@robrtcode A Claude agent reading 5-minute BTC data is not competing with HFT. HFT works on microseconds to milliseconds, co-located servers, direct exchange feeds, FPGA/C++ stacks, and tiny latency edges. A language-model agent plus simulations is many orders of magnitude slower
@PJ_Marcum Whilst I agree that the SOE should be built as intended and application control is great, this contrast of 7zip to Notepad++ isn’t the same.. The legitimate Notepad++ was compromised vs a fake 7zip site.
My thoughts are yes, red teaming has got significantly harder over the last few years. The knock on effect is:
1) engagements need more time,
2) teams who don't invest heavily in R&D (either in-house or outsourced) will be left behind,
3) there's less things shared publicly as a consequence,
4) lots of teams have tried to compensate by assuming breach, which as a result has led to less innovation in the IA space
However, I disagree that IA is anywhere near dead even targeting the top 1%. The vast majority of our engagements have a large IA component and we're still successful in >75% of cases. Yes the points mentioned are a pita - AWL is a great control, but there's equally a plethora of file formats that support scripting; get creative - Yes MOTW restricts some things - but there's a variety of ways around it if you're creative (and I'm not talking about ISOs 🙄)
@FellowComrade@wtfinawtfworld One could suggest grapheneOS, keepass, DoT, IOT vlans blocking outbound to the net, always on VPN’s that have stood up to legal challenges, privacy coins via international exchanges but folks might struggle with this.. but they can do some of what’s in the video..
@BAcornley63206@FellowComrade@wtfinawtfworld You could consider brave search etc but it’s likely you’ll realise just how easy google makes things. I try to use brave and only revert to Google search as required.
As part of the ongoing VPN/Tor alone can't save you theme. There are many ways to burn your identity from sophisticated endpoint leaks to simple blunders that you hadn't considered.