Reposted by Tindra
Reposted by Tindra
Educational.
📣THREAD: It’s surprising to me that so many people were surprised to learn that Signal runs partly on AWS (something we can do because we use encryption to make sure no one but you–not AWS, not Signal, not anyone–can access your comms).
It’s also concerning. 1/
It’s also concerning. 1/
PSA: we're aware that Signal is down for some people. This appears to be related to a major AWS outage. Stand by.
October 27, 2025 at 12:00 PM
Educational.
Reposted by Tindra
Reposted by Tindra
I am doing a survey of supply chain attacks, and it's annoying how 95% of the analysis is on payloads vs. compromise vectors.
Yes, you are a very smart reverser and that's a very clever payload. Yes, rolling out phishing-resistant auth is a slog. No, this is not how we make progress.
</rant>
Yes, you are a very smart reverser and that's a very clever payload. Yes, rolling out phishing-resistant auth is a slog. No, this is not how we make progress.
</rant>
October 1, 2025 at 3:29 PM
I am doing a survey of supply chain attacks, and it's annoying how 95% of the analysis is on payloads vs. compromise vectors.
Yes, you are a very smart reverser and that's a very clever payload. Yes, rolling out phishing-resistant auth is a slog. No, this is not how we make progress.
</rant>
Yes, you are a very smart reverser and that's a very clever payload. Yes, rolling out phishing-resistant auth is a slog. No, this is not how we make progress.
</rant>
Reposted by Tindra
"…and Magda Goebbels made a great strudel.”
September 13, 2025 at 3:27 PM
"…and Magda Goebbels made a great strudel.”
Reposted by Tindra
One more from the Larchives before bed. Enjoy :)
September 11, 2025 at 4:03 AM
One more from the Larchives before bed. Enjoy :)
Let’s go @blueteamcon.com !
I’m speaking at 1230 today about why some incidents are more expensive than others, and what orgs can do about it
I’m speaking at 1230 today about why some incidents are more expensive than others, and what orgs can do about it
September 6, 2025 at 1:11 PM
Let’s go @blueteamcon.com !
I’m speaking at 1230 today about why some incidents are more expensive than others, and what orgs can do about it
I’m speaking at 1230 today about why some incidents are more expensive than others, and what orgs can do about it
Reposted by Tindra
Important things to know:
1) Blaha does this every year since she started running for office. It is honestly #MarketingGoals
2) LOOK IN THE MAGNIFYING GLASS. SHE USED BIGGER BEANS.
1) Blaha does this every year since she started running for office. It is honestly #MarketingGoals
2) LOOK IN THE MAGNIFYING GLASS. SHE USED BIGGER BEANS.
Is your state auditor making seed-based advertising?
August 31, 2025 at 4:07 PM
Important things to know:
1) Blaha does this every year since she started running for office. It is honestly #MarketingGoals
2) LOOK IN THE MAGNIFYING GLASS. SHE USED BIGGER BEANS.
1) Blaha does this every year since she started running for office. It is honestly #MarketingGoals
2) LOOK IN THE MAGNIFYING GLASS. SHE USED BIGGER BEANS.
Reposted by Tindra
Cartoon: 'Weird' Hell Yankovic @alyankovic.bsky.social . Hope folks enjoy :)
August 31, 2025 at 6:28 PM
Cartoon: 'Weird' Hell Yankovic @alyankovic.bsky.social . Hope folks enjoy :)
Reposted by Tindra
Our 2025 Schedule is now live! pancakescon.com/2025-confere...
Congratulations to: jodiem.bsky.social @dotdot.horse neurovagrant.bsky.social @t-dye.bsky.social
@wildpark.bsky.social @tindrasgrove.com @vamagabyte
@winterknight.net @redteamwrangler.bsky.social
@hecksec.com
Congratulations to: jodiem.bsky.social @dotdot.horse neurovagrant.bsky.social @t-dye.bsky.social
@wildpark.bsky.social @tindrasgrove.com @vamagabyte
@winterknight.net @redteamwrangler.bsky.social
@hecksec.com
August 31, 2025 at 3:15 AM
Our 2025 Schedule is now live! pancakescon.com/2025-confere...
Congratulations to: jodiem.bsky.social @dotdot.horse neurovagrant.bsky.social @t-dye.bsky.social
@wildpark.bsky.social @tindrasgrove.com @vamagabyte
@winterknight.net @redteamwrangler.bsky.social
@hecksec.com
Congratulations to: jodiem.bsky.social @dotdot.horse neurovagrant.bsky.social @t-dye.bsky.social
@wildpark.bsky.social @tindrasgrove.com @vamagabyte
@winterknight.net @redteamwrangler.bsky.social
@hecksec.com
Reposted by Tindra
Happy Caturday 🐈⬛🤍
August 30, 2025 at 3:42 PM
Happy Caturday 🐈⬛🤍
Reposted by Tindra
We're all stuck in barb wire thongs
Presidents are supposed to be like your underwear. If you’re thinking about them at all over the course of a normal day, they’re either fabulous or something has gone terribly wrong.
August 20, 2025 at 2:30 PM
We're all stuck in barb wire thongs
Reposted by Tindra
This is a very important article and @evacide.bsky.social brings up a very great point. Many relationships are one sided when it comes to technical knowledge.
Who set up the home thermostat? the wifi? the IOT garage door?
Show me an IOT thing, I can come up with how it can be a vector for abuse.
Who set up the home thermostat? the wifi? the IOT garage door?
Show me an IOT thing, I can come up with how it can be a vector for abuse.
I talked to 404 Media about devices for tracking and spying on your partner being sold on TikTok. This is not stalkerware, but these are devices for tech-enabled abuse and I think we should be talking about tech-enabled abuse more broadly.
www.404media.co/tiktok-shop-...
www.404media.co/tiktok-shop-...
TikTok Shop Sells Viral GPS Trackers Marketed to Stalkers
"If your girl says she’s just out with friends every night, you’d better slap one of these on her car."
www.404media.co
August 18, 2025 at 8:39 PM
This is a very important article and @evacide.bsky.social brings up a very great point. Many relationships are one sided when it comes to technical knowledge.
Who set up the home thermostat? the wifi? the IOT garage door?
Show me an IOT thing, I can come up with how it can be a vector for abuse.
Who set up the home thermostat? the wifi? the IOT garage door?
Show me an IOT thing, I can come up with how it can be a vector for abuse.
Reposted by Tindra
Reposted by Tindra
You really should read this article on how criminal groups routinely bypass EDR. This isn’t state stuff. I see it all the time, and have for a while. The sad truth is EDR is one rung in defense in depth and it surviving tampering is a perpetual cat mouse game. www.theregister.com/2025/08/14/e...
Ransomware crews don't care about your EDR
: Some custom malware, some legit software tools
www.theregister.com
August 16, 2025 at 11:52 AM
You really should read this article on how criminal groups routinely bypass EDR. This isn’t state stuff. I see it all the time, and have for a while. The sad truth is EDR is one rung in defense in depth and it surviving tampering is a perpetual cat mouse game. www.theregister.com/2025/08/14/e...
Are you based in France, Germany, or Netherlands? Speak French, German, and/or Arabic? Interested in cyber insurance?
My team is hiring!
libertymutual1.avature.net/LSMCareers/F...
My team is hiring!
libertymutual1.avature.net/LSMCareers/F...
Risk Engineer - Cyber Security
Role Title: Risk Engineer: Cyber SecurityDepartment: Cyber Risk Engineering (CRE)Location: France, Germany or the NetherlandsType: PermanentAbout the Role:The Global Risk Solutions (GRS) Cyber Risk...
libertymutual1.avature.net
August 15, 2025 at 1:14 PM
Are you based in France, Germany, or Netherlands? Speak French, German, and/or Arabic? Interested in cyber insurance?
My team is hiring!
libertymutual1.avature.net/LSMCareers/F...
My team is hiring!
libertymutual1.avature.net/LSMCareers/F...
Reposted by Tindra
Dolly Parton has sent my daughter a new book every month for years as she does for thousands of children. She help fund the development of the Covid vaccine. She’s not a billionaire. I think as non wealthy people it’s hard to even imagine how much billionaires *could* be doing with their money.
August 13, 2025 at 1:51 PM
Dolly Parton has sent my daughter a new book every month for years as she does for thousands of children. She help fund the development of the Covid vaccine. She’s not a billionaire. I think as non wealthy people it’s hard to even imagine how much billionaires *could* be doing with their money.
Reposted by Tindra
Offer received and accepted, funemployment ends homies.
I release my employment jelly to the wild now, thank you friend.
I release my employment jelly to the wild now, thank you friend.
July 16, 2025 at 4:15 PM
Offer received and accepted, funemployment ends homies.
I release my employment jelly to the wild now, thank you friend.
I release my employment jelly to the wild now, thank you friend.
Reposted by Tindra
Social media researchers: you can't test the effects of UX tweaks on user behavior by populating a synthetic platform with virtual agents instantiated by LLMs *that have been trained on social media platforms without these tweaks*
August 10, 2025 at 2:08 AM
Social media researchers: you can't test the effects of UX tweaks on user behavior by populating a synthetic platform with virtual agents instantiated by LLMs *that have been trained on social media platforms without these tweaks*
Reposted by Tindra
American critical infrastructure is ten thousand small businesses in a trenchcoat.
August 8, 2025 at 10:14 PM
American critical infrastructure is ten thousand small businesses in a trenchcoat.
Reposted by Tindra
I’m playing a CTF with my bestie, as one does, and she pointed out that challenges that use generative AI violate the cardinal rule of CTFs, which is that everything that is in there is there because someone put it there on purpose
As a longtime player and author, that is genuinely really upsetting
As a longtime player and author, that is genuinely really upsetting
August 8, 2025 at 10:53 PM
I’m playing a CTF with my bestie, as one does, and she pointed out that challenges that use generative AI violate the cardinal rule of CTFs, which is that everything that is in there is there because someone put it there on purpose
As a longtime player and author, that is genuinely really upsetting
As a longtime player and author, that is genuinely really upsetting
Reposted by Tindra
Goddamn. What a sobering and poignant piece of conceptual art. What an amazing artist.
August 6, 2025 at 11:36 PM
Goddamn. What a sobering and poignant piece of conceptual art. What an amazing artist.
Reposted by Tindra
If you send me a 3000 word essay based on a 20 word prompt you are transferring information in an incredibly inefficient way. I'm going to have no idea what you actually wanted to convey. Just send me the prompt. I promise the outcome will be better.
August 3, 2025 at 10:57 PM
If you send me a 3000 word essay based on a 20 word prompt you are transferring information in an incredibly inefficient way. I'm going to have no idea what you actually wanted to convey. Just send me the prompt. I promise the outcome will be better.