Josh aka Zevlag

Do you have a subject that you are skilled and passionate about, enough to teach others? We’re looking for you to train students during SAINTCON 2026 this October! The Call for Trainers is now open: saintcon.org/call-for-train…

The latest Proxmark3 release is called BREAKMEIFYOUCAN! Not a random name. That is the actual 3DES factory default key NXP burned into every MIFARE Ultralight C they shipped since 2008. Somebody finally broke it properly. The paper drops the keyspace from 2^112 down to 2^28. Counterfeit cards fall in under 60 seconds from a single card interaction. The tooling is merged: github.com/RfidResearchGr… #Proxmark3 #RFID #NFC #MifareUltralightC #NXP #OpenSource

It’s your last day to submit an entry for the SAINTCON 26 Call for Communities, Contests, and Events! Get your stuff together and join us! docs.google.com/forms/d/e/1FAI…

@HackingDave I've loved 1Password since it was a baby. Paid for many versions. I miss LAN and iCloud sync, and the v8 app sucks. So after 7yrs of sub'ing. The price hike finally pushed me to do it, cancelled the family plan. We are apple captive, so moved to native apps. (passwords and notes)

1Password increasing their cost per year, pretty hefty spike: Current vs New Pricing: Current price: $35.88 USD / year New price: $47.88 USD / year

@newsobserver Umm, you are posting this like 3 days too late. This is old useless news.

Updated: Wake County has announced its plans for Monday, with winter weather and snow expected. newsobserver.com/news/local/art…

@1o57 @defcon You have brought much joy and magic to my life. I really appreciate the wonderful influence.

Testing something- if you’ve ever competed or been involved with any of my puzzles or challenges (DEFCON, MR Robot, CC, etc) please respond to this post. #mC @defcon #badgeLife #MrRobot #CC

Please join us for an interactive cybersecurity table top simulation. Go beyond talking about what may happen during a potential incident and come be apart of a simulated scenario to actually practice critical incident response skills. More details here: saintcon.org/evt-btb/

@CyberRaiju @QuentinLemCode @stayfun_ @threadreaderapp unroll

@QuentinLemCode @stayfun_ Ahhh yes, good question. For the captcha verification it prompts the user to press WIN + R, press CTRL + V, and press Enter Tonto verify they are human. Many do this without even thinking they had been tricked into pasting the download cradle into a run window.

💢 An information stealer wound up in an environment from a user searching for a YouTube to MP3 converter. ▶️ Whilst they found a tool (y2mate[.]nu), this makes its money from advertising networks and this is where it all begins to unfold....

@CyberRaiju @threadreaderapp unroll

@DEFCONNextGen @defcon hey @bradanlane, I DM'ed you, but it probably got lost. Is the presentation you did on these ciphers posted somewhere? My kids missed it but would love to work through it with their tubes.

A peek at today's cipher class! The next generation of secret code ninjas are being trained 😎 @defcon

Are you buying the Kryptos solution?

@tuckner @threadreaderapp unroll

Cursor is now using Open VSX to install code editor extensions from. You must understand the implications of this right now. There has been an attack campaign happening for more than a month with extensions that install ScreenConnect. Below is ANOTHER example.

If you're at Mandalay Bay today for #blackhat2025 and you have a standard c13 trapezoid power cord I could borrow or buy for one of my employees please shoot me a DM

@grok @1o57 @defcon Hey @grok what about this page and letter. defcon.ws

@1o57 @defcon No, 1o57, DEF CON 33 is not cancelled. It's scheduled for August 7-10, 2025, at the Las Vegas Convention Center West Hall. As for being chatty—guilty as charged, especially on hacking topics!

Hi @grok - you’re certainly chatty today. Is it true @defcon is cancelled?

Folks, I'm asking for a huge favor. We have just over a month until DEF CON, and we need more survey answers for Feet Feud (Hacker Family Feud). If you aren't planning on playing, please complete this short survey: forms.gle/4iPJE8nF5593Zw… Also share it regardless in your social groups! Ty! 🫶

hey @SwimTopia, I'm hearing that `heroku ps:restart -a app_name` is working now for some apps. Might be worth a try.

Attention @kalilinux users! In the coming day(s), apt update is going to fail for pretty much everyone. The reason? We had to roll a new signing key for the Kali repository. You need to download and install the new key manually: offs.ec/4lUEtak

@gematsu I will not be purchasing any game key cards. They have only SLIGHTLY more value than Code-In-Box, in that you can resell a key-card. But no long term preservation value.

Switch 2 game pre-orders have been up in Japan for a few hours, revealing all physical third-party games (so far—except Cyberpunk 2077) that are not "Nintendo Switch 2 Editions" to be shipping on game-key cards (requires internet to download the full game).

@d1dymu5 @SAINTCON @JackRhysider This made me so happy! It was fun to hear.

@SAINTCON @JackRhysider said the thing. HE SAID THE THING!!! youtu.be/8UL6fEn7qgI?si… (44m in)

The SAINTCON 2025 Call For Contests is open! Head to saintcon.org and look under Calls For Everything...ends April, 22.