lavalamp

keyboard cowboy

[Justine Moore @venturetwins]

Me using Claude Opus 4.8 to rename a file

[lavalamp @_lavalamp]

Do I have any connections to folks working at #github in my network? Looking to have a ticket escalated and not having much luck through standard support channels!

[Anshu @anshuc]

@github holy shit, how did the attackers find a large enough uptime window to get in?

[Johnny Xmas @J0hnnyXm4s]

People spending the past decade knowingly training AI by swapping their face with their dog’s in some phone cancer app and being like “why does this trash hallucinate all the time”

[Brendan Falk @BrendanFalk]

To check if your Google Workspace has been compromised by the same tool that compromised Vercel:

1. Go to https://t.co/TpuIOW5Fwg
- This is Google Admin Console > Security > Access and Data Control > API Controls > Manage app access > Accessed Apps
2. Filter by ID = https://t.co/uqJnCqp5Ah
- This is the ID of the compromised OAuth app

If you see an app after filtering, you have potentially been compromised

[Bryan Johnson @bryan_johnson]

Two weeks without mobile internet improved mental health more than antidepressants and reversed roughly 10 years of attentional decline.

Screen time dropped 49% (314 to 161 min/day).

[Brendan Dolan-Gavitt @moyix]

It's November 2001. Chop Suey is playing in xmms on your Sun workstation. You fire up IE5 and point it at your just-finished PoC – a buffer overflow in gopher handling, of all things. The calculator pops up. You don't know it yet, but this is the best computing will ever be

[lavalamp @_lavalamp]

Has anyone else noticed a huge uptick in notifs for tweets that have an exclamation but lack context?? Ie: “Wow look at this”? Forcing you to open the app to learn more?

Guessing it’s a good way to game usage metrics (ex: app opens) without actually improving @Twitter product.

[lavalamp @_lavalamp]

I may not be qualified for much, but messing with bot authors is something that I've gotten somewhat good at these last few years.

"How" you ask?? Listen in :)

[SecurityExplained @SecExplained]

Bots can be fun... but they can also be massively destructive. If you're having to fight bots (or want to know some effective tactics) the this week's episode is for you!

https://t.co/Y2IUlm3kFg

#bots #hacking #infosec #defense #cybersecurity

[Guled Abdilahi @0xGuled]

Listening to @SecExplained to get caught up about Uber’s ex-CISO getting charged. Definitely not surprised and glad @_lavalamp @IAmRedShift broke down the indictment before I started reading the overhyped mess that is #InfosecTwitter

[lavalamp @_lavalamp]

I have to admit I was drawn into the FUD around this case, but once you dig into the facts it seems pretty clear that Joe's actions were criminal. Company lawyers can't protect you from #criminal convictions.

[SecurityExplained @SecExplained]

No, the conviction of Joe Sullivan in relation to a 2016 data beach at #Uber doesn't change the risk profile of being a #CISO. Unless, of course, you're committing criminal offenses.

https://t.co/tQXhs7UZHM

#uberhack #uberbreach

[lavalamp @_lavalamp]

A lot of FUD going around re: the recent #twitter #whistleblower report and we attempted to sort through it as best we could. Special episode for me as @dotMudge is one of the reasons I have the job I do today.

[SecurityExplained @SecExplained]

TWICE IN ONE WEEK!!

It's not often that news cycles bare so much fruit, but this week is one of those times :P This episode we talk about the recent #twitter #whistleblower report coming from @dotMudge

https://t.co/vYPOsWVPfK

[lavalamp @_lavalamp]

I find it hard to believe that the extent of access the attackers seemed to have achieved would not result in access to user data... but hey part of a strong security program requires a good PR team :P

We're back for season 5!

[SecurityExplained @SecExplained]

#Uber got #hacked and it looks bad. Like... a successful pentest outbrief bad.

We're back with our fifth season of Security Explained and this time we're discussing the #uberbreach!

https://t.co/Tq8yBHtiO0

[Joshua Browder @Joshuabrowder]

Credit repair companies offer to “fix your credit,” for hundreds or thousands of dollars.

We sent a DoNotPay employee to interview for jobs at credit repair companies to figure out how they do it so that we can automate it and replace them.

This is what we discovered:

[lavalamp @_lavalamp]

@Enno_Insinuator @0xm1rch @FernandoGont @hackerschoice @WEareTROOPERS @marcnewlin Happy to chat specifics if it’s helpful! We haven’t touched that research in a while and would love to see it continued

[lavalamp @_lavalamp]

@RyanMcbeth Occam’s razor - I think your assessment makes a lot of sense re: the true cause being mishandling. BUT I wouldn’t rule hacking out based on those points :)

Love your content! Would be happy to provide infosec insights if ever helpful.

[lavalamp @_lavalamp]

@RyanMcbeth loved the video re: speculation on why the missile did a 180.

Aside from the fact that the weapons systems have air-gapped networks, are there other reasons to rule out hacking? There are ways to jump air gaps!

[lavalamp @_lavalamp]

@RyanMcbeth I have read other peoples’ code :) many times for the express purpose of building an exploit for it! It’s a somewhat common undertaking in the infosec industry.

[lavalamp @_lavalamp]

@mikedemarais trying to get rainbowkit integration working on iOS and struggling to get the React example working correctly. Next.js works just fine!

What’s the best way to raise issues??