The Toolcrypt Group

Now with even more nasty, sharp, pointy teeth! We do not have a website currently. the crypt of tools long forgotten. @[email protected]

[Halvar Flake @halvarflake]

There's few people that are more OG than @mdowd.

[The Toolcrypt Group @toolcrypt]

R.I.P https://t.co/zSzancdJ67

[The Toolcrypt Group @toolcrypt]

never goes out of style.

[The Toolcrypt Group @toolcrypt]

"Reinforcing the TCB (2005)"

[Garrett Nolan @garrettnolan]

@CharlesCMann Yet the Wi-Fi in my house randomly cuts out at times and nobody has any clue why it happens or how to fix it.

[Alisa Esage Шевченко @alisaesage]

"1. The constant evolution of cyber threats: The nature of cyber threats is constantly changing, forcing cybersecurity professionals to continually update their knowledge and skills."

Solution: Master the core, deduce high-level details on-demand.

Evolution isn't uniform. Cores of systems hardly change over decades - think allocators in software, binary logic in computers, and energy/fuel manufacturing in business. They're almost timeless in their fields. So, how fast a field changes is relative to one's view point. Change your perspective, take action, problem solved.

Also, distinguish between "core" and "foundation". The former is a deep structure that governs most of the field. The latter means shallow concepts that are a "must know" for beginners.

Example: Seasoned cybersecurity experts find no novelty in recent cyber threats. There is literally no information in those "news" when you understand the industry deep enough. It's predictable, trivial, and largely irrelevant. No anxiety or hustle.

[Rock @TheCensoredRock]

how the internet works

[Christophe Tafani-Dereeper @christophetd]

I've decided to stop using black hoodie hacker pictures to represent an attacker , and exclusively use geese instead - so far I'm satisfied with that decision

[dragosr @dragosr]

CanSecWest: Synthetic Memory Protections - Beyond R, W, and X - Theo DeRaadt https://t.co/mLMYgmS9D9

[thaddeus e. grugq @thegrugq]

Where do you think all the cybersecurity that is taught in universities came from? It was developed by people who, obviously, could not have learned it there. And the vast majority of us are still around.

[Rege @Prof_Rege]

@alonkol This just broke my heart... This is
@TU_CARE's dataset. All of it...

https://t.co/rczpmorYz0

Please acknowledge us for the work that we do...

[FX of Phenoelit @41414141]

"Malicious QR Codes Pushing Malware" (http://t.co/o6HMwuiP) Time for me to say: "I told you so in 2007" (http://t.co/AiRz3PvE) Nobody cared.

[Hexadecim8 @hexadecim8]

Btw, In all my years of doing security I never heard of the “hire a witch to curse your dox post-leak” but this may be a lucrative future for me if the trend catches on.

[Stefan Esser @i0n1c]

As usual Apple is quoted saying that it costs millions of dollars to develop iOS attacks. I feel like Ivan Kristic doesn’t understand the concept of cost to develop, sales prices and profit margin. 🤷🏻‍♂️

[The Toolcrypt Group @toolcrypt]

"Reinforcing the TCB (2005)"

[The Toolcrypt Group @toolcrypt]

@tomituominen History repeats itself. Functionality cannot be patched.

[The Toolcrypt Group @toolcrypt]

@Kym_Possible True, true,

[Charlie Miller @0xcharlie]

This is lame. In Pwn2Own, if you hack a fully patched system, you win. I don't care if the vendor knew about the vuln. If they knew about it, they should have patched it. This is a win, plain and simple.

[Programming Wisdom @CodeWisdom]

"If it wasn't for C, we'd be writing programs in BASI, PASAL, and OBOL." – Unknown

[David Litchfield @dlitchfield]

So, “shift left security” is just SDL rebranded for millennials right? 🤔🤣 #getoffmylawn

[Halvar Flake @halvarflake]

I read "This Is How They Tell Me the World Ends" by @nicoleperlroth and wrote a (long) book review.

https://t.co/cn7IoM9Bcm