Mickaël LOPES retweeted
Elon Musk fired 80% of Twitter (6500 people) and everyone thought that Twitter was doomed.
He was right. Everyone was wrong.
It’s the management masterclass of the decade and every entrepreneur must understand why it worked 🧵:
A just needed discussion to read
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
Dans l'avion direction Nice pour l'événement @aOSComm de demain !
#aos #aosnice #microsoft #varonis #securite #evenement
Et dire qu'un nombre plus qu'important d'organisation n'implémente même pas un changement tous les mois !
If you ever want any proof that Microsoft is taking this #passwordless thing seriously, the Windows security org has a custom policy that requires changing their password every 2 weeks just so they're motivated to make the new technology work well.
Mickaël LOPES retweeted
New post on attacking AzureAD Service Principals, Intune, and documenting an Azure Logic App primitive. Also introducing the complete re-write of PowerZure (2.0). posts.specterops.io/attackin…
Mickaël LOPES retweeted
Get ready to enjoy the best of multiple phone apps – social feeds, friends, even food delivery – right on your Windows 10 laptop. Coming soon! 📱💕💻 #SamsungEvent
Mickaël LOPES retweeted
I recently built a thing: A Fiddler inspector for Kerberos messages. github.com/dotnet/Kerberos.N…
Mickaël LOPES retweeted
Just saw this AD hardening guide from the BSI (Germany):
bsi.bund.de/DE/Themen/ITGrun…
Good content, but no rule ID, no <a name="">. It's hard to add references to it in tools producing security reports so users can check it.
cc: @BsiBund
Mickaël LOPES retweeted
Over a dozen new Azure Sentinel connectors announced today! techcommunity.microsoft.com/… #AzureSentinel
Mickaël LOPES retweeted
While *only* ~2000 windows systems have port 53 open on the internet, CVE-2020-1350 does not require a direct connection to port 53. If you phish someone, they click on the domain, and their Windows DNS server receives a recursive query response, it is owned.
Mickaël LOPES retweeted
Time to tell you a secret: your SIM/bank card are cheap javacards (1$ each). On such cards, you can install an app, the GIDS applet, which transform it into a PKI card. You get 2FA for Windows without ANYTHING to install (PKI or logon software). It's cheap, supported and secure.
How I play with SmartCards, PKI and Certificates without any middleware on Windows targets?
- JavaCOS cards | smartcardfocus.com/shop/ilp/…
- @mysmartlogon GIDS applet | github.com/vletoux/GidsApple…
- GlobalPlatformPro | javacard.pro/globalplatform/
- OpenSC | github.com/OpenSC/OpenSC
