Sabitlenmiş Tweet
[email protected] - Mastodon
3.3K posts

[email protected] - Mastodon
@rathlord
catch me on Mastodon, leaving very soon: [email protected]
Mastodon Katılım Haziran 2011
214 Takip Edilen100 Takipçiler

@TolarianCollege Ooh well now I have to watch it!
English

A short while ago, Jesse asked for submissions of YOUR Commander decks that just weren't working how you wanted them to.
Well, guess what? We took a look and now present: "We Fix Your Commander Deck" here: youtu.be/IhLvYie-e1Q
#MagicTheGathering

YouTube

English

@ProtonSupport Your DC servers have been offline for nearing a week without a single update. Which means my services have been down for a week. Is this ever getting fixed? Could you at least give a timeline so I know if I should just rebuild everything? This is insane.
English

@ProtonSupport any update on the DC servers? They’ve been entirely offline for days. My server is down and I either have to wait it out or reconfigure it. This is a product I’m paying for. It’s embarrassing that there’s no update whatsoever on your status page after DAYS down.
English

@gothburz What is this? Why do you have a bunch of claims to be a bunch of different people on your feed?
English

I am the Chief Information Officer of Stryker Corporation.
I build the robots that perform your surgery. The defibrillators that restart your heart. The systems that let your nurse find your doctor at three in the morning when something goes wrong. Twenty-five billion dollars a year. Fifty-six thousand employees. Sixty-one countries. Every device in every country, managed from one console.
On March 11th, someone who was not me sat down at that console and erased everything.
I should be precise. They did not hack us. They logged in.
Microsoft Intune is an endpoint management platform. I deployed it across every laptop, workstation, manufacturing terminal, and enrolled phone in my organization. From one console I could push an update to Kalamazoo, enforce a policy in Cork, wipe a compromised device in Freiburg. One console. Every device. That was the architecture. That was the selling point. That was the attack surface.
Intune can push software. It can enforce compliance. It can, if instructed by an administrator with the correct credentials, wipe any device to factory settings. These are features. I paid for them. I presented them to the board as our zero-trust posture. A group called Handala used them to erase every managed device in my organization in a single afternoon.
I will be precise about what happened next, because my lawyers are in the room and precision is the only thing that still belongs to me.
No malware was deployed. No ransomware was installed. No zero-day was used. No vulnerability in any product was found. A threat actor obtained administrative credentials and issued a remote wipe command using the remote wipe feature that I chose this product for.
My security tool did not fail. It performed exactly as designed. It wiped every device it was told to wipe, without error, on schedule. The architect of my destruction was my own IT budget line item.
The command went out. The devices obeyed. Laptops in Kalamazoo. Workstations in Cork. Terminals in Freiburg. Manufacturing floors in Mahwah. The screens did not go dark. They changed. Where there had been a Stryker logo, there was now a barefoot cartoon boy with his back turned to the viewer -- the Handala icon, hands clasped behind him, facing away from the audience -- on every monitor in every office in sixty-one countries.
They claim fifty terabytes. I cannot confirm or deny this. I do not yet know what I still own.
Let me walk you through my first forty-eight hours.
Hour one. Our Irish operations -- fifty-five hundred employees, eight sites, our largest hub outside the United States -- went dark. Not gradually. Entirely. Security walked everyone out. The voicemail at our Michigan headquarters was changed to say "building emergency." There was no building emergency. The building was fine. Everything inside it was gone.
Hour four. Employees who had installed Microsoft Outlook on their personal phones discovered that their personal phones had been wiped. Intune does not distinguish between a corporate laptop and a personal iPhone with a company email profile. It manages endpoints. It managed them.
Hour eight. Hospitals called. Not because they had been breached. Because they could not order surgical implants. I make the hip replacements. The knee joints. The spinal hardware. The trauma fixation systems. My ordering system was down. My manufacturing was down. My shipping was down. A hospital in Baltimore could not schedule a knee replacement because a hacktivist group on another continent had pressed a single button on a console I built.
Hour twelve. Maryland Emergency Medical Services issued a memo. Hospitals were disconnecting from LIFENET -- my system that transmits your EKG from the ambulance to the emergency department while you are still in the back of the ambulance -- not because LIFENET had failed, but because they no longer trusted anything with my name on it.
Hour twenty-four. Fifty-six thousand employees coordinating on WhatsApp. Twenty-five billion dollar company. Sixty-one countries. Crisis response running on a free consumer messaging app, because every internal system I owned was now owned by someone else.
Hour thirty-six. I released my first official statement. "As a precaution, we have proactively taken all systems offline." Proactively. As though I had a choice. As though the systems I was taking offline had not already been taken.
I released six statements in forty-eight hours, plus an SEC filing. Each said less than the one before it. By statement five, I was confirming that specific products still functioned. Mako surgical robots: unaffected. LIFEPAK 35 defibrillators: unaffected. Vocera badges: unaffected.
When a medical device company begins listing which of its products still work, that is not reassurance. That is a casualty report delivered in reverse.
Handala says this is retaliation. For Minab. February 28th. A U.S. Tomahawk struck an IRGC naval base in southeastern Iran. The girls' school next door collapsed. One hundred and seventy-five dead. Most of them children. Handala published a statement. They called Stryker a "Zionist-rooted corporation." They said they would make us understand what it means to lose something you cannot replace.
I do not make missiles. I make hip replacements. I make the robot that holds the scalpel and the defibrillator in the crash cart. But I am a defense contractor's second cousin, and in the calculus of retaliation, proximity is guilt.
I filed with the SEC on March 11th. "The full scope, nature and impacts of the incident are not yet known." That is the most honest sentence I have produced in two days. I do not know what they took. I do not know what they copied before they wiped. I cannot audit what was lost, because the tool I built to audit my systems is the tool they used to erase them.
My stock dropped three and a half percent. One analyst called it "contained." A cybersecurity researcher called it "the first drop of blood in the water." I prefer the analyst. The analyst is wrong, but I prefer him.
Here is what I know.
I built a console that could touch every device in sixty-one countries. I gave it the authority to wipe anything it touched. I protected it with credentials. Someone obtained those credentials.
And my management tool managed.
No malware. No ransomware. No exploit. No CVE. Nothing to patch. Nothing to update. Nothing broken. Just a feature, performing its documented function, at the scale I purchased it for.
I make the machines that keep people alive. I was taken offline by my own architecture doing the one thing it was designed to do.
The system worked. That is the problem.
English

@TolarianCollege On one of my devices I was able to get into the lounge over 30 minutes early & got immediately to the purchase page. I couldn’t check out early (it gave an error), but I functionally bypassed the line.
I don’t feel too bad since I’ve missed other products due to the bugginess.
English

@LX_Spree @JonathasSSouza @SecondWindGroup They could have just stayed quiet since *clearly* Nick is and was a problem.
English

@JonathasSSouza @SecondWindGroup keep in mind these people/owners are still working for Second Wind, they would NEVER put a statement and say "hey yeah Frost was right, Nick is terrible and u should stop supporting Second Wind cause we did bad things :( "
English

@YahtzeeCroshaw I'm disappointed to see one of my favorite creators supporting someone who so clearly doesn't have your best interests at heart, especially someone with clear issues that are harming your company, your credibility, and others. Wish you'd rethink your stance.
English

@covertgoblue Guy Emrakul is banned because of like… Goryo’s Vengeance and ways to cheat things in, not because people ramped it and played for a fair 15 lol.
English

@MTGGoldfish I’m not even on Twitter any more but I literally logged back in to say: did you guys legitimately forget that prime time can instantly get you a 20/20 indestructible flyer?
Dark Depths + Thespian’s Stage
Can’t believe no one brought this up.
English

@NETGEAR @NETGEARgaming Wouldn't recommend the new flagship RS700S router, it doesn't even support NAT Loopback, basic functionality for home routers that's been standard since 2013. We're returning ours.
English

@Wizards_Help I placed a support request (my Secret Lair is lost in the post in between two shippers) almost two weeks ago now and I haven't gotten a single reply... can someone look into it for me? I have the Incident number...
English

@MTGSecretLair My order seems to have gotten lost by the post office and I can't seem to find a help link anywhere on the secret lair site, and the FAQ's are giving 403 errors when accessed. Can you help? ):
English

@DoorDash_Help @DoorDash This is how you lose a customer. I'll be canceling my DashPass- which I've had for years- and taking my business elsewhere. I've never had so much time wasted and support that gave so little of a crap about what happened.
English

@DoorDash_Help Support was incredibly crappy, hung up on me multiple times mid-conversation, refused to escalate my issue, and then gave me a credit when I asked for a refund.
English

@DoorDash_Help Yesterday I ordered my food, the dasher screwed up and marked it delivered instantly when picked up and couldn't get it to me.
I asked for a redelivery, and that driver delivered it to the wrong location across town.
English
[email protected] - Mastodon retweetledi

Exactly 30 years ago, in July 1993, the Knox Event changed the world forever.
This account commemorates that moment in history, in real time.
God save us all.
@theindiestone
English

@TCGplayer @K3fka_ It’s been two years and I still can’t stay signed in.
English

@K3fka_ Our Technology Team is currently looking into this issue and we are currently working on a solution. If you are still experiencing this issue in the future, our Customer Service team would love to help you out. Please contact them here: bit.ly/TCGplayerHelp
English

@TCGplayer Can you guys please fix the "Remember Me" option when signing in on your site? I always find myself logged out again when visiting the site just a couple of hours later.
English

@Whatnot Would love to not but apparently your servers couldn’t handle it. Huge bummer.
English

👀 Don’t miss the show!
➡️ whatnot.com/s/vydiXNei
Tolarian Community College@TolarianCollege
I know nobody wants these anymore, but I'm giving away 24 Collector Booster Boxes today at 3:00pm Pacific on @Whatnot! I'll ship anywhere in the world. Use my code and get $15 credit: whatnot.com/invite/tolaria… #MagicTheGathering
English

I know nobody wants these anymore, but I'm giving away 24 Collector Booster Boxes today at 3:00pm Pacific on @Whatnot!
I'll ship anywhere in the world.
Use my code and get $15 credit: whatnot.com/invite/tolaria…
#MagicTheGathering

English






