reasons. Cant see how this is their fault.

6. As much as the development company is downplaying this as a minor inconvenience, I bet the displaced people and companies surrounding the building dont feel the same way.

7. This one time, I wish I was a lawyer in NYC.

#nyc #buildingcollapse #pfizer #pfizerbuilding

Ill keep flogging this dead horse**... show me the evidence that the average person is directly installing malware APK from attackers. This has NOTHING to do with protecting users.

As an Incident Responder, all the Android malware I have seen in my user community has been downloaded directly from the Google Play Store. All the scams I have seen have originated from ads within apps installed from the Google Play Store.

If Google cared about scams and malware then they should get their app store and ad platform under control. The fact they report removing thousands of malicious apps from the app store shows that this is where they should focus their efforts.

**Currently, the user needs to enable developer mode by multiple clicking the config menu, approving third party app installs, then again go through multiple windows confirming the install. Not exactly a one click install process.

https://thehackernews.com/2026/03/google-adds-24-hour-wait-for-unverified.html

#android #google #scams #malware #fdroid #foss #privacy #lineageos #grapheneos

RE: @Walker@infosec.exchange

cont...

All of them listed the same four cybersecurity masters programs in the US.

They all listed reducing something by 25 - 35%

All resumes listed being an expert in every tool possible, every framework, all shared the same pattern of job history, Finance -> healthcare -> IT consulting, etc.

If they were linked to a LinkedIn profile, that profile was out of date or not complete.

All resumes were 3.5 pages long.

I thought about interviewing an applicant who was underqualified because their resume was one page but looked genuine.

The LLM then without prompting offered to provide me resource to spot North Korean fraudulent IT contractors.

#resume #infosec #incidentresponse

In many ways AI has made job placement a terrible experience for both employers and job seekers.

Job seekers are often have to play the game against the gatekeeping algorithm before they have a chance to be seen by a real person.

For the first time, an employer I have run into a mess of AI generated resumes and LinkedIn profiles.

I opt to review all resume submissions personally as the position is specialized resulting in fewer overall applications.

This time around 98% of the resumes were generated by AI. I ran the resumes through our internal, private LLM, and the results were shocking.

Half had a very high to high similarity matrix with similar phrasing, template voice, near-parallel bullets and skills taxonomy, strong shared structure and phrasing.

A third were matched with a very high similarity.

Over half shared the same resume template or common AI prompt patterns.

#resume #jobsearch #infosec #incidentresponse

Sure, cool that the FBI took down the #handala website. Yes, it makes a flashy headline, but is it really that newsworthy?

An info website is like a poster hanging on a wall. It is not a heavy lift to hang another one.

I get that it is hard to takedown a state actor APT group and wins are demanded by the victims and the press. But it really does not do anything to slow down the malicious activity (unless we are not being told the whole story).

https://www.bleepingcomputer.com/news/security/fbi-seizes-handala-data-leak-site-after-stryker-cyberattack/

#infosec #cyberdrime

It would be nice if you set up an ELB that all application endpoints behind it become non internet routable by default.

Its bad devops but still, there is no need for the underlying EC2 to be accessible to the internet if it is placed behind a load balancer.

That is my old guy yelling at clouds moment for today.

#ec2 #ELB #AWS #devops

Its that time of year where nature tries its best to make my life as miserable as possible with tree pollen.

Allergies suuuuuck.

#allergies #treepollen

Happy Good Friday and Passover.

Enjoying that many countries have today off. Hoping for a quiet Friday.

#goodfriday #passover #Friday #christianity #judaism

Watched the #artemis2 launch with the kids over breakfast. I felt a great sense of optimism and hope that humanity can once again return to the stars and expand our understanding of our universe.

I wondered if this is what people watching the Apollo astronauts heading to the moon.

https://www.nasa.gov/mission/artemis-ii/

#artemis #nasa #apollo #moon #space

Between IT contractor fraud and NPM pipeline poisoning it would be nice if North Korea could take a break for a few months.

https://therecord.media/google-links-axios-supply-chain-attack-north-korea

#axios #northkorea #dprk #UNC1069 #incidentresponse #infosec

Axios NPM Malware Remediation Steps.

Overnight shift reports it is already a busy day. Good Luck #incidentresponse May your coffee be strong.

https://www.stepsecurity.io/blog/axios-compromised-on-npm-malicious-versions-drop-remote-access-trojan

#axios #npm #infosec

@jackryder@infosec.exchange @resonancewright@infosec.exchange People Sleeping all night, without waking? What a time to be alive.

Wife just brought me a dunks ice after returning from her appointment. The day started rough, but now things are looking up!

Its 9:30AM, 3 meetings done and 5 to go.

#coffee #dunks #boston #massachusetts

Stay classy Springfield, MA. I sympathize with the women trying to protect her friend and with her friends medical situation; but not sure she fully thought out her plan.

Maybe she though the was THE BEEKEEPER (2024 film)

#massachusetts #beekeeper

Pfizer Lyme Disease human vaccine trial shows promise.

Its past time for an actual human Lyme vaccine. That damn spirochete.

https://www.pfizer.com/news/press-release/press-release-detail/phase-3-valor-lyme-disease-trial-valneva-and-pfizer

#lyme #pfizer #lymedisease #valor

Lessons and mitigations from the Stryker InTune attack.

https://www.sygnia.co/threat-reports-and-advisories/identity-control-plane-attack-stryker/

#sygnia #malware #stryker

RE: @tomshw@mastodon.social

UI is adding memory surcharge to select products at checkout. This is like the airlines adding a fuel tax at checkout, keeping the advertised price low. Like the airlines, I do not expect the fee to be revoked, just increased.

Its a way to adjust for inflation without on the face, adjusting for inflation.

1. This is a forward looking tax as it is on already existing products.
2. They are not modifying the list price, the tax is added at checkout. For large buildouts this could exponentially increase costs. Looks like the sales tax is based on the additional fees.

#ui #ubiqui #wifi #networking #unifi

RE: @Walker@infosec.exchange

Job seekers here are a few tips:

1. Keep the resume to 2 pages or less with 5 or less bullet points per job.
2. Be accurate with your skill set. There is no way for someone with 5 years of work experience to be an expert in every technology and framework ever built. You will be tested on this and the truth will come out in the interviews.
3. Tailor the resume to the job. If you are applying for a engineering position dont also highlight your GRC experience and skills.
4. Dont run your resume through an LLM without post modification. It will produce a format, sentence and word structure that is exactly like everyone else who has run their resume through a LLM.
5. Be a real person, not from North Korea. That is a must.

#resume #jobsearch #infosec #incidentresponse

RE: @BleepingComputer@infosec.exchange

This activity does not help the Incident Response industry.

#incidentresponse #ransomware

Happy Easter!

Got one more ride in and making coffee, enjoying the peace before the kids wake and the festivities begin.

#easter #cycling #peloton #Sunday #eastersunday