Thomas Dang

Recovering politician. Manager, Information Security for Yukon Gov. Once introduced as 'the hackerman.' DEF CON 31 Speaker. He/him.

[Thomas Dang @ThomasDangAB]

Follow me on mastodon, instagram, tiktok, and Facebook:

https://t.co/tciQ7qITHR
https://t.co/Zu509OPe33
https://t.co/zY1nYfs2RL
https://t.co/UFRfrQiorj

#ableg #yeg

[Thomas Dang @ThomasDangAB]

Today I found out running a Canadian Government Cyber Security program at the Provincial/Territorial level is called being a black hat script kiddie.

[Alberta Radio! @albertaradios]

@skipmiller87 Lol ok if u think so. Thomas is a black hat still hacking right now ... he's a script kiddy at best 👌

[Thomas Dang @ThomasDangAB]

This shirt is heavily inspired by @k8em0

[Thomas Dang @ThomasDangAB]

👁️👄👁️

[Jason Kenney 🇨🇦🇺🇦🇮🇱 @jkenney]

I understand that my personal information, including my home address, was shared publicly on a screen at a recent Alberta separatist event. It was also recorded on video, and is now circulating.

This was apparently part of the outrageous data leak of Albertans’ private information, wherein Elections Alberta shared its entire detailed provincial voter database with the “Republican Party of Alberta,” which in turn shared it with some separatist group called the “Centurion Project,” whose leadership then shared my personal information publicly.

Over the past few years I have received no shortage of threats from people broadly associated with the separatist / antivax / far right movement in Alberta. So it is disturbing that my personal information is now broadly available, particularly in those circles.

While I have been targeted specifically, the broader data breach may also effect vulnerable Albertans, including victims of domestic violence, journalists, activists, judges, and other public servants for years to come.

I will retain legal counsel to seek advice on recourse regarding this outrageous and potentially dangerous violation of my personal privacy.

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Thomas Dang @ThomasDangAB]

Not because X, but because of Y.

https://t.co/G24gc2YuTG

#ableg

[Ms. Lutzmann @MsLutzmann]

If I was Thomas Dang I'd be pretty pissed off right now. #abpoli #ableg

Source: https://t.co/T5m2R5Qtx6

[Thomas Dang @ThomasDangAB]

Hey @ABDanielleSmith 👀

https://t.co/7G0o5YxuTG

Remember when we talked about this on your show a few years back?

#ableg #yeg #DaylightSavingTime #DST

[Thomas Dang @ThomasDangAB]

Geneviève Bergeron, Hélène Colgan, Nathalie Croteau, Barbara Daigneault, Anne-Marie Edward, Maud Haviernick, Maryse Laganière, Maryse Leclair, Anne-Marie Lemay, Sonia Pelletier, Michèle Richard, Annie St-Arneault, Annie Turcotte, and Barbara Klucznik-Widajewicz.

Never forget.

[Thomas Dang @ThomasDangAB]

@accomplisheddog @TheBreakdownAB New phone who dis

[Thomas Dang @ThomasDangAB]

@EmmaLGraney 🍕🍍

[Thomas Dang @ThomasDangAB]

🇨🇦 #cdnpoli

[Justin Elze @HackingLZ]

And everyone in InfoSec is busy debating accidentally hiring people from North Korea

https://t.co/xYZyVhzHrb

[BleepingComputer @BleepinComputer]

Microsoft has officially announced that Windows Server Update Services (WSUS) is now deprecated, but plans to maintain current functionality and continue publishing updates through the channel.
https://t.co/Kgc9tX44yy

[Thomas Dang @ThomasDangAB]

Looks like @idalsin got some cool stickers for #defcon this year.

#defcon32 #yegsec

[Michael Bargury @mbrg0]

we got an ~RCE on M365 Copilot by sending an email

by ~RCE I mean full remote control over
its actions - search for sensitive content (sharepoint, email, calendar, teams), execute plugins
and outputs - bypass DLP controls, manipulate references, social engineer its users on our behalf
#BHUSA #DEFCON @tamirishaysh

[Tourism Jasper @TourismJasper]

(1/3) Maybe the right words will come eventually. Maybe once the dust settles, and the rain falls, and we have an accurate assessment of the damage, maybe then we’ll be able to fully express our sadness about Jasper’s recent tragedy and our gratitude to the heroes who’ve been

[Thomas Dang @ThomasDangAB]

As someone who spent many summers as a kid - and as an adult explored much of the back country, there are no words to describe this.

My heart goes out to everyone impacted. Thank you to the first responders that still work tirelessly to save as much as they can.

#MyJasper

[Thomas Dang @ThomasDangAB]

Thinking of all the Security Teams and sysadmins desperately trying to bulk deploy a fix that is inherently manual...

[Troy Hunt @troyhunt]

Not just everywhere, but every*one* (nearly). This is massive

[Thomas Dang @ThomasDangAB]

Hung out with old friends at the Rachel Notley Memorial Gala last night!

Reports of her death have been greatly exaggerated...

Thank you @RachelNotley for the amazing work you've done for our movement and our party. Alberta is better because of you.

#ableg #yyc #abndp #ndp

[Florian Roth ⚡️ @cyb3rops]

Repeat after me:

Patching an already compromised system won’t solve the problem

#PaloAlto