Ben Potter

Founder of FIRCY. ex AWS security leader. Ambassador for #NoMoreRansom. Tweeting cyber and cloud.

[Ben Potter @benji_potter]

@__steele I drive past where it’s made at least monthly, it’s good stuff!

[Ben Potter @benji_potter]

Call it social media threat intelligence gathering 😎
If you can only search for single IP's then start with 52.27.191[.]181, 52.27.190[.]67, 52.27.190[.]9, 52.27.190[.]10, 52.27.191[.]179, 52.27.191[.]164, 52.27.190[.]82, 52.27.190[.]78, 52.27.190[.]90.
Yes AWS are aware.

[Ben Potter @benji_potter]

Thought I'd ask the cloud community to DM me or reply if you've seen activity in your AWS logs (S3 / VPC / web application) for IP addresses in the range of 52.27.190[.]0 > 52.27.191[.]255 between July 2022 and April 2024. We've seen billions of requests, are we alone?

[Ben Potter @benji_potter]

@QuinnyPig The real real horror is if the requests were “accidentally” generated by AWS themselves doing security scans billions of times a month.

[Nick Frichette @Frichette_n]

As someone involved in the AWS offsec space, I want to share why I strongly do NOT recommend the HackTricks AWS Red Team Expert course. The author of it is a plagiarist, stealing content from other creators and is directly profiting off of it through sponsorships. A 🧵

[Ben Potter @benji_potter]

@WellArchThinkn Thank you 🙏 How can I help now?

[Ben Potter @benji_potter]

@crbholdings @ericpullen @Ford This meant my Powerwall never charged and had to buy a generator to get through another 48h outage. AC coupled batteries are not good in backup or off grid situations!

[Ben Potter @benji_potter]

@crbholdings @ericpullen @Ford I have a powerwall and would love to sell it, last big outage where I live lasted 12h powering single fridge and lights and was fully charged. Next day it wouldn’t charge because utility increased grid voltage to 265v to force grid feed solar to turn off.

[_SOUTHSTART @_southstart]

Full house this morning at @stoneandchalk @AustCyber breakfast ft @benji_potter @YSGovRiskSec @duariv @Fivecast @CyberCX @ISACA_Adelaide @CyberOpsAU @DIIS_SA exploring the #growth of the Australian #Cyber Industry

#STARTUPWEEK #SOUTHSTART

[Ben Potter @benji_potter]

Great to be back in person presenting at #cybercon2022 !

[Ben Potter @benji_potter]

@mattgy Congrats @mattgy and that is a great list that resonates with me!

[Ben Potter @benji_potter]

@0xdabbad00 Add to this AWS encourage “small” businesses and partners to use distributors, which means the distributors own root access and their email and phone systems become responsible and therefore targets for literally thousands of accounts.

[Ben Potter @benji_potter]

@0xdabbad00 My (non) favourite feature is the S3 server access logs are configured to log to itself, circular logging is definitely not cost optimised!

[Ben Potter @benji_potter]

AWS IAM Identity Center replaces the old Single Sign-On console, looks much better thank you @AWSIdentity !

[Ben Potter @benji_potter]

This is not a drill for Jenkins users that choose to expose their instances / servers to the internet. Long list of plugins vulnerable with no patches: https://t.co/QbErmU8IUV Time to remove them from being publicly exposed!

[Ben Potter @benji_potter]

I’ve been staring at this hotel phone… do I do it?

[Ben Potter @benji_potter]

@0xdabbad00 Nice! I taught myself tig as it’s so precise and similar to soldering (done lots over the years).

[Ben Potter @benji_potter]

Found my first working #IoT project in storage… Nokia 6110 with SMS microcontroller for digital I/O! 15+ years ago it was pretty sophisticated for a home alarm system compared to what we have now. Little circuit board on the right is actually a remote doorbell receiver.

[Joseph Cox @josephfcox]

New: underground trade of bots that steal your 2FA codes. Bot places convincing automated call to target. Victim enters code, gets fed to hacker instantly. Dramatically lowers the barrier of entry for bypassing 2FA, no social engineering skills needed https://t.co/oaZhjuFa7c

[Ben Potter @benji_potter]

I will always prefer working virtually. Today was Clare in South Australia amongst nature with a beautiful creek. Bees got a bit close a few times!