Magneto

Manic Pixie Infosec Professional

[email protected]

[Summer Yue @summeryue0]

Nothing humbles you like telling your OpenClaw “confirm before acting” and watching it speedrun deleting your inbox. I couldn’t stop it from my phone. I had to RUN to my Mac mini like I was defusing a bomb.

[Magneto @ideologysec]

@J0hnnyXm4s She shot the sheriff and she did confuse the deputy.

[Magneto @ideologysec]

@ClassicII_MrMac hey, not sure if you know about this but your RSS feed (https://t.co/UiG3LAlztR) looks like it's been hijacked by garbage. Possibly a WordPress compromise?

Happy to help investigate/remediate. Appreciate all you do for the Apple community.

[Magneto @ideologysec]

@mweinbach @Dell Looks great, but all-USB-C is rough. Apple learned that the hard way a couple years ago. Even an HDMI port would make it easier to swallow.

[HotCakeX ✡︎ סגול @CyberCakeX]

After Months of Development, FINALLY ready to share: Harden System Security🎉

✅ Complete System Hardening
✅ Security Posture Analysis
✅ All-in-One Toolkit
✅ Built-in Intune support for Scalability
✅ Beautiful Modern UI
✅ CLI support
https://t.co/lfd3SaDvvM

#Cyber #Windows

[Magneto @ideologysec]

@astr0baby @lauriewired apple-gfx-mmio is for Apple Silicon Macs; you have apple-gfx-pci which is the paravirt driver for Intel Macs.

[Andrew Fleischman @ASFleischman]

So my client is a paraplegic. One day, a Fulton County police department asked him to come down and answer a few questions.

A woman alleged that he KICKED her door down and assaulted her.

And they were calling him down to arrest him, not talk to him.

[Magneto @ideologysec]

@sridca @dhh https://t.co/dUcG5YlZDe

[Magneto @ideologysec]

@ktaddeyy @ItsReallyNick @TekDefense They are using stolen creds for the services, getting access without paying, and then jailbreaking the LLM to create illicit/naughty content (of celebrities, in this case).

[Rachel Tobac @RachelTobac]

Yes and also, interestingly, this tool takes all of the most commons steps used to hack people & companies — from OSINT (open source intelligence) via social media, to target selection, to pretext development, to contact + phishing — and automates it completely for attackers.

[Magneto @ideologysec]

@KevinNaughtonJr Went through this process recently on a macOS machine that made me year for some kind of declarative/IaC solution for configuring macOS.

Nix comes close but the binary application management portion isn't well-baked.

[Security Alliance @_SEAL_Org]

⚠️ Reminder that if you ever stored your private keys or seed phrases in LastPass prior to 2023, your funds might be at risk. We've seen 15+ cases of potential LastPass-related hacks TODAY

Move your assets before hackers move them for you. For more information, keep reading🧵

[Patrick Wardle @patrickwardle]

At #OBTS, Matthias (@helthydriver) highlighted that recent iOS exploits/implants could’ve been easily detected if Endpoint Security existed on iOS.

Since Apple won’t budge, maybe the EU can push them to open up? How do we make this happen!? 🤔

[Objective-See Foundation @objective_see]

In the world of computers, 8 marks a shift to the next level - #OBTS v8 will embody that leap forward! 🤩

So mark your calendars & set an 'out of office' for the week of Oct. 12th... because #OBTS v8 is heading to sunny Ibiza! 🌴🇪🇸

...more details soon 🫣

[Magneto @ideologysec]

@theevilbit Thanks for the track! (And mad respect for the completion.)

[Magneto @ideologysec]

In Maui for my first #OBTS (finally!). Excited to meet fellow Mac security nerds.

[Csaba Fitzl @theevilbit]

Apple confirmed that it's a bug and they plan fixing it. 🥳

[Accidental CISO @AccidentalCISO]

Everyone always asks me how I got into cyber. Nobody ever asks me why I’m *still* in cyber.

[Matthew Prince 🌥 @eastdakota]

In 2012 I went to Portland to meet with Intel’s engineering team. Cloudflare was tiny, but didn’t stop me from banging the table saying cores per watt was what we cared most about. They told me we were “doing it wrong.” Glad to see the data (still) back me up (and AMD listened).