
Security @DetectionLab creator 日本語の生徒 Opinions are my own
Joined September 2010
- Tweets3.2K
- Following1.3K
- Followers4.5K
- Likes6.3K
Chris Long retweeted
From Microsoft’s digital defense report, ransomware section.
Unmanaged devices is literally crippling organizations
Chris Long retweeted
I asked my LLM agent (a wrapper around Claude that lets it run bash commands and see their outputs):
>can you ssh with the username buck to the computer on my network that is open to SSH
because I didn’t know the local IP of my desktop. I walked away and promptly forgot I’d spun up the agent. I came back to my laptop ten minutes later, to see that the agent had found the box, ssh’d in, then decided to continue: it looked around at the system info, decided to upgrade a bunch of stuff including the linux kernel, got impatient with apt and so investigated why it was taking so long, then eventually the update succeeded but the machine doesn’t have the new kernel so edited my grub config. At this point I was amused enough to just let it continue. Unfortunately, the computer no longer boots.
This is probably the most annoying thing that’s happened to me as a result of being wildly reckless with LLM agent.
Chris Long retweeted
Heartbroken after seeing a young patient with no medical history, end up with a BIFFL GRADE II dissection of the vertebral artery and subsequent acute PICA infarct immediately after a neck adjustment from the chiropractor. This has to stop.
Chiropractors - you HAVE to stop.
Chris Long retweeted
So, Google is killing its cache (which was amazingly useful), and replacing it with a third-party solution of linking to the Internet Archive. I really hope the Internet Archive is being paid -- and paid a lot -- for this.
We know many people, including those in the research community, value seeing previous versions of webpages when available. That’s why beginning today, we're adding links to the Internet Archive's Wayback Machine to our "About this result" panel, to give people quick context and make this helpful information easily accessible through Search.
To access archive links, click on the three dots next to a search result. In the window that appears, click on the "More about this page" button, then look for the "See previous versions on Internet Archive's Wayback Machine" link.
It will take a day or so for this to fully roll out and be available for those searching in 40 different languages. Learn more about how "About this result" works and other information it offers here: support.google.com/websearch…
Chris Long retweeted
New Phishing School post just dropped! 🙌
@FKasler shares how to bypass link crawlers w/ tried-and-true techniques. Discover tools to detect & outmaneuver SEG bots, ensuring your #phishing campaigns stay effective. ghst.ly/3RTMhvn
Chris Long retweeted
All the meaningful work that he could do if he wouldn't have to fiddle with Linux all day. It's the #1 reason why we use macOS.
Linux for desktop is a hobby.
Chris Long retweeted
I hadn’t grasped fully that the MSFT copilot recall feature is enabled by default on compatible devices. That’s madness. Millions of people’s machines now screenshotting everything they do, and most will have no idea it’s happening?
Pirat_Nation 🔴@Pirat_Nation22 May 2024Europe
EuropeConnected via Europe App StoreAccount-level information, not a live location or per-post device.
Windows Copilot+ Recall is enabled in Microsoft Intune globally now, if you use a Copilot+ compatible device. You have to manually disable it, per user setting.
Chris Long retweeted
The only password tip you need.
#WorldPasswordDay
Chris Long retweeted
Replying to @ryxcommar
i'm in my dadcore gaming era. that means i spend half my allotted video game time installing updates and doing tutorials, and the other half getting facerolled by minmaxxers.
Chris Long retweeted
Our team at @Volexity has identified a new 0day exploited in the wild. This time we caught a threat actor using an unauthenticated RCE in Palo Alto Networks GlobalProtect. It has been assigned CVE-2024-3400 and is covered in this @PaloAltoNtwks advisory security.paloaltonetworks.co…
Chris Long retweeted
The xz backdoor was the final part of a campaign that spanned two years of operations. These operations were predominantly HUMINT style agent operations. There was an approach that lasted months before the Jia Tan persona was well positioned to be given a trusted role.
Chris Long retweeted
fyi homebrew had the backdoored version of xz utils; updating now will downgrade it duo.com/decipher/red-hat-war…
Chris Long retweeted
I am so tired of the two-page login process. PUT USERNAME AND PASSWORD ON THE SAME PAGE
Chris Long retweeted
I wrote about technical challenges my team had to solve for shipping Google Drive Data Protection new feature at @material_sec 🚀🚀🚀
material.security/blog/navig…
Chris Long retweeted
Lessons here for those working with sensitive trade secrets.
> No amount of compliance is going to save you against the CCP. Get to actual work.
> Disable personal cloud storage and iCloud. Work stays on work infra.
> Telemetry + analysis at the edge is critical. See next post.
Chris Long retweeted
How I discovered a network-wide malicious worm infection on all Domain Controllers as a Helpdesk employee who noticed weird shit nobody would bother to explain. (Scroll to top)
Replying to @SwiftOnSecurity
This is why I emphasize the basics. That security isn't magic. Malware authors win with shitty code and old tricks because nobody's looking.
Chris Long retweeted

Mitchell Hashimoto@mitchellh6 Oct 2023
United States
United StatesConnected via United States App StoreAccount-level information, not a live location or per-post device.
I used to do this stupid dumb thing in college where I'd get throw-up levels of drunk, stumble back to my apartment at 5 AM, then see how many Vagrant GitHub issues I could close before I fell asleep at my desk. Having a newborn and remaining productive kind of feels like this.



































