I've been posting a lot of tools that I've been building, the target for these tools are independent researchers, Small/Medium admins, and those who don't have the resources/needs of a full large enterprise.
Here is a breakdown of what they are and what they do
"You can run OpenClaw inside your company now." Annoucing our work with @Microsoft to bring OpenClaw to the Microsoft and Windows ecosystems. Claws now work securly in the enterprise.
@anton_chuvakin "unfortunately, more than I want to"
"Yes"
"Very Yes"
Grab a cigar, put on a world weary voice, "I've forgotten more about SIEM's than most will ever know"
@HackingLZ Speaking as someone who no longer works at microsoft and has switched to baseband research?
Now that securing that nightmare isn't my problem?
Go for it!
@anton_chuvakin@dinodaizovi@ZackKorman and I were talking about that a few months ago, not enough research was done for adversaries to leverage LLMs and there weren't enough production systems actually using them to see any kind of novel attack.
@usetraceix@mvalsmith It used to be the case, but there's a lot of rot in that documentation ever since they lost the tech writer staff.
Also I've caught no less than three major hallucinations in their docs in the last two weeks. Granted they fixed it fast, but that's really unacceptable.
@IceSolst from the POV of the researchers and end users, what's the difference?
Yes there are plenty of people who want to do more, could do more, etc.
But if they're unable to, does it actually matter? If legal runs the show, that's a decision the company has made.
Because there's no situation where they talk down to you, you might be wrong in how you think something works, but they're always polite and professional.
If you show up with a security issue, you *will* get attention. Probably more than you expect.
CF does it right and they do it at scale.
@vxunderground It's damage control plus "please dont just drop 0days out of revenge nerds, we've lost too many competent people lately who could've fixed it"