Andy Smith

🤓 Cyber security nerd
👨🏽‍🏫 #SEC530 instructor
📺 Part-time #infosec video creator
🔥 Full-time victim of #BuildingSafetyCrisis
Ⓜ

[Andy Smith @rot169]

Just discovered the @quantum_village have an entire extra track of awesome talks on the middle floor at #BSidesLDN2024 - well worth checking out! Details at: https://t.co/MltCXPJCeP

[Quantum Village @quantum_village]

Are you coming to @BSidesLondon tomorrow? Then have we got the stellar quantum lineup for you! ⚛️🚀 We are VERY proud to release, just in time, our schedule for the very first Quantum Village @ BSides London!!

[Andy Smith @rot169]

Thank you @BSidesLondon for the warm welcome! Looking forward to presenting on #postquantumcrypto - come swing by Track 3 at 13.50 to listen in! 🤓 #BSidesLDN2024

[BSides London @BSidesLondon]

Want to go to #BSidesLDN2024?

There are tickets available on our Eventbrite page, schedule and other information on our website https://t.co/afd64QOxCy

[NCSC UK @NCSC]

Today we’ve published our 2024 Annual Review – our roundup of this past year’s cyber security threats and trends, and a look to the road ahead.

Check out the highlights 🧵or read the full report 👇
https://t.co/vFWUMaW2hd

[Andy Smith @rot169]

It has begun!!!! 😀

[Chris Elgee @chriselgee]

The 2024 SANS #HolidayHack Challenge has launched!
The first few players are in!
Please come and join to play the prologue when you have some time for whimsy
https://t.co/ZVnHYcacm0

[Andy Smith @rot169]

⚠️ PSA ⚠️ The Holiday Hack kicks off early this year, from Nov 7th, with challenges released over 4 weeks. This is gonna be a good one!! 😃

[KringleCon @KringleCon]

New features await in the #HolidayHack Challenge 2024! ✨

Whether you're a first-time player or a seasoned participant, you’ll find exciting elements in this year’s game that you won’t want to miss!

🎮 Learn all about it here: https://t.co/yOj7falO7z

#Cybersecurity

[Andy Smith @rot169]

@0xTib3rius If you: a) use IPv6, b) with a global prefix, c) routed (not NATed), d) use SLAAC (not DHCP) and e) haven't enabled privacy extensions: then internal MACs are exposed to internet hosts, as SLAAC uses the MAC to create the IPv6 interface id. But no, this is not a common config :)

[Andy Smith @rot169]

And by huge coincidence, @NIST have just announced the final standardisation of the first 3 quantum-resistant algorithms. The starting gun has fired! https://t.co/U87xLcHJ0t

[SANS Institute @SANSInstitute]

Is your org prepared for a smooth transition into post-quantum security?

@rot169, SANS Certified Instructor, highlights the need to act now. "Position your company to facilitate smooth transitions into the post-quantum security world"

🔗 Read more → https://t.co/t4d3Q0283N

[Andy Smith @rot169]

@MichlSchmid DM'd you :)

[Andy Smith @rot169]

A new (to me) variant on @amazon's intentionally-deceptive @darkpatterns during the checkout process... Don't want prime? Click the option that suggests you need to pay £5.99 extra.

"Customer obsession" --> "obsessed with exploiting our most vulnerable customers" 🤮

[Andy Smith @rot169]

@luhc "Significantly lower"?!?

Buildings-only insurance for my 2-bed flat in 2024 = £1,951/yr (up 7% on 2023).
Buildings + contents for a 4-bed double the value = £361/yr.

This insurance market is fundamentally broken. "Pledges" are not enough. Serious intervention is required.

[KringleCon @KringleCon]

🚦The 2023 SANS #HolidayHack Challenge is NOW open to play, and it's more festive than ever!

This year, we're whisking you away to the 🏝️ Geese Islands, where 🎅 Santa needs your help to protect the holidays from cyber villains.

Sign up to play now: https://t.co/ZqVeme8xJO

[Andy Smith @rot169]

@luhc The BSA grants greater protection to building owners (who have a $2m/building financial test applied to them) whereas #leaseholders are expected to stump up £15k regardless of ability to pay. That's a strange definition of what's "fair".

[Andy Smith @rot169]

@RachelTobac Yikes, looks like this is oozing with excessive agency. 😬 The @owasp @LLMTop10 is another great resource for LLM security: https://t.co/PjOU5v0j2j

[Nathan McNulty @NathanMcNulty]

Not even going to pretend I understand why developers do things like this vs making API or .NET calls... but it's hella hard for analysts to know is safe

Fun reminder @mttaggart has a project to track these, would be nice if vendors tried to stay off it

https://t.co/u8PaGkGPxu

[Florian Roth ⚡️ @cyb3rops]

!CVE … what a nice idea
https://t.co/XIKXM0WrC8

[KringleCon @KringleCon]

These aren’t your ordinary geese …

This year, ready your #Cybersecurity skills and head to the Geese Islands for SANS #HolidayHack Challenge & KringleCon VI: Geese a-Lei'ing! 🌺

Subscribe to be notified when the game opens for play:

🎅 https://t.co/ZqVeme8xJO

[KringleCon @KringleCon]

🎅 It always pays to have Santa in your corner. Subscribe to be notified when Holiday Hack Challenge 2023 opens for play and your odds of making the “Nice List” are sure to skyrocket.

🚀 https://t.co/ZqVeme8xJO

#HolidayHack #Cybersecurity

[Andy Smith @rot169]

@Kwajotweneboa @LQHomesMatter are totally incompetent at any kind of service or contractor management. I'm honestly astounded at how shit they are. Thankfully I only have to deal with them on caretaking matters - it must be unbearable to have to rely on them for essentials like heating. 😥