Jon Aubrey

[Jon Aubrey @SecurityJon]

Finally got a few mins to finish off some projects. First up ‘the dancing car’ - a stand-alone car cluster which ‘dances’ along with music.

#CarHacking

[Jon Aubrey @SecurityJon]

@HackingDave Tell him not to worry, I remember a load of people at Defcon didn’t get the telnet port in hacker jeopardy either

[Jon Aubrey @SecurityJon]

My take on the Blackhat talk of the OpenAI incident is mixed feelings.

On one hand it’s great to see transparency.

On the other what I heard was ‘our attack models are good, use our defence models to guard against the new models we’re creating’

It feels like extortion

[Jon Aubrey @SecurityJon]

I honestly thought @_Freakyclown_’s book had been adapted when I saw the title of this new movie

https://t.co/LepR3RT5Zh

[Jon Aubrey @SecurityJon]

@zseano Agree, but with a small counter point.

BB programmes have limited budget, they need to show ROI over other security measures.

If money is paid out for vendor issues, budget for company-specific bugs is reduced and the C-level optics aren’t great for the BB manger internally

[KF @d0tslash]

"Can it Resolve DOOM? Game Engine in 2,000 DNS Records" https://t.co/Rf0zw4KLyM

[Joe Grand @joegrand]

https://t.co/gLeDoHBzQC

[Jon Aubrey @SecurityJon]

This one has the potential for causing a lot of grief to coffee shops who use the same AP for guest access and their corporate backend.

I’ve worked with retail and banks who have exactly the same set up too

[HD Moore @hdmoore]

New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises: https://t.co/JbIfytD8TT

AirSnitch resets WiFi security back to the bad-old-days of ARP spoofing and trivial MITM.

[Jon Aubrey @SecurityJon]

@_CryptoCat @bsidesbelfast Were these recorded?

[Jon Aubrey @SecurityJon]

@dcuthbert @_Freakyclown_ Ask yourself, are you going to be happier with it, or without it?

[Jon Aubrey @SecurityJon]

This. We said it was a bad idea from the start and it is.

Privacy nightmare and easily bypassed

[ẗäüẗöl̈ög̈ÿ @tautology0]

@ScottMcGready Watching companies come out with stupid ways of doing age verification which are all easily bypassed just shows that it was misguided from the start. It just needs to be scrapped in favour of better education.

[Jon Aubrey @SecurityJon]

@UK_Daniel_Card @BSidesLondon @BSidesChelt I didn’t realise this was on, but my Flipper hasn’t any use for a while so….

[Jon Aubrey @SecurityJon]

@_Freakyclown_ I learned this many years ago, from a Portcullis tester no less!

(Although I always forget to do it and swear on first disconnect)

[Jon Aubrey @SecurityJon]

@dcuthbert Switch! You got off easy this time

I didn’t mind replacing those, it was the desoldering of the PS5 ones that had me groaning.

[Jon Aubrey @SecurityJon]

Got a new gym bag for Valentine’s Day. This is going to amuse me for months.

#wehackhealth

[Jon Aubrey @SecurityJon]

@cybergibbons Shakespeare said it best.

‘To lick or not to lick, that is the question’

[Jon Aubrey @SecurityJon]

Spot on.

Anyone that says ‘security isn’t hard’ has never had to deal with pre-existing conditions

[Jon Aubrey @SecurityJon]

Hey @LGUK Your recent firmware upgrade for the G1 TV just broke ARC support, and with no firmware downgrade permitted I now have no sound.

Perhaps having a rollback feature or even a downgrade feature might not make for salty users..

[Jon Aubrey @SecurityJon]

@cybergibbons Also if you find your drone from previous years in the loft, it’s not a good idea to fly it indoors for ‘practice’ as the chunk out of my doorframe will attest

[Jon Aubrey @SecurityJon]

Train tickets booked - see you all @BSidesLondon next weekend!

[0xBB @bb_hacks]

Fancy retrieving plaintext user credentials, deactivation passcodes and uninstall passwords for Palo Alto Global Protect VPN? Thank goodness Palo Alto make that easy for you ...

Full write up here : https://t.co/6T65cHCi9n

Tooling available here : https://t.co/bAPNigVlX5