nsao

[Daniel Cuthbert @dcuthbert]

Everyone today is a hacker in a sense but there are very few OG hackers on which shoulders we stand

Oh dude, Felix “FX” Lindner you were so much a hackers hacker and you will be missed

RIP my friend and thank you

[Philippe Oechslin @tradeoph]

We have finally published Tproxy (https://t.co/ECXoklDR0B) our generic TCP interception proxy (think Burp for TCP): TLS handling, wireshark dissection, intercept and modify by hand or with scripts in GUI or CLI.
There is a complete doc with demos (https://t.co/wJ7lrHC8L4)

[nsao @__nsao__]

@dougsbaker @DrAzureAD ADX is not exposed in most Sentinel contexts like analytic rules, nor Defender threat hunting queries, mostly for commercial reasons.

[nsao @__nsao__]

@rmhrisk hybrid clouds anyway. (2/2)

[nsao @__nsao__]

@rmhrisk So true for AD user certs, even worse if you include Azure, Intune etc. Most solutions are half baked, siloed and hard to get right. From PIV tokens to SMIME to mobile creds... such reluctance to cover use cases properly. And Hello/FIDO are just not there yet - not for (1/2)

[nsao @__nsao__]

@awakecoding Can the issue be reproduced with CAPI2 event logs enabled?

[nsao @__nsao__]

@awakecoding If dealing with PIV scards like yubikeys, clearing the PIV cache sometimes help dealing with stale keycontainer refs https://t.co/Uy45h5l9Lj

[nsao @__nsao__]

@TruBluDevil Also Azure AD Connect PS modules, like this one to set up FIDO for hybrid joined devices

https://t.co/Ef2nAPTClD

[nsao @__nsao__]

@TruBluDevil Windows Virtual Desktop, which would be a cool PAW/SAW if FIDO worked all the way (I know I know, certs work... but at what cost 🙂)

[sofía celi @claucece]

Inspired by @CryptoHack__ ;)

Thread around Latttice-Based Cryptography Reading

For the past few months, with some amazing people, we have been learning lattice-based cryptography.

These are some useful resources:

[nsao @__nsao__]

@JenMsft subst X: <Some\Loo...oong\Path>

[Brian Smith @BRIAN_____]

This week I started reviewing Rustls. As part of this review, we (@1Password) have submitted over 25 PRs to make the code easier to review in the future. I expect us to submit more to clarify the correctness of the state machine, improve certificate validation, and improve perf.

[rollin @francoisrollin]

Chez Marianne...

[Frank @jedisct1]

A half-hour to learn Zig https://t.co/HvWXGvWupi

[rollin @francoisrollin]

Le bouquin n’est pas terrible, mais la préface est géniale. @AAstierOff⁩

[nsao @__nsao__]

@cryptodavidw https://t.co/RZrMes4JSn