Darren Shu

I am a Software Security Advisor, your guide to navigating the complex world of software security and hacking your way to a better you

[Darren Shu @oemunlock]

@r3n0zzz @thepirateface What's a pirate's favorite letter?
R, of course. Even Captain Aarghhh knows it stands for @r3n0zzz !

[Darren Shu @oemunlock]

@JoshuaLisec Now I want to know what was #1 in your list

[Darren Shu @oemunlock]

@drzow Olaf had privacy concerns after talking with Edward SNOWden

[Darren Shu @oemunlock]

Geek Humor: My thoughts while watching Frozen with my daughter.

[nixCraft 🐧 @nixcraft]

Hard to discover tips and apps for making macOS pleasant https://t.co/pjULfpI2Ly #Unix

[Darren Shu @oemunlock]

I imagined Elsa didn't give much thought about security controls.

[Steve Syfuhs @SteveSyfuhs]

Have you ever wondered what happens behind the scenes when you type your password into the Windows logon screen and hit enter? I'm waiting for a build to complete, so I'm gonna tell you.

[Patrick Thomas (@[email protected]) @coffeetocode]

Trying to get into #infosec or thinking about your next step & want someone to talk to?

I'm doing career coaching in #DEFCONSafeMode Career village, 8/7 11-13:00. https://t.co/ccCNQtYEqm #DC28CAHV
(#appsec, cloud, dev/eng/arch are my particular jam but happy to talk to anyone!)

[Darren Shu @oemunlock]

@pfmadden Do you know the size? Perhaps you can get a replcement band. https://t.co/PpJvfhz4AH

[Darren Shu @oemunlock]

@pfmadden Were you talking about Command Authorization Codes? I did wonder what would happen if you forgot your authorization code. https://t.co/dcE7qglyiH

[Clint Gibler @clintgibler]

Impressive list of #websecurity resources by @qazbnm456, including:
* Intros to important bug classes
* Tricks and evasions
* Cheatsheets
* Tools
* Digests, forums, blogs, communities
* Targets to practice on

https://t.co/4HwNCVTnNy

[Darren Shu @oemunlock]

@coffeetocode I asked George Tarnovsky out of band and he said he'd help. He's based out of Herndon, VA and has a laser etcher. Let me know if you want to go that route.

[Ben Snyder @benjaminjsnyder]

My Cisco Live On-Demand Session is now available!

War Journals of a Penetration Tester

https://t.co/gNy1jCCT22

[Darren Shu @oemunlock]

@coffeetocode The contracts problem was solved years ago allowing MVNOs to form in the 90's. The GSMA publishing SGP.2x eSIM spec in 2017(?) is also certainly notable. The major US operators use Cisco Jasper which likely exposes parts of their API. Will check out Twilio!

[Maya Kaczorowski @MayaKaczorowski]

Security community! Can we please agree on what terms we're using instead of "whitelist" and "blacklist"? 🙏 It would be great to make these consistent.

[Darren Shu @oemunlock]

@TalosSecurity Great work from my coworker, Sam Dytrych. Go Sam!

[Cisco Talos Intelligence Group @TalosSecurity]

We are disclosing a vulnerability in the GNU C library implementation of memcpy on armv7, which leaves many vehicles with on-board computers open to exploitation. We have the breakdown of our research here and information on an update https://t.co/Qz0a32P9qY

[Darren Shu @oemunlock]

Why does Potbelly's have Baby Yoda on their signs? Is that 'B' for Baby, Lettuce, Tomato, Avocado?

[Darren Shu @oemunlock]

I am not a PC, Mac, iOS, or Android person. I like to collect them all like Pokémon then complain about each of them.

[Azeria @Fox0x01]

The first version of my ARM Assembler is finally finished! 🖤

AZM - Live ARM Assembler and Syntax Checker: https://t.co/fNcUDRnVcw

- Supports most 32-bit ARM and 16-bit Thumb instructions
- Automatic assembly of instructions as you type
- Marks zero-bytes in output as you type