Shaw Consulting

IT Consulting and Security | If we can't do it, we know someone who can.

[Shaw Consulting @shawconsulting]

@HackingDave

[Shaw Consulting @shawconsulting]

@HackingDave I didn't expect to get this one. Derbycon was just too much fun!

[Jeremiah Grossman @jeremiahg]

The $124B a year spent on InfoSec is the interest only premium on ~30 years of accumlated IT technical debt.

[Jason Fossen @JasonFossen]

New Azure Active Directory password brute-forcing flaw has no fix and the attacks are not logged:

https://t.co/bzolVEK09f

#SEC505 #Azure #AzureAD #InfoSec #CyberSecurity #BlueTeam #DFIR #PenTest #Microsoft365

[Shaw Consulting @shawconsulting]

@0xAmit Luckily, the road pirates took pity and chose not to extort money from you. No victim, no crime.

[Glenn Greenwald @ggreenwald]

The real criminals are not Assange but those whom he exposed, and it is exactly those criminals who are now attempting to ensure that he stays in prison until he breaks completely and permanently -- all as punishment for one thing: reporting on their crimes and lies.

[Jake Williams @MalwareJake]

IT Architect: for a user in the unprivileged area to get to the privileged area without getting soaking wet (setting off alarms), they'd have to traverse to the nearest bridge where we can implement an access control check.
Hacker: hold my beer...

[Shaw Consulting @shawconsulting]

@WAX_io You can send some to yzdau.wam!

[Shaw Consulting @shawconsulting]

@jeremycyoung @threadreaderapp unroll

[Josh McGruff @JoshMcGruff]

Serious question.

If something bad happened to you and you died, does your spouse, family, whoever you'd want, know how to access your crypto accounts?

Do they know where your 2FA is if needed?

Or is that all going to be lost along with you?

[@[email protected] @Nick_Craver]

I wonder how many sysadmins are finding out what their concurrent VPN license limit is these days.

[Shaw Consulting @shawconsulting]

@svblxyz @threadreaderapp unroll

[Shaw Consulting @shawconsulting]

@HackingDave

[Shaw Consulting @shawconsulting]

@ClaireMKopsky @CynDemo @MayorGorton Hopefully no one infected with the virus was delivering them...

[Shaw Consulting @shawconsulting]

@NAChristakis @threadreaderapp unroll

[Shaw Consulting @shawconsulting]

@quadling @nostarch Thanks for the recommendations. I will definitely check them out!

[Shaw Consulting @shawconsulting]

Looking for recommendations for an 8 year old that wants to learn to code. What apps, videos, etc do you recommend? #infosec

[Dave Kennedy @HackingDave]

Today we released an initiative called #DerbyCon communities.

Local DerbyCon chapters where individuals run them based on three principles:

1. Community and Inclusiveness
2. Knowledge Sharing
3. Charity

More to come on this soon, but this is a call to action to help others.

[Shaw Consulting @shawconsulting]

@curi0usJack Thanks for sharing your tradecraft. Great talk!

[Shaw Consulting @shawconsulting]

Mission complete. Thanks to all of the #DerbyCon staff for all of their blood, sweat and tears putting on epic cons over the years! Looking forward to see what the future holds. #DerbyCon