r000t @r000t@infosec.exchange
Hacker, comedian, RED Scout fan, gold Ekko one-trick. Watching them sorting debris.
Joined Aug 2018
YOUR
INTERNAL
SERVICES
STILL
NEED
TLS
YOUR
LAN
SHOULD
BE
ASSUMED
TO
BE
HOSTILE
r000t
boosted
"Worst cloud vulnerability possible discovered in Microsoft Azure..." Granting read/write access to every database on the service.
#Infosec #News #Vulnerability #Cybersecurity #TheCloud #Cloud #Microsoft #Azure
pam-duress: A Pluggable Authentication Module (PAM) which allows the establishment of alternate passwords that can be used to perform actions to clear sensitive data, notify IT/Security staff, close off sensitive network connections, etc if a user is coerced into giving a threat actor a password.
r000t
boosted
A "podcast" behind a paywall is not a podcast.
A "podcast" that only one app can receive is not a podcast.
A "podcast" without a public feed that can be freely pulled into any podcast client or RSS reader is not a damn podcast, don't let people get away with calling it that.
Bypass HIPAA with oracles...
Dont ask: "Is John Nuckinfutz there?"
Do ask: "Can you transfer me to John Nuckinfutz's room?"
A complete dumpster fire from start to finish, and WD has absolutely no plans to put it out.
But you can always buy a new dumpster. From us, please.
r000t
boosted
Windows 10 running Ubuntu 21.04 running Windows 7 running Mac OS 8.5 running Windows 95
r000t
boosted
r000t
boosted
Amber (@amber@toot.site)
r000t
boosted
r000t
boosted
Btw, while a social engineer had control of teslamotors.com DNS
Nobody could start or lock/unlock their $45,000+ cars.
A teenager called up and asked Network Solutions very nicely for control of the domain. And got it. And grounded hundreds of thousands of vehicles.
This company wants you in a self driving car.
r000t
boosted
University banned from kernel development after professor and students repeatedly intentionally introduce security vulnerabilities into the Linux kernel.
Then they pull the inclusivity card when they're called out on it.
If you were wondering why Microsoft and all the rest are *really* big on Codes of Conduct and other shit that enables this sort of attack....
r000t
boosted
Celebrate pissed somebody off.
Say what you will about signal but Moxie knows how to make a drop.
r000t
boosted
Custom user agents. Cloak yourself as an instance that is trusted, and scrape undiscovered. Combine with some proxies to truly blend in.
Monitor an uncooperative instance automatically; fediEngine will automatically sit on the public streams of instances they peer with and import matching statuses.
Hey 4ocean:
Making mask braces out of the recycled plastic is neat. Know what would be neater?
Turn that shit into 3D printer filament. Make repeat sales.
Right now, people don't have any particularly good reason to not get the cheapest brand of a given material filament. And I guarantee you that's virgin plastic.
I know I'd pay a premium for 100% (or even just "mostly") recycled filament.
r000t
boosted
@TheGibson
"If you can't fix it, you don't own it!"
#righttorepair
#righttodisassemble
r000t
boosted
Hacker, comedian, RED Scout fan, gold Ekko one-trick. Watching them sorting debris.
Joined Aug 2018
