Prashant Kumar

Infosec guy. Red teaming, Web security.

[LiveOverflow 🔴 hextree.io @LiveOverflow]

Mr. Robot is terrible show

[SwiftOnSecurity @SwiftOnSecurity]

Holy shit Microsoft figured out how their signing key was leaked
https://t.co/bJuY0tDFzn

[Prashant Kumar @notsoshant]

And yes, I've tried Inspect Element too. Doesn't work.

[Prashant Kumar @notsoshant]

I don't usually shame brands on Twitter but forcing people to disable adblocker for unsubscribing from a service they never signed up for is definitely a new low!

I can't type on the Email Address field because the "script" is getting blocked.

@paytminsider

[Prashant Kumar @notsoshant]

One of many reasons why hardcoding secrets in source code isn’t a wise thing to do

[vx-underground @vxunderground]

Okta, the America identity and access management company, has informed various security contacts that sometime in December their internal source code repositories on GitHub has been stolen (?)

Intel and photo via @Ax_Sharma and @BleepinComputer

[Prashant Kumar @notsoshant]

Bruh fixing hate speech is so easy. Just rename hate speech to free speech.

[Elon Musk @elonmusk]

Hate speech impressions (# of times tweet was viewed) continue to decline, despite significant user growth!

@TwitterSafety will publish data weekly.

Freedom of speech doesn’t mean freedom of reach. Negativity should & will get less reach than positivity.

[Prashant Kumar @notsoshant]

@ChessProblem FIDE bans en passant

[Prashant Kumar @notsoshant]

@aussiastronomer @TEDxGateway I believe this could help https://t.co/ectdxdRO3O

[Prashant Kumar @notsoshant]

@NickMigs @leachmusic @kevingohwm But again, different people have different views and opinions so I don’t want to argue further.

[Prashant Kumar @notsoshant]

@NickMigs @leachmusic @kevingohwm I don’t see it as Magnus being vigilante, rather a protest against inactions of organisers. Fabi summed it up nicely- “It’s a selfless protest, willingly damaging his own reputation to speak against something that is harming the community”.

[Prashant Kumar @notsoshant]

@leachmusic @NickMigs @kevingohwm And let’s also not forget the fact that both Magnus and Nepo, as far as we know right now, did show their concerns regarding Hans to the organisers but they chose not to act UNTIL Magnus withdrew.

[Prashant Kumar @notsoshant]

@NickMigs @leachmusic @kevingohwm “Use leverage to get Hans uninvited”. Yes, sounds fair and less controversial than what Magnus did. Great idea!

[Prashant Kumar @notsoshant]

@Kevin2600 @Xiaomi Literal @internetofshit 😂

[vx-underground @vxunderground]

Uber is currently responding to a "cybersecurity incident".

[Krishna Chaitanya T @novogeek]

I am super excited to be speaking at #appsecpnw this Saturday (11 June 2022, 11:30 A.M PT). If you are developing #cloud solutions using modern auth protocols (#oidc, #oauth2), check out my talk on "Common Vulnerabilities in Modern Auth Implementations" #OWASP #appsec

[South Asia Index @SouthAsiaIndex]

Just IN:— Former Twitter Security Chief, now whistle blower, says India government forced Twitter to put one of its agents inside twitter, with full access to twitter user data.

[Donie O'Sullivan @donie]

#BREAK A former Twitter executive, its head of security, has turned whistleblower.

He alleges grave security problems at the company that he says are a risk to national security and democracy.

His first TV interview here:

https://t.co/QU823RBnN1

[Prashant Kumar @notsoshant]

Addendum

https://t.co/ivVcwqHsoa

[Charlie Clark @exploitph]

@harmj0y @tiraniddo You can already perform most of this with Rubeus' asktgt, asktgs and s4u, you just need to do the password change with mimikatz, DSInternals or something before doing the s4u

[Prashant Kumar @notsoshant]

Spicing up the RBCD a bit

[James Forshaw @tiraniddo]

I said I'd write up how you could exploit RBCD using a normal user account if you know the password. So here it is https://t.co/nbkds3DBre

[neeraj arora @neerajarora]

In 2014, I was the Chief Business Officer of WhatsApp.

And I helped negotiate the $22 billion sale to Facebook.

Today, I regret it.

Here’s where things went wrong: