Chris Long (@Centurion) header
Chris Long (@Centurion) profile picture

Security @DetectionLab creator 日本語の生徒 Opinions are my own

Joined September 2010
Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)Photo by Chris Long (@Centurion)
I've always thought that having the ability to set tripwires on arbitrary files on an endpoint would be a huge defensive advantage. Today, that is now a reality for all users of osquery in macOS: material.security/blog/prote…
7
32
4
90
20,033
Honeypots are so back
1
1
18
814
I'm hiring a Lead Threat Researcher at @material_sec If you're tired of casting a wide net of detections that never trigger in an enterprise environment, come solve the opposite problem where every net you cast is full of phish 🎣 linkedin.com/feed/update/urn…
1
1
606
I’m so glad it’s not just me
The JQ CLI should just BE a ChatGPT client, so there's no pretense of actually understanding this syntax. Cut out the middleman, just look up what I'm trying to do, for me.
1
695
If you needed any additional justification to kill push notifications as a second factor at your org, here you go:
1
2
15
1,895
I just assume I'm being shelled every time this pops up
3
1
7
2,733
This is a hill I'll die on
Hot take: With the deprecation of browser exploits being widely deployed or effective, a phishing test must obtain at least part of the authentication flow for you to truly fail it.
1
3
827
The company that helps you opt-out of everything had to walk back automatically opting people into it’s AI processing feature
3
434
I've always thought it would be neat to visualize all 65,535 TCP ports at once. For example, a portscan would probably look pretty neat. 30 minutes and bit of back and forth with o1-preview got me a working app. 2 portscans visualized: one using sequential scans, one not
7
1,355
> Of course the utilities aren't passing the cost savings on to consumers yet, but they'll have to eventually As a PGE customer, I want to believe, but "lowering electricity prices" is a pretty foreign concept to them
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
393
Very appreciative that these folks are largely sidetracked playing global financial CTF
Microsoft identified a North Korean threat actor exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote code execution. Our assessment of ongoing analysis and observed infrastructure attributes this activity to Citrine Sleet. msft.it/6010l7S6w
3
1
11
3,307
.@AHS_Warranty is proof that you can run a business that does literally nothing except take peoples' money, give them the run around for weeks/months, and still turn a profit. The bar for competition is so low the heat of the center of the earth is melting it
1
329
Someone’s gonna be working overtime getting their memory-resident persistence back on a bunch of boxes this weekend
2
7
506
100%
Replying to @SwiftOnSecurity
It’s a common aphorism that those who seek power are not worthy of it. I unironically believe this and would pick a fucking (qualified) rando to run America every 4 years under the weight of responsibility they’d feel. You need someone who is afraid of fucking this up.
1
324
*open app* *start typing* *get 2 characters in* *"would you like to install an update*" *computer beeps 11 times while I continue typing into the update window* I would like to headbutt whoever decided update notifications should steal the focus open opening an app
1
382
Great, those details aren't important at all
3
280
It's the XSS of LLM-world. Most of the time there's zero actual impact and we'll probably never fully eradicate it
I genuinely don’t get the fascination in “jailbreaking” prompts.
1
4
601