Marcin Szary

people and technology enthusiast

[Marcin Szary @mszary]

This is so good on so many levels
https://t.co/mc4l5jFApG

#security #ReverseEngineering

[Marcin Szary @mszary]

@SwiftOnSecurity While FIDO2 would do the job by preventing the attack during the authentication phase, we still need a standardized method to bind the already established sessions to the device that originated them

[Marcin Szary @mszary]

@KacperSzurek Było nawet takie pojęcie jak „reklamacja” tasm (dziwna kalka językowa od reclaim), gdzie przepisywało się fragmenty taśm na inne, kiedy dane w połowie taśmy expirowaly :) moje czasy LTO3 :)

[Marcin Szary @mszary]

@ljachowicz @Zaufana3Strona @mrgretzky Chyba już fixniete, dzięki za czujność :) 👍

[Marcin Szary @mszary]

@adastroworld Seems like it, indeed. 1password’s staff member did the same thing apparently: https://t.co/OHxWMhNGEu

[Marcin Szary @mszary]

Mastery as its finest

[Kuba Gretzky @mrgretzky]

🎬Phishing LinkedIn and bypassing MFA demo created for the upcoming Evilginx Pro post 🔥

💡Evilginx uses a background browser to capture the secret token from legitimate website and inject it back into the reverse proxy phishing session.

P.S. Enjoy that Cyberpunk tune I made 🎵

[Marcin Szary @mszary]

@mrgretzky @x33fcon Well done, Mr Evilginx, well done 👏

[Marcin Szary @mszary]

@mrgretzky Sneaky :) love it

[Kuba Gretzky @mrgretzky]

BREAKING: Announcing Evilginx Mastery course price & release date!

🗓️Date: May 10th 2023
💳Price: 399 EUR (359 EUR with -10% release discount)

📝Sign up here: https://t.co/ks7MQwQVha

⭐️Evilginx 3.0 & online documentation will also be released on the same day!

[Marcin Szary @mszary]

@rafrasenberg IDDQD

[Marcin Szary @mszary]

@ruchowdh Twitter does identity management by changing passwords, really?

[Marcin Szary @mszary]

@FEITIAN_Tech where could I find your CA certificates to be used for #U2F keys attestation?

[Marcin Szary @mszary]

Phrack is back :) https://t.co/Weu6e3EvCc
#cybersecurty #Hacking

[Marcin Szary @mszary]

@Probly_Kidding @thomasjsn @iamdevloper Search no more ;) https://t.co/z3YSQvWIWv

[will leinweber @leinweber]

I made a VGP (very good program) that makes it so it looks like I’m typing on slack whenever anyone else is typing, and stops when they stop.

Everyone loves it so far and doesn’t find it annoying at all!

https://t.co/W8e2EKuVXX

[Bill Marczak @billmarczak]

THREAD with a couple of interesting bits from @AmnestyTech's new report on what they learned from looking for NSO Group's spyware on phones https://t.co/CG60vx7cRg

[Marcin Szary @mszary]

@niebezpiecznik Jakby nie bylo, Bank of America wspoltworzyl FIDO prawie od poczatku :)

[Marcin Szary @mszary]

#FIDO is amazing, it just wasn't designed to replace CAPTCHA ;) That Cloudflare's experiment seems to be doomed (https://t.co/GNMeBtKMGC)
#u2f #fido2 #yubico

[Adam Langley @agl__]

(Just grounding out the cap sensor on a security key is enough to trigger a "touch". No drinking birds required.)

[Mark Ermolov @_markel___]

Wow, we (+@h0t_max and @_Dmit) have found two undocumented x86 instructions in Intel CPUs which completely control microarchitectural state (yes, they can modify microcode)

[Marcin Szary @mszary]

Ooops ;)

[OverSoft @OverSoftNL]

Infosec fail thread:

So, in the last couple of weeks I've been looking into a product we were thinking of offering to our customers.

This time, we were looking into the FootfallCam 3D plus. A counter system to measure how many people are in a building.

1/n