Richard Gold

Red Team Operations and Adversary Emulation.

[Richard Gold @drshellface]

Myself and Steve Townsley have been working on a podcast where we talk about fun security topics from both an offensive and defensive perspective: https://t.co/0vjbACdyQU We've already done a couple of episodes talking about the Crowdstrike 2024 report and Phineas Phisher. Enjoy!

[Joseph Cox @josephfcox]

New: Facebook is awash with stolen, AI-generated images that massive groups of people think are real

The once-prophesized future where cheap, AI trash content floods out the hard work of real humans is already here, and is already taking over Facebook https://t.co/fpD09ISZkq

[Signal @signalapp]

Here is your friendly reminder that we built Signal for private, secure communication. It’s built so you can communicate individually and in groups, through text and calls, without fear of interference or data collection. Free to use and not for profit.

[Richard Gold @drshellface]

For healthcare but works for infosec too.

[Jackie Singh @HackingButLegal]

How NOT to run phishing exercises #infosec

[Richard Gold @drshellface]

CTI in a nutshell.

[yaman @grobnerbasis]

every time i am forced to take a mandatory security training, i am being reminded of how @thegrugq was right about how people give names to concepts they do not understand tricking themselves into thinking they do. https://t.co/KRMSYLyZL1

[Richard Gold @drshellface]

Shame to think that this creativity is being used for this purpose.

[Project Zero Bugs @ProjectZeroBugs]

A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution https://t.co/MUk90ClE80

[Richard Gold @drshellface]

At the risk of sounding overly philosophical, the more someone has already made their mind up about themselves, other people and the world around them, the worse they will be at security.

[KringleCon @KringleCon]

ONE WEEK TO GO.

SANS #HolidayHack goes live December 10!

[Richard Gold @drshellface]

Kicking it old school! Great story...

[Royal Institution (now on Bluesky) @Ri_Science]

Christmas Lecturer John Ambrose Fleming (#BOTD in 1849) was involved in the first public display of hacking, which took place here at the Ri as early as 1903.

Read the story of how his demonstration of long-range wireless communications was taken over. https://t.co/BnWU2CvHp5

[Jack Rhysider 🏴‍☠️ @JackRhysider]

What's a handy linux command that isn't used so often?

[ℵ₁ @[email protected] @aleph_one]

Today Smashing the Stack for Fun and Profit is 25 years old. Older than I was when I wrote it.

[mdowd @mdowd]

A lot of you might be too young to remember this, but back in the day memory corruption was this big security problem with quite a lot of our software. Anyway we learned to program more carefully and it sorted itself out

[Richard Gold @drshellface]

Advice from a friend that I should start charging for access to a next-gen consultancy service which is just recycling TechNet articles from 2017: https://t.co/3UhUJsbSah [seriously though, secure your admin access!]

[Richard Gold @drshellface]

Offsec starter pack:
Paper: https://t.co/f0pwv8AwcS [A Cryptographic Evaluation of IPsec]

Talk: https://t.co/FvlrPkQmGi [Disrupting nation state hackers]

Snippet: https://t.co/TI7YtilXQB [Defenders think in lists]

Tool: https://t.co/BL2KKD9yYK [ncat]

[SkelSec @SkelSec]

For those who might not see what this is:
Fully working SMB protocol implementation is webassembly, it runs in your browser

[Matthew Green @matthew_d_green]

My students @maxzks and Tushar Jois spent most of the summer going through every piece of public documentation, forensics report, and legal document we could find to figure out how police were “breaking phone encryption”. 1/

[Richard Gold @drshellface]

If you work in, or are interested in, offense, I highly recommend reading this article!

[thaddeus e. grugq @thegrugq]

I wrote a bit about the operational side of offensive cyber operations. In particular, the critical elements under the control of the attackers which play a significant role in determining the success of their operation.
https://t.co/3PUg77d8MY

[matt blaze @mattblaze]

A lot of this "expert analysis" has been of the form:

"Many locks can be easily picked. If someone picks the lock on your house, they could break in and murder you and your entire family in the middle of the night. Therefore, you and your entire family have been murdered."