Information Security, Cloud, and Community!

Joined September 2017
Real hackers use a magnet to scribe bits to platter hard drives by hand.
40
21
4
384
Very well said!
Please do not pass judgement on a security control because it can be bypassed. All controls have failure points. The collection of multiple controls overlapping and supporting each other is true defense in depth.
1
I'm so tired of quarterly password resets. Can we all tell PCI fuck off and accept NIST's policy already and/or move to webauthn so we can just be done with this?
25
55
5
447
Jake is a great mentor and has some keen insights. Keep your head up and don't be afraid of failing. As long as you can learn something from the process you are coming out ahead. If you avoid failure you will have a hard time growing.
You miss 100% of the shots you don't take. But NBA teams miss more shots on average than they make. And they're the pros, the best in the game. Even at your best you should expect some failures. Get back up, dust yourself off, and get back to it.
Someone is always listening. #SuicidePrevention 1-800-273-8255
The @SANSInstitute Cloud Security Solutions Forum is underway. It is not too late to join this FREE resource: There are 7 speaker presentations and a panel discussion. sans.org/webcasts/cloud-secu… #CyberSecurity #cloudsecurity #Security #Training
This one hurts. I know we joked about @CentOS going away with @IBM's acquisition but... Official notice: blog.centos.org/2020/12/futu…
Oracle buys Sun: Solaris Unix, Sun servers/workstation, and MySQL went to /dev/null. IBM buys Red Hat: CentOS is going to >/dev/null. Note to self: If a big vendor such as Oracle, IBM, MS, and others buys your fav software, start the migration procedure ASAP.
Happy Halloween Hackers! (it is Halloween all week, I don't care).
it was a hash (it was a password hash) a monster hash (let’s find your memory cache) it was a hash (at least i got a stack smash) it was a hash (it was a monster hash)
A few things are painfully obvious to me during the pandemic: One-size fits all learning isn't working. Kids who did terribly onsite are thriving online and vice versa. Internet access needs to be a utility and not a luxury. Remote work is an option for most industries.
9
7
109
Kids complained about high latency playing Fortnite. We recently swapped APs so spent an hour troubleshooting, changing channels, frequencies, swapping cables to AP before realizing that they had accidentally changed their match making region from the US to the Middle East. 🤷🤦‍♂️
These are interesting times indeed, but has anything really changed?
In ancient sysadmin times, the distro wars meant there was a great divide between the apt and yum package managers. Thanks to the miracle of DevOps, we’re past that into a future where there’s a great divide between using curl or wget to pipe some rando’s shell script to root.
Josh A retweeted
We don't know who needs to hear this right now, but #defconsafemode is free to attend. You don't have to register. It starts in one week. You should join us. defcon.org
30
1,527
172
2,941
Stay Calm, and Patch 'Em All! ✅ Microsoft ✅ Cisco ✅ Juniper ✅ Oracle ✅ Zoom ✅ Citrix ✅ SAP ✅ F5 ✅ Intel ✅ Adobe ✅ Jenkins ✅ NVIDIA ✅ Apache ✅ Chrome ✅ Android ✅ VMware ✅ Siemens ✅ Rust Lang Crates ✅ Go programming Happy Patch Week, Everyone.
24
574
74
1,142
Microsoft DNS Server vulnerability is wormable! There is a workaround that does NOT require reboot. I suggest applying this ASAP. Most Active Directory environments use Microsoft DNS Server. CVE-2020-1350 support.microsoft.com/en-us/… Screenshot since it is not loading for some.
4
68
7
123
Today, we’re happy to announce that Google Cloud VMware Engine is generally available—enabling you to seamlessly migrate your existing VMware-based applications to Google Cloud without refactoring or rewriting them ↓ cloud.google.com/blog/topics…
2
71
4
173
Check out SANS' DFIR Summit (Summit content is free): Digital Forensics & Incident Response Summit & Training 2020 sans.org/event/digital-foren…
I am signed up! VMworld is an awesome event that historically has been quite expensive. This year the event is online and FREE! There is an overwhelming amount of content in so many different areas from end user computing to containers to sdwan to security.
VMworld 2020 registration is now open! 48 hours of non-stop innovation await September 29 – October 1: bit.ly/2YXem8S
Imagine if every SIEM adopted a single search query language. You know, like the SQL they all use on the back end?
14
4
1
64
This is reality. Some of the easiest proactive steps we can take to secure our environments may get dismissed because they are mundane or don't seem fun or interesting.
Replying to @hacks4pancakes
1) Cray cray 0day and theoretical attacks are cool and all, but why are you worrying so hard about them when you still run XP and have 380 undocumented firewall holes? What do you think the path of least resistance and cost is?
1