🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_) header
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_) profile picture

I fix accepted risks. Previously @ANSSI_FR / @CERT_FR. Former @CertSG team leader. 🐘 @jipe@infosec.exchange 🦋https://teapawt.net/t.co/7oqk8MkguX

Some corner case
Joined April 2009
Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)Photo by 🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 (@Jipe_)
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
I will leave this site on Jan 1. 2025. If you see this message please reply with your mastodon @ 🙏
15
3
1
6
2,664
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
It's easier to conquer the US than Ukraine...
2
17
3
225
10,585
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
"I am American woman housewife in swing state. I voting for most excellent Donald Trump because he for the womens."
641
5,898
455
58,993
1,985,477
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
New LOL project, LOLAD a collection of Active Directory techniques! 👇 lolad-project.github.io/
11
267
5
877
127,084
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
🚨 Breaking: A zero-day vulnerability (CVE-2024-47575) has been observed impacting Fortinet FortiManager devices, posing serious risks. Learn how the exploit works, and how to defend against the threat. Read more -> bit.ly/4hbqmuR #ThreatIntelligence
3
117
11
213
39,721
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
KQL to spot missing Microsoft logs (excludes weekends since those are normally low) SigninLogs | where TimeGenerated >= ago(90d) | summarize SignInCount = count() by bin(datetime_utc_to_local(TimeGenerated,"US/Pacific"), 1d) | where dayofweek(Column1) !="6.00:00:00" and dayofweek(Column1) !="00:00:00" | order by Column1 I have additional variations of this that I am working on such as only plotting when the variance is > 30% - input from community is welcome.
17 days... It took 17 days for us to realize we were missing logs and get Microsoft to come to that conclusion and fix it 😩 Understandable though, because most of us are focused on analyzing the data we have, not noticing what is missing
5
64
306
49,249
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Also good evening folks especially @NathanMcNulty
3
11
1
118
24,224
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
❓Selon vous, comment le marché du travail en cybersécurité a-t-il évolué au cours des dernières années ? 📢Professionnels de la cyber, vous avez jusqu'au 31/10 pour participer à l'enquête de l’Observatoire des Métiers et nous permettre de le savoir ! 🔗s1.sphinxonline.net/surveyse…
14
23
6,876
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Replying to @thegrugq
Nothing to really worry about, cryptanalysis-wise. Incrementing nonces is totally ok, and tbh forward secrecy isnt a big deal, for the reasons you point out. (Unlike the report suggests, nothing wrong with deterministic IVs, as long as they're unique.)
1
2
437
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
In the EU, Hungary is now pushing a controversial law on chat control. The latest strategy is to make monitoring by “AI” optional, but the rest of the law (bulk monitoring of private conversations, including those with end-to-end encryption) remains. buff.ly/3Ym3BN7
2
2
711
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Major Russian state media are down following to a cyberattack. "Online broadcasting and internal services are not working, there is no Internet or telephony". Reports of data destruction (including backups) and expectation of long down-time. Rossia 1 and Rossia 24 (TV), in addition to more than 80 regional television and radio stations gazeta.ru/tech/news/2024/10/…
1
24
3
40
10,322
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
EXCLUSIVE: A China-linked cyberattack breached major broadband providers, potentially accessing information from systems used for U.S. wiretaps on.wsj.com/3ZRMQdR on.wsj.com/3ZRMQdR
11
115
18
141
103,289
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
TIL that if you change a AD user's password, there will be a 3 to 5 minutes time window during which both passwords are valid in order to let password synchronization occurs. Meaning that if a user you compromised an account for changes its password, you can still roll it back :D
7
65
1
454
34,496
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Today, a coalition incl. @NCA_UK announced an indictment of a senior member of INDRIK SPIDER – also an affiliate of BITWISE SPIDER – as well as multiple sanctions against key members of INDRIK SPIDER. #CrowdStrike has tracked INDRIK SPIDER since 2010 and provided critical threat intelligence to NCA in support of today’s announcement. 🔗 See our blog for in-depth analysis on these #adversaries: crowdstrike.com/en-us/blog/a…
2
24
1
88
13,205
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Breaking: The seized LockBit darknet site has been resurrected for more @NCA_UK announcements, including a link between a sanctioned Evil Corp member and the ransomware scheme, plus arrests (plural!) in the UK, and maybe France too? Information to be released tomorrow afternoon.
2
54
5
168
29,899
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Your files are dying. That SSD you keep in the closet, the one from your old system "just in case". Yup, degrading as we speak. SSDs are *shockingly* bad at power off retention, esp if it's near it's endurance rating. The JEDEC standard only requires 1 year of unpowered data retention at 30C after max TBW (writes).
281
1,341
247
10,103
1,353,271
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
It is amazing how the industry came together to invent a universal USB-C connector and then decided to instead make it all a giant mess.
212
1,230
157
11,595
929,864
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Here we go again...
9
92
4
476
60,332
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
🇺🇸 J’ai vérifié et c’est vrai
155
405
17
1,952
104,754
🇫🇷 Jean-Ph˙ ͜ʟ˙ppe 🇪🇺🇺🇦 retweeted
Une deuxième journée paralympique s'achève, la vasque veille sur Paris 🌕 📸 Paris 2024 / @OdieuxBoby
12
288
8
1,675
74,825