Xander Sherry

Consultant specializing in AppSec and AppDev. I work for Microsoft, but speak only for myself.

[Jeff Jackson @JeffJacksonNC]

This morning there was a political earthquake in North Carolina.

A legislator in the state House announced she was switching parties from Democrat to Republican.

I want to make sure you understand how dramatic the impact of this one switch will be.

[thread]

[Xander Sherry @xandersherry]

@SethOnOps @blowdart @sinclairinat0r I would try that. And honestly, it seems pretty southern to me. I'm still trying to convince my wife that we should make southern pear salad and see if it's good.

[Xander Sherry @xandersherry]

@blowdart @SwiftOnSecurity Yeah, that's excellent.

[Xander Sherry @xandersherry]

@blowdart @SwiftOnSecurity I have it too, and mine varies wildly, primarily based on whether the HVAC is running or not, and how long it has/hasn't been running. My presence makes a big difference in the score at my desk. Anywhere between 600-somehting-ish and 1500-something-ish depending.

[Xander Sherry @xandersherry]

@threddyrex Also, I think you probably are opposed because you just don't have the proper motivation. I believe this shirt can help. https://t.co/Ym65oZdO58

[Xander Sherry @xandersherry]

@threddyrex Same. Except not the Puget Sound. Maybe my HOA's retention pond. That's probably as close as I'm gonna get.

[Xander Sherry @xandersherry]

@packscott Who doesn't want some nice hot fish?

[Xander Sherry @xandersherry]

@robertgraham That's what Chris Sacca thinks. https://t.co/FLAFNCK8GC

[𝙴𝚛𝚒𝚌 𝙺𝚛𝚊𝚝𝚣𝚎𝚛 @bluewhackadoo]

I wanted to help the poor souls looking for help with their bluescreens so I wrote a powershell oneliner that pulls the failure name or "bucket" from your event log.

Why would anyone want this you ask?

[Xander Sherry @xandersherry]

@csharpfritz @nbevans This may be a scenario you're already plenty familiar with, but if you want more on the specifics I'm dealing with, feel free to ping me on Teams or e-mail.

[Xander Sherry @xandersherry]

@csharpfritz @nbevans Since .NET Framework is tied to OSes, it's 10 years. Java SE LTS versions are 8 years. I have customers deploying systems on WS2019 now that will be in the field until Windows EoS in '29. It's nice that Framework will still be getting sec updates. It's not ideal that NET6 won't.

[Xander Sherry @xandersherry]

@CarmenCrincoli The key is the annualized rate of occurrence. For the average person, the word "moist" might reasonably be experienced in conversation 4.5 times a day. "Unctuous" on the other hand, once every 3 decades. Unless you socialize with university faculty, in which case, my condolences.

[Xander Sherry @xandersherry]

@sherrod_im Actual regular paycheck? 17. I was a delivery driver and bindery working for a small printing company. I think I made $6/hr.

[Xander Sherry @xandersherry]

@yortw @TheRealProcyon @sbisson @micheinnz @diddykang @NoTheOtherNick @UmbrellixNet @oclsc @compuguy @907tothe703 @6502_ftw @zarchasmpgmr @TyreJim @CatBailey @DrCuriosity @sundhaug92 @callum90ish @havochaos @q_aurelius @bertjwregeer @ComradeEevee @sylv3on_ @funranium @theDawgCr8 @MelanieLybarger @brouhaha @staatsgeheim @dvdfreitag @nealeferguson @bynkii @kmwilcox_ @SynStalker @pvineetha @frozenpypes @TwitringMachine @krisis86 @RightToaster @johnlimouze @n1vux @mdhardeman @noghiri @drahcir_rahl @MarkSzili @weems @hashbreaker I guess we'll find out if threads have gravity if, on one day in the future, someone revives TZ one last time and the rest of Twitter collapses in on it.

[BSides Charlotte @BsidesCLT]

Did you know? #BSides Charlotte #CyberSecurity #conference is back in person this year! Thanks to amazing sponsors helping offset cost for the expanded conference, shirts, the after party and even LUNCH! RT for reach is super appreciated!

Tickets here: https://t.co/k6vrK5zEm3

[Xander Sherry @xandersherry]

@shortxstack This is also why my children are stocked with Up&Up brand pencils instead of Ticonderoga, and whatever brand of disposable wipes happen to be stocked in the school supply aisle instead of 7th Generation. The level of specificity schools feel compelled to dictate is silly.

[BSides Charlotte @BsidesCLT]

It's that day! Call for All The Things is now live! Talks, Workshops, Villages, and Games (yes, even games!). We have an amazing venue lined up at 1 Bank of America Center. Show us what ya got!

Details and links to forms here: https://t.co/GKGfnuH5Yj

#cfp #CyberSecurity #cyber

[Xander Sherry @xandersherry]

@simondotsh @SteveSyfuhs may be able to shed some light on the issue.