TaffyByte

Security n Stuff

[TaffyByte @TaffyByte]

incredible work!

[quarkslab @quarkslab]

Obscure Element: Reverse engineering Xiaomi's MJA1 secure chip.

Mengsi Wu's journey starts here:
https://t.co/T7oyNwU29H

[TaffyByte @TaffyByte]

Bought 5 of the cheapest "smart" devices I could find and ran each through the same firewall lab. One of them downloads a script from a server overseas and runs it as root every time you boot it. New talk dropping soon: "When You Tell the Device No."

[TaffyByte @TaffyByte]

Watch: https://t.co/PgH7X5YFwG
Read: https://t.co/CczhO9rdpg
Code: https://t.co/JNF5jr5IHL

[TaffyByte @TaffyByte]

Gave my first big-stage talk at BSides Las Vegas (PasswordsCon) on something I keep running into: attackers throwing passwords at login systems that were never designed to work. They're not trying to log in. Thread.

[TaffyByte @TaffyByte]

Mostly an awareness talk, since the fixes aren't exotic, they're just rarely all in place at once. Also it was my first time in Vegas and I 100% talked too fast.
Watch, read, and the code are in the reply.

[0xor0ne @0xor0ne]

Reverse engineering and dumping firmware from smartwatches

Read more: https://t.co/jhpzEwKzbs

Research by by Damien Cauquil (@quarkslab)

#infosec

[0xor0ne @0xor0ne]

Material to get started with embedded firmware reverse engineering

https://t.co/JHmDY8W38K

@emproofsecurity workshop

#infosec

[Polymarket @Polymarket]

JUST IN: South Africa pulls its AI policy draft after it was revealed to contain fake AI-generated sources.

[TaffyByte @TaffyByte]

@Bugcrowd Ls , just in case

[TaffyByte @TaffyByte]

30 Days of a Honeypot at Home https://t.co/7UqYoJ001B #honeypot #t-pot #homelab #opnsense #threat-intel #blue-team #docker #logging

[TaffyByte @TaffyByte]

@betway @F1 Been trying to withdraw R2,500 from @BetwayZA for 4 months. Their verification system breaks on their side. When I escalated today they accused me of having multiple accounts with zero proof and locked me out completely. Formal complaint soon.
@BoardGambling

[TaffyByte @TaffyByte]

@Betway_za Been trying to withdraw R2,500 from @BetwayZA for 4 months. Their verification system breaks on their side. When I escalated today they accused me of having multiple accounts with zero proof and locked me out completely. Formal complaint soon.
@BoardGambling

[TaffyByte @TaffyByte]

Been trying to withdraw R2,500 from @BetwayZA for 4 months. Their verification system breaks on their side. When I escalated today they accused me of having multiple accounts with zero proof and locked me out completely. Formal complaint soon. @BoardGambling

[Co11ateral @co11ateral]

Capturing NTLMv2 hashes with alligator clips

Here is the article: https://t.co/OTzSQQ73wE

#pentesting #redteam @three_cube @_aircorridor

[TaffyByte @TaffyByte]

Finally!

[Tom Dörr @tom_doerr]

Files for radio frequency hardware

https://t.co/5E5YY27Iyi