FiberMoose

[FiberMoose @FiberMoose]

@herrmann1001 Maybe this has been answered somewhere or I'm just dumb, but how will transparent cases work for the earliest supporters who backed early on, and got the pre DC34 orders?

[FiberMoose @FiberMoose]

@lozaning @seeedstudio Hey, I found a coupon (K68OZ03G) for like $0.13 usd off of each lol
@seeedstudio you should totally sponsor this project!

Each person who builds this project would be buying at least 44 of these (Like myself, as soon as you have USA warehouse stock of these)

[FiberMoose @FiberMoose]

@gdholtby @oliviasolon Yes, you can update the contents of it, esp if you have a NeXT or similar from @DangerousThings. Just need a flipper, proxmark, or for just standard NFC stuff- your phone

[FiberMoose @FiberMoose]

@oliviasolon @MisterMarket0 Up to 3T* or less (Verify with your specific model/manufacturer)

[FiberMoose @FiberMoose]

@202accepted −196 / strong zero

[FiberMoose @FiberMoose]

@202accepted Nevermind- I read the original post and I wasn't the only one lmao

[FiberMoose @FiberMoose]

@202accepted Why does this look like fresh urine though 😂

[FiberMoose @FiberMoose]

@gclawes @Pirat_Nation Those are called machine identification codes/MICs lol

[Mahoutsuka @Mahoutsukatr]

"Shoot at the server room during the evacuation"

[gabriel @gabriel1]

sf has the most autistic billboards

[FiberMoose @FiberMoose]

@Bedrovelsen @herrmann1001 @gentilkiwi Following!

[FiberMoose @FiberMoose]

@rgvgringo @AustinMeshOrg Thanks! We've made contact via LongFast as well!

[FiberMoose @FiberMoose]

@AustinMeshOrg just made contact with several folks
Southest AUS - HRL @ 22k ft

[FiberMoose @FiberMoose]

Contact at 26k ft over San Marcos/North San Antonio

Also confirmed contacts with Leander/North Austin while at 10k ft over southern Austin

[Ham Radio Village @HamRadioVillage]

Bringing a radio to @DEFCON this year? Visit https://t.co/L8ouqLnYYx to see all the active frequencies this year and get on the air!
#HamRadio #AmateurRadio #defcon33

[FiberMoose @FiberMoose]

Ahaha this is ridiculous

[asdhuqiwuhdais 🇳🇱🇺🇦🇪🇺🏳️‍🌈 @asdhuqiwuhdais]

@S_F1gur3 yes https://t.co/hF0u7iIMVV

[FiberMoose @FiberMoose]

@MakeAugusta @eevblog This is actually a hilarious example of going a bit too far 😂

[FiberMoose @FiberMoose]

@PicturesFoIder Name of the store is la michoacana

[Stephan Berger @malmoeb]

During a recent incident response case, we observed the following file access: \\localhost\C$\@ GMT-2025.06.21-10.53.43\Windows\NTDS\ntds.dit

This is a clever method of accessing a Volume Shadow Copy (VSS) snapshot. Many EDR and detection systems typically monitor for commands such as 'vssadmin list shadows', and may trigger alerts based on their use.

However, by leveraging the "Previous Versions" feature in Windows (see screenshot), attackers can select a snapshot, view its properties, and enter the '@ GMT' path directly in Explorer. This allows them to browse the snapshot's contents without needing to use the command line.

Because this technique doesn't rely on typical shadow copy commands, it may evade detection by your EDR or SIEM solution. You might want to test it in your environment to identify and close this potential detection gap 🦸‍♂️🦸‍♀️