@[email protected]

What did you break today? | 🏳️‍🌈🇨🇭| He/Him

[@[email protected] @featureenvy]

@ulldma @LiveOverflow

[Jon Gorenflo 🇺🇦🌻 @flakpaket]

#OSINT Tip:

Did you know you can recover scrubbed metadata from a PDF that wasn't scrubbed properly?

The changes are incremental, and the history is stored in the PDF.

This command removes the "updates" to the PDF metadata:

exiftool -PDF-update:all= file.pdf

[@[email protected] @featureenvy]

@vxunderground I am most offended that -1 is true…

[@[email protected] @featureenvy]

@matthew_d_green I am wondering what someone from 5 year ago would make of these tweets…

[@[email protected] @featureenvy]

Then again, anyone who needs to be notified by registered letter for Exchange vulnerabilities should not be running on-prem Exchange.

Well, no one should be running on-prem Exchange.

[@[email protected] @featureenvy]

It is amazing that @GovCERT_CH proactively scans for Exchanges which have not patched for #ProxyNotShell in Switzerland and then send out REGISTERED LETTERS to companies who do not patch. Guess high tech problems require low tech solutions.

[GovCERT.ch @GovCERT_CH]

Die kritische Verwundbarkeit #ProxyNotShell wird aktiv von Cyberkriminellen ausgenutzt. Das NCSC hat Kenntnis von 2’800 MS Exchange-Server die gefährdet sind 🇨🇭 Unternehmen und Verwaltungen sind aufgefordert, die Sicherheits-Patches einzuspielen 🚨

👉 https://t.co/WLnFqPq14y

[@[email protected] @featureenvy]

Wasn’t the cloud supposed to make infrastructure easier? Then why do I have to choose between 18 (!) Azure SQL options which each at least two different pricing options? I just want to store four tables with a bit of data…

[@[email protected] @featureenvy]

@hakluke I need the reverse of that!

[@[email protected] @featureenvy]

Our processors are bleeding again. This time via #retbleed Should you worry? Quote: “If you have secrets on virtual machines with shared hardware, you should be aware of the issue. But it’s not good for your health to worry too much” https://t.co/vf9LXWTaLW

[Gynvael Coldwind @gynvael]

Good thread on github copilot and AI in general versus copyright laws.

[@[email protected] @featureenvy]

That’s how you deal with phishing tests.

[ippsec @ippsec]

@TinkerSec That being said, my favorite hack involved phishing. The company hired an organization to phish our team without telling us. 3rd party left the admin port to gophish open and we OSint'd the owners. I sent them the "You've Got Creds" email mirroring their gophish & stole the creds

[Molly White @molly0xFFF]

people who are not allowed to criticize blockchains:
• those whose work involves blockchains
• those whose work does not involve blockchains

[@[email protected] @featureenvy]

Python3 can be downloaded in the Windows App Store? Why?

[@[email protected] @featureenvy]

@LiveOverflow I want to see the math of how they got to 8 times Mirai. Did not know that NFTs are that popular!

[Halvar Flake @halvarflake]

With $3.5m you can almost hire a handful of good people.

[@[email protected] @featureenvy]

Switzerland created a “Swiss Financial Sector Cyber Security Center” or SFSCSC for short. Their goal was probably to come up with the worst acronym.

[@[email protected] @featureenvy]

Many April fools are either not funny or stupid. And then there is the master of April fools, @LockPickingLwyr

https://t.co/t137xwbniI

[@[email protected] @featureenvy]

When project A and project B define their own requirements without talking to each other. We have all been there.

[Christo Grozev @christogrozev]

The idiots tried to use the Era cryptophones in Kharkiv, after destroying many 3g cell towers and also replacing others with stingrays. Era needs 3g/4g to communicate.
The Russian army is equipped with secure phones that can't work in areas where the Russian army operates.

[@[email protected] @featureenvy]

Ever wondered what a two-way mirror is? Don’t worry, Wikipedia has you covered: “A one-way mirror, also called two-way mirror […]” https://t.co/ZEx5aIWIlU

[@[email protected] @featureenvy]

@LiveOverflow @amlweems That surprises me. I would have assumed it would take some time to get to something that reasonable. I really need to play around more with fuzzers.