Zak Jones

Just this guy y'know. Opinions are my own.

[Ross Anderson @rossjanderson]

The videos of my first-year undergraduate course on Software and Security Engineering are now online. I've made them available to everyone rather than restricting them to Cambridge students: https://t.co/xdprl5O5yg

[thaddeus e. grugq @thegrugq]

Zoom - has bugs like all other software.
Zoom - fixing bugs and being responsible.
Zoom - software I easily taught my dad to use for remote classes over email and WhatsApp.
Zoom - not rated for sensitive data: natsec, confidential sources, etc.
Zoom - use it, it’s fine.

[Azeria @Fox0x01]

Social Distancing Survival Guide

Learn...

Reverse Engineering:
https://t.co/NwuFiHYrlt

Reverse Engineering Malware:
https://t.co/GyjIgW7KdX
https://t.co/l8Jaatt7ci

Web Hacking:
https://t.co/urA67IQb6V
https://t.co/syRRoXzmvU

Exploit Development:
https://t.co/oqTIWdahY4

[Ross Anderson @rossjanderson]

Here's my new Security Engineering book chapter on Signal, Tor, enclaves and blockchains. Likely to be controversial! https://t.co/PSnvpt1ivv

[Edward Snowden @Snowden]

Dangerous by design: How the CIA and German BND conspired to sabotage the communications of allies and adversaries alike. https://t.co/MLZRFFXhYg

[SwiftOnSecurity @SwiftOnSecurity]

SharePoint Admin in Office365 is a God account practically equivalent to Global Admin in a breach scenario.

SharePoint is the fulcrum of many services in Office365, including OneDrive. It’s a more powerful Microsoft Teams admin than the actual Teams admin.

Don’t give it to Ted.

[SwiftOnSecurity @SwiftOnSecurity]

Microsoft Teams is SharePoint.

You’re using SharePoint.

[Ross Anderson @rossjanderson]

Out today, my Security Engineering book chapter 12 tells the story of the last decade's frauds against card payments and online banking, and how the defences have adapted: https://t.co/PSnvpt1ivv

[Phil Venables @philvenables]

Dealing with the Deluge of Vendors. A thread.

[full post here : https://t.co/Pg3S4p2JNS]

Everyone is deluged by product and service vendors, small and large. Even vendors struggle to keep track of who are their competitors in an ever crowded market place.

1/24

[Arrigo Triulzi @cynicalsecurity]

PoC||GTFO 0x20, “This janky old piano has a few more tunes! And so do you! And so do I!” is out!

Ready to warm you up during these Winter months come and collect it at the EU mirror (SSL, #IPV6, #OpenBSD):

https://t.co/qD2iVPJ0x6

[Jake Williams @MalwareJake]

Defense in depth...

[Amitai Rottem @AmitaiTechie]

Windows Defender Antivirus detects files w/crafted certificates exploiting the certificate validation vulnerability:
​Exploit:Win32/CVE-2020-0601.A (PE files)
Exploit:Win32/CVE-2020-0601.B (Scripts)
Also, #Microsoft Defender ATP has a threat report on your posture. #CVE-2020-0601

[/r/netsec @_r_netsec]

An attacker logged into the RDP Honeypot a few weeks ago and was able to dump credentials and move laterally in 36 minutes. They used Advanced Scanner + ProcDump + PsExec to move laterally to a Domain Controller. Would you have detected and responded... https://t.co/32eEUyvuzt

[Evgeny Belenky @BelevgEvgeny]

We're trying to get every single #Infosec #cheatsheet into this list. See any that are missing? Please suggest! https://t.co/bPuma5Vvv2

[ΜΔDΞRΔS @hackermaderas]

Resources for 2020 1/2:

Detect hidden bugs/cameras

https://t.co/IxgME9y6qE

https://t.co/BzJZ4yokVJ

Comparing/Choosing VPN
https://t.co/smKfZPwGio

https://t.co/e4b1Bezsqp

Algo VPN

https://t.co/rvqb2n4HQe

Tails or Whonix USB

https://t.co/GI2mZdjSHV

https://t.co/NERJ4Qi5QO

[Bloomberg Originals @bbgoriginals]

These Buddhist nuns:
- Teach young girls self-defense
- Reached victims of the Nepal 2015 earthquake when others couldn't
- Are solar panel technicians to promote green energy

And it all started with kung fu