Lostboy

Security and Cloud powered by ☕, Views are my own

[Lostboy @LostBoyNZ]

@BiladelphiaPHLY we don’t have Wawa here in New Zealand, but oh man do I want a Sizzli big breakfast deal all of a sudden

[Lostboy @LostBoyNZ]

Black Friday is the best time to unsubscribe from email lists because you'll have a near complete list 😆

[Daniel Nemeth @dnem__]

I spent some time exploring browser cache smuggling, where visiting a webpage can lead to malware delivery.

Surprisingly, it is possible to execute Chrome’s original cache file without renaming it, while also achieving persistence.

More details below:

https://t.co/rFrcKyuh31

[Lostboy @LostBoyNZ]

There’s nothing like sitting down, opening your laptop, ready to get work done. You put on your headphones, turn them up loud, hit play on Spotify and Dinosaur Stomp starts blaring at you 😑 clearly this is my life now

[Lostboy @LostBoyNZ]

@Top100Rick Eketāhuna?

[Lostboy @LostBoyNZ]

@EricaZelic @merill @dnsinit @maester365 While you could get some of the results there, I am trying to ensure the project maps to CIS explicitly. IE the checks are performed in the exact intention they are described, even if there is a “better” way. This is important imo to ensure continuity when reviewing against CIS

[Lostboy @LostBoyNZ]

@EricaZelic The short version is because I started them and haven’t finished yet. The unfinished ones are under way, I aim to have the remaining ones done by mid Jan

[Lostboy @LostBoyNZ]

@EricaZelic @MEM_MVP @WhitfieldsDad This.

[eitot @eitot8]

🛑 5 Common Windows Settings That Leave Your Organisation Vulnerable 🛑

Apart from ADCS HTTP Enrollment, they are all default settings. That’s probably why we keep seeing similar setup 😬

[Lostboy @LostBoyNZ]

When you need a coke, but you don’t want to have any fun at all

[Lostboy @LostBoyNZ]

@murmanz @janbakker_ Imo you are starting to over complicate it, and deviating from Microsoft’s recommendations. The new recommendation is to MFA all B/G accounts. Tailoring them to a user sounds fancy, but in an emergency all of that is going to slow you down.

[Lostboy @LostBoyNZ]

It was a wild ride but my DEF CON 32 adventure is over 😭 Spent an amazing few days at Cloud Village learning new tools, tricks and seeing what others have been researching. Thank you to the speakers and Cloud Village for organising such an amazing set of talks for #defcon32

[Rob Joyce @RGB_Lights]

Chinese Backdoor Alert! Security enhancements on Mifare Classic cards used in hotels/business contain a supply chain backdoor making reading & exploitation trivial. Great paper by Philippe Teuwen Quarkslab https://t.co/lTVOVoULFF Watch your Chinese supply chains carefully folks!

[Lostboy @LostBoyNZ]

Vegas, where hotel reception ask you to call a number to collect something from within the hotel, and then charge you for the call 😂

[Lostboy @LostBoyNZ]

Things you find in the rest room at #defcon32

[Lostboy @LostBoyNZ]

Some awesome talks yesterday at Cloud Village. A few more on the schedule today @ #defcon32

[Lostboy @LostBoyNZ]

It’s been a busy week but we made it. After a hop skip and a jump I’ll be at DEF CON 32! Look forward to seeing old hacker friends, and meeting some new ones #DEFCON #defcon32

[CHCon @CHCon_nz]

Are you ready for Chcon 2024 conference tickets yet?

Conference only.

https://t.co/qCi7v32tIc

Or maybe you want some training?

https://t.co/PkGO0nIgmL

[shubs @infosec_au]

legalise port scanning

[Lostboy @LostBoyNZ]

@paulsanders87 I went with a moon lander about 4 years ago and never looked back. I liked it so much I now have two