Tyler S

Security? What's that?

[Tyler S @0secure]

@JuanPorrasFL Please do! Those who recommend just buying a home outside an HOA have never lived in certain parts of the state where that is nearly impossible, especially if the home was built in the last 40 years. HOAs have too much power with no checks and balances.

[Tyler S @0secure]

@GoldfishSmiles any chance we'll get gluten free goldfish any time soon?

[Katie Nickels @likethecoins]

I'm hiring for three positions!! Check out the job descriptions and apply if you're interested. US-based candidates only.
1. Intelligence Analyst: https://t.co/WQZusnxpOX
2. Manager, Intelligence: https://t.co/GFM4UlA7dh
3. Senior Intelligence Engineer: https://t.co/TcnnVROhDG

[Tyler S @0secure]

@ShitUserStory As a user, I want links and buttons to move just as I'm about to click on them, causing me to click on something else instead, preferably something with the opposite effect of what I meant to click on.

[Tyler S @0secure]

@JimSycurity @jeffmcjunkin None at all - it's just running ldap queries against AD and other computers. It might trip some alerts, though, depending on which options you choose.

[Tyler S @0secure]

@jeffmcjunkin Yep, I run a bloodhound scan every few months to help keep on track. Looking forward to the new features that will move the bar closer to continuous monitoring.

[Tyler S @0secure]

@anthomsec Fancy Bear pulling a Scrooge McDuck

[Tyler S @0secure]

@byteflip @hacks4pancakes It really depends on the organization - some enlightened orgs do have separate (and relatively parallel) IC and management tracks, but most do not.

[Tyler S @0secure]

@SwiftOnSecurity I'm a huge fan of WSL/WSL2 as well. I'm hoping AV and EDR vendors figure out soon how to get visibility into the environment... I'm just waiting for malicious actors to take advantage of the blind spot it causes.

[hackaday @hackaday]

Cricut Decides to Charge Rent for People to Fully Use the Cutting Machines They Already Own

In our community we like to think of ourselves as pioneers in the field of domestic CNC machinery, with our cheap 3D printers. But there’s another set of people … https://t.co/hxuqG4IBjO

[✨Vee✨ @VeemonTamer]

⚠ RT - Help Small Artists Fight Back Against Greedy Companies ⚠

#Cricut rolls out a shady update that screws over small artists requires a subscription to use the hardware already purchased. Here is a thread that explains things, how to help, and good Cricut alternatives. 1/11

[Tyler S @0secure]

@Linkavych @anthomsec Have been a fan of my WorkPro Quantum 9000. Not quite a Herman Miller, but not bad at all for the price, especially since I got it on sale for 1/2 off.

[Tyler S @0secure]

@Daniel_Infosec A small # of typos is ok, though it does contribute to the overall picture of the candidate (less so if not a native speaker). Large # of typos can lose you the job. Getting someone (preferably a native speaker) to proofread for spelling and grammar can make a huge difference.

[Tyler S @0secure]

@Resulka @darmokpdx @gbemmygbenga @IkiFoo @Infosec_Taylor Take it from one who has been similarly depended on in the past: they will survive. It may not be easy (or cheap), but they will survive. Don't prolong your suffering out of concern for those who have caused it - that's called Stockholm syndrome.

[Tyler S @0secure]

@DebugPrivilege @SwiftOnSecurity Personal opinion: likely to break a lot of things and annoy a lot of people without much real added security value.

[Tyler S @0secure]

@hacks4pancakes @QLDriver In my experience, many tend to be either too full of military jargon or so poorly translated to civilian language that a fellow veteran can't even figure out what they did in the military. It's a hard line to walk.

[Tyler S @0secure]

@cyb3rops @CyberRakshak One example I recently encountered in my own regex writing related to how Windows paths are reported in logs. I wrote the expression to match "C:\Windows\", but some events were logged with "C:\WINDOWS\" instead.

[Tyler S @0secure]

@cyb3rops @CyberRakshak I'll add the potential for over-specificity - it is very easy to write a regex that matches your sample but does not match the variation that exists within all the events you hope to catch, especially where case sensitivity and multi-line handling are concerned.

[Tyler S @0secure]

@kwm Something like that. I imagine it would start small with something like the techniques identified in the RC threat detection report and ideally grow to include the all the actionable techniques. Next, add a tool that facilitates gap analysis and tracking over time.