Nasser Nowdehi

Cybersecurity researcher, video game fanatic, sci-fi lover, mistake maker, survived a PhD in automotive cybersecurity! My opinions are my own!

[JS0N Haddix @Jhaddix]

🤖 The advent of AI in cybersecurity:

A few organizations & security firms play chess; most play checkers.

As AI evolves, all must master chess or risk being outmaneuvered.

[JS0N Haddix @Jhaddix]

Some people think being technical is a detriment to being CISO.

🤡 Don’t be a haha-CISO.

Don’t listen to articles telling you what you should be.

Yes, you need to have business skills but I’ll take a CISO who knows attackers and tech over one who has no idea, any day.

Security programs measured by risk alone, or by compliance, or by bowing to the business in every situation often fail.

They often waste money on imaginary metrics of their own devising. They often prioritize programs poorly. They exist to perpetuate themselves rather than answer important questions.

[Hamid Ebadi @hamidebadi]

Interviewer: "I heard you were extremely quick at math"
Me: "yes, as a matter of fact I am"
Interviewer: "Whats 14x27"
Me: "49"
Interviewer: "that's not even close"
me: "yeah, but it was fast"

[Nasser Nowdehi @NNowdehi]

@poke48k Congrats 🎉👏

[Corben Leo @hacker_]

I hacked a phone company earlier last year.

I found a stupidly simple way to view the call logs of 50M customers.

Here's how I did it:

[David Schütz @xdavidhu]

Awesome reverse engineering blog post about @Tesla Model 3 internals by @rice_fry:

"Hacking my Tesla Model 3 - Security Overview":
https://t.co/XpjX7FKYG1

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

We have over 150 free labs for you prepared at https://t.co/SCKS93VowR

In case you get bored on sunday :)

[Joel Eriksson @OwariDa]

Pointers

[Mariatta 🤦 @mariatta]

#PyConUS2022 @pwang Keynote: Announcing Py-script!!!
It's Python! inside HTML!!! 🤯

[Md Ismail Šojal 🕷️ @0x0SojalSec]

extremely useful when pentesting APIs.

by @CristiVlad25

[Nasser Nowdehi @NNowdehi]

I find this type of tweets quite educational (for myself, obviously)! The diversity in opinions is interesting!

[Jack Rhysider 🏴‍☠️ @JackRhysider]

Ok Twitter fam, what's the consensus on this?

Is it good security practice to store seed phrases, keys, or backup MFA codes in your password manager?

[daniel:// stenberg:// @bagder]

I blocked this email from reaching the curl-users mailing list.

[JS0N Haddix @Jhaddix]

Another long (hacker) story thread 🧵

= Stealing checks worth millions & pwning a bank =

Here’s how I did it, so you can learn.

I was once contracted to do a penetration test on a bank…

Like, retweet, and follow for more hacker stories!

(1/x)

[mandatory.bsky.social @IAmMandatory]

It's time to up our infosec shitposting game (listen with audio)

[TheMayor - Joe Helle @joehelle]

It's time to look beyond Offensive Security in this industry. Training diversity matters when building diverse teams, and that applies to any field.

If you're a hiring manager, take note of some of these alternatives you may see on resumes and accept them. A thread 🧵

[Justin Elze @HackingLZ]

Other day I asked for large repos of detection rules here is the running list of responses.

Elastic - https://t.co/OwVwhHU3nZ
Sigma - https://t.co/LygEgGSBeB
Chronicle - https://t.co/4QqDyzJCWC
Splunk - https://t.co/csHzWFCpLE
Falcon Force -https://t.co/9cOd5elj3U

[Alana Witten @BrownBearSec]

What I learnt from reading 220* IDOR bug reports.

https://t.co/OcvV2zZgzQ

[Nasser Nowdehi @NNowdehi]

@hamidebadi 😂😂😂