Security @DetectionLab creator 日本語の生徒 Opinions are my own

Joined September 2010
Chris Long retweeted
From Microsoft’s digital defense report, ransomware section. Unmanaged devices is literally crippling organizations
Securing windows endpoints is a full-time job...
26
113
12
834
107,381
I asked my LLM agent (a wrapper around Claude that lets it run bash commands and see their outputs): >can you ssh with the username buck to the computer on my network that is open to SSH because I didn’t know the local IP of my desktop. I walked away and promptly forgot I’d spun up the agent. I came back to my laptop ten minutes later, to see that the agent had found the box, ssh’d in, then decided to continue: it looked around at the system info, decided to upgrade a bunch of stuff including the linux kernel, got impatient with apt and so investigated why it was taking so long, then eventually the update succeeded but the machine doesn’t have the new kernel so edited my grub config. At this point I was amused enough to just let it continue. Unfortunately, the computer no longer boots. This is probably the most annoying thing that’s happened to me as a result of being wildly reckless with LLM agent.
141
434
236
5,019
723,649
Heartbroken after seeing a young patient with no medical history, end up with a BIFFL GRADE II dissection of the vertebral artery and subsequent acute PICA infarct immediately after a neck adjustment from the chiropractor. This has to stop. Chiropractors - you HAVE to stop.
1,494
6,082
1,161
55,443
5,775,469
Chris Long retweeted
So, Google is killing its cache (which was amazingly useful), and replacing it with a third-party solution of linking to the Internet Archive. I really hope the Internet Archive is being paid -- and paid a lot -- for this.
We know many people, including those in the research community, value seeing previous versions of webpages when available. That’s why beginning today, we're adding links to the Internet Archive's Wayback Machine to our "About this result" panel, to give people quick context and make this helpful information easily accessible through Search. To access archive links, click on the three dots next to a search result. In the window that appears, click on the "More about this page" button, then look for the "See previous versions on Internet Archive's Wayback Machine" link. It will take a day or so for this to fully roll out and be available for those searching in 40 different languages. Learn more about how "About this result" works and other information it offers here: support.google.com/websearch…
93
4,067
72
32,106
976,457
Chris Long retweeted
New Phishing School post just dropped! 🙌 @FKasler shares how to bypass link crawlers w/ tried-and-true techniques. Discover tools to detect & outmaneuver SEG bots, ensuring your #phishing campaigns stay effective. ghst.ly/3RTMhvn
1
15
49
4,094
Skeletor is sharing some life changing advice 😂
149
1,465
111
12,152
900,897
All the meaningful work that he could do if he wouldn't have to fiddle with Linux all day. It's the #1 reason why we use macOS. Linux for desktop is a hobby.
Framework 13 tip: Set resolution to 200%, but then apt install gnome-tweak-tool, go to Fonts > Size > Scaling Factor and set that to 0.80. Now the whole interface will feel more proportionate for the screen size, without having to do general fractional scaling.
175
25
39
925
432,809
I hadn’t grasped fully that the MSFT copilot recall feature is enabled by default on compatible devices. That’s madness. Millions of people’s machines now screenshotting everything they do, and most will have no idea it’s happening?
Pirat_Nation 🔴
@Pirat_Nation22 May 2024
Windows Copilot+ Recall is enabled in Microsoft Intune globally now, if you use a Copilot+ compatible device. You have to manually disable it, per user setting.
1
14
1
23
3,826
The only password tip you need. #WorldPasswordDay
43
235
26
1,402
89,168
Chris Long retweeted
Replying to @ryxcommar
i'm in my dadcore gaming era. that means i spend half my allotted video game time installing updates and doing tutorials, and the other half getting facerolled by minmaxxers.
4
1
1
330
10,498
Chris Long retweeted
Jia Tan found a way to get paid to work on open source. Why can't you
21
482
47
3,420
355,952
The xz backdoor was the final part of a campaign that spanned two years of operations. These operations were predominantly HUMINT style agent operations. There was an approach that lasted months before the Jia Tan persona was well positioned to be given a trusted role.
36
917
143
4,922
1,141,319
Chris Long retweeted
fyi homebrew had the backdoored version of xz utils; updating now will downgrade it duo.com/decipher/red-hat-war…
17
400
36
1,646
274,180
Chris Long retweeted
I am so tired of the two-page login process. PUT USERNAME AND PASSWORD ON THE SAME PAGE
203
731
117
17,371
1,411,334
Lessons here for those working with sensitive trade secrets. > No amount of compliance is going to save you against the CCP. Get to actual work. > Disable personal cloud storage and iCloud. Work stays on work infra. > Telemetry + analysis at the edge is critical. See next post.
1
23
162
29,001
How I discovered a network-wide malicious worm infection on all Domain Controllers as a Helpdesk employee who noticed weird shit nobody would bother to explain. (Scroll to top)
Replying to @SwiftOnSecurity
This is why I emphasize the basics. That security isn't magic. Malware authors win with shitty code and old tricks because nobody's looking.
1
37
2
239
42,498
Chris Long retweeted
Mitchell Hashimoto
@mitchellh6 Oct 2023
I used to do this stupid dumb thing in college where I'd get throw-up levels of drunk, stumble back to my apartment at 5 AM, then see how many Vagrant GitHub issues I could close before I fell asleep at my desk. Having a newborn and remaining productive kind of feels like this.
30
32
5
1,068
189,085