OSINT⁃Android⁃Hardware⁃Cryptography⁃Forensics⁃Virtualization⁃GameDev #w00w00 cryptographyishard(@)https://nitter.gq/t.co/Jwv7la6YPg ∧·∪
lurk moar
Joined January 2013
- Tweets81.6K
- Following8.7K
- Followers7.8K
- Likes5
cryptopotato retweeted
Precisely this. It turns out that adversaries are rational economic actors (usually). What matters is raising the end-to-end cost of them achieving their objectives against *your* organization.
It's not about how many vulnerabilities there are, it's about what is the *lowest* cost to *a* vulnerability that gets they through any security boundaries that are critical nodes on their attack path.
cryptopotato retweeted
You can instantly tell when someone has a lot of practical cybersecurity experience when they instinctively distinguish between the possible and the probable.
cryptopotato retweeted
Why hasn't the war in Ukraine looked like people thought the first major conventional war in the Internet era might look like from a cyber standpoint?
Well, think about the circumstances where cyber capabilities would actually be most useful in warfare.
(A quick🧵)
I think the invasion of Ukraine is a really solid case study on what an actual "cyber war" looks like. Russia pulled off a couple of massive cyber attacks early on in the war (and before the war), but once the shooting started, they focused almost all their efforts towards kinetic warfare.
I suspect this is due to the fact that cyber warfare capacity is a subset of intelligence capacity, and Russia quickly realized that their intelligence capabilities are better put to use aiding (much more impactful) kinetic attack, or helping defend against enemy kinetic attacks, rather than annoying civilians with random outages.
I'm also moderately certain this is how it'd go in any war. An initial burst of cyberattacks as powers deploy capabilities their nations had built out pre-war, but then a strong pivot to focusing on support for kinetic attacks as things run their course.
Unlikely kinetic attacks, most cyber attacks aren't highly repeatable and reusable. Taking out power substations requires a couple of missiles, or years of work building, planning, and testing cyber capabilities, which have components that are often specific to individual software/hardware brands. Once the adversary figured out the what & how, it's often possible for them to mitigate the effects and/or prevent a repeat attack.
Meanwhile, every nation can mass produce kinetic capabilities, and the "just send more missile" strategy tends to work much better than even the most sophisticated cyberattacks possible.
Similarly, for a pure cyberwar, a cyber power would just have to, for some reason, wish to tie their own hands behind their back by taking all kinetic capabilities off the table. Given how much cyberattacks tend to impact civilians, I don't see any reason why any nation would commit to this.
The idea also runs into huge issue when it comes to conflicts involving less technologically reliant nation, especially the ones that can and do turn of the entire internet. They can cause way more harm to you than you can to them.
Cyber attacks are really just not that effective relative to the time and cost of producing them, and "cyberwar" being the future of warfare seems like an idea that is extremely misguided at best.
(Obviously not telling this to Andrew, he knows way more about this stuff than I do, just figure the post warrants a retweet since it was what inspired these ramblings).
cryptopotato retweeted
If an electrical engineer says "engineers", unqualified, they're talking about engineers. If a mechanical engineer says "engineers", unqualified, they're talking about engineers. If a computer programmer says "engineers", unqualified, they're talking about computer programmers.
cryptopotato retweeted
It's been 0 days since a model independently omitted an important step that it had been instructed to do, rendering hours of work useless.
cryptopotato retweeted
This is a good filter for people who I don’t want to work with. Please understand how computers work. This isn’t even about understanding Docker. Any software person should know how the layers work at a high level and this is a VERYYYYY high level.
cryptopotato retweeted
We're cooked.
terminal2shell.com
cryptopotato retweeted
Many of the GitHub LLM pentesting frameworks start by firing off tools like Nmap, Nuclei, httpx, and ffuf.
None of these are particularly quiet, especially at scale. For internet facing assets, existing controls like WAFs, IPS, and rate limiting can still detect and block much of this activity.
Over time, organizations largely accepted a certain level of internet scanning as background noise. Since their custom web applications weren’t necessarily being actively targeted, many stopped putting much effort into detecting and blocking this activity.
cryptopotato retweeted
If you missed it...Windows Paint Remote Code Execution Vulnerability(CVE-2026-83844)
Microsoft revised the official CVE advisory on November 7 from network/no-interaction to AV:L/UI:R, reducing the score from 8.1 to 7.0 and changing “over a network” to “locally"
cryptopotato retweeted
It's wild how quickly big tech went from making green energy and carbon neutrality central to its messaging to scrambling for whatever power it can get to run data centers.
cryptopotato retweeted
It was the 90s and an eggdrop botnet powered by custom Tcl scripts was protecting IRC channels from rival IRC groups with botnets of their own…
cryptopotato retweeted
modern software design is just a competition to see who can fit the least information on screen
Here's your first look at Microsoft's new WinUI 3 Registry Editor, but it's a developer sample preview, so it may not ship on Windows 11 anytime soon.
Windows Latest found the app inside Microsoft's open-source Reactor repository, and I built it myself on Windows 11.
It keeps the familiar two-pane layout but replaces the cramped Windows 95-era interface with native WinUI 3 controls, a dark-mode-ready design, and smoother animations.
It can read, create, rename, and delete registry keys, edit values, and search the registry. It even uses Mica, with no Electron or WebView2 involved.
There are still unfinished features, and Microsoft hasn't announced plans to replace regedit.exe.
This is a developer sample made by Microsoft, not an official Windows 11 replacement.
ALT Windows Registry Editor
cryptopotato retweeted
30 years ago today, Phrack 49 published Aleph One’s “Smashing the Stack for Fun and Profit”.
A legendary paper that inspired generations of hackers and helped shape modern exploit development.
Still an essential reading.
phrack.org/issues/49/smashin…
Phrack 73 is coming soon!
cryptopotato retweeted
This, 100%! And I’d add one more thing: try working inside a company, not just providing security services to one.
I spent decades in offensive security before moving into security roles at large organizations, and that experience taught me so many valuable lessons about what it actually means to deliver real value.
You learn to focus on what really matters to the business, how to enable other teams while keeping things secure, and how to make security an enabler rather than a blocker.
cryptopotato retweeted
Finding CVEs is now the new 3D printing for infosec: There's no effort, nobody wants them, and we all have to pretend to be impressed.
cryptopotato retweeted
haven’t we been defending against automated, distributed attacks for decades? how exactly do 1,000 AI agents suddenly invalidate existing defense and containment strategies?
legitimate concern, terrible take
Calif CEO @XorNinja says cybersecurity has no playbook for stopping 1,000 AI agents attacking a network simultaneously, even if defenders can detect them:
"Attackers always adapt faster and earlier than defenders. Even the AI companies themselves don't have great security."
"Imagine you enter a cage fight, but you are blindfolded and the other guy stay in the dark, and every once in a while they would come out and punch you and then disappear."
"How could you win that fight?"
"I was at Google and that's basically the mantra at Google. In security you have three things: prevention, detection, and response. And Google accept that prevention gonna fail at scale."
"You can detect them, but does it help you if you find that there's maybe a thousand agents hacking you right now inside your network? How can you contain them without a full shutdown of your system?"
"This actually requires defense to come up with a new paradigm. I haven't seen anybody come up with a good idea here. We're not there yet."
@calif_io
cryptopotato retweeted
Yet LinkedIn and Microsoft products haven’t got better?
This is f*cking insane. Microsoft CEO Satya Nadella:
"Microsoft has 200,000 employees, and we're going to have 2 million agents, or 20 million agents, all in a loop
What happened in coding is going to happen across all work. You give it a high-level intent and it goes off and does the whole job"
In this 1-hour talk with LinkedIn founder Reid Hoffman, he explains why AI stopped being a tool and became the future of the company
Autocomplete → Chat → Agent Mode → Fire And Forget → 100 Agents Per Person
He already runs 100 agent sessions at once, so many that Microsoft built a new app just to manage them
The people who learn to run agents now will be the ones every company hires next
This talk is worth more than most $3,000 AI courses
Bookmark and watch it today
Then read the enhanced edition of harness engineering below and build your first agent team ↓