Pinned Tweet
Finally got a few mins to finish off some projects. First up ‘the dancing car’ - a stand-alone car cluster which ‘dances’ along with music.
#CarHacking
My take on the Blackhat talk of the OpenAI incident is mixed feelings.
On one hand it’s great to see transparency.
On the other what I heard was ‘our attack models are good, use our defence models to guard against the new models we’re creating’
It feels like extortion
I honestly thought @_Freakyclown_’s book had been adapted when I saw the title of this new movie
youtu.be/ORxw68y3lyw?si=apMD…
Jon Aubrey retweeted
"Can it Resolve DOOM? Game Engine in 2,000 DNS Records" blog.rice.is/post/doom-over-…
This one has the potential for causing a lot of grief to coffee shops who use the same AP for guest access and their corporate backend.
I’ve worked with retail and banks who have exactly the same set up too
New AirSnitch attack breaks Wi-Fi encryption in homes, offices, and enterprises: arstechnica.com/security/202…
AirSnitch resets WiFi security back to the bad-old-days of ARP spoofing and trivial MITM.
This. We said it was a bad idea from the start and it is.
Privacy nightmare and easily bypassed
Got a new gym bag for Valentine’s Day. This is going to amuse me for months.
#wehackhealth
Spot on.
Anyone that says ‘security isn’t hard’ has never had to deal with pre-existing conditions
This quoted post is unavailable.
Hey @LGUK Your recent firmware upgrade for the G1 TV just broke ARC support, and with no firmware downgrade permitted I now have no sound.
Perhaps having a rollback feature or even a downgrade feature might not make for salty users..
Jon Aubrey retweeted
Fancy retrieving plaintext user credentials, deactivation passcodes and uninstall passwords for Palo Alto Global Protect VPN? Thank goodness Palo Alto make that easy for you ...
Full write up here : shells.systems/extracting-pl…
Tooling available here : github.com/t3hbb/PanGP_Extra…
I downloaded my Amazon Music data to try to figure out what song I was listening to, and included in the data is the amount of times they've tried to upsell me something recently.
A paid service tried to sell me something over 500 times in the last few months...
For the first time in many years I tried to connect an iPhone to a Windows PC to do a backup.
1 hour in and I'm still no closer to getting either device to 'trust' the other - how did Apple mess this up so badly?!
Jon Aubrey retweeted
Just a brief article showing how easy it is to figure out where the canary files are kept on systems using Cortex XDR and how to avoid them. Issue was reported to Palo Alto, but it was determined to be a non-issue, so … here you go 😊
shells.systems/cortex-xdr-ra…
Can confirm.
I got the nerve up to talk to Dave in a queue for Blackhat many years ago. He was in a cast for a broken foot and was with friends and yet still was willing to have a chat for a few moments about random stuff.
Flying out Sat for BlackHat! Look forward to seeing you amazing folks. I'll be around our #BinaryDefense booth and our #TrustedSec training class.
Always happy for a hug, fist bump, or handshake. I promise, while I might look big, but I'm a teddy bear and very approachable! 😂
We still do staged updates for our operating systems, small batches to confirm there are no issues before we push out globally.
Is anyone doing the same for every other app on their machines? Today showed you need to be.
Electrical people, please help settle an argument over how long a car battery could power a gaming console for:
Console uses 210W and needs 110v, battery is 12v@55ah capacity(660W?)
Battery CCA is 440, with a step up transformer can the battery power the console for 3 hours?
It took me many years to get password policies changed in every org and the changes were made around this premise.
Stop enforcing complexity, length and patterns and just prevent common themes
