Pavel

Butler - GitHub Actions Oversight Started as a security scanner and pivoted to a visibility/oversight tool for GitHub Actions. Identify 3rd party actions, deprecations, secrets etc across any GitHub org. Tool and sample reports for large orgs at: github.com/sadreck/Butler

@RedTeamTactics So it's not the referal program that would be the issue here, it's how it's executed.

@RedTeamTactics Serious companies don't allow people who referred someone to be part of the hiring decision (some allow to be part of the process if there's not enough staff). But the decision is always out of their hands. So if things are the way you described them, your friend dodged a bullet.

@bugch3ck @Infosecurity Maybe I have to say "please"?

@sadreck @Infosecurity Have you tried replying "STOP to unsubscribe"? 🤡

When technology works @Infosecurity

@ITSecurityguard Or why don't you ask for both at the same time?

Random thought of the Day: Why don't login mechanisms ask for the 2FA first and then the password? Wouldn't that prevent the attacker from confirming they have a valid password?

@InsiderPhD Soooooo how much?

Honestly the surprising thing now isn’t so much that people want me to hack their school to change their grade, but how many of them seem to think that I would offer that service for free

@hasherezade Also, doing a dry run, recording it, listening back to it, and realising "is that what my voice sounds like? IS THAT WHAT OTHERS HEAR?"

Five stages of preparing a talk - do you relate? 😅 Or is it a breeze to you?

@sainsburys takes recycling very seriously

@Flangvik Careful when exporting backups, attachments aren't saved so you may end up with missing data

I have to give credit to Bitwarden for their on-premise Password Manager solution documentation and overall setup. I had our deployment up and running within minutes, plus they have good documentation backups and configuration changes on the fly👏🥳

As of today, Codecepticon, Spartacus, CrackerJack, and SnitchDNS will be maintained under github.com/sadreck Original repos have been archived.

@sadreck About 7hrs 30mins on Framework 11th gen intel i5

Sitting here waiting for Chrome to compile on my laptop be like

Spartacus v2.2.0 is out! 👉Generate self-signed certificates and sign DLL/EXE files 👉Use the CommandLineGenerator.html to build your CLI command 👉Add commonly used examples in the release zip file 👉Bug fixes / PR merges github.com/Accenture/Spar…

I made an easy decision tree for anyone considering using git submodules or a monorepo.

@_xpn_ Absolutely! Plough through the first season as it's setting up the scene for the greatness of the next ones!

@sadreck Ah I only watched the first few episodes of Person of Interest.. I might go back and watch it if you think it's a similar vibe.

Finished Freedom, not as strong as Daemon but still a good read. The story is haunting in the face of AI progress, especially for something written in 2006 👀 goodreads.com/book/show/8488…

Neutralising AMSI System-Wide as an Admin - @sadreck pavel.gr/blog/neutralis…

Edge for Android now has Adblock Plus, farewell Firefox, farewell.