patrick orzechowski

cybersecurity dinosaur 🦖

[Merill Fernando @merill]

Hey folks, some personal news.

I’m leaving Microsoft.

It’s been a privilege to work here, and I’m incredibly grateful for the people I’ve worked with, the customers I’ve learned from, and the support so many of you have shown me along the way.

I’m now starting out on my own and chasing a dream I’ve had for a long time: building software that makes security more practical, accessible, and useful for the people doing the work every day.

Why now?
With all the change happening around us, I feel like new possibilities are opening up. I want to spend this next chapter building things I care deeply about, solving problems that matter, and doing work that brings me joy.

I’m excited. Nervous. Grateful.

My newsletters, podcast, Maester and other tools will all be part of this next chapter, and I’ll share more in the coming weeks.

Thank you for being part of the journey so far. I’m looking forward to building this next chapter with your support.

[patrick orzechowski @shftleft]

@HackingDave @_JohnHammond Pineapple and jalapeno ftw

[patrick orzechowski @shftleft]

TCP/10000 https://t.co/urxIMj7a4d

[patrick orzechowski @shftleft]

@JitneyGuy You get old enough birds start to be a thing

[patrick orzechowski @shftleft]

Oh yeah?

[Corey James @RedBeard1025]

@JackFritzWIP Embiid gonna disappear in the 4th like he always does for some reason. And it’s a shame cuz the first 3 quarters he owned the game

[patrick orzechowski @shftleft]

Oh yeah?

[Corey James @RedBeard1025]

@JackFritzWIP Embiid gonna disappear in the 4th like he always does for some reason. And it’s a shame cuz the first 3 quarters he owned the game

[patrick orzechowski @shftleft]

👀

[Andrew Morris (afk) @Andrew___Morris]

Howdy folks! Taking a break from my twitter break to let yall know that we released a new @GreyNoiseIO product yesterday. It's called Project Swarm. We've been quietly not-so-quietly working on it for a few years. You can buy it now. It costs $1.

There are lots of vulnerabilities on edge-facing apps. To catch in-the-wild exploitation of them, we @ GreyNoise run sensors on the internet. New AI models means more vulnerabilities being identified and exploited, and FASTER. Long term, software and hardware will probably get better, but in the meantime we're gonna have to deal with A LOT of vulnerabilities.

At GreyNoise, the sensors we run are basically honeypots- we bait attackers to scan and exploit them which enables us to learn where the attackers are, which vulnerabilities they are exploiting, what it drops, and what it looks like on the wire. From ~2020-now it took us years to build up our fleet. Now anyone can use our new product to deploy their own sensors on their own networks, or an entire fleet of any size, in a day. You can rip back the data and do whatever you want with it. You can resell it, put it into your product, or just stare at it- whatever you want! On our side, we aggregate the data and pour it into a community dataset that everyone shares. As more people join, the data gets bigger and better.

Couple neat features:

- Sensor deployment is a single bash command on any modern linux distro that supports iptables and wireguard.

- Sensors and vulnerable software (profiles) are abstracted into different logical concepts, which means the "what" and "where" are different things, and the sensor is not constrained by the compute required to run the vulnerable software. Also, no matter how hacked the profile (honeypot) gets, it can't touch your host sensor or the rest of your network.

- Sensors can run fake honeypots, real software, or even real hardware (bridged with a raspberry pi) like old crappy routers and modems (or expensive firewalls and VPN gateways 👀)

- You can create dynamic blocklists that block IPs sourced from your own sensors in real time, so if a remote IP address *looks at your network* the wrong way, you block them instantly.

- All the PCAP data is available to you in a gorgeous and intuitive interface at near real time and fully enriched against all of our (thousands of) rules. We're working on the host metadata (malware, syscalls, host behaviors) as well, but this will come later.

- If we don't tag a CVE that's interesting to you, you can write a Suricata rule to tag it yourself once and your data gets tagged with it in real time forever.

- You can instantly download PCAPs of any exploits that hit your sensors.

- If you don't want your data shared with the community dataset, you can talk to our team and we'll work out rights to make it private.

Check it out! There's a lot of moving pieces to make this work and we expect bugs, but it's available right now. Join the fight!

https://t.co/erAWtX1l7B

[Eliot Shorr-Parks @EliotShorrParks]

Can’t wait to track Lemon training camp stats

#📝

[patrick orzechowski @shftleft]

@RapSheet 😂

[[email protected] & bsky @SciaticNerd]

@BSidesSATX is on the lookout for additional sponsors. Would greatly appreciate you reaching out through https://t.co/kMD9TM4m8L

[patrick orzechowski @shftleft]

@HackingDave This can’t be real?! 🤣 🤣

[NFL Memes @NFLMemes]

All this just to come out and kick 2 field goals 😭

[patrick orzechowski @shftleft]

@HackingLZ 🤣

[patrick orzechowski @shftleft]

@HackingDave There’s no bass in One, on purpose. 😉

[patrick orzechowski @shftleft]

@HackingDave Are you sure this isn’t a video game update?

[patrick orzechowski @shftleft]

@HackingDave #nopantsdave

[Florian Roth ⚡️ @cyb3rops]

Peak OffSec engineering

[patrick orzechowski @shftleft]

@troyhunt @haveibeenpwned Love this

[patrick orzechowski @shftleft]

#randomshit - this is one of the great blues guitar riffs of all time every time I listen to it gives me all kinds of feels #bluestraveler

[patrick orzechowski @shftleft]

@mubix This. I wish there were an alternative besides LinkedIn, which is too far on the marketing side.