Ferenc Spala

Pentester, ITSec manager

[Ferenc Spala @FerencSpala]

@sghctoma If it works, there is nothing wrong with it :D

[Ferenc Spala @FerencSpala]

Preparing documentation for audits. #shithappens #wontlie #needadrink

[Csaba Fitzl @theevilbit]

Phishing infosec people: name your malware 'meltdown-poc.exe' / 'spectre-poc.exe', or in general: "new-technique-name-poc.exe"

[Ferenc Spala @FerencSpala]

I spent hours w/ data extraction to find out it was just a guy remoting to the wrong host. Well, I’m happy after all...#forensics #notowned

[Ferenc Spala @FerencSpala]

Let me know if you could change the schedule of an existing scan via the #nessus API! I must be doing something wrong...

[Mel Tajon @MelTajon]

Samsung Galaxy Note 8 Facial Recognition Test:

[Ferenc Spala @FerencSpala]

Is it just me or Microsoft Teams really starts with the "--no-sandbox" option by default?

[Ferenc Spala @FerencSpala]

Set your Win firewall to block all network connections initiated by regsvr32.exe - you can do it via GPO. #security4free

[Ferenc Spala @FerencSpala]

"This PDF document has 2 pages, please note that most malicious PDFs have only one page." - kinda valid point... :)

[Ferenc Spala @FerencSpala]

Win10 desktops + MS ATA = false positive alerts. Side effect of the peer2peer update feature. It took me too long...i'm getting older...crap

[Ferenc Spala @FerencSpala]

When u migrate from an old server, DO NOT trust in the config files! #protip #onehourwasted #itneverworked #wtf

[Ferenc Spala @FerencSpala]

@Csucsorr Well, couple of years ago i would have done that with confidence. Nowadays it would be nothing but embarassment :) #gettingold #nevergrowup

[@[email protected] @buherator]

#ProTip: It's counter-intuitive but Microsoft is on GitHub now. Loads of useful stuff there, accessible w/o downloading bloated packages

[Ferenc Spala @FerencSpala]

Sometimes I truly believe people just want to make my day. The first alert I saw this morning: PES 2013 is installed on a workstation.

[Hacktivity @hacktivityconf]

The CFP deadline has been extended to 15th July, 2017! If you would like to be a presenter at #Hacktivity2017 prepare and submit your talk!

[zh4ck @zh4ck]

One might wonder how much telemetry data MS receives, and how sensitive it could be https://t.co/bly1y9CXTk #Privacy #Scary

[Ferenc Spala @FerencSpala]

When you receive AV alerts from the pendrive desktop support uses to pass secondary AV on a host, that is priceless. #ShouldBeABaker

[Ferenc Spala @FerencSpala]

@rengoooo well, there are plenty :) All sort of scripts, java, flash, batch, scr, com... Just google for "dangerous file extensions" ;)

[Ferenc Spala @FerencSpala]

@zh4ck Yep, I know ;) The problem is that my users receive legit xls w/ macros in email. I want to isolate that group though bc it's not everyone.

[Ferenc Spala @FerencSpala]

@zh4ck so true :) if we could also disable Office macros, i would worry less about malware in general :)