n0v | 🦋 @n0vsec.social

💾 #InfoSec Engineer
🧙‍♂️ Arcane caster of #SIEM queries
🤖 #Automate or die
🌌 #StarTrek Obsessed
🚀 I ♥ #Space

@defcon newb wrangler w\ @L0nelyH4ckers

[n0v | 🦋 @n0vsec.social @n0vsec]

Story Time:
The last night before I headed home from @defcon I was at the bar in the high roller area in @ResortsWorldLV. When I was looking at the whiskey selection and made an order, a man to the left of me asked me about my @TheMeshtastic device I had hanging on my beltbag.

[Lina @d0rkph0enix]

I’ve never reserved a room in the DEFCON block and now I definitely never will. @defcon

@ResortsWorldLV, I will never rent a room at your hotel. Not when I’m there annually for DEFCON, sales kickoff, or World Series of Poker. Aria/Cosmo/Fontainebleu will continue to get my 💵.

[n0v | 🦋 @n0vsec.social @n0vsec]

Ok I am for the most part a 🔵 sky convert. I will only be posting over there and for the most part only replying or responding to things there. Catch me outside [@]n0vsec[.]social, how bout that.

[Peppermill Reno Poker @PeppermillPoker]

Noon - Flight A
$100,000 GTD $600 Mini Main

30k stacks + 30-min Day 1 Levels
Unlimited Entries to 7:30p
13% Make Day 2
Day 2 in the Money, 40-min Levels

Flight B = Noon Saturday
Day 2 Breakfast = 10a Sunday
Day 2 Noon Sunday

Series Details: https://t.co/SvP1DG0p9V

[wukko @uwukko]

https://t.co/VB3CnETxc0 is free (not $5 or $10), clean, doesn't have ads, and works anywhere btw

[Andrew Morris (afk) @Andrew___Morris]

Quick PSA: Someone is attacking Tor right now and has been for a few weeks.

The attacker is spoofing the IPs of Tor Exit and Directory nodes, and blasting TCP SYN packets indiscriminately on 22/TCP- spurring a large amount of abuse complaints to hosting providers, which are then temp blocking/banning Tor infrastructure which isn't actually doing anything wrong.

For the time being, I recommend all hosting providers *ignore* abuse complaints that indicate "SSH scanning" or "port scanning on 22/TCP" and originate from any of the following IPs: https://t.co/RQFUGuI8XU

This is a clever attack. I'm working with partners to triangulate the true origin of this traffic then try to get it disconnected.

Weird attacker website here: https://t.co/xyd9CwE1hF

Related links:

https://t.co/RZdC51gQoR

https://t.co/9NF9oGgapj

[n0v | 🦋 @n0vsec.social @n0vsec]

@emilykmay Benjamin Sisko from Deep Space 9.

[n0v | 🦋 @n0vsec.social @n0vsec]

@elder_plinius I've been jailbroke

[n0v | 🦋 @n0vsec.social @n0vsec]

@MikeTalonNYC @gabsmashh I threw an article into NotebookLM to create a podcast, and I couldn't finish it because it decided to pronounce SIEM a different way each time it was brought up.... It was infuriating.

[n0v | 🦋 @n0vsec.social @n0vsec]

@PeppermillPoker Are there more than one Daily tournament a day now?

[n0v | 🦋 @n0vsec.social @n0vsec]

@TVPokerRoom @Zupdog @WSOP Congrats @Zupdog! Nice playing with you.

[n0v | 🦋 @n0vsec.social @n0vsec]

Not sure who needs to know this but they have #MTG Commander bundles at Costco: https://t.co/XobC3EZDXa

[dedgrl @dedgrl]

this came to me in a nightmare last night

[BlackRoomSec @blackroomsec]

Today I want to highlight the importance of having Dummy (Test) Data in your arsenal so you're prepared when you will need it.

Like many hackers I keep a healthy supply of ancillary tools like word lists and corrupted files to test software. One of the most famous Dummy Data types is the Eicar Test File which, for many years now, has been used to test antivirus software.

A year or so ago I was caught empty handed when writing a program which would fix a corrupted PDF in six of the known ways one can be corrupted and I had to make one myself. I couldn't use live data as that would've been irresponsible.

When building your arsenal try to think of common things you are asked to do and have a supply of test data on hand for those scenarios.

There are a multitude of sites out there which have this kind of data for the taking but I'm having lots of luck with HuggingFace's datasets lately.

You can also search for Awesome Datasets on Github.

Also, make Excel sheets for advanced formulas or keep a notepad file on them. I do the sheets because it's a live example and has data in it rather than strings of formulas without context which I'm not going to remember months later.

[n0v | 🦋 @n0vsec.social @n0vsec]

I made a thing. https://t.co/CcD6pwSeUH

[n0v | 🦋 @n0vsec.social @n0vsec]

@n00bznet Oh man, I am glad you are good. ❤️

[n0v | 🦋 @n0vsec.social @n0vsec]

@d0rkph0enix Amen to that. Regardless of the education system, I plan on introducing personal finance to my son early on. It's important to talk about money in the home.

[n0v | 🦋 @n0vsec.social @n0vsec]

@IanColdwater Get-ChildItem 😎

[EvilMog® @mog.evil.af @Evil_Mog]

We need to initiate @deadmau5 into the @churchofwifi at #defcon

[Howard Stutz @howardstutz]

Breaking: Resorts World Las Vegas ownership is facing a 12-count complaint by Nevada gaming regulators for violating federal anti-money laundering laws at the property. Ownership is facing millions of dollars in fines and actions against its license
Story coming to @TheNVIndy

[MG @_MG_]

@netspooky @andrewprhodes He seriously needs to DO some talks. The tech he works on is amazing.

Not that he should do a talk about this specific thing, but I went down a research hole after he showed me a crazy cable that works like this:

[n0v | 🦋 @n0vsec.social @n0vsec]

@_MG_ @realytcracker @andrewprhodes @deadmau5 Need to get there so my LinkedIn will say I'm a stay at home dad, but can be mobilized if someone fucked around and needed to find out.