spencer

🛠️ Former Sysadmin, now Pentester | Microsoft MVP | Helping IT teams make their environment harder to attack | @SecurIT360 & @CyberThreatPOV

[spencer @techspence]

Active Directory has survived basically every technology trend that was supposed to make it irrelevant, until now? https://t.co/ZY68UkI7oq

[spencer @techspence]

@MikeTalonNYC 😂

[spencer @techspence]

I got some grounds in my coffee this morning and that reminded me of something.

You can’t have to good without the bad. There is no light without the dark.

[spencer @techspence]

@DylanOwendylan @cheddar420yolo Gottem ;)

[spencer @techspence]

The cybersecurity industry has a serious problem with over complicating literally everything.

[spencer @techspence]

@shes_helen_troy Truth

[spencer @techspence]

@PRaSeN_S Actually a great point. Lack of ownership is killing it/security teams

[spencer @techspence]

Time and time again these data breaches and security incidents come down to exploitation of the difficult but “basic” things no one wants to do.

[spencer @techspence]

@pd_theghost How old are they?

[spencer @techspence]

It’s a good thing we’ve spent all this time finding more bugs instead of finding better ways to patch and protect

[Jason D. Clinton 🔸 @JasonDClinton]

as bad as things have gotten in the past 4 days, they are going to get a lot worse before they get better. security leaders, never let a crisis go to waste: please go to your boards and ask for help right now. not for ai, for the basics. (we need to hold on for ~18 months.)

[spencer @techspence]

@AdamGell Niiiice

[spencer @techspence]

@BadMoogle Definitely a balance and for sure it’s almost an unavoidable problem

[Merill Fernando @merill]

There are much better ways to build your apps than using secrets and API keys and sticking them in .env

All major clouds support them, even your GitHub actions can connect to AWS, Azure etc without any keys or secrets

Here's a comparison 👇

[spencer @techspence]

@Triode_in_situ That’s unfortunate

[spencer @techspence]

What’s the point of life if you can’t prank your teammates by replacing their desktop wallpaper with a Baywatch-era picture of David Hasselhoff?

[spencer @techspence]

@plankers Same dude

[spencer @techspence]

@shotgunner101 Actually so funny to watch someone try to figure it out

[spencer @techspence]

@MikeTalonNYC Glass half full :)

[spencer @techspence]

@PhillipWylie Good times :)

[spencer @techspence]

@MikeTalonNYC lol yeah same. It was an unwritten policy

[spencer @techspence]

@m0bilej0n @planedrop @merill @PyroTek3 I could use the back Sean :)

[spencer @techspence]

Do you have an AD domain and have PHP running anywhere in your environment that has "line of sight" to you domain?

[spencer @techspence]

@salestaxrules Dang that’s good hah

[spencer @techspence]

@jamesglenos Some things legitimately, others manufactured

[spencer @techspence]

@JohnConnor65555

[spencer @techspence]

@roguebogey 💀😂