Alexander Wilczek

Digital Nomad Fighting Cybercrime | Founder @rivanorthSec

[Alexander Wilczek @SecWillCheck]

Back in 2014 when I was just getting started with hacking, if you would have told me that one day I’d be a DEF CON speaker I wouldn’t have believed you.

But guess what, dreams do come true 🙂

Still can’t believe I got to share my research at the first DEF CON Singapore ever!

Big thank you to everyone that came and thanks for the support. This is a huge motivator for me to do even more research.

[Alexander Wilczek @SecWillCheck]

I struggle to stay still.

Anyone else?

Where am I off to next?

[Alexander Wilczek @SecWillCheck]

Hey @BreachClaw , a lot more work coming your way

[OpenClaw🦞 @openclaw]

"You can run OpenClaw inside your company now." Annoucing our work with @Microsoft to bring OpenClaw to the Microsoft and Windows ecosystems. Claws now work securly in the enterprise.

[Alexander Wilczek @SecWillCheck]

This one tip has helped me to never go over time while speaking, but also to not leave time on the table.

I've recorded this video while I was in the hotel finishing up my DEF CON Singapore presentation slides.

Hope it helps you too!

[Alexander Wilczek @SecWillCheck]

I hate to admit this, but Elon Musk made @rivanorthSec possible.

Australia is notorious for having really bad reception, even in metropolitan areas.

Thanks to Starlink, I've been able to work from literally anywhere.

From the Victorian High Country, the rugged west coast of Tasmania, various deserts and the Pilbara.

This piece of kit has truly changed everything for digital nomads in Australia.

[Alexander Wilczek @SecWillCheck]

One of the most notorious dark web forums has gone back to the 90s.

Yes that's right, they started using Jabber (XMPP) an open-source instant messaging protocol created in 1999.

I believe it's because of the increased crackdowns on Telegram groups after the arrest of its founder, Pavel Durov.

Telegram has since started cracking down on illicit activity on the platform, which makes maintaining communities much harder. I think this is an experiment to see if XMPP will be a more reliable option for them.

If you found this interesting, share it with someone who follows the dark web space.

[Alexander Wilczek @SecWillCheck]

@openeconomyos 100% perfect analysis, I think that's what it boils down to

[Alexander Wilczek @SecWillCheck]

Are you dreaming about being a digital nomad?

Then this post is for you.

I’ve been a nomad for over 3 years now.

I don’t own or rent a house.

All my possessions are in my 2001 LandCruiser.

In the last month and a half I’ve moved 8 times.

Plus working 10+ hours a day makes this quite challenging.

Don’t get me wrong, as a whole I love it, the opportunities and experiences this lifestyle has given me are priceless.

If you’re still dreaming about becoming a digital nomad remember that long term it’s not only cocktails by the pool in Bali and a meeting every second day.

Yes sure, it’s possible for a few months.

But long term, if you want to perform at work or research it will be hard.

But the hard times will be rewarded with unlimited flexibility and a life on your terms.

At least that’s how it feels to me.

[Alexander Wilczek @SecWillCheck]

I don't know why this is so hard.

Traditional CTI apps are just riddled with false positives.

I think the only question a CTI platform should ask before creating an alert is, "Is this an immediate cybersecurity risk for the company?"

I think it's pretty simple.

If the answer is a clear yes, then that should be an alert. If the answer is a long five-minute explanation as to why this might be an issue, I think it's irrelevant, especially these days with so many AI and supply chain news coming out every few seconds.

I don't know why no one else is implementing it?

[Alexander Wilczek @SecWillCheck]

@fr0gger_ Mad stuff! you still writing code manually?! 😲

[Alexander Wilczek @SecWillCheck]

This is what $7.30 buys you at Perth airport.

A regular, spilled, flat white.

[Alexander Wilczek @SecWillCheck]

Everyone is riding the AI hype, even cybercriminals.

$200 apparently buys you a Google Gemini database.

This is obviously fake, Gemini didn't get hacked.

I guess now we have AI influencers on the dark web too.

What to you think about Mythos? 😂

[Alexander Wilczek @SecWillCheck]

Unpopular opinion, these are my AI security predictions for the near future.

1) Software security will die
2) Frameworks will be crucial
3) Data leaks will explode

Let me explain.

Security as we know it is on its way out. Tools like SAST and DAST? Dead. Manual code review? Dead. Specialised agents will write and then review their own work for vulnerabilities and fix them autonomously. It won't be perfect, but it won't be any worse than what we have now.

Once the dust settles, frameworks will emerge which will help guide deployment of agentic systems. For example, writing and fixing code will be acceptable as fully autonomous tasks, but deployment will still require a human in the loop. High risk industries like healthcare or finance will have mandatory human checks, whilst others will be 100% operated by AI.

The amount of data we'll produce will skyrocket. Its value and sensitivity will also increase, making it a prime target for attackers. I believe we'll see more data breaches, both from attackers chasing bigger payouts and from negligence caused by the rushed adoption of AI.

Please feel free to disagree :)

[Alexander Wilczek @SecWillCheck]

After the conference marathon of the last few weeks, I had quite a few people reach out asking for a demo of @rivanorthSec Oko.

If you're interested in dark web and third-party monitoring, I'll be running demos this week.

Drop a comment or DM me if you'd like one too.

[Alexander Wilczek @SecWillCheck]

@JJusell Cheers mate, I'll check it out!

[Alexander Wilczek @SecWillCheck]

I'm currently overwhelmed by opportunities:

I can either:
1. build
2. do marketing and sales
3. apply to conferences
4. apply to incubators
5. apply to startup competitions
6. raise directly

I feel like I can only do 4 out of these 6.

Which ones would you choose and why?

[Alexander Wilczek @SecWillCheck]

vlogging is one of those things that looks super easy from the outside but then it's 100 times harder in real life.

I'd love to give it a try but damn I don't seem to find the time

[Alexander Wilczek @SecWillCheck]

@fr0gger_ what a time to be alive!

[Alexander Wilczek @SecWillCheck]

I have been getting quite a few requests from people to share my presentation slides.

I think it's important to not gatekeep information, especially in our industry. I've uploaded my slides with @BSidesMelbourne directly, I'm sure they'll share the link shortly, or you can check the website maybe it's already there.

I've done the same for my CRESTCon talk. I believe they'll share them with everyone that attended and the members.

For those that came to my @defcon talk in Singapore, I've also shared my slides with them directly, so that should be downloadable from their website too.

If you still have questions about my presentation, feel free to leave them in the comments as I believe it's better to discuss in public so we can share the knowledge rather than keeping it behind the DMs.

[Alexander Wilczek @SecWillCheck]

@hetmehtaa Check out @BreachClaw 100% free for the community

[Alexander Wilczek @SecWillCheck]

What an amazing experience getting to speak on the main stage at @BSidesMelbourne !

Had a great crowd which asked some amazing questions.

Funny enough, I love questions, it’s my favourite part of presenting and being on stage.

Off stage, it was great to bump into old friends and make quite a few new ones.

I’m gonna be resting up a bit after this one as in just a few weeks this was my 4th talk, and I definitely need to recharge my batteries a bit.

But big thank you to everyone that attended, everyone behind the scenes organising and the review board for giving me this opportunity.

Thank you 🙏