Security Generation

I'm now on @securitygen" target="_blank" rel="nofollow noopener">infosec.exchange/@securitygen, give me a follow there if you're on Mastodon.

@matthew_d_green This is still on my todo list, but how does one choose a server nowadays?

“The entire information security community has moved to Mastodon.” Can attest.

We are learning so much about Free Speech this month! Glad there’s Mastodon. theintercept.com/2022/11/29/elo…

I think most of us have witnessed this over the past three years 😂 “Overconfidence in one's reasoning abilities and distrust of science are linked to COVID-19 conspiracy beliefs” psypost.org/2022/11/overco…

Before Elon Musk took over Twitter, it was apparent that his conception of "free speech" was "I and people who agree with me should be able to say whatever they feel like saying without being criticized or mocked in ways they don't like." This happens a lot, not just with him.

While I haven't been active on Twitter for some time, I think this is likely the start of the end for the platform, if not the company. Sad, because it's been a good ride. Not sure where I'll hop to next - maybe need to figure out how to Mastodon first.

I wrote about how Twitter feels right now. I hope you like it. But if you hate it, I understand. mikedrucker.substack.com/p/a-rich-man-w…

Ever wonder how Russian cruise missiles find their way into Ukrainian playgrounds, power stations, and apartment buildings? Well thanks to @bellingcat’s @christogrozev wonder no more. It’s time to meet the team behind the targeting of Russian missiles on civilian infrastructure.

It bears repeating: SAML/SSO should not be something gate-kept under an Enterprise tier. This is basic security even for small orgs. Companies need to stop using this functionality to squeeze extra money out of customers rather than providing actual added value in their product.

@Chick3nman512 @hashcat @nvidia Can you try this against a suitable-configured Argon2id?

First @hashcat benchmarks on the new @nvidia RTX 4090! Coming in at an insane >2x uplift over the 3090 for nearly every algorithm. Easily capable of setting records: 300GH/s NTLM and 200kh/s bcrypt w/ OC! Thanks to blazer for the run. Full benchmarks here: gist.github.com/Chick3nman/32e…

It's Inbox Zero Day! I've #HitZero 4 weeks in a row with @Superhuman (after getting back from holiday) Check it out: superhuman.com/ibz

Leaked documents online show the purchase (and documentation of) an $8,000,000 iOS Remote Code Execution 0day exploit

Roman Numerals xkcd.com/2637

Doing an article on this. Fight, stay informed, take none of your rights for granted. Overreaction is better than inaction in this regard. twitter.com/MaximumCap/sta…

Time to rise up, no? 39% of the population just dictated women's reproductive freedom in the USA. That is not representation.

Do not be silent.

The decision by the UK Govt to approve extradition of Julian Assange to the US is an outrageous betrayal of rule of law, media freedom and human rights. @AlboMP must pick up the phone now and demand an end to this madness amp.abc.net.au/article/101115…. #FreeAssangeNOW #auspol #politas

And we’re hiring for security roles! careers.upvest.co/departments/se…

We couldn’t be more excited to share our Practical Guide to Incident Management! 🎉 Every company needs a plan for when things go wrong. Here it is – our years of collective knowledge & experience distilled into a practical guide. What's your favourite chapter? Comment below👇