Daniel Chromek

where #security meets distance running. Ideas and comments my own.

[Daniel Chromek @dchromek]

@minorfloat Odporucam

[Molly White @molly0xFFF]

From yesterday's exhibits in US v. Sam Bankman-Fried:

The prosecution shows that the "insurance fund" that FTX bragged about was fake, and just calculated by multiplying daily trading volume by a random number around 7500

[Daniel Chromek @dchromek]

Question to community: we have nice CVSS 4.0 to triage vulns, is there anything similar for incidents?

[Daniel Chromek @dchromek]

@JakeMooreUK @ESETUK You are too loud😁

[quarkslab @quarkslab]

Did you know that Windows processes fundamental to Operating System security run in Isolated User Mode and can not be debugged ?
Well that's true except when it isn't.
Here @fdfalcon provides a step by step guide to do it
https://t.co/Gya2QELd8O

#Windows #ReverseEngineering

[Daniel Chromek @dchromek]

@chetdorn @cybersecmeg Well, if you compare consulting fees costs with team building costs the value/liquor for budget money is on internal side

[ESET Research @ESETresearch]

#ESETresearch will present at Black Hat USA 2023. On August 10th, @matthieu_faou will talk about #MoustachedBouncer: AitM-Powered Surveillance via Belarus ISPs 🇧🇾 #BHUSA #BlackHat Stay tuned!

[an0n @an0n_r0]

all you need to know about offensive #SCCM condensed into an awesome presentation including hands-on demos by @vendetce from @BHinfoSecurity: https://t.co/Y2FAvZRL9y

[HaxRob @haxrob]

A friend asked me to find out why his connected lightbulb app was asking for his location, so I ducked out to Australia’s favourite hardware store, Bunnings, and grabbed one to check out.

The Android grid connect app has 500k+ downloads.

Let’s take a quick look! 🧵
(1/n)

[Zack Labe @ZLabe]

Uh.

Graphic from https://t.co/V0Lt0w1sTi.

[SuperFashi @SuperFashi1]

A few months after I competed in DEF CON CTF 2021 with Tea Deliverers, I received an envelope delivered by FedEx. Within it lay this. (👉 a thread)

[vx-underground @vxunderground]

Today Kaspersky announced they were a victim of an iOS zero-click 0day exploit. The exploit delivered spyware targetting Kaspersky middle and upper management.

They named the attack 'Operation Triangulation'

More info: https://t.co/gH13mQXroT

[Neal Agarwal @nealagarwal]

Working on a password game with increasingly unhinged rules.

what are some rules I should add?

[Daniel Chromek @dchromek]

@chetdorn I though that you use SaaS (Scotch-as-a-service) already

[Daniel Chromek @dchromek]

@jsuchal 256

[Daniel Chromek @dchromek]

@chetdorn @lintile "Their"? Want to know more😁

[cts🌸 @gf_256]

This week, I authored CTF challenge for Curta. In the first 48 hours, 25 players solved it. In this thread, I'll cover how the challenge works, including a explanation of elliptic curves! 👇🧵

[Programmer Humor @PR0GRAMMERHUM0R]

As one becomes smarter, the other becomes dumber https://t.co/nrb7PfzKje

[NATO CCDCOE @ccdcoe]

👋 Locked Shields 2023 is about to start! The organisers are ready in Tallinn.
💪 Hopefully all the Blue Teams are as energised our Chief of Staff Bernard Hoffmann and Head of Cyber Exercises Carry Kangur!
#LockedShields2023 #LS23 #LockedShields #ccdcoe #nato #cyberdefence #cyber

[Programmer Humor @PR0GRAMMERHUM0R]

god why is coding chess so hard https://t.co/5oprJv3tzm