UID 1

HF is the #1 online hacker community.

[UID 1 @HackForumsNet]

@billy_haas_ He bought a new set.

[UID 1 @HackForumsNet]

@SecurityTrybe I just shell and work as root.

[UID 1 @HackForumsNet]

@Frenchy8m @FlatEarthZone @grok how much air is in an astronauts suit and tank?

[UID 1 @HackForumsNet]

@Cointelegraph @grok what is this new Putin Crypto Law they are concerned about?

[UID 1 @HackForumsNet]

@grok @tom_crowell51 @Leonajardinho @lsferguson What's the pay for the CEO annually including any stock or option compensation?

[UID 1 @HackForumsNet]

@tom_crowell51 @Leonajardinho @lsferguson LOL, you believe that garbage.

@grok how profitable are Health Insurance companies? Let's just go with one of the largest publicly traded one and tell me their annual profits and what the company is worth?

[UID 1 @HackForumsNet]

@Leonajardinho Wait until you find out that cash paying would have saved you money from the $1200.

You're being robbed.

Everyone needs to stop paying insurance and go cash pay only.

[UID 1 @HackForumsNet]

@senatorshoshana Windows 3.1 style icons.

[UID 1 @HackForumsNet]

@historigins Free food. Yummy rabbits.

[UID 1 @HackForumsNet]

I'm Gen X, well aware of the feminism. I refused to participate. It was super-gay.

It was a PsyOps by the music industry Chosen People.

And when it turned to Grunge and they realized the White Boy energy was getting out of control they killed it. MTV went total rap, rock got sidelined.

[UID 1 @HackForumsNet]

@omgsidewalks Only people with low-IQ's believe this lie.

Statistics prove it's false.

Blacks no matter what their economic status have higher crime statistics than Whites.

Facts.

[UID 1 @HackForumsNet]

@DannyNoonanGolf Better than a putter with a 6 foot handle.

[UID 1 @HackForumsNet]

This is interesting.

Passkeys on Windows getting pwned.

[cr3ghost @cr3ghost]

Three zero-days in Windows 11 and Microsoft Entra ID. Over 20 novel attack techniques against passkeys. Toolkit open sourced. Microsoft declined to fix one of them.

Passkeys were supposed to be unphishable. @MGrafnetter from @SpecterOps just presented Pass-the-Passkey at Black Hat.

Global Admin impersonation from a standard user account. No user interaction. Bypasses phishing-resistant MFA Conditional Access policies. Zero alerts from Defender for Identity or Entra Identity Protection on M365 E5.

Windows Hello passkeys are still vulnerable after the patches because they always send signature counter 0.

Microsoft scored it 6.5 Medium and paid $1,000. The researcher scored it 8.6 High. Their advisory described it as 'could potentially read small portions of heap memory.'

This is the same team behind BloodHound, Certified Pre-Owned (AD CS), Rubeus, Certify, Seatbelt, SharpDPAPI, SharpUp, Ghostwriter, Nemesis, SharpSCCM, and CuddlePhish. They consistently ship research that changes how the industry thinks about Active Directory and identity security.

If you do red teaming, pentesting, identity security, Entra ID, FIDO2, WebAuthn, Windows Hello, phishing-resistant MFA, or detection engineering, this is the most important identity research to drop this year.

Pass-the-Hash for the passwordless era.

https://t.co/zZgx8JP89F

#Infosec #RedTeam #DetectionEngineering

[UID 1 @HackForumsNet]

@Steve_Sailer Every -ism is a PsyOp by the Chosen People.

Zionism
Marxism
Communism
Racism
Sexism
Feminism

It's all about class-warfare and diving people so they are easier to control, manipulate, and conquer.

[UID 1 @HackForumsNet]

@UsedGolfFacts Unplayable golf course.

[UID 1 @HackForumsNet]

@AngloRestore I would want money back they tried to give me that.

[UID 1 @HackForumsNet]

@bluewaterkarma @CensoredHumans It was always a Mossad Operation.

Don't be fooled by the Goy Slop.

Israel wanted this. They made it happen. Were happy to sacrifice a couple thousand lives for their long-term goals.

Gaza is now theirs. Soon Greater Israel.

[UID 1 @HackForumsNet]

@Itsfoss Yes, you run it on servers where you might check files being uploaded to the server and/or mail servers with attachments.

A very popular setup with ClamAV is with your SMTP setup.

[UID 1 @HackForumsNet]

@Arikalabs Because it's local code creating a verification number based on a secret key then plugged into an algorithm. The real important thing is that you clock is right on the device.

[UID 1 @HackForumsNet]

@Anc_Aesthetics Why do Blacks have to always be so threatening?