CraftyZA

@troyhunt For a long time I said I will never be a victim. At a previous client that does collect telemetry on phishing success amongst employees I was almost caught. office 365 password reset. Any ways, never say never. the crooks are getting better... or ai is helping them

It finally happened - I got phished. Impact is limited to the Mailchimp mailing list for my blog, brief blog post with details here and more to come later: troyhunt.com/a-sneaky-phish…

@troyhunt This post had me wired up. Enough so that I did my own research. This is only 99% accurate. I analyzed the data, and found my email in part 593, but it was from an ancient breach. Have not used that password in 8 years. I do not install 💩 on my pc

How do people end up in stealer logs? By doing dumb stuff like this: “Around October I downloaded a pirated version of Adobe AE and after that a trojan got into my pc”

@DeanMichaelOwen @kaystrobach @cstoudt @sysxplore 2 active connections using windows rdp to same server

RDP as a CLIENT or as a SERVER? I can Remote Desktop into a Windows PC and it’s so fast for office work that it’s literally like being physically at the machine. But trying to remotely connect to a Linux system has been slow and kludgy for me. RDP can connect to a single monitor PC and adapt it to three monitors remotely. It can adapt different resolution. It can play sounds for notifications on the client. In full screen mode all of the system keystrokes in Windows pass right through to the host. Even printers are redirected to allow printing to your local system from an application on the remote host. The best I’ve seen connecting TO a Linux desktop (tried this with Linux Mint two years ago) was the rough equivalent of a VNC connection. Ok for occasional remote SUPPORT, but not for a smooth work environment. I would be glad to be wrong about this, but the fact that Windows has had solid, reliable RDP capability since 2000, and is literally built into the OS, makes Linux look like a non-starter. The Linux community has had TWENTY-FIVE YEARS to catch up on this and it’s still awful.

What's stopping you from using Linux?

@DeanMichaelOwen @kaystrobach @cstoudt @sysxplore All of that is working on linux. Resolution, multi display, sound... I connect using windows remote desktop. I can even log into the machine multiple times, and each gets a session. Windows desktop only supports a single connection. only windows server support multiple

@dave_alive @linuxopsys Everything was CLI in '97 X had no desktop managers like today. It was a whole other beast.

@linuxopsys we used to have to be hackers if we wanted any of the device drivers to work, but those days are gone.

LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS! LINUX USERS ARE NOT HACKERS!

@dave_alive @linuxopsys I remember what I had to go through to get redhat (not rhel) to use my creative sound blaster. Had to d/l the modules, compile the kernel. (not that hard) Then you had to compile a tool to play mp3. mplay? something like that. then jump on BitchX irc to get some mp3 files to play

@davidbombal @hashcat The PDF only covers the nvidia install in windows? My nvidia drivers on kali broke 6 months ago after doing a dist-upgrade. Would love to see an updated guide getting nvidia and cuda running on kali.

Hashcat course has started ... 🐈 In this episode we use a GPU to bruteforce a WiFi network in seconds (capture with hcxdumptool) 🙀 YouTube video: youtu.be/b5zQ6xTQGfY #wifi #hashcat #hash #Linux #KaliLinux #hacking #Cybersecurity #infosec #cyber @hashcat

@0xor0ne @voidstarsec Had some success with chinese ip cameras in the past. Recently tried my luck breathing new life into a logitech squeezebox duet receiver with no luck. No uart points on the board. Next step would be to desolder the eprom and do a dump. Too much effort vs reward.

Intro for beginners to embedded devices reverse engineering Ghidra setup: voidstarsec.com/blog/ghidra-de… Tools: voidstarsec.com/blog/intro-to-… Firmware extraction: voidstarsec.com/blog/uart-uboo… Credits @voidstarsec #reverseengineering #infosec

@bluesoundhifi I've been sent a BlueSound Node 2 for repair. Do you have a service manual for me?

@ratedjunior older :-| Ever seen a hard drive on caster wheels? A whopping 4Mb drive.

Are you this old?

A lot of fighters can learn from this. When you loose, do so with grace! Same for winning. Do it with grace.

The win for @dricusduplessis makes me so happy. Glad to see @stylebender loosing gracefully. Looking forward to see izzy fight again. Dricus, sterkte met die Strickland camp. Gooi sweeties!

@ChShersh Fedora is becoming what ubuntu set out to do 20 years ago. Make things simple.

After 10 years on Ubuntu, I'm done with it 🙅‍♀️ I updated my system for the first time in a month, and my login screen hangs after entering the password 🤬 I can't endure this anymore. I want to try something that works. What Linux distro would you recommend? 🐧

@ChShersh Why drop linux because 1 distro went bad? Plenty other debian based distros. Personally I switched to fedora for work stations, and redhat for servers in my lab. I would work for redhat any day.

I had been using Ubuntu for 10 years. Last year, I applied to Canonical for a job to develop Ubuntu itself in Rust. Before the interview, they asked me to write a 20-page essay about my life, aspirations, philosophy and whatnot. Anyway, this is my desktop now.

This is something I have preached for a while for this exact reason. Also add unicode characters in your password. 90% of online services support it. ie "mySecure,P@55wd💩" youtu.be/cjfXjZ411Ho?t=…

Keeping your family safe online starts with you. Offspring Technology provides comprehensive advice on how to protect your children from online threats. Visit our website offspring.technology to learn more. #OnlineSafety

@BarneySimon This happens when mixing viagra with your compost.

Please explain what this is?

@spokenlikeageek @troyhunt @lufthansa Keepass is excellent. My personal choice. Does not go online. However, i know of no device that has it preinstalled. Shipping a device with it might be considered anti competitive?

@troyhunt @lufthansa “At Lufthansa Group we recommend Keepass which is already pre-installed on most devices” eh? It’s not on iPhone and I didn’t think it was preinstalled on android either.

This is awesome, thanks @lufthansa! And yes, I’ve had the domain for years since a news anchor got the name wrong: haveibeenprawned.com

@therealshodan The problem is that honeypots are too easy to spot these days.

6 years ago I started logging every public key that tried to log into my vast honeypot network. I used to see hundreds but this has dropped in recent years. We’ll see if the libxz backdoor key turns up.

@sherrod_im Not sure why any company would want to subscribe to RTO. By now the lazy chance takers who abused WFH has been identified and dealt with. But productivity is up. For certain meetings I would ask the team to join at the office. Ie when we do a large design on a whiteboard.

If you’re in a mandated return to office situation, what kinds of perks have been added to make it attractive? Food? Drinks? Events? Anything like that?