Diego Capriotti

Network boogeyman

[Diego Capriotti @naksyn]

My @x33fcon talk has been published!
https://t.co/b4kA6sxIGC
If you prefer reading, here's the blogpost: https://t.co/Ae7D1RoEGI
Thanks to all the hard-worker x33fcon organizers for such an awesome conference, definitely my best conf experience to date.

[S3cur3Th1sSh1t @ShitSecure]

Injection techniques and python Malware by @naksyn at @x33fcon 🔥

https://t.co/LRzOS8EOfc

[Diego Capriotti @naksyn]

I don't think we'll see this for sum-zero game type of jobs (like offense or defense) the pace increased for both players and who is slowing down loses. Different story for jobs without an "enemy" like food provision, where I currently believe we'll get to 0 working days pretty fast.

[Diego Capriotti @naksyn]

@magicswordio @Octoberfest73 it's a remix of an old song: https://t.co/gXNeHBpOwX

[Diego Capriotti @naksyn]

@_RastaMouse Try this https://t.co/cJr9htclal

[Percy Liang @percyliang]

Wrapped up Stanford CS336 (Language Models from Scratch), taught with an amazing team @tatsu_hashimoto @marcelroed @neilbband @rckpudi. Researchers are becoming detached from the technical details of how LMs work. In CS336, we try to fix that by having students build everything:

[Diego Capriotti @naksyn]

@0xTriboulet I'm waiting for it to be rebranded as Qpilot

[Diego Capriotti @naksyn]

@HackingLZ @FuzzySec You mean this? https://t.co/Yn8X8hNSYR by @eversinc33

[Diego Capriotti @naksyn]

@NullMode_ Got an APC Smart-UPS 1500VA rack mounted since 2 years. Quite happy with it. Make sure to choose an UPS that is capable of pure sine wave output

[Adam Chester 🏴‍☠️ @_xpn_]

MS research on AI Impact on Critical Thinking… the results will shock you! https://t.co/285uVLyV43

[Diego Capriotti @naksyn]

When you need to put the cat out of the sack to vendors and clients you'd better share what you found otherwise imposters will do before you stealing your credit. It all boils down to knowing when to share to vendors and clients and getting credit publicly when it's not an internal technique anymore. I see it as a simple risk-management scenario.

[Diego Capriotti @naksyn]

This is because future budgets are largely driven by "historical spending" and not by efficiency. No one ever wanted to judge other Departments' spending thus making enemies and risking careers. Historical spending is a "solution" that avoids human weaknesses and democratizes inefficiency making it the norm. Spreading inefficiency over a certain threshold makes it unattributable. So vast that no one will pay for it. Genius game going on for decades everywhere

[Diego Capriotti @naksyn]

@TrustedSec @GuhnooPlusLinux Great blogpost and thanks for the shout-out!

[Diego Capriotti @naksyn]

@Ab4y98 Glad you liked the presentation! Indeed Python is still underrated IMHO.

[Diego Capriotti @naksyn]

@_xpn_ watching this video was my greatest regret of 2024

[Diego Capriotti @naksyn]

This has been one of my favorites for a while, but now it's time to let it go.
Here's my preferred way of getting the KeePass db that we often hunt for:
downgrade the executable to version 2.53, use CVE-2023-24055 and wait for the busy admin to trigger the dump of the database.
The target can remain clean and you can simply check for the dump creation.
KeePass version 2.53 can still open kdbx created with the version 2.57 and if using a proper xml the user will likely notice nothing.
Update alerts can also be disabled within the xml.
https://t.co/htO0nrvJ37

[Diego Capriotti @naksyn]

@cr7pt0pl4gu3 This is great! thanx for sharing

[Diego Capriotti @naksyn]

@_RastaMouse @_xpn_ fair enough!

[Diego Capriotti @naksyn]

@_RastaMouse @_xpn_ lightnings could still hit trees selectively 😂

[Diego Capriotti @naksyn]

@rvrsh3ll @harmj0y Great idea! Oddvar also published something related: https://t.co/RQrjh8cEv9

[Diego Capriotti @naksyn]

@EricaZelic Grandparents save us from madness

[Diego Capriotti @naksyn]

@HackingDave The best thing to learn is the value of work! 💪💪💪💪💪