Brian Caswell

'Boffin at Microsoft Research', Shmoo Group, and Sk3wl of Root.

[Brian Caswell @evilcazz]

@msuiche @binaryz0ne Running acquisition tools at the same privilege level of adversaries will always have evasions. Memory acquisition should be driven by goals and current capabilities. If in the VM is all you have, then you deal. If there is something better, you should use it.

[Brian Caswell @evilcazz]

@v3rtig0 Long ago, @hdmoore reached out to Aiden Hughes (@bruteprop) to design a logo for @metasploit. Perhaps it could happen again?

BTW, @kmfdm is still rocking the BRUTE! aesthetic. We enjoyed seeing them live in Virginia a few weeks ago.

[Brian Caswell @evilcazz]

I've recently taken up a new form of martial art (armored combat). It's a unique experience to come at something as a novice again, having spent a large part of my adult life training on with my primary martial art (unarmored rapier combat).

[Brian Caswell @evilcazz]

Today, I completed my training to be a Chief Judge for the upcoming elections after serving as a Voting Judge in the primaries this summer.

I'm doing my part to ensure fairly run elections, how about you?

[Brian Caswell @evilcazz]

Today, I completed my training to become a Voting Judge in the upcoming election.

I'm doing my part, are you?

[Brian Caswell @evilcazz]

@invisig0th @mattblaze Ditto. I have other idiosyncratic behaviors that I've not been able to shake, like double-tap escape to insert mode in vi. (thanks IRIX, for the weird key code delays)

[Brian Caswell @evilcazz]

@Lee_Holmes @jsnover @HackingDave @Binary_Defense I highly recommend using leaner cuts for jerky. Bottom round or top round are my go-to. Reducing fat content is important if you're going to store it, as it's the fat that goes rancid first.

[Brian Caswell @evilcazz]

While I get opensrc PAAS/SAAS offerings with integrated admin tools, I don't understand a per-hour premium for VMs w/ preinstalled opensrc packages where the user handles everything else.

Is pre-installed DVWA worth $0.375/hour?

[Brian Caswell @evilcazz]

TIL: You can get VMs with Damn Vulnerable Web Apps pre-installed on Azure from integration vendor.

[Brian Caswell @evilcazz]

@anthonypjshaw @rushter I wrote it while OneFuzz was incubating in Microsoft Research as a proof-of-concept to demonstrate the APIs. We found it useful, so it's stayed part of the project.

[Brian Caswell @evilcazz]

@DFRWS FYI, the video is marked private.

[Brian Caswell @evilcazz]

@yarden_shafir Microsoft Defender Microsoft Defender Application Guard Guard?

[Brian Caswell @evilcazz]

Oof. This one stings.

Drew had a major impact on my career as well as reevaluating how I saw myself.

[Dan Wallach @danwallach]

Wow. @bicoastalddean unexpectedly passed away. Possibly a heart attack while windsurfing.

Drew and I were "partners in crime" during grad school. We've been close friends for all the decades since.

I just saw him last month. He was doing great.

I'm completely gutted. RIP.

[Brian Caswell @evilcazz]

@mboehme_ While I like the idea too, why let me know? I'm not Cas Cremers.

[Brian Caswell @evilcazz]

I'm tired of every day being International [EXPLITIVE] Cancer Day.

[Brian Caswell @evilcazz]

Apparently, the feds are going to make me two-dimensional today.

Does this sort of scam actually work on some people?

[Brian Caswell @evilcazz]

Our team is hiring! #memoryforensics #rust #remotework https://t.co/XIsuv2l4jm

[Brian Caswell @evilcazz]

@msuiche @MagnetForensics Congratulations @msuiche! It will be interesting to watch how Comae will grow now.

[Brian Caswell @evilcazz]

My classmates thought I was "too focused on the negative" when I pointed out that providing voters detailed voting receipts would enable coercion.

[Brian Caswell @evilcazz]

Today, I completed my training to become a Voting Judge in the upcoming election.

I'm doing my part, are you?

[Brian Caswell @evilcazz]

Multiple people in the class did not understand why our state did not provide detailed ballot receipts to voters. The instructors were not able to give a more satisfactory answer beyond "we just don't" which spurred discussion.