Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ

Electric Power Geek, Hardhat Hacker, Control System Security Engineer, & .... Opinions are my own. (ಠ_ಠ) c[_] KC3GST

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@HackingDave Super disappointed.

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@sjmurdoch I did some very speculative research on frame 17 years ago, but looking at the hardware and encoding not the actual data transmitted.

https://t.co/OQgDbu613s

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

Go to sleep go to sleep...

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

Always turn off electricity at the breaker before doing work on electric systems.

[Worst Finance Takes @Lifeinvestmoney]

A/c stopped working

Local company wanted $982 to repair

Asked AI what was wrong

Prompted to replace capacitor

Bought new capacitor on Amazon for $19

Went to replace capacitor

Got electrocuted

AI said “it looks like you’re right that’s incorrect”

Went to hospital

Overnight stay cost $8,922

A/c still out

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

Anthropic's business is converting compute into value using the fruits of their science, data, and engineering expertise, for *paying* customers...

Why join the AI build out race-to-the-bottom to build compute when you can rent it for pennies on the dollar?

[Anthropic @AnthropicAI]

Our run-rate revenue has surpassed $30 billion, up from $9 billion at the end of 2025, as demand for Claude continues to accelerate. This partnership gives us the compute to keep pace.

Read more: https://t.co/XgSjL0And7

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@TVAnews Beautiful lift, folks.

[Riley Walz @rtwlz]

Payphones are strangely still licensed in California, so I filed a FOIA request and got the full list. Naturally I made a game you can now play:

[Nes 🎨 @feydemon]

made a pizza and sliced it like a psychopath because i remembered i have free will and can do whatever i want

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

My bigger question is which videos are in the Downloaded folder.

I'd say 1969, RCA, with this one from @veritasium : https://t.co/RJYnmThS5E

[LaurieWired @lauriewired]

You can send a single smartphone to any point in human history. No instructions.

Winner is whoever advances human progress the most.

When + where do you send it?

[LaurieWired @lauriewired]

You can send a single smartphone to any point in human history. No instructions.

Winner is whoever advances human progress the most.

When + where do you send it?

[MG @_MG_]

I’m a bit concerned about the non-inquisitive celebration from infosec on this.

Where is the “what does keystroke latency even mean?” Without that, you can’t implement it for yourself, nor can you identify weaknesses.

~3yrs I was privately proposing similar options. So, AS SOMEWHAT OF A KEYBOARD EXPERT MYSELF 🤔💅, let’s look…

First, this is most likely NOT a direct measure of network latency. This machine was physically located in Arizona. DPRK started off with shipping corp laptops overseas, but the network latency was a dead giveaway. So they started colocating them in the USA and remotely controlling them. First with remote control software, which is easy to identify if the company has security software on the machine. And then with hardware like IP-KVMs. There are sometimes a few tells that an IP-KVM is in use, but a well tuned one will identify exactly like a normal external keyboard/mouse/monitor. Unless…

This is where you have to start looking beyond device identity and instead look at input anomalies. Keyboard/mouse input being sent halfway across the world via network packets to an IP-KVM can look… weird. Think bursts of input. This looks very weird with mouse data that is normally smooth. But even keystrokes start to stand out when you have a big enough dataset to compare against. So, of course, you could improve the IP-KVM to smooth out and “humanize” the inputs before relaying them to the host. But…

You can also present some real time control surfaces. I don’t want to blow anyone’s defense tradecraft here. So let’s just imagine the employee needs to play a 5sec game of flappybird each day. Or maybe it’s an overt “DPRK Detector” step during login. The visual input has to travel halfway across the globe, then the input has to come all the way back. That’s a massive delay for response to visual stimulus. Certainly anomalous enough to warrant investigation. How do you beat that? Maybe an AI process running on the IP-KVM that plays DPRK Detector for you?

The arms race will continue. And it’s mostly because HR and Hiring Managers don’t want to do deeper background checks needed to identify fake/stolen identities. 🤷‍♂️

And for anyone not familiar with these hunts, the detection techniques are NOT definitive proof of wrong doing. They are simply turning a mountainous hay stack into a fistful of hay that a human can quickly sift through to look for other indicators.

Note: there are environment-specific detections as well. But I tried to stay in territory that’s applicable to everyone who has this risk in their threat model.

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

We get it, AI is bad at math.

[Snehil Saluja @mrsnhl]

what a clever ad

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

One of the coolest things about Kurowski's show is seeing her actually sit down with the client on camera with a pen and paper.

This isn't about performing, it's about working, and listening.

[Magnolia Network @magnolianetwork]

Lindsey Kurowski helps a property owner rediscover his passion for his struggling motel in the charming city of Tombstone, Arizona. Watch a new episode of #MotelRescue tonight at 8/7c on #MagnoliaNetwork on TV, @streamonmax, and @discoveryplus.

[autumn @adrusi]

this image depicts two pole-mounted energy storage systems

[natalie @natalie_thenerd]

I am a woman of my word.

The Lego Game Boy - with a working Game Boy inside (not an emulator)

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

Dear @Dell,

Thank you for placing the power button where the delete key used to be. Totally doesn't surprise me daily.

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@HackingLZ AI companies will be paying for unique content, one way or another.

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@benji_york Are you *the* Benji York who created SNESKey??

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@tylerhnorris

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@d0tslash @Viss @jcase @Crypt0s So, things might have changed, @d0tslash.

[Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker]

@d0tslash @Viss @jcase @Crypt0s Oops, I meant @viss. I hear rumors you know a few things about drones or something.