Paulina

Security Engineer | Political nerd | Privacy advocate.

[DEF CON @defcon]

Update on the evacuation of Caesars Forums:

We apologize for the interruption of festivities. The venue was evacuated in compliance with the property safety teams. We will share more as we know more.

In the meantime, consider checking out the #defcon events at the other con properties. Thank you for looking out for each other.

[Allyn Crowe @allyncrowe]

Best sticker on the swap table. Glad to finally get one! 😂

[x0rz @x0rz]

Foreign diplomats on hostile ground should understand that any device connecting directly through any local ISP should be considered as compromised. 0days are cheap these days…

[Azeria @Fox0x01]

I did it! 🙌

What an amazing crowd! Thank you so much to everyone who showed up to watch my keynote. The room was packed!

If you want to chat or say hi and can’t find me, visit me at my book signings tomorrow and Saturday. :)

[Kelly Vaughn @kvlly]

don't get involved
don't get involved
don't get involved
don't get invo-

*cracks knuckles* "WELL ACTUALLY"

[Emmy | Pixi 🧚🏻‍♀️ @TheCodePixi]

Is It Burnout or Am I Just Stupid!?: A Software Engineering Mystery

[PortSwigger Research @PortSwiggerRes]

HTTP/3 connection contamination: an upcoming threat - by @albinowax

https://t.co/q3XEr8C64e

[SwiftOnSecurity @SwiftOnSecurity]

This shit is fucking impossible for anybody to pull off correctly

[SwiftOnSecurity @SwiftOnSecurity]

Oh my god

[Jake Williams @MalwareJake]

Don't try to boil the ocean when it comes to cybersecurity. Nothing will ever get 100% implementation, you'll be missing coverage even if it does, and there's always work left to do.

Just ask: did I move the ball forward today? Every little bit helps.

[MG @_MG_]

You can call me: OMG Man 🦹‍♂️

This was the least gross instance so far in the public support channel. But the amount of people who want to use invasive technology in place of therapy is just sad.

It’s less than 1% of support asks, but still sad.

[Jason Kint @jason_kint]

A Facebook senior privacy exec suggesting consent is impossible for the company should be incredibly important discovery considering @Kartellamt determination it shouldn’t be able to share data across apps (under appeal), loss of contract legal basis for it under GDPR, etc.

[MG @_MG_]

… that was fast.

Crazy idea: protect these kids. Let them do their thing. If your stuff is this poorly secured, then the employees all get a free holiday and some fun.

It’s way better than what happens when nation states and organized crime use the same access.

[MG @_MG_]

Here are the CO2 readings I have from the defcon vendor area. It pretty closely matches the crowd density of each day.

Way better than I was expecting, they had great airflow. But still enough to gather some fun side channel analytics 😎

[CRN @CRN]

Major Cybersecurity Companies Create New Open-Source Consortium to Share Key Data: https://t.co/r1NMgwjjLl

Unveiled at #BHUSA, the companies involved include @splunk, @awscloud, @Cloudflare, @CrowdStrike, @PaloAltoNtwks, @okta, @TrendMicro, @Tanium and @zscaler, among others.

[Lesley Carhart @hacks4pancakes]

I am shocked. Who could have possibly predicted this?

[Kurt Opsahl @kurtopsahl.bsky.social @kurtopsahl]

If all this is on your child’s computer, I’m extremely impressed with your child’s commitment to privacy and security online. Kid’s gonna go far.