Matt Monte

Author of Network Attacks and Exploitation: A Framework

[Matt Monte @networkattack]

@HawaiiFive0day Appreciated. Only 999,997 copies left to catch up to Britany.

[Matt Monte @networkattack]

@haxrob @ImposeCost Re: chopper. I’d argue it still fits the mold. The dev and deploy costs are essentially zero at this point, so it doesn’t matter from their perspective if caught

[Matt Monte @networkattack]

@haxrob @ImposeCost First, thx for reading. The hope was always to get ppl thinking, so I truly appreciate small/big disagreement.

[Matt Monte @networkattack]

@0xAlexei I wanted to use what I now use as a twitter icon (purchased use rights on it just for that reason) with a lead title of “0wn3d” but publisher suggested it could hurt sales, esp for anyone not familiar with 1337.

[Matt Monte @networkattack]

@thegrugq @0xMatt What could possibly go wrong?

[thaddeus e. grugq @thegrugq]

One thing that @networkattack points out is that anything that can be done by authorised users can be done by hackers abusing authorised users’ access.

[Matt Monte @networkattack]

@1njection @armitagehacker @kevinmitnick @indi303 @DAlperovitch @OpenSecTraining @HECFBlog @jnazario Ordered

[Matt Monte @networkattack]

@cybergibbons load “*”,8,1

[Matt Monte @networkattack]

@Jackson_T One of the key ?’s that got me writing in the first place was “what principles should underly policy?” Glad you found the book useful.

[Matt Monte @networkattack]

@svcghost @Jackson_T Thx. Always nice to hear.

[Matt Monte @networkattack]

Great discussion. I appreciate how @rejectionking and @jfslowik consider the timescales involved in attacker/defender initiative.

[Matt Monte @networkattack]

@WylieNewmark @BuchananBen @RidT Same reaction as @BuchananBen. Thank you. And honored to be included in the company. All three try to look beyond the specific tech of the moment.

[Matt Monte @networkattack]

@swagitda_ Strategic and goals oriented mindset vs. tactical

[Matt Monte @networkattack]

@Kujman5000 @thegrugq As they say: Fortune favors the prepared

[Matt Monte @networkattack]

@thegrugq @gannimo @gamozolabs The tech and cost are just part of determining the path of least resistance.

[Matt Monte @networkattack]

@BrazeauSydney Thanks. Always appreciate hearing when ppl find it useful

[Matt Monte @networkattack]

@PenfoldDavid Appreciated

[Matt Monte @networkattack]

@3141592f @runasand Starter? Usually on planes if I say “I do computer stuff” it’s a convo ender.

[Runa Sandvik @runasand]

In the series of “books I wish I’d read sooner” is @networkattack’s
Network Attacks and Exploitation: A Framework. I really appreciate the solid examples and the focus on humanity throughout. https://t.co/qZ00Ej4ghD

[Matt Monte @networkattack]

@runasand @RossleRed I reasoned that if someone were going to steal a car, they would steal a better car than mine... The “better car” theory of security breaks down when attacks can be automated and there is a potential positional use for every point of access.2/2

[Matt Monte @networkattack]

I appreciate you quoting this @runasand. I first wrote it in 2014. As time passes, the idea seems to keep moving away from true in theory towards true in practice.

[Runa Sandvik @runasand]

“The ‘better car’ theory of security breaks down when attacks can be automated and there is a potential positional use for every point of access.” — @networkattack

[Matt Monte @networkattack]

@runasand @RossleRed Context: [C]ompanies do not believe they will be targeted because they are uninteresting... I used exactly this thought process for deciding never to bother locking the doors of my first car, a machine held together by coat hangers, duct tape...1/2