Conan

@ImposeCost extortionists = ransomeware etc? *puts on "well actually" hat* Assuming the death penalty for ransomware is just as effective a deterant as the death penalty for drug trade, they wouldn't. *takes off the "well actually" hat*

@Jun34u_sec Album cover

I fit this scene a little too well

@code Did you run this past the security team first?

@Code now has built-in port forwarding. This feature allows you to share locally running services over the internet to other people and devices.

📅 August 2023 (version 1.82) of Visual Studio Code is here! This update includes many exciting features and improvements. code.visualstudio.com/updates/v1_82 Let's dive into the highlights... 🧵

@SwiftOnSecurity I respect and admire you, but ... the equals signs don't vertically line up

Prelimary solution to get the internal Defender heartbeat time and compare it to current. Once I understand heartbeat internals and add other markers I'll share a bigger solution. Powershell: pastebin.com/wVTW8VBy ChatGPT convo used to create it: chat.openai.com/share/a08609b4…

@summer__heidi ...Seen the film jaws recently?

I'M ON A BOAT

@NathanMcNulty Could / should the CVE system be expanded to include this? Or something from CISA to apply pressure

@ComputerDoWhat Yup, and because it's not commonplace and something that everyone demands, they aren't going to address it unless demand finally increases Instead, we've given up and put our hope in TI feeds to keep us safe, which is obviously doing great...

Application control and explicit outbound filtering would prevent the majority of compromises, but nobody is interested in actually fixing the problem because there's more money to be made in selling the farcical idea that we can fix arbitrary code execution and poor DNS hygiene

@brianwhelton Least it's not zip ties

There is a special place reserved in hell for people who do this.

Holy shit is right. This write up is great and unsettling. Either the attacker got extremely lucky or they are good enough to have found the key in the trash that was missed multiple times.

@TriRIK3 @JenMsft Yes!

Tip - you can drag & drop icons in and out of the hidden icons flyout

@JenMsft Restoring the show me everything option would be nice, was dropped in win11 it seems HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer DWORD: 0 Value: EnableAutoTray

At this age, my boys seem to spend more time fighting than getting along. It drives me nuts and I'm trying to find ways to not let it get to me. Me just moments ago, mouthing to myself behind a closed office door: "Yikes. Sick burn!"

@vxunderground Didn't those samurai guys all get very dead in the end?

@ImposeCost en.m.wikipedia.org/wiki/The_Mythi…

@ImposeCost More people, more lines of communication, more time spent on coordination as opposed to the actual output (overhead), more complexity = entropy for errors to happen

@MalwareJake Does "is cluster fuck" count?

When I walk into an IR and the customer can articulate their IT architecture, that's a good day.

2023?

@ImposeCost haha yeah, slightly butchering the George Box line. Seems applicable en.m.wikipedia.org/wiki/All_model…

@ImposeCost ... but some are useful