he internets

Otrovert, mainly here to read about cybersecurity

[he internets @1computergeek]

@TPCarney you sound exactly like those people that blamed the radio for social decay. or books. or games. or bicycles.

[he internets @1computergeek]

@michshsh @angeloinchina "posted on the government website" - thats like asking the criminal to write their own police report and refuse to discuss or provide evidence lol.

Chinese people cant even search for a calendar date

[he internets @1computergeek]

@fankaishuoai Tailscale with an exit node back home saved me when I travelled to China - could access all my resources from any network

[he internets @1computergeek]

@urbanarson @intheworldofai How does using codex with local models train OpenAI models and steal code?

[Irushi @Im_IrushiK]

Opus 4.8 is insane, nothing will be the same after this model 💀

[he internets @1computergeek]

@xkaidus @jon_stokes give me liberty or give me death! oh wait... nevermind, lock me up

[he internets @1computergeek]

@jon_stokes yeah funny how government tyranny suddenly turns into basic common sense the second the virus gets scarier

[he internets @1computergeek]

@juhasaarinen here is the original tweet: https://t.co/eoVI551qc2

[NetAskari @NetAskari]

EXCLUSIVE: How the track foreigners in China - We got rare access to demo system developed by the Ministry of Public Security in China for the prefecture of Zhangjiakou, to track and surveil foreigners visiting or being residents ( actually it applies to most nationals as well, but in this case it seems to be aimed at foreigners ). It is officially known as "Dynamic control platform for overseas personnel". 1/12

[he internets @1computergeek]

@lthlnkso This is all true but no reason why he can’t pay his employees more

[he internets @1computergeek]

@TakamaeM33463 @JacintaAllanMP Employer clearly pays them for their results, not for occupying a chair. I'm sorry your job requires a babysitter.

[he internets @1computergeek]

@kapilansh_twt Self hosted onetimesecret

https://t.co/j2UwM7CTKu

[he internets @1computergeek]

@theo zero of these have any real impact to me, so no

[he internets @1computergeek]

@robertgraham @scaryslocuda Musk's employees, while designing, building, maintaining the product, get paid a fraction of what Musk does. So new wealth is created, but taken 99% by Musk.

[he internets @1computergeek]

@hackerfren This gonna burn through tokens like

[he internets @1computergeek]

Great project and encourage everyone to join

[Andrew Morris (afk) @Andrew___Morris]

Howdy folks! Taking a break from my twitter break to let yall know that we released a new @GreyNoiseIO product yesterday. It's called Project Swarm. We've been quietly not-so-quietly working on it for a few years. You can buy it now. It costs $1.

There are lots of vulnerabilities on edge-facing apps. To catch in-the-wild exploitation of them, we @ GreyNoise run sensors on the internet. New AI models means more vulnerabilities being identified and exploited, and FASTER. Long term, software and hardware will probably get better, but in the meantime we're gonna have to deal with A LOT of vulnerabilities.

At GreyNoise, the sensors we run are basically honeypots- we bait attackers to scan and exploit them which enables us to learn where the attackers are, which vulnerabilities they are exploiting, what it drops, and what it looks like on the wire. From ~2020-now it took us years to build up our fleet. Now anyone can use our new product to deploy their own sensors on their own networks, or an entire fleet of any size, in a day. You can rip back the data and do whatever you want with it. You can resell it, put it into your product, or just stare at it- whatever you want! On our side, we aggregate the data and pour it into a community dataset that everyone shares. As more people join, the data gets bigger and better.

Couple neat features:

- Sensor deployment is a single bash command on any modern linux distro that supports iptables and wireguard.

- Sensors and vulnerable software (profiles) are abstracted into different logical concepts, which means the "what" and "where" are different things, and the sensor is not constrained by the compute required to run the vulnerable software. Also, no matter how hacked the profile (honeypot) gets, it can't touch your host sensor or the rest of your network.

- Sensors can run fake honeypots, real software, or even real hardware (bridged with a raspberry pi) like old crappy routers and modems (or expensive firewalls and VPN gateways 👀)

- You can create dynamic blocklists that block IPs sourced from your own sensors in real time, so if a remote IP address *looks at your network* the wrong way, you block them instantly.

- All the PCAP data is available to you in a gorgeous and intuitive interface at near real time and fully enriched against all of our (thousands of) rules. We're working on the host metadata (malware, syscalls, host behaviors) as well, but this will come later.

- If we don't tag a CVE that's interesting to you, you can write a Suricata rule to tag it yourself once and your data gets tagged with it in real time forever.

- You can instantly download PCAPs of any exploits that hit your sensors.

- If you don't want your data shared with the community dataset, you can talk to our team and we'll work out rights to make it private.

Check it out! There's a lot of moving pieces to make this work and we expect bugs, but it's available right now. Join the fight!

https://t.co/erAWtX1l7B

[he internets @1computergeek]

@BVeiseh @cyb3rops Do you work for a large AI company? It's like encouraging people to write something so the massive AI company can suck it up, sell it, take the profits and never credit the author.

[Renzon @r3nzsec]

DFIR analysts who use macOS as their daily driver deserve free and native forensic tooling. So I built one. 🍎

Introducing 𝗜𝗥𝗙𝗹𝗼𝘄 𝗧𝗶𝗺𝗲𝗹𝗶𝗻𝗲 — a timeline analysis app built from the ground up for Mac-based DFIR folks, forensic investigators, or SOC analysts. Built in appreciation of, and inspired by, Eric Zimmerman’s Timeline Explorer.

Every feature in this tool was shaped by real IR casework. Handling massive timelines, parsing artifacts here and there, and pivoting across logs during active investigations. I built IRFlow Timeline to be the native macOS timeline analyzer that actually keeps up with a live case. Every button and view is intentional; if it’s in the app, it’s because I needed it mid-case and realized the standard tools fell short.

No dependencies. Zero setup. Just drag, drop, and analyze.

#dfir #incidentresponse #timeline #macos #threathunitng #digitalforensics

[he internets @1computergeek]

@binchcity You cant just take a chemical addiction and swap the word out for "social media" and expect people to take you seriously

[he internets @1computergeek]

@LukeBarrass1 @lukeisamazing bold to say Christians only protest when you ignore a thousand years of crusades, plus inquisitions, clinic bombings, murder of doctrs, the KKK's "Christian" movement etc