Marcel

security slop // persistence via smart fridge

[Marcel @_nicememe]

@Kaimeratech Thank you :)

[Marcel @_nicememe]

One year closer to the grave

[Marcel @_nicememe]

@FranCTrode Thanks bro hope you’ve been well

[Marcel @_nicememe]

@JoBoV3 Thank you!

[Marcel @_nicememe]

@erasthamus Thank you brother man, I love you

[vx-underground @vxunderground]

> Peter Stokes
> Scattered Spider guy
> Arrested
> Microsoft helps FBI
> Read court documents
> Page 12
> Microsoft tracks Stokes from GDID
> Microsoft Global Device Identifier (GDID)
> Stokes used Windows
> Page 34
> GDID assigned to each OS install
> GDID unique to each device
> GDID only change if OS wiped
> Stokes GDID 6755467234350028
> GDID reported internet activity to Microsoft
> GDID showed Stokes using Ngrok
> GDID reported Stokes IP address
> GDID showed Stokes web activity
> GDID showed timestamps of web activity
> GDID mapped with video game activity
> GDID showed games played
> GDID undocumented
> GDID only mentioned in one MSDN document
> Azure UCDOStatus
> Azure Monitor Logging

[Murdoink @Murdoink]

important gif

[Marcel @_nicememe]

I am so fucking addicted to oldschool runescape, I feel like I'm 12 again.

[National Park Service @NatlParkService]

You know it’s hot when you go outside and it’s hot.

[SteamDB @SteamDB]

The Binding of Isaac: Rebirth has reached 109,557 concurrent players on Steam for the first time (96.19% rating) https://t.co/qzn70L7GE8

[Marcel @_nicememe]

Fuck Chicago Midway, that is all

[Polymarket @Polymarket]

JUST IN: Boston bars are reportedly running out of beer as Scottish World Cup fans drink the city dry — with one bar saying “We tripled St. Patrick’s Day.”

[International Cyber Digest @IntCyberDigest]

Dear US government,

Since you've just blocked Fable and Mythos on critical national security grounds, here are some other tools that pose a similar threat to the American people:

- Microsoft Teams
- SAP
- Salesforce
- Jira
- Outlook

Please do what you must to save America 🇺🇸

[Marcel @_nicememe]

I, for one, will answer the Holy Father’s call; the 10th Crusade to reclaim the Meta AI campus.

[Pope Leo XIV @Pontifex]

Artificial intelligences do not undergo experiences, do not possess a body, do not feel joy or pain, do not mature through relationships, and do not know from within what love, work, friendship or responsibility mean. Nor do they have a moral conscience, since they do not judge good and evil, grasp the ultimate meaning of situations, or bear responsibility for consequences. They may imitate or even simulate, but they do not understand what they produce, for they lack the affective, relational, and spiritual perspective through which human beings grow in wisdom. #MagnificaHumanitas

[Mitchell Hashimoto @mitchellh]

Fork your dependencies, trim them to only your use case, never update unless it breaks for your users. I’ve been vocal about this for 10+ years. I’ve always said that updating is way riskier than latent bugs (which can be tracked and CVEs monitored).

If you are updating a dependency, it’s on you to analyze every single commit in the full transitive set of dependencies. If you dont see anything compelling, dont update!

I remember at HashiCorp once in awhile an engineer would try to update a dep or replace a DIY lib with an external one and id always ask “show me the commit we need.” Dont update for the sake of it.

Feeling pretty swell about this mentality with all the supply chain attacks happening.

[International Cyber Digest @IntCyberDigest]

There’s a less known edge case for Fortinet devices where, rather than act merely as a remote code execution platform, they can serve as firewalls.

https://t.co/Cn4DiVxSof

[Marcel @_nicememe]

Steam Controller already scalped, selling on eBay for $250+

I think scalping products should be punishable by taking the scalpers' scalps.

[vx-underground @vxunderground]

"whats it like working in cybersecurity?"

[kasia @ieqnzges]

nie wiem kurwa

[Jon Taffer @jontaffer]

Rat shit in the kitchen!!!