Security analyst with 20+ years of experience. AI enthusiast and Python hacker. Curious about neuroscience, consciousness studies, and physics.
Vienna
Joined April 2009
- Tweets899
- Following48
- Followers1.4K
- Likes947
LLMs like @grok have become so insanely good, that I can't stop talking to them. It's like having a personal teacher around 24/7. I feel like a little child that keeps asking "why?", but the parent never gets tired and gives the most insightful answers.
My favorite use case for ChatGPT is using it as a personal teacher. I'm currently reading "Quanta and Fields" from @seanmcarroll, and there is nothing more satisfying than asking ChatGPT questions in between to go deeper on a topic or just clarifying details.
That's one of the craziest "responsible" disclosure stories I've read in a while. Great guide how _not_ to participate in a Bug Bounty program 😵💫.
Do you want to supercharge your next #pentest? Start with a threat modeling exercise to identify hot spots in your platform. I just finished such a project for @sec_consult and collected my main take-aways in the thread below 👇.
6) The pentest team must of course be part of the whole threat modeling exercise. When I do this kind of work for my customers, I ensure that at least one of my colleagues responsible for the execution of the pentest is actively participating. #teamsecconsult
Excellent awareness video by @arvin_ash about the dangers of cyber attacks against critical infrastructure. If you enjoy that one, there's more in the thread below 👇.
youtube.com/shorts/kpVIbS8YD…
Want more? I highly recommend reading Sandworm. Great insights into different hacker groups and how they target the systems that matter most. @arvin_ash, if you haven't read it yet, you need to take a look!
xitter.cf/Dementophobia/status/1…
#Sandworm by @a_greenberg is not only very well researched from a technical perspective, it also shines a light on the political background of several recent large-scale #cyberwar attacks. Kept me entertained from start to finish!
I'm proud that me and my team at @sec_consult are doing our part to keep the critical infrastructure in #Austria safe and secure with the help of NIS2. Making our infrastructure more resilient with every single project we deliver 💪.
sec-consult.com/blog/detail/…
Here's all you need to know about the most recent compromise of the Ledger Connect library. Stay safe and avoid interacting with any dapps that might be using the manipulated code until we have more details what exactly has been affected.
🚨BREAKING NEWS - LEDGER 🧵 (Please Share)
What Happened?
The Ledger Connect library, which is used by many decentralized applications (#DApps) to connect to Ledger hardware wallets, has been compromised. This means that attackers could potentially use the library to steal funds from Ledger users.
What Does This Mean for Ledger Holders?
Ledger holders should not interact with any DApps until the issue is resolved. This includes DApps that you may already have connected to your Ledger wallet.
What Can Ledger Do?
Ledger is currently investigating the situation and working to release a patch for the compromised library. In the meantime, they have taken steps to disable the compromised library and are working with DApps to ensure that they are not using it.
What Should You Do?
As a Ledger holder:
Do not interact with any DApps until the issue is resolved.
Be careful about clicking on links or opening attachments from unknown senders.
Update your Ledger firmware to the latest version.
As a DApp developer:
Do not use the compromised Ledger Connect library.
Wait for Ledger to release a patch for the library.
Use a different library to connect to Ledger hardware wallets until the issue is resolved.
We will update this blog post as more information becomes available.
#Cardano #VeChain #Altcoins #Bitcoin
We are truly blessed that brilliant minds like @Plinz keep sharing their insights with us. After I've been studying #consciousness and #ai for years, Joscha still inspires me to go even deeper down that rabbit hole.
Here's my conversation with Joscha Bach (@Plinz), his 3rd time on the podcast. We talk about life, intelligence, consciousness, and the nature of reality. Joscha is one of the most brilliant and fascinating minds I know. This was mind-blowing and fun! youtube.com/watch?v=e8qJsk1j…
If any #security researcher out there is bored by repeating vulnerability patterns, you really need to take a deep dive into smart contract security. It's a totally different ball game and quite refreshing for the curious mind.
