Niels C Nielsen

Security Architect, ex CISO, Glider Pilot, Human
FYI: 'Likes' may just be bookmarks
Opinions and/or statements are NOT on behalf of my employer(s)

[Niels C Nielsen @opvind]

@SecurityTrybe Watering Hole?

[Steve Ragan ⚠️ @SteveD3]

I checked all my cards, came back clean.

[Niels C Nielsen @opvind]

@DTUAirsport

[Ken Shirriff @kenshirriff]

The Bendix CADC is an analog computer used by fighter planes in the 1950s. It computed airspeed, Mach number, and other important parameters. I reverse-engineered how it performed these calculations with tiny gears, differentials, and cams. 1/12

[Niels C Nielsen @opvind]

@nixcraft The Good Soldier Švejk springs to mind 🤣

[Jameel Jaffer @JameelJaffer]

I'm late to this, but this is very powerful and worth watching.

[Niels C Nielsen @opvind]

@SecurityTrybe @Ramiyousf https://t.co/hVNZvPQbRE worked for me

[Tom🌶\(^-^)/🌶 @TomLawrenceTech]

"The cybersecurity reality we live in now is teenagers are running around in organized crime gangs with digital bazooka’s. They probably have a better asset inventory of your network than you, and they don’t have to wait 4 weeks for 38 people to approve a change request for patching 1 thing."

If you think that patching critical public facing infrastructure within 24hrs is not a realistic goal then tell me why!

Despite all the security awareness we have here in 2023, all the new fancy tools we have, and all the celebration of coordinated government take downs of threat actor groups, cybercrime gangs are still on the rise hitting more companies and making more money than ever this year.

You need to be able to identify and patch something like CitrixBleed within 24 hours — if you cannot, there is a very real possibility it isn’t the ideal product fit for your company due to the level of risk it poses, and you need to rethink if the architecture and look for a solution you can manage.

The LockBit ransomware group has assembled a strike team to breach banks, law firms and governments and I don't see this stopping anytime soon.

Follow this link for Kevin Beaumont's @GossiTheDog deeper dive into the topic:
https://t.co/uQsyDp4ALD

[Niels C Nielsen @opvind]

@DennyBr76971632 @Jhaddix @mattjay OK, good for you. What does your playbook say for this type of incident?

[Niels C Nielsen @opvind]

@HamDerJan @malmoeb @mgreen27 @velocidex IP number 2501689816 (decimal) is equal to IP address 149.28.193.216 (dotted decimal).
Use Cyberchef or https://t.co/DEnu2z2n65

[Robert Graham @robertgraham]

This person gets it.

[Niels C Nielsen @opvind]

@tekmic64 Til lykke med anerkendelsen

[Halvar Flake @halvarflake]

Some organisations have an uncanny knack for, given two options with advantages and drawbacks, choose a compromise that manages to obtain all the drawbacks with none of the benefits.

It's really fascinating to watch.

[Prof. Tatiana Ilyina @ilitat]

RT @[email protected]
Never mind you can't ski in the Alps this winter. Think about the empty rivers in spring and all the failed harvests this summer all over Europe.
https://t.co/WJjJOtmvqx

[Tim Sweeney @TimSweeneyEpic]

ChatGPT to me seems to weld an English professor’s writing skills to an encyclopedia’s knowledge base and a kindergartener’s reasoning ability, producing impressive and highly polished nonsense. The screen is on - at 8K 120Hz - but nobody’s at the keyboard.

[Quantіan @quantian1]

One of the best genres of threads on here, “person unwittingly confesses to a crime for clout”

[Cory Doctorow NO LONGER ON TWIT TER @doctorow]

"Dystopia" isn't when things go wrong. Assuming nothing will go wrong doesn't make you an optimist, it makes you an asshole. A *dangerous* asshole. Assuming nothing will go wrong is why they didn't put enough lifeboats on the *Titanic*. 66/

[Kurt Opsahl @kurtopsahl.bsky.social @kurtopsahl]

Late contender for worst take of the year: NYT oped argues @signalapp is bad because users might not know it strongly protects comms from surveillance. I, for one, am a “witting” advocate user.
https://t.co/3JQ0gVTmOw

[mRr3b00t @UK_Daniel_Card]

But also I really think people need to realise that for mass adoption we need things that aren’t roll ur own. We need things with reliable development, we need things that are cross platform and don’t require a roll ur own backup/sync solution. They need to be integrated.

[Bree @DofConsequence]

@kdvncm @shadowlordwhite You can share the URL if you use this amazing URL shortener 😉https://t.co/Kq9PLSHkvq