
Security @DetectionLab creator 日本語の生徒 Opinions are my own
Joined September 2010
- Tweets3.2K
- Following1.3K
- Followers4.5K
- Likes6.3K
Pinned Tweet
I've always thought that having the ability to set tripwires on arbitrary files on an endpoint would be a huge defensive advantage. Today, that is now a reality for all users of osquery in macOS: material.security/blog/prote…
Replying to @patrickwardle
@patrickwardle any chance you can take a look? github.com/objective-see/Kno…
209
I'm hiring a Lead Threat Researcher at @material_sec
If you're tired of casting a wide net of detections that never trigger in an enterprise environment, come solve the opposite problem where every net you cast is full of phish 🎣
linkedin.com/feed/update/urn…
🎯
Replying to @aarondfrancis
If you hate threads, you can check out the full article here: aaronfrancis.com/2024/an-arg…
Otherwise, here we go.
1
787
If you needed any additional justification to kill push notifications as a second factor at your org, here you go:
I have an opening for a 100% remote contract-based role on the @material_sec Threat Research Team.
linkedin.com/feed/update/urn…
2
316
The company that helps you opt-out of everything had to walk back automatically opting people into it’s AI processing feature
3
434
I've always thought it would be neat to visualize all 65,535 TCP ports at once. For example, a portscan would probably look pretty neat. 30 minutes and bit of back and forth with o1-preview got me a working app.
2 portscans visualized: one using sequential scans, one not
7
1,355
> Of course the utilities aren't passing the cost savings on to consumers yet, but they'll have to eventually
As a PGE customer, I want to believe, but "lowering electricity prices" is a pretty foreign concept to them
You’re unable to view this Post because this account owner limits who can view their Posts. Learn more
393
Very appreciative that these folks are largely sidetracked playing global financial CTF
Microsoft identified a North Korean threat actor exploiting a zero-day vulnerability in Chromium (CVE-2024-7971) to gain remote code execution. Our assessment of ongoing analysis and observed infrastructure attributes this activity to Citrine Sleet. msft.it/6010l7S6w
.@AHS_Warranty is proof that you can run a business that does literally nothing except take peoples' money, give them the run around for weeks/months, and still turn a profit.
The bar for competition is so low the heat of the center of the earth is melting it
1
329
Someone’s gonna be working overtime getting their memory-resident persistence back on a bunch of boxes this weekend
2
7
506
100%
Replying to @SwiftOnSecurity
It’s a common aphorism that those who seek power are not worthy of it. I unironically believe this and would pick a fucking (qualified) rando to run America every 4 years under the weight of responsibility they’d feel. You need someone who is afraid of fucking this up.
1
324
*open app*
*start typing*
*get 2 characters in*
*"would you like to install an update*"
*computer beeps 11 times while I continue typing into the update window*
I would like to headbutt whoever decided update notifications should steal the focus open opening an app
1
382
It's the XSS of LLM-world. Most of the time there's zero actual impact and we'll probably never fully eradicate it
1
4
601








