Monkey D Dragón

Emperor of the Sea 🏴‍☠️AI | InfoSec | Shadow Realm | Tinker Life

[Monkey D Dragón @foiadragon]

@RussianPanda9xx 👀 can’t DM 😂

[Nick Bax @bax1337]

My hardware wallet was initially funded by Tornado Cash back in August 2021.

Thanks to @0xprivacypools POA, I was able to prove, on-chain, that my funds are not illicit, while still preserving my privacy.

[John Scott-Railton @jsrailton]

NEW: 🇰🇵DPRK has begun hiding malware on blockchain.

Result, decentralized, immutable malware.

Nearly impossible to remove.

Research by @Mandiant

[Monkey D Dragón @foiadragon]

@vxdb rookie numbers

[Security Alliance @_SEAL_Org]

https://t.co/eC2nptNYY9

[Security Alliance @_SEAL_Org]

If you want to get started right away, the GitHub repo for SEAL's new Verifiable Phishing Reporter can be found here

https://t.co/i5ReaU36km

[Security Alliance @_SEAL_Org]

With TLS Attestations, the third party delegates trust to a verifier (such as SEAL), which in turn can generate a cryptographic attestation that a session transcript is legitimate. This allows us to later inspect the contents of the session to identify malicious behavior

[Security Alliance @_SEAL_Org]

Unfortunately, TLS does not natively support generating a session transcript, which means that a third party could simply lie about what the remote server said. This is bad for obvious reasons. In order to solve this, we created TLS Attestations

[Security Alliance @_SEAL_Org]

What we needed was a way to see what the user was seeing. After all, if someone claims that a URL was serving malicious content, we can't just take their word for it. But what if they could cryptographically prove it?

[Security Alliance @_SEAL_Org]

Traditionally, automated scanning of URLs encounter all the problems typically faced by web scrapers, including CAPTCHAs and anti-bot protections. In addition, scammers have developed "cloaking" features to serve benign content to suspected web scanners

[Security Alliance @_SEAL_Org]

🔏 SEAL has been working on a new tool to enable advanced users and security researchers to join the fight against crypto phishing, and we're excited to release it to the public

[vx-underground @vxunderground]

Schizo take: the Steve Jobs daughter post that got a bonus $10,000 paycheck from X was an undisclosed advertisement to get Eve Jobs more attention online

Alternative take: X accidentally set the standard that 200,000,000 engagements ensures $10,000 paycheck

[Tay 💖 @tayvano_]

@P3b7_ @PerianneDC The attached theft was perpetrated by the same attackers who recently got Perianne.

That victim was using a Ledger.

https://t.co/eFXUtaFkiU

[SwiftOnSecurity @SwiftOnSecurity]

Look I know there are feds out there that follow my account on that team.

Do it. Replace the graphic. There's no copyright concerns it's AI. Stunt on em.

Stunt on them hoes.

[vx-underground @vxunderground]

Whoa whoa whoa. Interesting update.

Yesterday Discord silently updated their breach notification press release.

They name dropped the BPO.

Why? 🤔

https://t.co/97Wdm9Zjwq

[Monkey D Dragón @foiadragon]

@NASAShutdown are you back again?

[Monkey D Dragón @foiadragon]

@bx_on_x Bx for Anti Cult President

[Monkey D Dragón @foiadragon]

@bx_on_x 😂 DARK HUMOR BX!!! we’d so care about you more than your tweets 🥲 how could we ever doom scroll again into a satanic, now nihilistic, murderous ring of psychological horror 😅

[Monkey D Dragón @foiadragon]

@bx_on_x Huh!! a year and a half? Jesus Christ!!!!