Errata Security

Errata Security is a consulting company comprised of cutting edge computer security researchers and developers.

[David Maynor @Dave_Maynor]

#Succesion people

[David Maynor @Dave_Maynor]

Google “the Mandalorian” and click on the the baby at the bottom right. #Mandalorian #google #funny #StarWars

[Cybrary @cybraryIT]

We're now LIVE! 📹

Join @Dave_Maynor as he runs through the latest Microsoft Patch Tuesday releases ➡️ https://t.co/YPXSEr8ipI

[David Maynor @Dave_Maynor]

https://t.co/5CyMfaJT28 it is always an honor to represent @Cybrary as a spokesperson. @Forbes does an excellent job of explaining why #Mastadon adoption should not be rushed due to emerging security findings.

[Robert Graham @robertgraham]

Meh. Thinking about predictions for the new year, I thought I'd instead make some anti-predictions -- poo-pooing predictions.
https://t.co/RUw61yIndh

[David Maynor @Dave_Maynor]

I used to do this in #pentest or threat actor reports. Using the following #netrunner cards, what recent attack am I referring to? #infosec #ThreatHunting

[David Maynor @Dave_Maynor]

Our household after a long day of work and Boba Fett to look forward to. @Dave_Maynor @LawyerLiz

[David Maynor @Dave_Maynor]

I don't get it. There are plenty of jobs you can collect your paycheck with minimum effort. When chose security to do that with? Security is rapidly touching every part of our society. It seems like a weird place to phone it in.

[Robert Graham @robertgraham]

Sooo.....

You have two choices:
#1 fall back on the "experts have debunked it". I'm an expert, I've debunked it.
#2 spend considerable amount of time understanding the issue so that you can competently debate it and answer questions, which frankly, isn't worthy your time

[David Maynor @Dave_Maynor]

Check out the new field test mode in iOS 15. As always go to keypad and type *3001#12345#*

[David Maynor @Dave_Maynor]

As far as OMIGOD why don’t people just “sudo dpkg -l omi”. That seems like a super simple way to mitigate it.

[Ronnie Tokazowski @iHeartMalware]

@Dave_Maynor Compliance - Doing the bare minimum in terms of security, typically including following a checkbox list of some sort.

Do more than the bare minimum and you're more than likely to be okay.

[William Knowles @c4i]

@Dave_Maynor Governance, risk management, and compliance - GRC was formally defined as "the integrated collection of capabilities that enable an organization to reliably achieve objectives, address uncertainty and act with integrity."

[David Maynor @Dave_Maynor]

Adversary. Any individual or group that wants to subvert you security controls, organization integrity, or safety of employees, users or customers. There are more adversaries than just criminal groups.

[David Maynor @Dave_Maynor]

TTP - tools, techniques, procedures. This is the tools that adversaries use and how they use them. Think of it in terms of a cop. A cop has a radio, a badge, handcuffs, and a gun. Those are the tools. How they use those tools are the techniques and procedures.

[David Maynor @Dave_Maynor]

You can be in infosec and not be a security practitioner. Lets start a thread with terms and definitions that everybody in an #infosec org should know. Ill go first.

[David Maynor @Dave_Maynor]

To follow up on this its worth noting that an exec for ExpressVPN was just charged with building a cyber espionage group for a foreign government. https://t.co/6L1pXSU34Y For safety reasons maybe skip ExpressVPN and Kape

[David Maynor @Dave_Maynor]

Do you use a private VPN? If so...

[David Maynor @Dave_Maynor]

That's a ton of cash for a VPN provider. The 936 million price tag is around 312 dollars per user. Ask yourself why VPN subscribers are work that much.

[Robert Graham @robertgraham]

I've gotten this link to work. BTW, you don't need to download the entire 292gigabyte dataset, you can just mark individual files that you want to download first.