Sabitlenmiş Tweet
Nick Carr
13K posts

Nick Carr
@ItsReallyNick
Tech Director / Threat Intelligence at Microsoft. Previously, Director of Incident Response & Intel Research at Mandiant. Former Chief Technical Analyst at CISA
Virginia, USA Katılım Eylül 2009
3.5K Takip Edilen38.4K Takipçiler

@ImposeCost @HackingLZ Apex actors show restraint
Scattered spider showed none
Now they are wearing them
Nick Carr@ItsReallyNick
On APT intrusions & execution guardrails: 💬"The hallmark of sophistication is restraint" pscp.tv/FireEye/1vAGRW…
English

@HackingLZ I don't know anyone who has said they are "sophisticated nation state."
Synthetic myths.
English

excited to share a new toy called bash. it’s a multiplayer coding agent with social built around it
starting with invites and a waitlist, and we’ll open it up as quickly as possible
bash.tv
English

@HackingLZ @st8less @Ubiquiti trusting our big corportations’ car-computers & cameras get us back to our home-computers & cameras, like true security pros 😅

English

Oh nice that looks cool. I didn’t consider GL.iNet but… I have dealt with enough compromised ones / covert networks (real talk).
I went with UniFi Travel Router based on security review & nice integration – mainly ease of rolling with a G4 video camera. Great for hotel travel or on the RV with Starlink, etc
Overheating hasn’t been an issue but I have only run for a few days at a time, and always in A/C so I haven’t pushed it. I also use a 5V/2A (10W) power supply – haven’t tried powering it from a battery yet
For fun you could run yours with UniFis USB-C cable with power display to see if yours is dropping power to cool, I thought it pulls 1-3W variably store.ui.com/us/en/products…
English

@ItsReallyNick @HackingLZ @st8less @Ubiquiti How do you like the Travel Router so far? My experience has been mixed. The compact form factor is excellent, but the resulting limitations in cooling (=overheating), as well as the limited processing and Wi-Fi performance, are making me consider switching to a GL.iNet Beryl 7.
English

@JohnHultquist @HackingLZ @st8less @Ubiquiti Yessir! 🫡 Went through a travel concierge that booked with a bunch of local services in-country which was a great experience, but not sure how much it advertised our plans
English

@heybr0_exe @HackingLZ @Ubiquiti what is this wizardry? Didn’t even look at the enhancers…
store.ui.com/us/en/products…
English

@HackingLZ @Ubiquiti When @Ubiquiti sends you that camera, do yourself a favor and grab the enhancer too. It’s the cat’s pajamas.
English

@HackingLZ @st8less @Ubiquiti Just recently converted to UniFi for everything.
Using the Travel Router in Europe w/ G4 instant in hotel rooms was magic
English

I rolled G6 instant and G4 for some internal spots I didn’t need resolution.
I think it’s time to add a proper Network Video Recorder, any tips? Right now I’m running off of the UDR7 and several U7 mesh units. It’s been great for not having cable run, but the cameras I really need to get NVR & drop some cables in
English

@4nx1ou5 @ImposeCost For sure. I didn’t intend to suggest in the government scenario (but especially the corporate one) that all compliance is healthy
English

@ItsReallyNick @ImposeCost I get what you mean, but in my experience being aligned to corporate priorities often just meant being the one willing to take the most abuse and keep the place from falling apart 😓 Doesn’t help that the infosec talent pool is virtually non-existent 🤐 Just venting sorry lmao 😆
English

The government wants you to have kids and to buy homes.
I also suspect government needs to eventually figure out how to pivot away from social security?
Andrew Thompson@ImposeCost
@_MG_ The actual answer is incentivizing child birth. I'll never forget later in my government career learning about how birth rates are a national security issue. It actually made sense.
English

Look…
I get it
I was worried about posting my
github.com/secdev02/EasyT…
But here’s the deal.
It took me, 1.5-2 hours to build.
The new thing… here is the
“Request device code on landing, copy to clipboard “
We called it “demo tokens” when I was working with @_JohnHammond and @gleeda
But you need to understand these things.
Detonate them, see the logs
I’d rather you have this to test the effectiveness of your defense, than to imagine you are safe and your defenses are working.
Carry on.
English

If you’re feeling the pain at tax time, it’s probably a sign that you aren’t doing what the government wants you to be doing.
Fwiw, I find the same applies at work. If two people have the same employer, one is thriving and one is experiencing chaos & conflict. I can’t tell you who is the more talented worker, but I can tell you who is aligned to corporate priorities.
English

iirc “social engineering” originally referred to shaping society by incentivizing or penalizing certain activity – tax code is the clearest form of that: they want you to have kids, own homes, start businesses, employ your family, and support charitable causes
I don’t love the implications that has on personal freedom in general - and things fall apart with taxing work/productivity - but the core tax code credits above seem to be objectively for the collective good
English

@Polymarket the steering wheel controls were optimized for hands with six fingers
English












