4 of mallace

security engineer, ex-pentester
videos @AstarteSecurity - meetup

[4 of mallace @IceSolst]

Tool: transfer data through sound, including INAUDIBLE frequencies!

Use it here: https://t.co/R7LrhF7zmk

Works offline, data not sent to any server: it’s an in-browser modem supporting frequencies between 18k and 19k Hz, which most humans can’t hear (but your cat can!)

[4 of mallace @IceSolst]

Since we’ve established shawarma knowledge is necessary, you should know Cuban influence transformed classic shawarma by swapping the traditional spice profile for citrus-garlic mojo marinades, centering roasted pork (lechón), and pressing the wraps plancha-style with Swiss cheese and mustard.

[4 of mallace @IceSolst]

“Exactly 8 chars” is the worst password policy I’ve ever seen

[4 of mallace @IceSolst]

But what about things that ARE on the internet? What do you think of your own password policy? Kind of embarrassing innit?
And you only support the bs RSA app for mfa? Curious!

[Pat Opet @patopet]

if you’re working for a company in cybersecurity, you should be evaluating your options to abstract your companies services from the internet

what i mean is: why allow an unauthenticated anonymous agent of an attacker to interact with your systems?

consider your architectural levers now, you’re going to need them

[4 of mallace @IceSolst]

@eliedelkind Their business accounts force you to use a 6 digit password, no longer, and only supports the rsa app for mfa

[4 of mallace @IceSolst]

@OniCtwin @anton_chuvakin @UK_Daniel_Card @TalBeerySec @a16z @asaf_ez @rekdt Mallace
Mallace
Mallace
Mallace

[4 of mallace @IceSolst]

❌ “Swarmed”:
- massive cyber larping
- thinks AI invented security
- thinks machine-speed is novel
- reads a16z sloports

✅ “Zerged”:
- assimilated to the Hive Mind
- we require more Vespene gas
- high-pitched, frantic skittering, aggressive wet clicking sounds

[andi (twocents.com) @Nexuist]

The Cuban Missile Crisis began because a CIA analyst looking at U-2 photos noticed soccer fields popping up next to missile silos and thought, hey that’s weird, don’t Cubans play baseball?

[4 of mallace @IceSolst]

@vmfunc Woaw amazing

[Josh Long (the JoshMeister) @theJoshMeister]

so i guess “mallace” is just a thing now

[4 of mallace @IceSolst]

@gdb wyd when your head of engineering thinks design docs slow them down too much?

[International Cyber Digest @IntCyberDigest]

‼️ Hackers are breaking into the Nintendo Switch 2 with a Civilization VII cartridge. Its publisher 2K is reportedly recaling the physical copies.

The original Switch cart has an unpatched flaw. CivSwitch, a tool by modder Gezine, uses it to run code fed in from a phone over USB.

That opens the Switch 2 to saves, mods and homebrew apps. It can't run pirated Switch 2 games, for now.

One buyer says Amazon cancelled their order over a 2K mandate and "technical and security-related requirements." 2K hasn't commented.

Some buyers say they were offered the code-in-box edition instead. The exploit doesn't work on it.

[4 of mallace @IceSolst]

@0x4D31 @InsanityBit Right exactly this

[4 of mallace @IceSolst]

I don’t get “block attacks at machine speed”?
As if we had to hand-crank the IPS hog, and if u don’t jork it fast enough, hackers got in? Every sentence remains the same if u drop it, so, why

[Zack Korman @ZackKorman]

Cybersecurity must thank the AI gods, for in the before-times we had yet to discover the power of the Machines.

Detection consisted of smoke signals released through chimneys to warn of danger. Response teams communicated via carrier pigeon, and malware was removed with an axe.

[Tal Be'ery @TalBeerySec]

Classic “failure of imagination”.
Asking customers what they want, as @a16z did with CISOs, yields local innovation at best: “AI exploits faster? We need faster patching.”
The future belongs to companies that innovate from first principles.
Different is better than better!

[4 of mallace @IceSolst]

Traditional Mechanical Turk firewall, deep packet inspection is just some guy looking
Huge innovation: machine speed firewall.

[4 of mallace @IceSolst]

@dejavucoder I just use normal GLM, don’t see any reason to use the abliterated one, but yes banger tweet, AK47s for everyone

[sankalp @dejavucoder]

ma bois with their abliterated deepseeks and GLMs

[The Deal Director @thedealdirector]

@ResilientCyber The whole field was actually discovered accidentally during a Claude code session several months ago.