Nick Carr (@ItsReallyNick) header
Nick Carr (@ItsReallyNick) profile picture

Partner / Threat Intelligence at Microsoft. Previously, Director of Incident Response & Intel Research at Mandiant. Former Chief Technical Analyst at CISA

Virginia, USA
Joined September 2009
Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)Photo by Nick Carr (@ItsReallyNick)
🆕Principal Threat Intelligence Analyst Just posted. I'm leading this search👋; full details & apply here: apply.careers.microsoft.com/… Unique needs = unique opportunity (fully remote + active clearance)👀 Please read the posting, I spent time making it precise: • on our team, you will obtain real-time visibility into hundreds of simultaneous intrusions and convert this into finished intelligence, prioritized judgments, and protection at scale • the successful candidate is a critical thinker and problem solver, skilled at discovering novel intrusions and adversary tradecraft through analysis, and curious enough to pursue impact through product hardening and disruptions where there is no precedent
5
23
72
8,880
cargo space?
I had been waiting a decade to make this joke in its natural habitat
3
1
5
824
Nick Carr retweeted
me: kinda fucked up how many people are offloading their whole lives to muse or instinct or grokbot or whatever claude: yeah
112
462
25
15,820
365,459
I haven’t stopped thinking about Chainguard breaking the PHP vulnerability embargo exactly 1 week ago, on the grounds that it was trivial to reproduce.
You’re all prompting wrong
9
2
86
8,295
Seems like pretty specific information that the public still doesn’t have 😅
I also wonder how specific the tip was in from one of the original researchers. That context could matter. Aside from all of that, the idea that you don’t need to comply with a coordinated embargo bc you had repro’ed some portion of the issue with partial knowledge is WILD
8
705
Nick Carr retweeted
Replying to @alexgibneyfilm
Oh, why not. Haven't had a chance to watch the movie yet but have heard you on a couple of podcasts and find this line of criticism the most confusing. It's not difficult to find employees across the companies who will talk at length about him making engineering decisions. I've seen this happen at Tesla, SpaceX and Neuralink firsthand. Mostly, though, I tend to think of the companies as being built by the thousands of employees and as group engineering exercises. There are tons of choices that have to be made and things that have to be fixed and resources marshalled. The top end of these tasks has quite often fallen to Musk. People had pretty much given up on electric cars until Tesla came along. You will argue that Martin and Marc had the idea for Tesla, which is fine. But it would not be a going concern without the engineering fixes that took place to finally get the Roadster over the line and then the tons of choices that turned the Model S into a very surprising success. This totally revitalized the electric car industry and made it a thing again. It changed the automotive industry worldwide. Many people made many engineering choices along the way. Musk included. There are just too many stories and anecdotes to deny this. SpaceX is perhaps the most dramatic example. People had tried and failed to build a commercial rocket company before. They have tried and failed since. Blue Origin and SpaceX started almost the same year, but only one of the two companies has changed the dynamics of the worldwide aerospace industry and our access to space. Many people deserve credit for this, but it's hard to argue that Musk was not the driving force behind a great deal of what SpaceX has achieved. SpaceX had far less resources than Blue Origin. The engineering accomplishments of SpaceX are pretty nuts. The US aerospace industry would be in terrible shape without them. We'd be unable to put humans in space, behind China on all fronts and very, very slow to do launches. Space is one of the last manufacturing and engineering strongholds for the US. Is this entirely because of Musk? Certainly not. Did he push the company forward on engineering? Certainly yes. Neuralink has a great, great deal still to prove. But it took products that were trapped in acamedia and advanced them dramatically. I would argue that this does not happen without the engineering pattern matching Musk has done across these other two industries. He pushed changes on semiconductor, materials, robotics and implant design. It's important to ask all these other questions about his empire and power and his evolution over time. And you're a tremendous filmmaker. This will no doubt come off as cheerleading. All I can say is that Elon and I have had a very tumultous relationship, and he's been plenty unkind to me at times. I don't really have a need to speak up here. Me writing this comes more from a place of confusion than anything else. The products are all very real, and there's a common denominator across them. It's difficult for me to see them as lucky accidents, particularly when rivals trying to do similar things have struggled so badly. All of these things are so difficult to build. Like verging on impossible. Why do you fixate on the engineering thing when there are so many other more real avenues to explore?
44
59
10
1,017
37,554
Nick Carr retweeted
8
71
13
388
24,890
I’m proud to announce that I have paid for a Peloton subscription for 10 years (we were in early)… and pretty much only use it for Just Run / Just Ride 😬
2
15
2,512
Ok this is why it’s always ok to read what the boomer seated next to you is sending in their giant-font text messages
A United flight carrying 150 passengers returned to Las Vegas after a flight attendant spotted something on a passenger’s phone, prompting a cockpit lockdown. The FAA is investigating.
1
1
3
3,287
💀
Replying to @aukfil
In the sense that we're running a business. Yes.
1
5
1,736
me switching tabs from LinkedIn to Twitter/X
2
1
49
1,923
this is so bleak
565
2,041
945
33,998
3,184,116
Nick Carr retweeted
messaging my wife a link containing proof of her husband cheating on her from an anonymous instagram account and then when she clicks on it texting her to let her know she failed the family phishing test and she has to retake my cybersecurity course
909
15,129
1,229
246,107
8,190,637
Nick Carr retweeted
You’re all prompting wrong
128
587
254
8,308
1,072,086
🇨🇳 going hard w/ ARTEX noisy, sloppy agents but effective at scale without fear of retribution
The China state-aligned threat actor Storm-0940 used the agentic AI penetration testing framework ARTEX to automate attacks targeting hundreds of organizations globally across a broad range of industries. Microsoft Threat Intelligence assesses that Storm-0940 was responsible for the recently disclosed ConnectWise supply chain compromise of a multitenant application. msft.it/6018aakEE Our investigation found that Storm-0940's use of ARTEX accelerated the speed of compromised application abuse to authenticate to target environments through applications that had already been granted access, allowing the threat actor to operate without requiring an interactive user sign-in. AI-accelerated follow-on activity included reconnaissance, application credential changes, and attempts to modify privileges that could enable expanded or persistent access. Read our blog for a detailed analysis and indicators of compromise (IOCs), along with Microsoft Defender detections, protection recommendations, and guidance on investigating service principal sign-ins and unexpected application credential or privilege changes.
5
41
3,052
Nick Carr retweeted
php2shell - A tale of two PHP remote vulnerabilities: calif.io/php2shell
89
190
32
1,863
133,038
I doubt it.
45
219
33
4,168
126,630
Nick Carr retweeted
arstechnica.com/security/202… The private keys for these certs are literally the numbers 4, 56, 66, 115, 155, 156, 230, and 237 (life imitates XKCD, again).
31
214
51
1,668
271,368
Foursquare was acquired last month. The outcome was disappointing. It's taken me a while to write this, but I think I'm finally done grieving it. Here are some thoughts on our final years, an effort to honor the team who helped build & maintain FSQ's legacy, and my attempt to finally get some closure. teendrama.substack.com/p/som…
444
268
323
3,005
728,077
SCOTUS agreed yesterday to hear DOJ v. McNutt - a challenge to the 1868 federal home distilling ban (moonshine laws). So this absolute Chad is going to the Supreme Court to let him move his operation 250 feet from a shed into his house. 🇺🇸 These laws are pretty weird: feds want 🥃 banned because you might evade taxes, while making the activity itself illegal so there’s nothing to tax. IMO it's a holdover from gov trying to ban anything that happens near a bed
2
8
1,285