Rnast

Director of Security Research. Food Eater & Drink Drinker. Neck Snapper & Check Casher.

IG: therealrnast
Blu*sky: Rnast
M@stadon: @[email protected]

[Rnast @Rnast]

@NightSkyToday Not real. Stop posting this slop.

[nick.eth @nicksdjohnson]

Recently I was targeted by an extremely sophisticated phishing attack, and I want to highlight it here. It exploits a vulnerability in Google's infrastructure, and given their refusal to fix it, we're likely to see it a lot more. Here's the email I got:

[Rnast @Rnast]

@tell1skivi @ShitSecure @hasherezade Just preemptively tell it you are using it for educational purposes. 😏

[Rnast @Rnast]

@ryancbarnett

[Rnast @Rnast]

TIL the title of the movie “Jaws” in French is “Teeth of the Sea” and in Spanish it is straight to the point as just “Shark”. #shark #jaws #teethofthesea

[Rnast @Rnast]

@HunterStrategy "Polymorphic Unsupervised Password" Because the passwords that leverage Al and constantly change are the MOST secure. You can’t be phished because you don't know the password yourself!

[Rnast @Rnast]

@badgraphix @FinanceLancelot https://t.co/xl4rhiH4MI

[Rachel Tobac @RachelTobac]

LinkedIn is now using everyone's content to train their AI tool -- they just auto opted everyone in.
I recommend opting out now (AND that orgs put an end to auto opt-in, it's not cool)
Opt out steps: Settings and Privacy > Data Privacy > Data for Generative AI Improvement (OFF)

[Tom Warren @tomwarren]

Microsoft finally did it!

[asymmetric research @asymmetric_re]

🔥💃Calling all bounty hunters! @Immunefi is hosting a $1M prize pool to help secure Firedancer v0.1, a new Solana client written in C and Rust!

https://t.co/UsF8zy2Q5C

[Rnast @Rnast]

@morinap Hell yeah

[P4X -pronounced PAX (peace). Not pea four ex, thx. @_hyp3ri0n]

folks please help me get this word out. @Crowdstrike named some ransomware PunkSpider, literally the name of one of the pieces of software I made. Completely unrelated of course, mine is a security tool.

This is NOT cool, appreciate RTs to get them to change this.

[Rnast @Rnast]

@clhubes It depends on the city. Good luck finding a $200 hotel in SanFran.

[Rnast @Rnast]

@MalwareJake Couldn’t agree more. I often bring this topic up at conferences and get the evil eye. I’m a lot of fun at parties.

[Rnast @Rnast]

@ValaAfshar That’s no moon!

[Rnast @Rnast]

@MalwareJake McCarthy wants his questions back, but political association is not limited to your geography. He didn’t ask what his citizenship was.

[Rnast @Rnast]

@NinjaParanoid Reminds me of the Aesop fable of “The Man, the boy, and the Donkey”.

[CrowdSec @Crowd_Security]

⚠️ Update on CVE-2023-4911: #LooneyTunables Vulnerability. A new scenario is available to address the #Linux #vulnerability found in glibc’s dynamic loader.
Direct access here
https://t.co/kECxVkki42

Stay tuned. More updates soon.

[Rnast @Rnast]

@hevnsnt Indeed!

[The Haag™ @M_haggis]

⭐️It's official! ⭐️The #LOLDrivers 1.0 release is out and includes a tremendous number of new additions!

Release Blog: https://t.co/IUHKpYoL6B

https://t.co/9DUyR0BjTZ

1. New Driver Enrichments
- Authentihash, signature metadata, and more!
2. Driver Binaries under the drivers/ directory
- Want to download? Get them all!
3. Changed to UUID instead of Driver Names
- Longevity is the name of the game
4. Elastic Drivers Add
- @nas_bench opened Pandora's box, and all we got was a list of drivers
5. Updated https://t.co/hORF6hMqEr
- Enhancements, UI mods, update reports
6. Updated Validation CI Job with a YAML Spec
- Validate your YAML
7. Added Release CI Job
- Check it out - https://t.co/W50kjTK7yr
8. New Drivers Added via Community Contributions
- Numerous contributions from the community - thank you!

Incredible work by the team @nas_bench, @_josehelps, and all the community contributors!