Ryan Duff (@flyryan) header
Ryan Duff (@flyryan) profile picture

AI Security @ TrendAI. Former Cyber Operations Tactician - USCYBERCOM. Tradecraft stickler. Tech Policy/Law Hobbyist. Sneakerhead. USAF vet.

Columbia, MD
Joined April 2007
Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)Photo by Ryan Duff (@flyryan)
Replying to @elonmusk
@elonmusk as much as I love my @Tesla, the service experiences are so awful that I’m unlikely to buy another. Ordered new set of T2 tires to have installed. They initially put wrong sizes on the rear and then told me it was right when I called it out. Had to press to get it fixed. Then, when I picked up my car, they are the last generation T1 tires and apparently it’s my fault for not explicitly telling them I wanted the specific tires I ordered. Now I have last-gen tires I paid $2100 for that aren’t what I ordered.
1
1
250
@elonmusk @Tesla this is what I ordered (CLEARLY says T2). It never said T1 anywhere on the estimate. The fact that the tech admitted they would have gave me them “if I asked specifically” but they gave me last gen instead is the most upsetting part. It’s like giving me a 2025 model when I ordered a 2026 and then saying it’s my fault because I didn’t say I wanted a 2026…
1
66
Are you ready for a world where AI models are better than most junior pentesters? How long until they are as good as senior red teamers?
This quoted post is unavailable.
1
17
2,092
Somehow, @CrowdStrike also managed to screw up their own apology gift cards with a bad update.
1
3
491
Wow.... This is insane.
DHS declassifies project Kona Blue via AARO, a special access program for recovering materials used for inter dimensional, time and space travel... aaro.mil/Portals/136/PDFs/UA…
1
3
677
The xz package tar's were backdoored. Only discovered because the backdoor slowed down sshd enough for Andres Freund to investigate. Consider the case where the backdoor didn't cause perf issues... How long would this have gone undetected? openwall.com/lists/oss-secur…
6
318
36
1,137
186,689
Another reason to just stick with Windows Defender.
221
Now they have updated their tweet to a broken link. Can't make this up!
Some of our customers are experiencing wireless service interruptions. We are working urgently to restore service to all who are impacted. For the latest, visit: go.att.com/networkupdate.
1
393
Finally something. Not an explanation but at least things are coming back.
Some of our customers are experiencing wireless service interruptions. We are working urgently to restore service to all who are impacted. For the latest, visit: about.att.com/pages/network-…
There's a new version of this post
192
Sounds like the answer is no. Coming up on 8 hours without any comms from @ATT about what is happening, even though there is rampant speculation. #attoutage
Has anyone managed to get a statement from @ATT about what’s going on? Their twitter hasn’t been updated in 3 days and their reps are taking customers to DMs to “help”. #attoutage
451
Has anyone managed to get a statement from @ATT about what’s going on? Their twitter hasn’t been updated in 3 days and their reps are taking customers to DMs to “help”. #attoutage
2
1
1,003
Companies/govt need to be quick abt saying what caused this to stop speculation...they know or will know quickly I am told by two it experts in the space. Transparency!
42
22
4
140
81,953
Waking up to a nationwide AT&T outage is wild. No posts from @ATT either even though it’s been down since around 3:30AM ET. A wildly redundant nationwide network going down like this means something. It may or may not be an attack but, if not, we should still worry about the fact that 200 million people are potentially without access to 911 services for 5 hours with no reason or notification. #attoutage
4
1
1
2
1,757
Finally hitting CNN. They pointed out that @ATT actually runs the largest 911 network in the country.
1
510
Another big impact of an outage like this is 2FA systems failing. Lots of people not being able to login to critical services because they can’t receive an SMS token. #attoutage teapawt.net/narryonthenet/status/1…
Replying to @vxunderground
Clearly related to why Duo VOIP and SMS has been degraded all morning status.duo.com/
1
3
717
Replying to @andrewhuang
@andrewhuang you gotta check out @KjSawka. He has been doing live drum and bass for years and even plays drums for @Pendulum.
1
102
It's nuts that gov accounts don't have mandatory 2FA honestly but it's also nuts that the SEC didn't have it enabled. Maybe they should have listened to their own advice.
Replying to @Safety @SECGov
Hi @GaryGensler this is a reminder to secure your financial accounts as well as protect against identity theft and fraud. Remember to: 🔒Use strong passphrases or passwords 🔒Set up multifactor authentication 🔒Keep account alerts turned on #CybersecurityAwarenessMonth
1
320
Wait... What does this prove? They took something that should never touch the internet (a hardware wallet private key) and put it on iCloud. How does this prove the security of ZenGo? This comes off as ZenGo trying to pass this challenge off as a proper representation of their security vs a hardware wallet. Sneaky tricks like this don't build confidence in security. It just fools the uneducated.
This Post is from an account that no longer exists. Learn more
353
My hometown had a block party event downtown for NYE. For the countdown, they put a tobacco leaf on a lift and lowered it. No crazy lights or pyro. Just a leaf going down some.
2
439