James Pleger

I do security things and chew bubble gum, but just ran out of bubblegum.

[James Pleger @jpleger]

We really need to treat C/C++ how we treat writing ASM. It has very specific use cases, but it shouldn't be your first, second or third choice.

[James Pleger @jpleger]

@ThaumaturgeRN @blackroomsec While in concept I agree with you that it is a skill/technique issue, I am more convinced by each passing year that this isn't something that can be addressed. C/C++ needs to be thought of in the same way as writing ASM.

[James Pleger @jpleger]

You don’t want metal on the board or inside fans. It’s a relatively low risk, but the metal you grind off turns to fine dust and can either cause a short or get in bearings on the fans.

[Karol Tkaczyk @tkaczyk24]

@NTDEV_ Carefully slot it with a dremel for a flathead screwdriver

[James Pleger @jpleger]

Use a rubber band to add extra grip on the screwdriver, using a fair bit of downforce.

Alternatively, JB weld, superglue or UV cure epoxy works great, just attach to a screwdriver you don’t mind throwing away.

[NTDEV @NTDEV_]

I got a new 2230 1TB SSD for my laptop and for some reason the screw doesn't want to come off and I kind of stripped it and it's been driving me crazy for the last 3 days because no matter what i try it doesn't come off but I also don't want to break the laptop or the SSD aaahhh

[James Pleger @jpleger]

@cybergibbons Price and ease of integration(but primarily price). Connectors are more expensive, cables are much more expensive, you have to use termination resistors, and the pin pitch may require higher cost PCBs.

It might only be like $0.15-$0.45 more, but that’s huge when the BOM is $1.50

[James Pleger @jpleger]

@SwiftOnSecurity The funniest was if you got a Barrett and scroll fired it from the hip, dumping all 10 rounds in roughly half a second... you could hear the stupid thing across the map. People would become enraged and it was hilarious.

[James Pleger @jpleger]

I literally sent this to a friend describing that blog post.

[LaurieWired @lauriewired]

Google's Security Blog just made a weird take on "Hardening Cellular basebands in Android".

Who is this article for? The 2 companies that make baseband processors?

Is Qualcomm going to read this public blog and think "wow code sanitization, why didn't I think of that?"

[James Pleger @jpleger]

Personally, after being in and out of DCs for 20 years, I feel like Chatsworth/CPI racks are the best ones and they are fairly cheap. Make sure you get extra depth for 60 drive boxes and if you can, get the netshelter or cpi racks with the extra 1-2 inch width.

[Jeff Geerling @geerlingguy]

So... @SchneiderNA I happen to have an empty server room in my new studio space.

A few viewers have recommended a NetShelter rack. And... I'll need a UPS or two for the new studio. Might you be interested in sponsoring a video?

[James Pleger @jpleger]

@IntelDoge But they are saying their daily active users are higher than ever!

It feels like a large volume of people have stopped using the platform and the void was filled with crypto/scam bots.

[James Pleger @jpleger]

Whenever I hear PR highlighting their use of encryption during a breach.

[James Pleger @jpleger]

@ghidraninja Pretty good, with the 360 degree coverage and more distributed light, they were a lot more consistent.

[James Pleger @jpleger]

@ghidraninja It was for in ear monitor shell curing.

About 12 watts of UV

[James Pleger @jpleger]

@ghidraninja Funny enough, I needed to cure UV resin and just had a bunch of boards made from LCSC/JLC, it was way more consistent than trying to find $10 or $20 flashlights that actually worked well. I think it was like $0.80/board or something for 1200mW of UV. https://t.co/f6HYjKFtsy

[James Pleger @jpleger]

@geerlingguy So, they make little hand pumps called air wedges, which you can buy at harbor freight for like $20 or $30 and they allow you to stick under a door and level it. You can use one or two of them and hang a door with one person if you are careful.

https://t.co/dt9nfwEoDA

[James Pleger @jpleger]

@boblord There are *so* many SaaS vendors that don't even offer FIDO for their customers, it's better than it once was, but asking them to implement FIDO for their staff members... 🤷‍♂️ it's also kind of difficult to manage, requires additional training, etc.

[(ARCHIVED) Bob Lord @boblord]

SaaS vendors: Do you mandate FIDO authentication for all access to customer and other sensitive data? If not, what blockers are you running into?

[James Pleger @jpleger]

@SwiftOnSecurity But they schedule it for next week since nobody's calendar can align until then.

[James Pleger @jpleger]

@adamwathan I find that asking for HAR files can help a ton, being able to see the http requests as the browser sends them is super useful and sometimes you can run into strange issues that wouldn't otherwise be easy to troubleshoot.

[James Pleger @jpleger]

@Fil4410Fil44 @sentdefender Some of the custom optics, gimbals and night vision can be 100k, easily. I'm not familiar with this drone, but they aren't cheap to develop.