Pinned Tweet
I've shifted over primarily to Infosec Exchange on #Mastodon given the uncertainty around Twitter's future... I'll still be lurking here, but with ~90% of the folks I interact with having moved on, I probably won't be very active.
@[email protected]
infosec.exchange/@andrew
Hey @NordicTrack... Waiting 7-10 days for a replacement tablet on a brand new treadmill (that I've only been able to use once (on manual)) and is now dead after troubleshooting update failures with customer service is completely unacceptable.
Genuinely regret purchasing your product at this point. The 1 year @iFit subscription code that was shipped with the product is "no longer accepted," and now half or more of the 30-day trial that card gave me instead is going to be spent with an unusable machine.
I've always known @NordicTrack as a quality brand - my family had 2 different machines as I grew up that never failed. That's why I bought this machine - good reviews, good price... Boy do I regret that right now.
So... can we fix this @NordicTrack, or should I just return it.
Rather than addressing the community concerns by something other than doubling down on the plan to kill SMS support... Signal has added Snapchat-esque stories! -_-
Replying to @signalapp
@signalapp plans to drop SMS support for the Android app... This change is nothing but detrimental IMO. If you use Signal on Android as your default SMS app, PLEASE speak out against this change.
Welp, finally got around to setting up on Mastodon.
infosec.exchange/web/@andrew
VK was a legend in the information security and CTI communities, and will be sorely missed. My deepest condolences go out to his family, friends, and colleagues in this time of mourning.
Replying to @USCGSoutheast
Andrew Nowlin retweeted
🚨 Today, we are publishing our Cybersecurity Performance Goals which list high-priority cybersecurity outcomes and associated actions intended to help CI organizations voluntarily reduce risk from malicious cyber activity: cisa.gov/cpgs
Andrew Nowlin retweeted
🚦 TLP 2.0 is a week away!
Beginning Nov 1, @CISAgov will adopt @FIRSTdotOrg’s #TrafficLightProtocol Version 2.0 to further enhance the sharing of potentially sensitive information and effective collaboration. More at cisa.gov/tlp
#cybersecurity #InfoSec
Andrew Nowlin retweeted
Phew
The code and blogpost for getting Ring 0 using VBA Macro Office Doc is finally up! - disrel.com/posts/Ring0VBA-Ge…
Sorry for the delay, been dealing with life!
Andrew Nowlin retweeted
Because we all need VBA macro's enabled in our docs by default.
This is bloody brilliant research and also makes me incredibly sad that we still aren't building a defendable Internet
The code and blogpost for getting Ring 0 using VBA Macro Office Doc is finally up! - disrel.com/posts/Ring0VBA-Ge…
Sorry for the delay, been dealing with life!
Andrew Nowlin retweeted
The code and blogpost for getting Ring 0 using VBA Macro Office Doc is finally up! - disrel.com/posts/Ring0VBA-Ge…
Sorry for the delay, been dealing with life!
Using Office VBA Macro to exploit a vulnerable driver (zam64.sys) using DeviceIoControl, to get NT AUTHORITY\SYSTEM
TL;DR - Ring 0 using Office Doc}
Blogpost incoming soon lol
Thanks to @Coldzer0x0 @kasua02 for the encouragement and help.
Andrew Nowlin retweeted
Advanced Microsoft Authenticator security features are now generally available! techcommunity.microsoft.com/…
Andrew Nowlin retweeted
Really bad call here imo.
Making it your normal text solution was the main thing keeping Signal alive with most folks.
I have to imagine signal adoption drops significantly with this stance.
In the interest of privacy, security, and clarity we’re beginning to phase out SMS support from the Android app. You’ll have several months to export your messages and either find a new app for SMS or tell your friends to download Signal.
signal.org/blog/sms-removal-…
Andrew Nowlin retweeted
Replying to @signalapp
yeah, if this isn't an option i won't be able to use this with my parents. And as a result, i know it's not much, but i'll stop doing my annual donation of 100 $ it's the only way i can clearly indicate this is not helpful to me and my family
Andrew Nowlin retweeted
Anyone got any alternatives to replace Signal?
Signal plans to stop providing SMS Support on android devices in the next several months...
In the interest of privacy, security, and clarity we’re beginning to phase out SMS support from the Android app. You’ll have several months to export your messages and either find a new app for SMS or tell your friends to download Signal.
signal.org/blog/sms-removal-…


















