EK

unnamed person

[EK @n0guest]

Good incident response isn't instinct — it's preparation 💪

[Security Alliance @_SEAL_Org]

🌟 SEAL Frameworks Stewards Spotlight: Meet @n0guest & @hexnickk from @LidoFinance

Stewards are experts who maintain individual SEAL Frameworks, review contributions, and help others implement security best practices. They help keep our frameworks current and useful!

🧵 (1/3)

[EK @n0guest]

Wow, #K8s finally supports userns (from v1.36). But it only took 10 years 😮‍💨

https://t.co/ut6dSk9amq

[Cantina 🪐 @cantinasecurity]

Nearly $22B in ETH is staked via @LidoFinance.

Today, we’re glad to announce that Lido has completed the Web3SOC assessment, covering operational, financial, security, and compliance domains across Lido DAO and the Lido protocol.

[EK @n0guest]

It took months, but here it is!

[Lido @LidoFinance]

stETH is moving deeper into institutional workflows.

That makes infrastructure diligence matter.

Lido has received Web3SOC certification from @cantinasecurity, adding another reference point for institutional diligence.

↓

[Lido @LidoFinance]

Staking Rewards launched a comprehensive DeFi ratings framework, and stETH earned the highest rating of all rated products: A+

A deep audit history, a 2M USD Immunefi bug bounty, and features like Dual Governance all contribute to making Lido the most resilient DeFi protocol.

[EK @n0guest]

Huh ... Any beets who's next? 😏

[EK @n0guest]

@officer_secret @0xKoda Your article is good for a wide audience, because it's trying to help. Kudos for that 👏

But some parts of this article are misleading or just sound like a shake oil pitch. That's what I'm about. Not trying to be rude, though.

[EK @n0guest]

@officer_secret Also DNSSEC is good to have, but it's worthless with hijacking situations.
It's like your house is on fire, but you have a gooooood score and a shiny badge on DNS checkups.

[EK @n0guest]

@officer_secret That's not a problem with only Gandi, but with many other registrars with employees susceptible to social engineering.

My take here is that your advice of buying some different TLDs is NOT solving the source of such problems.

[EK @n0guest]

@officer_secret Yeaah ... So as soon as you buy .com/.io from the same registrar - social engineering attacks stop working against the same people at your registrar.

Cow Swap incident proves that beautifully, yep 🙃

[EK @n0guest]

@SCBuergel @androolloyd @openprovider So far I've found info about Hypurr and Stakehouse domains being compromised. No other symptoms around Finland TLD.

[EK @n0guest]

@androolloyd @SCBuergel which teams exactly? can't find anything public so far

[Security Alliance @_SEAL_Org]

6/ 🙏 Thanks to @LidoFinance for contributing battle-tested templates and practice insights that make incident response preparation practical & immediately implementable.

🔗 Start building/strengthening your response capabilities today: https://t.co/F4WwTGcHCV

[Security Alliance @_SEAL_Org]

Framework of the Month for April: Incident Response Template

🆕 Brand new framework launching today!

The best time to build your incident response plan is before you need it. The second best time is right now.

Pre-built assets and practiced procedures are the difference between recovery and catastrophe. (1/x)

[EK @n0guest]

@pingdom So, it's been 24 hours without any changes. Just empty promises and nothing else. Way to go, you guys.

#pingdom #scam #dontbuy

[EK @n0guest]

@pingdom BTW, my DM message from 7 hours ago is still unread. So, will you do anything except copy&paste typical response?

[EK @n0guest]

@pingdom I already sent you DM 7 hours ago and event sent you a case number (previous communication with your support). Since then there is only total silence from your side. Anything else except keeping straight face on public?

[EK @n0guest]

@codeguy @pingdom It could go even worse. You paid then and after that got suspended without any ability to contact their support. So, yes - cancel them ASAP ;)

[EK @n0guest]

@pingdom Yeah, it all good except your company acts like a cheap scammers. Accepts payments, but then blocks your account without any heads-up. Way to go, guys. Steal money of your customers, while you can.