Dan Kelly

1.4K posts

Dan Kelly banner
Dan Kelly

Dan Kelly

@int0x00

🦉 Adversary Methods RAD, assembly coding, APT disintegrating, EANx40’ing cyber warrior. Sweating Cyber 24/7 on 群二st.

Singapore / UK / Pochinki Katılım Aralık 2012
1.1K Takip Edilen1.4K Takipçiler
Dan Kelly
Dan Kelly@int0x00·
Age does not bring wisdom. Experience brings wisdom. Never underestimate the young, just as you should never overestimate the old
English
0
0
1
120
Dan Kelly
Dan Kelly@int0x00·
All the China influencers showing the inner workings and real costs of foreign brands manufacturing goods in China. Hopefully next they’ll give us a tour and cost breakdown of the fentanyl labs
English
1
0
2
168
Dan Kelly
Dan Kelly@int0x00·
Also just going to throw this out there due to relevance: Community notes is no different to open-sea twitter/X. It’s simply a subset of users arguing their differing points “behind closed doors” with the victor (ie. the side with the most users and upvotes) having their “truth” displayed like some kind of governing body’s stamp of approval. Community notes is horseshit — who thought asking the problem to unproblem itself would be a good idea??
English
0
0
0
113
Dan Kelly
Dan Kelly@int0x00·
The sheer amount of disinformation/misinformation about Zelenskyy right now is an all time high. Although much of it’s from non-European “expert on Europe” simpletons, there is a huge amount coming out of the usual pro-russia paid actors. Is that because they really want to end the war they started or because ending the war under the US’ current terms is best for them? The latter, obviously.
English
1
0
1
176
Dan Kelly
Dan Kelly@int0x00·
Put this AI in your company and see how it goes from here on out
Dan Kelly tweet media
English
0
0
1
146
Dan Kelly
Dan Kelly@int0x00·
@_devonkerr_ Or, be a 70 year old country who is massively inexperienced at international affairs and espionage operations and deny everything because you think the world should consume lies in the same way people have to internally ¯\_(ツ)_/¯
English
0
0
1
55
Devon Kerr
Devon Kerr@_devonkerr_·
Use subcontractors who aren’t government employees and take assignments from government employees, who work in a compartmentalization program, and claim your government didn’t do it. Rinse, repeat.
Dan Kelly@int0x00

China's foreign ministry spokeswoman Mao Ning told a news briefing that the accusations were "baseless" and "lacking evidence". "China consistently opposes all forms of hacking and firmly rejects the dissemination of false information targeting China for political purposes," Mao said. Mao is full of shit. Don't be like Mao.

English
1
0
6
1K
Dan Kelly
Dan Kelly@int0x00·
China's foreign ministry spokeswoman Mao Ning told a news briefing that the accusations were "baseless" and "lacking evidence". "China consistently opposes all forms of hacking and firmly rejects the dissemination of false information targeting China for political purposes," Mao said. Mao is full of shit. Don't be like Mao.
English
0
0
1
1.3K
Dan Kelly
Dan Kelly@int0x00·
There's an important point I want to get across to defenders and IT teams in general. Having a custom built or extremely complex infrastructure or backend doesn't deter or stop threat actors. In fact, I've seen many threat actors routinely figure out parts of networks and backends that internal IT teams had little knowledge of. Threat actor's really shine in this area. Don't assume that because your infrastructure is convoluted or simply annoying to use that they would fumble around in the dark and give up. They won't. And by the end of it they'll have mapped you better than you mapped yourself.
English
0
0
3
215
Dan Kelly
Dan Kelly@int0x00·
Laughing at the Russian government indirectly threatening to nuke the UK right now. Go fuck yourselves.
English
0
0
8
1K
Dan Kelly
Dan Kelly@int0x00·
Presence of files named @briankrebs or any variation thereof are a legitimate indicator of compromise.
English
0
0
2
222
Dan Kelly
Dan Kelly@int0x00·
Pretending for a second that they were in a regulated industry, they would have to carry out an investigation to determine whether the data was accessed by other parties or not. By the sounds of your question they aren’t regulated and are probably going to pretend nothing happened(?)
English
0
0
8
1K
Troy Hunt
Troy Hunt@troyhunt·
An individual obtains a "highly confidential" data set via a publicly accessible DB backup, then sends it to me. The company knows him, and he commits to deleting the data (as do I). It contains 400k+ users - should the company notify them of the breach? Explain more in reply.
English
214
20
220
83.7K
Dan Kelly
Dan Kelly@int0x00·
The propaganda right now that surrounds the infamous and mighty north korean soldiers going to fight in Ukraine... I mean, aside from being malnourished, underfunded, badly equipped, badly trained, massively inexperienced, unmotivated and also using soviet era weapons then yeah sure, I'm sure they could do something. Like fertilize land.
English
0
0
1
488
Dan Kelly
Dan Kelly@int0x00·
Something I constantly see (some) journalists and snowdenites push is that capability equals intent and use. It simply doesn’t, and pushing the agenda only signals intent to spread misinformation, a total lack of understanding or a combination of both.
English
0
0
5
306
Dan Kelly
Dan Kelly@int0x00·
@troyhunt Let me guess. It has lots of passwords on it?
English
0
0
2
1.3K
Troy Hunt
Troy Hunt@troyhunt·
This is going to be complete garbage, isn’t it Jhon?
Troy Hunt tweet media
English
65
26
3.2K
385.7K
Dan Kelly
Dan Kelly@int0x00·
@SwiftOnSecurity 400 foldable tents for $40/unit and resell on Amazon for $150/unit. This is basically Amazon in it’s entirety anyway
English
0
0
109
16.1K
SwiftOnSecurity
SwiftOnSecurity@SwiftOnSecurity·
Okay I'm Alibaba/AliExpress-pilled now what do I buy
English
224
20
2.6K
695.1K
Dan Kelly
Dan Kelly@int0x00·
"I’m more concerned about bad actors trying to saturate the field to push their own agenda, overwhelming genuine moderation effort" As it stands (beyond mods taking personal offense) there's two sides to bad actors. There's attempted shooting down of political tweets that largely edges on personal offense but more towards a hidden agenda. Then there's the more sinister end which is my main concern - straight up infiltration and psyops. I haven't seen much of this beyond some basic bitch CCP shills in action, but I genuinely think there's a lot more that could happen in this space. To your point, I would argue the review process on Wikipedia is significantly better in that it's open and free to view. But the nature of X is real-time comms, so the same kind of moderation wouldn't work. My main gripes with community notes are: 1. It takes too long to get something tagged 2. No human can keep up with zillion tweets per minute 3. X has made no clear comms they are working to replace the system, and it feels like they're just trying to fill in for the content moderation teams they fired To summarize; it's kind of ok, but not a solution to the problem.
English
0
0
0
31
Dan Kelly
Dan Kelly@int0x00·
Behind the scenes, inner moderation comments of community notes is a true battle ground. I can’t help but think the quality of moderation will decrease as the effort becomes higher. At the end of the day, who wants to spend their own time doing a content moderation job for free? X will need to start offering incentives/rewards for this kind of thing. #communitynotes @CommunityNotes
English
0
0
5
1.8K