Ian Morrison

Hacker/Musician/Magician

[Ian Morrison @narq]

Please think of the environment before printing this tweet

[Matías N. Goldberg @matiasgoldberg]

New CVE-2024-51774 dropped on QTorrent.

MITM RCE, single click compromise.

"Oh I'm sure they accidentally messed up the if logic and failed to verify TLS correctly".

<looks inside>

DEAR MOTHER OF GOD

[Ross McCafferty @RossMcCaff]

LinkedIn is a disease

[Ian Morrison @narq]

Happy 30th Anniversary @freebsd , still the most useful UNIX in my opinion.

[Sheila Jenné @jennelikejennay]

Well this sucks.

I put off going to therapy for years because I was scared to. I gave BetterHelp a ton of information to match me with a therapist, who was a terrible match.

And they SOLD THAT INFORMATION TO FACEBOOK TO TARGET ADS.

And I get nine dollars seventy-two cents.

[Jen Gentleman 🌺 @JenMsft]

When trying to solve a coding problem, one programmer thought, "I'll use threads!" - and then two hd he arpoblmes

[Dr Nathan Filer @nathanfiler]

Please, please will someone sample @amolrajan saying: "I can't accept Drum & Bass. We need Jungle, I'm afraid." 👊

[Thomas Mitchells @IAmTomMitchells]

I spent far too much time on this.

Jungle is massive.

[Weasel Sec @Weasel_Sec]

I've transitioned from using Let's Encrypt to secure my C2 and phishing platforms and opting for wildcard certificates as well. The sheer number of Threat Intelligence vendors employing Certificate Transparency logs to scan my infrastructure is astonishing.

[vx-underground @vxunderground]

😰😰😰

[Ian Morrison @narq]

@MerruX @vxunderground why the pointless * ? are you trying to protect hidden files in root?

[nazir afzal @nazirafzal]

Rishi Sunak’s attempt at a video transition has made him viral on TikTok as people globally duet with him - here’s one from Iceland

[iFixit @iFixit]

Repair barriers are becoming more complex. One of the newer culprits? Parts pairing, an anti-repair method used by Apple, whereby they make parts incompatible or serialize them. Learn about the latest threat to independent repair below.
https://t.co/ehctIGVFzO
—
#iFixit

[mgeeky | Mariusz Banach @mariuszbit]

London-based hackers pay attention: there's a new offensive gig hatching up 👇 Save the date and come over if you're looking to chat about beacons and share some cold ones! 🍻

[moogz @m0ogz]

Calling all London #redteam and cyber crew! Save the date 23 Nov 23 for #Beacon23: a hacker-run microcon for discussions and talks on all things around #offensivesecurity with informal drinks and music til 10pm, near Old Street. Register on Eventbrite at https://t.co/h8GtDYyRJx

[Paul Graham @paulg]

If you go to chrome://settings/adPrivacy you can turn off the spyware that got inserted into the latest version of Chrome.

[Germán Fernández @1ZRR4H]

🟥 (#vishing) OTP Spoofer.
Automated service for the theft of one-time passwords through fraudulent phone calls ⚠️

[Electoral Commission @ElectoralCommUK]

Today we announced that we have been the subject of a complex cyber-attack, and our systems were accessed by hostile actors.

[ACE Responder @ACEResponder]

Introducing RogueSliver. A tool to disrupt offensive campaigns that use the Sliver C2 framework.

• Hijack beacons
• Send memes to the attacker
• Flood C2 servers

#DFIR #RedTeam

https://t.co/DeJq1P8byd

[Karanbir Singh @kbsingh]

You don't really know how bad things are till you see first hand how good they can get.

[Tony Hirst @psychemedia]

Isn't pioneering frontiers historically all about f**king over people, customs, cultures & ecologies, to replace them with your own cultural views as warped by having been kicked out of your own country, then trying to survive in an established, alien one? https://t.co/Bl4129bKa1