Cybersecurity Consultant Convincing people 'password' isn't a good password. Rarely blogs. @WorstPasswords' botdad. MASTODON: [email protected]
New York, USA
Joined September 2013
- Tweets298
- Following297
- Followers409
- Likes928
Pinned Tweet
XXE CVE finally published: labs.withsecure.com/advisoriβ¦
πππ£π«ππ£π0 retweeted
@shehzade1618 was an intern at my old company in 2022. His goal for his internship was to get a CVE before going back to school. The mother fucker learned Android reversing and ended up getting 4 CVEs!
labs.withsecure.com/publicatβ¦
Keep an eye on this man!
πππ£π«ππ£π0 retweeted
π tl;dr sec 153
Featuring great work from:
@controlplaneio, @_nynan, @kuggofficial, @berzerk0, @bitdotioinc, @dave_universetf, @cloudqueryio, @iximiuz, @ckotzbauer1, @djschleen, @crashappsec, @JavaJulius, @DVCorg, @trailofbits, @semgrep
and more!
tldrsec.com/blog/tldr-sec-15β¦
![[tl;dr sec] #153 - Postgres' Insecure Defaults, SBOM, Prototype Pollution](https://pbs.twimg.com/card_img/2115429475920031745/3alYLXAb?format=jpg&name=800x419)
About time I got this through. Been a long time coming but hereβs an article a coworker and I have been working on for years on Prototype Pollution labs.withsecure.com/blog/proβ¦
cve.mitre.org/cgi-bin/cvenamβ¦ This has got to be one of the funniest CVEβs of all time. Playing a Janet Jackson music video can crash laptops via resonant frequencies
πππ£π«ππ£π0 retweeted
I'm giving a talk at the Biohacking Village at Defcon this year
And I fully expect people to pay more attention to Pichu than what I'm saying
Talk is at 10:30AM PST on August 13
@DC_BHV @WithSecure
πππ£π«ππ£π0 retweeted
WithSecureβ’ and healthcare technology company @CueHealth have addressed a security issue that WithSecureβ’ discovered in Cueβs COVID-19 test.
withsecure.com/en/expertise/β¦
#hacking #Covid #infosecurity #infosec
Great work by β¦@Yogehiβ© as always! withsecure.com/en/expertise/β¦
πππ£π«ππ£π0 retweeted
Next up I gotta get The Reg to report on me rambling about butthole cameras π
Cybersecurity pro @VicHarkness traveled to Ukraine to offer humanitarian help β and while taking a break in the western city of Lviv she described to The Register's @GazTheJourno what it's like in the war-torn country
theregister.com/2022/03/14/lβ¦
πππ£π«ππ£π0 retweeted
I'm excited to finally publicly talk about Boops Boops, a re-skinned Drozer application lol
The story behind this application is that for Pwn2Own, I found a way to one-tap install a malicious application that gets uploaded to the Galaxy Store (1/?)
1. Participants at @FSecure_Consultβs #yaketyHack Web App Security Sessions getting ready to hack a simulated bank
2. Hours later, after becoming simulated millionaires
Your coworker leaves their computer unlocked. How do you harmlessly yet effectively teach them a lesson in operational security?
The go-to is making them say βNext Roundβs on me!β in a company chat channel
Going live with the #yaketyHack Web Application Security Sessions for @FSecure_Consult soon! Letβs get into the virtual bank and get that virtual bread π π»
New βcomputer personβ milestone: I went to type βsubconsciousβ and instead my phone suggested βsubdomainβ
Iβve now found two vulnerabilities in two different web apps that were due solely to spelling or grammatical errors
