Scott Mortimer @ScottMortimer@infosec.exchange

~Open Source Security Tool of the Day~

#osstotd

Arkime (formerly Moloch) is a large scale, open source, indexed packet capture and search system.Arkime augments your current security infrastructure to store and index network traffic in standard PCAP format, providing fast, indexed access. An intuitive and simple web interface is provided for PCAP browsing, searching, and exporting.

https://github.com/arkime/arkime

Rookie coding mistake prior to Gab hack came from site’s CTO

Site executive introduces, then removes, insecure code, then hides the evidence.

https://arstechnica.com/gadgets/2021/03/rookie-coding-mistake-prior-to-gab-hack-came-from-sites-cto/

Hahahaha..."a social network that champions free speech, individual liberty and the free flow of information online”...yep, the information is flowing freely. 😀

Hack of Gab Social Network

https://threatpost.com/hacktivists-gab-posts-passwords/164360/

Quick Poll: What should I use for my new personal knowledge management system?

Reddit is really a shitty place. 💩

password or the host’s SSH keys."

https://www.crowdstrike.com/blog/carbon-spider-sprite-spider-target-esxi-servers-with-ransomware/ - 2/2

ESXinsidious

"In order to compromise ESXi devices, SPRITE SPIDER attempts to harvest credentials that can be used to authenticate to the vCenter web interface. SPRITE SPIDER uses PyXie’s LaZagne module to recover vCenter credentials stored in web browsers, and also runs Mimikatz to steal credentials from host memory. After authenticating to vCenter, SPRITE SPIDER enables SSH to permit persistent access to ESXi devices. In some cases, the adversary will also change the root account - 1/2

I have always admired the quote from Bruce Schneier about complexity being the worst enemy of security. If even the network defenders cannot readily understand the architecture, than mounting a proper defense is a lost cause.

Stop Being Proud of Complexity | Daniel Miessler

https://danielmiessler.com/blog/stop-being-proud-of-complexity/

"As social media giants like Facebook, YouTube, Reddit, and Twitter try to oust extremists, and web-hosting services toss some of the biggest propaganda purveyors like Parler, the quickly growing Telegram platform is becoming an alternative hub for disinformation."

https://www.justsecurity.org/74947/telegram-a-growing-social-media-refuge-for-good-and-ill/

If your password manager, banking or payment platform doesn't use 2FA, find alternatives.

List of websites and whether or not they support Two-Factor Authentication

https://2fa.directory/

"Developers and Open Source authors now have a massive amount of services offering free tiers, but it can be hard to find them all to make informed decisions.

This is a list of software (SaaS, PaaS, IaaS, etc.) and other offerings that have free tiers for developers."

https://free-for.dev/