OK, maybe about a week with a mechanical keyboard instead of my standard Dell and... I may have been wrong to shit talk the Mechanical Keyboard Master Race people all this time
English
Jay Lagorio 🅅
19.2K posts
Jay Lagorio 🅅
@jaylagorio
Massachutean in Maryland doing the work that needs to get done. Licensed Private Investigator. Hacks and NatSec, but in a weird way. CFP Board for @districtcon
@jay.lagor.io Katılım Kasım 2008
434 Takip Edilen528 Takipçiler
Jay Lagorio 🅅 retweetledi
"It's to protect the children"
"It's to stop the AI slop bots"
"It's to help law enforcement catch criminals"
Authoritarians will never run out of reasons why we should give up our privacy. Don't cede an inch of ground.
x.com/vaporlols/stat…
new year; same crackrabbit!@vaporlols
English
Jay Lagorio 🅅 retweetledi
Jay Lagorio 🅅 retweetledi
Jay Lagorio 🅅 retweetledi
Ep2 dropped. This is such a stressful episode to watch. And the $66 M wallet value isn’t even the sketchiest part.
@joegrand you handled that situation very well.
youtube.com/watch?v=TGmGiN…
YouTube
MG@_MG_
My friend @joegrand did it again. He’s not just recovering millions in crypto wallets, but also unveiling messy relationships, betrayal, etc. A very entertaining watch reminiscent of the start of a murder mystery. He’s also upgraded from voltage glitching to electro magnetic (EM) glitching. It’s sort of a very complicated Jedi Mind Trick on chips. Here’s a high level explainer: Let’s say the hardware wallet has a max pin retry limit. And it’s coded like this: if attempts >= MAX_ATTEMPTS: lock_device() Inside the chip, the values of attempts and MAX_ATTEMPTS are just bits. 0s and 1s. Literal voltage levels that are low or high. Stored in tiny transistor circuits. When the processor reads them, those electrical states travel through logic gates that perform the comparison. Normally the comparison works fine. But what if you could reach inside the chip and disturb those electrical signals right at the moment the chip is doing that comparison? That’s what EM injection allows. It’s essentially just a few loops of wire held over the chip and a very fast bust of voltage is sent through it. It’s not as simple as it sounds though. You have to discover: - the exact moment in time during execution - the exact physical spot on the chip package - the right distance from the chip - the right pulse voltage - the right pulse duration - the right probe geometry The search space is HUGE. An exponential needle in a hay stack. If you are really familiar with hardware, you can narrow things down, but it’ll still take weeks of searching even after you have automated it. And even after all of that, there is still risk to the wallet across all the steps. Hell, the wallet could be somewhat damaged before Joe even gets it. And tons of people end up not even having the crypto they thought they had. Imagine if one of those people ends up with a dead wallet and blames Joe for it, all while incorrectly thinking they had millions. 😬 youtu.be/MhJoJRqJ0Wc
English
Jay Lagorio 🅅 retweetledi
'But what stood out to him were the patterns behind the unrecognized likely COVID deaths: they were most likely to have occurred among Hispanic people, at home, among less educated people, and among people with lower incomes'.
Never ignore the social determinants of health.
Scientific American@sciam
We have severely undercounted the number of COVID deaths, scientists say spklr.io/6012EHor4
English
Jay Lagorio 🅅 retweetledi
every day we stray further from god.
and, the the average person who lashes up something like this, they stray just that little bit closer to god.
Out of Context Mex@Out0fContextMex
English
Jay Lagorio 🅅 retweetledi
I love that people from Massachusetts created the most generous, socialist health care system in all 50 states while also being the most aggressive drivers. They’re like “I want my neighbors to have the best care. They’re gonna need it if they don’t get out of the left lane.”
English
Jay Lagorio 🅅 retweetledi
Jay Lagorio 🅅 retweetledi
Me looking at all the developers who avoided writing good docs and are now proudly showing off their AI prompts thinking it'll do exactly what they want.
GIF
English
Jay Lagorio 🅅 retweetledi
1pm: these edibles ain’t shit
6pm:
Candace Owens@RealCandaceO
Charlie Kirk was the first casualty of the War in Iran. Never forget what they did to him.
English
Jay Lagorio 🅅 retweetledi
Apart from being an amazing RE talk, I’ve never seen someone make better use of a 1 hour slot. Hats off to @lauriewired.
English
Jay Lagorio 🅅 retweetledi
Using your position as a senior employee or customer to recognize people, maybe helping them improve their own position, is its own reward. That is far, far more power than another complaint.
English
Jay Lagorio 🅅 retweetledi
Jay Lagorio 🅅 retweetledi
Jay Lagorio 🅅 retweetledi
@vxunderground Unironically many ultra-talented people have low self esteem, like “here I created a new form of quantum proof 4D Rust (Bitcoin style) malware targeting copilot, in case anyone cares 🥺, am I cracked chat”
English
Jay Lagorio 🅅 retweetledi
There’s an astronomical skill gap between good security people, and the rest. There’s no mid. Accounts you see posting their research here are absolutely cracked, it’s not the norm.
When you go out and talk to security folks that don’t go to conferences, don’t read up on research, you realize- holy shit. They have no fucking clue. The majority of the cybersecurity work force is absolutely incompetent.
It’s partly why vendors can come up with inane bullshit as marketing material and it works on many CISOs.
If you’re reading this, you’re most likely 1000x the skill level of the average person. Like I cannot emphasize enough how low the bar is when the sample size is the entire industry.
English
Jay Lagorio 🅅 retweetledi
The cheapest most effective way to combat infinitely scalable autonomous hacking bots is with honeypots and deception
Simo@SimoKohonen
How to defeat this terrifying AI hacker tool in two steps: 1) place honeypot on port 21 2) block any IP that touches it ¯\_(ツ)_/¯
English
Jay Lagorio 🅅 retweetledi
I feel like younger people don't realize that the internet wasn't always optimized solely to make you as angry and miserable as possible, and people are having a lot of nostalgia for 2000s internet vibes now because it wasn't like that back then
English
This is a level of double standard you need to eat a gallon of paste to agree with
Alphabet Soup@Alph4betSoup
Opened a new bank account online this week with a provider i have never banked with before, didn't get asked for ID, the acct is open they sent the debit card already, its in my hand. But if i wanna access certain websites i have to provide ID.
English