Gary Blosser

@catsalad@infosec.exchange @cR0w@infosec.exchange Years back I was pentesting a state government agency and they were so proud of their Sophos with 'advanced heuristics.' Admittedly it did finally notice something was wrong about my port 443 HTTPS reverse shells. So Sophos sitewide blocked every computer from using port 443 for anything. I shrugged and watched my backup shell ports over 80 come online. Guess what was the only port usable to manage Sophos and dismiss the block or see what caused it? 443 😅 So agency IT had to drag a monitor, keyboard, and mouse to the server in the datacenter to resolve. The kicker? The log messages only had endpoint information and did not point to my laptop at all. 🤣

@lcamtuf@infosec.exchange @catsalad@infosec.exchange @shapoco@misskey.art Millicoprocessors are not real, you do not swallow 6 millicoprocessors in your sleep a year, the millicoprocessor is your friend. 😈

@krypt3ia Geh, reminds me of an interview I had years ago. First Interview/HR/Job Description: Internal red teaming rotating through locations during the year :blobthinking: Second Interview with IT folks: Just run Nessus, paste findings into ticket system 🤮

@henryk@chaos.social @mossmann@mastodon.social I've just been pronouncing it as morgue. A place where you keep dead things seemed quite appropriate for 'morge' 😅

@davidrevoy and this is why every witch in our tabletop campaign is evil aligned...

@da_667 Why cemetery ground-nesting bees when zom bees was right there?

RE: https://flipboard.com/@associatedpress/u.s.-news-lhl4uphvz/-/a-cQEqr_A1SU6vufFmYp5pwg%3Aa%3A3199720-%2F0 ICE currently terrorizing Las Vegas airport. Black Hat and Defcon in a few weeks. I need to buy some more popcorn.

-sigh- Google now requires a phone number on file for any login.

RE: https://infosec.exchange/@hewyler/117028900733871597 In other news, AI prices expected to increase by 3%+ over the next year...

RE: https://infosec.exchange/@masek/117270577928122683 Oh, that is why all the AI companies were talking about guardrails and slowing down today. A coordinated effort to try an prop up the 'strength' of their figurehead for the GOP so he appears to be 'in control' of the AI companies instead of being their puppet. 😫 Next step will be him threatening that we will lose AI if the GOP does not win the midterms...such banal predictable fear-mongering.

@GossiTheDog@cyberplace.social The more important question is did they instead give you a follow or like? 😋

@da_667@infosec.exchange I mostly just watched my city get smoked over the weekend...😅 On the good side the wind is blowing the fires North for now, but if it shifts to southwest I'll have friends and family camping out at my place (I am far from the fires). Scary to see so much of the northside in level 3 evac status though 😬 https://www.arcgis.com/apps/instant/lookup/index.html?appid=337af083184c474d9d9181bb44f957b0

@xabean@infosec.exchange I feel your pain, there is someone back east with my name that uses my gmail for everything they can. Medical records, libraries, grocery deliveries, and more...it is amazing the sheer number of services that don't verify ownership of an email address. You'd think they'd learn after years of their accounts being closed, orders cancelled, and such they would learn. 🤷