SavageJen On Insecurity

Member of the Blackhat Review Board, Consultant, and Information Security Researcher.

[SavageJen On Insecurity @OnInsecurity]

When things are broken in non-obvious ways, we must become curious in order to fix them.

[SavageJen On Insecurity @OnInsecurity]

@JenMsft @Windows @Microsoft Oh hey, a reply from jenmsft herself 👀
ty, I will do that.

[SavageJen On Insecurity @OnInsecurity]

@Windows @microsoft It's 2024. Why can I not right click on an open application in my task bar and click mute?

[SavageJen On Insecurity @OnInsecurity]

@SteveD3

[SavageJen On Insecurity @OnInsecurity]

I have nothing important to post today. Just this cuteness.

[SavageJen On Insecurity @OnInsecurity]

@hashjenni books

[SavageJen On Insecurity @OnInsecurity]

@orange_8361 I'm sad to hear you're still not being allowed into the US

[Orange Tsai 🍊 @orange_8361]

Thrilled to release my latest research on Apache HTTP Server, revealing several architectural issues! https://t.co/7ygwWXY0pd

Highlights include:
⚡ Escaping from DocumentRoot to System Root
⚡ Bypassing built-in ACL/Auth with just a '?'
⚡ Turning XSS into RCE with legacy code from 1996

[Black Hat @BlackHatEvents]

📣 ANNOUNCEMENT: We're excited to announce our Keynote and Main Stage Speaker Lineup for #BHUSA. Don't miss it! #cybersecurity #infosec

Learn more here:
https://t.co/IJIQFD0rcy

[SavageJen On Insecurity @OnInsecurity]

@NatSecBec I use various keepass clients

[SavageJen On Insecurity @OnInsecurity]

@opinonhaver It depends on the type.

[SavageJen On Insecurity @OnInsecurity]

Microsoft: "We care about backwards compatibility so much that we will leave insecure stuff in the OS sometimes."
Also Microsoft: "We changed Powershell for some unknown reason and some of your old scripts won't work anymore. haha guess you have to rewrite it."

[SavageJen On Insecurity @OnInsecurity]

@ASUS_ROG Why drop support for the bootloader unlock tool with the rog phone 8? It was legit a selling point of the rog phone.

[SavageJen On Insecurity @OnInsecurity]

The CFP for Blackhat USA 2024 is now open. If you have been wanting to speak at Blackhat, this is your chance.
https://t.co/O6wpUMEsZE

[DEF CON @defcon]

#defcon escapes another brush with cancellation! After 25 years w/Caesars, they cancelled our contract for #defcon32.

A lot of conferences might have buckled, but not DEF CON. Hackers make a way out of no way.

Uncanceled DEF CON 32 will now be held at the Las Vegas Convention Center, on the same dates and for the first time in a while, under one roof.

@thedarktangent 's full post is here: https://t.co/7rQJZmvZpS

[Grifter @Grifter801]

And just like that…

Next year, @shmoocon 25 will be the last ShmooCon #shmoocon

[SavageJen On Insecurity @OnInsecurity]

@DKThomp Have the tests changed?

[SavageJen On Insecurity @OnInsecurity]

@typesfast @lukeburgis I think it's not just about the cars. They are a necessary component, but I also think it takes the ability to suppress fear, fast reaction times, and accuracy despite the speed on the part of the driver.

[SavageJen On Insecurity @OnInsecurity]

@NSA_CSDirector If you want to revisit old debates, perhaps consider historical examples.
https://t.co/9jptxrCSzD

[SavageJen On Insecurity @OnInsecurity]

@caseyjohnellis I think proof of concept code is also excellent for educational purposes.

[SavageJen On Insecurity @OnInsecurity]

@DannyDainton @hypnoglow @t3dotgg My point about syncing everyone's stuff to your servers just went completely over your head