Scott Mortimer @ScottMortimer@infosec.exchange
- Keybase
- scottmortimer
- All About Me
- https://scott.mortimer.name
- Keyoxide PGP
- https://keyoxide.org/hkp/scott@scott.mortimer.name
- OpenPGP
- D5F60E19BFD8298FFE6292B8E1F31C6DF4DF8F0E
Information Security geek, Old School RPG nerd, and wannabe fiction writer.
Joined May 2017
~Open Source Security Tool of the Day~
Whalescan is a vulnerability scanner for Windows containers, which performs several benchmark checks, as well as checking for CVEs/vulnerable packages on the container. It also checks the config and Docker files for misconfigurations. This tool can be used as part of a Windows container review on local copies of the containers, and on the host itself to enhance security.
"Shield is an active defense knowledge base MITRE is developing to capture and organize what we are learning about active defense and adversary engagement. Derived from over 10 years of adversary engagement experience, it spans the range from high level, CISO ready considerations of opportunities and objectives, to practitioner friendly discussions of the TTPs available to defenders."
~Open Source Security Tool of the Day~
gVisor provides a virtualized environment in order to sandbox containers. The system interfaces normally implemented by the host kernel are moved into a distinct, per-sandbox application kernel in order to minimize the risk of an container escape exploit.
Scott Mortimer
boosted
USPOL, RBG, Your Cynicism
You cannot expect to do good without acting inside the system to triage, and working without the system to force change.
Both of these things matter.
Exercising your right to vote doesn't mean you are supporting the system, it means you are manipulating as best you can from within.
Do it.
Exercising your right to protest, and force change by holding politico's feet to the fire? Just as important.
At this point if you are of the belief that not voting is a good idea, you are either a manipulated fool, or a mouthpiece trying to disenfranchise others.
Get over your ego, and go do both.
I'm not asking you to even like it. But know how you are leveraged, and maximize your free will.
Getting rid of the Google cookie consent popup | Daniel Lange's blog
https://daniel-lange.com/archives/164-Getting-rid-of-the-Google-cookie-consent-popup.html
Scott Mortimer
boosted
Secure Messaging Apps Comparison | Privacy Matters
https://www.securemessagingapps.com/
Scott Mortimer
boosted
Product direction from Mozilla:
"...this decision allows us to sharpen our focus on experiences like Mozilla VPN, Firefox Monitor, and Firefox Private Network."
https://blog.mozilla.org/blog/2020/09/17/update-on-firefox-send-and-firefox-notes/
VPN, VPN (through CloudFlare's) & EOM of haveibeenpowned?
Where is the Mozilla we used to love?
Scott Mortimer
boosted
Ellison is a huge supporter of Tangerine Mussolini.
Scott Mortimer
boosted
Recently, we removed Firefox Send because of security concerns and they took the service down. Today, they announced Send is dead.
We will also be removing Lockwise because Mozilla keeps killing projects after adoption, causing headaches for users.
https://blog.mozilla.org/blog/2020/09/17/update-on-firefox-send-and-firefox-notes/
101 for lateral movement detection – Compass Security Blog
https://blog.compass-security.com/2020/09/101-for-lateral-movement-detection/
The only Penetration testing resources you need
Scott Mortimer
boosted
~Open Source Security Tool of the Day~
Endlessh: an SSH tarpit
Endlessh is an SSH tarpit that very slowly sends an endless, random SSH banner. It keeps SSH clients locked up for hours or even days at a time. The purpose is to put your real SSH server on another port and then let the script kiddies get stuck in this tarpit instead of bothering a real server.
Bellingcat’s Online Investigation Toolkit
Welcome to Bellingcat’s freely available online open source investigation toolkit. You can follow our work on via our website, Twitter and Facebook. The list includes satellite and mapping services, tools for verifying photos and videos, websites to archive web pages, and much more. The list is long, and may seem daunting.
https://docs.google.com/document/d/1BfLPJpRtyq4RFtHJoNpvWQjmGnyVkfE2HYoICKOGguA/edit#
Scott Mortimer
boosted
"I Have Blood On My Hands": A Whistleblower Says Facebook Ignored Global Political Manipulation https://www.buzzfeednews.com/article/craigsilverman/facebook-ignore-political-manipulation-whistleblower-memo via @CraigSilverman
😳
New Windows exploit lets you instantly become admin. Have you patched?
Zerologon lets anyone with a network toehold obtain domain-controller password.
Azure Seas....
"The team is speculating that the greater reliability may be connected to the fact that there were no humans on board, and that nitrogen rather than oxygen was pumped into the capsule."
Microsoft's underwater data centre resurfaces after two years
Deploy a DFIR forensics lab with one script on Google Cloud Platform!
https://0xbanana.com/blog/one-click-forensics-lab-in-the-cloud/
The OWASP Cheat Sheet Series was created to provide a concise collection of high value information on specific application security topics. These cheat sheets were created by various application security professionals who have expertise in specific topics.
- Keybase
- scottmortimer
- All About Me
- https://scott.mortimer.name
- Keyoxide PGP
- https://keyoxide.org/hkp/scott@scott.mortimer.name
- OpenPGP
- D5F60E19BFD8298FFE6292B8E1F31C6DF4DF8F0E
Information Security geek, Old School RPG nerd, and wannabe fiction writer.
Joined May 2017
Scott Mortimer's choices:
