Bart Kulach

[Bart Kulach @bartholozz]

@bugch3ck @vxunderground Would love to see it!!

[Bart Kulach @bartholozz]

@bugch3ck @CrowdStrike Functional update?🤣

[Bart Kulach @bartholozz]

@bugch3ck Happy Midsommar!

[Bart Kulach @bartholozz]

@bugch3ck Nice!!

[DEF CON @defcon]

#DEFCON Evacuation Update, 8am Sunday Edition:

Last night we were asked to evacuate the building due to a report of a suspicious package. Local police and fire departments conducted a thorough investigation and ultimately determined that the package was safe. They also conducted additional sweeps of the building as a precaution before allowing our team to return and prepare for today’s con.

We are working quickly to keep the original schedule on track, but please check here for additional updates before arriving at DEF CON in case we need to notify you of any changes to the schedule.

[Bart Kulach @bartholozz]

@bugch3ck @WithSecure Now I’m jealous…

Kidding. Great news, enjoy it!

[Bart Kulach @bartholozz]

@PicturesFoIder 30 + 50 - 5 = 75

[Dominic White 👾 @singe]

Organisations, regardless of size, can only patch about 1/10 vulnerabilities per month. Thus, “patch harder” is now proven bad advice, your only* gains are to prioritise patching of exploitable vulns. This is one of the conclusions from @wadebaker’s team in their epic report (available at https://t.co/yUW1tmf14h).

The below graph shows a strong correlation along the 1/10 line which means you’d have to do something extraordinary to break out of it. Explained with much better statistical rigour by Wade on LinkedIN (https://t.co/vprlPcU7TF)

It’s advice that’s been given for over a decade by the @sensepost team, but now there’s finally strong data to back it up. Thanks @cyentiainst.

* assuming a non-negligent patching regime

[Bart Kulach @bartholozz]

Geçmiş olsun Türkiye 🇹🇷 https://t.co/mCGfUNsACU

[Bart Kulach @bartholozz]

@bugch3ck @WEareTROOPERS @SilentSignalHU I’m always in!

[Bart Kulach @bartholozz]

@bugch3ck You just entered the sexiest system in the world 😜

[Bart Kulach @bartholozz]

@FrankEijsink At the same time if I compare to how Japan drivers striked (by not charging customers) compared to NS, I don’t think this is how they can gain empathy and show customer care even in difficult times.

[Bart Kulach @bartholozz]

@FrankEijsink Next to that I decided now to use only car to go Schiphol as I have zero confidence in NS which I had always low confidence in (delays, cancellations, filthy trains, etc). I agree that thanks to technology the need for travel is less. /2

[Bart Kulach @bartholozz]

@airlivenet That looks more like a turtle head…

[Bart Kulach @bartholozz]

@bugch3ck @shad0wbits Looks like I missed that one. There are indeed hundreds of AS400 internet accessible. While QSECOFR is protected, usually QPGMR or even QUSER might be your best friends to get in.

[Michał Marek @mic_marek]

Gwardia Narodowa UA udostępnia informacje nt. Stosowanych przez RU oznaczeń:
-Z - "siły wschodnie",
-Z (w kwadracie) - "siły z Krymu",
-O - "siły z Białorusi",
-V - "piechota morska",
-X - "czeczeńcy",
-A - "siły specjalne"

[Bart Kulach @bartholozz]

@AeroBarajas looks like your friend Renfe needs some updates ;)

[Bart Kulach @bartholozz]

@bugch3ck @CoopSverige Sounds like I have to check out Coop NL 😜