mike johnson

3.5K posts

mike johnson banner
mike johnson

mike johnson

@reddrum

Pro Minigolfer Captain USA Minigolf Team Putt Putt National Champion Cybersecurity Pen Tester #!/usr/bin/perl

USA Присоединился Mayıs 2007
2.4K Подписки322 Подписчики
TheIntelFrog
TheIntelFrog@TheIntelFrog·
List of known security events at US military bases since 28 February: Feb 28 - Kirtland AFB, NM - Armed person on base Mar 1 - Shaw AFB, SC - Threat at Sumter gate Mar 2 - NAS Pensacola, FL - Unauthorized subject entered the base by boat Mar 3 - Ellsworth AFB, SD - Unspecified security incident over/near flightline (multiple) Mar 6 - Selfridge ANGB, MI - Suspicious package Mar 9 - Barksdale AFB, LA - Lockdown due to drone over/near flightline Mar 10 - Moody AFB, GA - Lockdown due to security incident Mar 11 - Tyndall AFB, FL - Suspicious package incident Mar 12 - MacDill AFB, FL - Suspicious package turned over to FBI bomb techs Mar 13 - Beale AFB, CA - Unauthorized drone Mar 17 - JB McGuire/Dix/Lakehurst - Suspicious packages Mar 17 - Holloman AFB, NM - Shooting (Domestic) Mar 18 - Sheppard AFB, TX - Possible explosives detected at Missile gate Mar 18 - MacDill AFB, FL - Possible bomb threat
TheIntelFrog@TheIntelFrog

Yet another security incident at MacDill AFB in Tampa, FL ongoing at this time. Initial reporting indicates a bomb threat has been made.

English
52
456
1.4K
231.9K
Dave Kennedy
Dave Kennedy@HackingDave·
What I’m realizing is 99.9999999999999999999999999% of AI posts are from people that are trying to get more followers and clicks and has no real world experience on actually deploying. “Improve your workflow 80% by this one Claude skill” “Omg they just released this and it changes the industry completely” It’s all bogus. Create your own workflow that is tailored to you. Don’t buy into this garbage.
English
286
184
2.4K
80.4K
mike johnson
mike johnson@reddrum·
@Houseofyogi @eevblog Left out the trackpoint. Perhaps the greatest computer accessory after the computer itself. It too has been fumbled.
English
0
0
0
37
Yogi
Yogi@Houseofyogi·
Don't be IBM and fumble an 18yr head start on AI IBM was the most valuable company on Earth. Invented the hard drive. The PC. The floppy disk. The ATM. DRAM. SQL. The barcode. Most US patents 29 years straight. 405,000 employees. 70% mainframe market share. Today: $231 billion. 67th in the world. Anthropic. Founded 2021. Four years old. $380 billion. Every piece of the bag was fumbled... Invented the PC. Sold to Lenovo: $1.75 billion. Invented the hard drive. Sold to Hitachi: $2 billion. Server business. Sold to Lenovo. Basically nothing. Now the chips. This is pure comedy. IBM was the largest semiconductor manufacturer on Earth. Fabs in New York. Fabs in Vermont. 16,000 patents. They PAID GlobalFoundries $1.5 billion cash to take it. Gave away the factories. Gave away the patents. $4.7 billion write-down. IBM had American fabs. They paid to close them. And the same Democrats who scream about chips going overseas are the ones whose policies made it too expensive to build here. We wouldn't have TSMC/Taiwan issues today. Decisions have consequences. TSMC: $700 billion. Nvidia: $5 trillion. IBM paid to exit chips right before chips became the most valuable industry on Earth. Incredible timing. Deep Blue beats Kasparov. Live television. First machine to outthink a human world champion. IBM owned AI. Not as a buzzword. As a fact. On camera. In front of the whole planet. OpenAI did not exist for another 18 years. Anthropic for another 24. Nvidia was making cards so teenagers could play Halo. Google was two grad students sharing a dorm room. IBM had an 18-year head start on the entire AI industry. What did they do with it. They dismantled Deep Blue. Put it in a museum. Same mentality as every socialist (cough dems) who wants to regulate AI before it ships. Celebrate the breakthrough. Kill the follow-through. Watson wins Jeopardy. Destroys the two greatest players alive on national TV. Most famous AI brand on the planet. IBM spends billions on Watson Health. AI that cures cancer. Their engineers flagged it unsafe. Instead of fixing it they sold it for scraps. Then killed the brand entirely. Loser mentality. IBM Research. Decades of NLP work. The compute. The talent. The CEO looks at LLMs and says "no thanks." Two years later ChatGPT launches. 100 million users in two months. The entire economy reorganizes around the exact technology IBM looked at and said nah. That is like having Google's algorithm in 1997 and deciding to build a phonebook. The suits and the consultants took over. Same thing that kills every city, every agency, every institution that picks socialism over competition. $201 billion in buybacks over 25 years. More on buybacks than CAPEX. They could have funded every AI lab on Earth with that money. Instead they bought their own stock while the stock went down. Revenue down 22 straight quarters. Nobody fired. Name another job where you lose $95 billion in market cap and get a raise. Actually don't. That job only exists at IBM and in Congress. Buffett bought $12 billion in IBM. The greatest investor alive. Held six years. Dumped it on CNBC. "I was wrong." Put the money in Apple. Best investment in Berkshire history. They had the patents. The labs. The engineers. The brand. An 18-year head start on AI. Replaced the builders with bureaucrats. Chose buybacks over R&D. Chose administration over competition. Lost everything. Now look at who wants to run the same playbook on the AI economy. Bernie wants data center moratoriums. Tax the builders before they finish building. Ro Khanna represents $18 trillion in Silicon Valley market cap. Apple. Nvidia. Google. His district built AI. He just held a Stanford town hall with Bernie called "Who Controls AI: The Oligarchs or The People." Wants to tax unrealized gains. Pause data centers. Put unions on AI boards. Redistribute wealth that hasn't been created yet. His own district is trying to primary him. Not because he's too progressive. Because he's trying to kneecap the industry that made his district the most valuable zip code on Earth. That is IBM energy. Tax the engineers. Slow the builders. Add a committee. Wonder why nothing works. Gavin ran California from a $97 billion surplus into a $68 billion deficit. Lost 789 companies. Tesla. SpaceX. Oracle. Chevron. 200,000 people leaving per year. And he thinks he should have a say in how AI gets built nationally. The guy who can't keep In-N-Out Burger in California wants to regulate the most important technology since electricity. These aren't hypotheticals. This is the IBM playbook in real time. Replace engineers with regulators. Replace competition with committees. Replace building with administrating. And act shocked when the talent leaves and the lead disappears. IBM went from first to 67th. 1.43% a year for 28 years. A savings account beat that. Don't let them do it to America. Name a bigger fumble. I'll wait.
English
226
472
1.8K
123.7K
mike johnson
mike johnson@reddrum·
@PhilosophyOfPhy Old school version of steam->electricity. 400 volt and 650 amps. Eskilstuna, Sweden
English
0
0
1
62
Philosophy Of Physics
Philosophy Of Physics@PhilosophyOfPhy·
This 140 years old Steam turbines generates approximately 80% to 90% of the world's electricity. They are the primary movers in coal, natural gas, and nuclear power plants.
English
5
27
160
9.6K
mike johnson
mike johnson@reddrum·
@a_greenberg Well, they are vulnerable. But also irrelevant. No one needs to go to that much effort when everyone carries around a device with cameras, microphones, and a dizzying array of other sensors.
English
0
0
0
47
Andy Greenberg (@agreenberg at the other places)
Senator Ron Wyden and Rep. Shontel Brown are calling for an investigation into the vulnerability of modern computers to what the NSA calls TEMPEST: spy techniques that pick up devices' secrets via their accidental electromagnetic/radio/acoustic emissions. wired.com/story/how-vuln…
English
5
50
122
22.4K
MG
MG@_MG_·
@SwiftOnSecurity New imperial measurement unit just dropped. Holy shit.
English
4
6
471
15.3K
SwiftOnSecurity
SwiftOnSecurity@SwiftOnSecurity·
Just think, we could have built two miles of high speed rail for what this is going to cost us
English
210
843
12.2K
368.5K
Dave Kennedy
Dave Kennedy@HackingDave·
@IntCyberDigest The mavic is out of commission - bad test flight with too much stuff on it😂 this was my fastest Best Buy run I have a commercial one that has a payload option of 14lbs - fixing a motor on it.
English
2
0
16
950
Dave Kennedy
Dave Kennedy@HackingDave·
Got the drone working with a Omni antenna - 4000mw amplifier - battery hooked up - and sending signals back to my laptop. Just seeing how far I can truly get on BLE. Previous tests are 813ft.
English
40
26
593
49.3K
mike johnson
mike johnson@reddrum·
@UK_Daniel_Card Gettin lil crazy. I may, or may not, have made a VPN tool, one prompt. Nothing else exists like it. Worked perfectly (possibly). One… prompt…
English
0
0
1
34
mRr3b00t
mRr3b00t@UK_Daniel_Card·
You can vibe code ur own web attack platform... you can probably make something good.. what I've made was from a very high level prompt.... still it sends packets :P
mRr3b00t@UK_Daniel_Card

HACK HACK HACK

English
3
1
30
2.8K
Dave Kennedy
Dave Kennedy@HackingDave·
Just released a new tool that scans for Bluetooth devices including Bluetooth Low Energy (BLE) devices. It will scan for all, filtered by MAC, or if you have the Identity Resolving Keys (IRK), can be used to determine the Resolvable Private Address (RPA). Works on MacOS, Windows, and Linux. github.com/HackingDave/bt… #TrustedSec #BinaryDefense
English
22
125
663
78.5K
mike johnson
mike johnson@reddrum·
@HackingDave Some/many/all require a magnet to be “in touch” in order to talk to the pacemaker. They do not just broadcast constantly. That would eat the small battery in no time.
English
1
0
5
579
Dave Kennedy
Dave Kennedy@HackingDave·
For the Nancy Guthrie case, an idea and maybe a crazy one but she had a pacemaker which often implantable devices use bluetooth such as Medtronic's. Couldn't you war-drive (drones even better) with a high gain antenna with amplifiers - get the MAC address from the provider, and comb the city and locations looking for that specific mac? I'm also sure if you had cooperation with the manufacturer they may provide the protocol, law enforcement could use a custom interrogator to "ping" the device and elicit a response. Pacemakers last months or years. It would continue to transmit even if (God forbid) someone was deceased. High gain + LNA + good SDR - 500+ ft possible with class 2 transmitters (normally in bluetooth pacemakers - common in implants, ~10 mW output) Parabolic + high sensitivity gear - 1000+ ft in ideal RF conditions Not saying this range is possible, with BLE + body interference + 2.4ghz being a heavily used spectrum = much lower range. Previous research has tested insulin pumps upward of 300+ ft in the past in BLE. Companies that use bluetooth in pacemakers: Medtronic Abbott Laboratories Boston Scientific Now in stating that - there's a bunch of limitations here - broadcast timing. They all use low power bluetooth, but if they have access to Nancy's phone and paired - would there be a way to take that pairing connection, amplify it and run it through? You could potentially extract pairing keys/secrets and emulate the phone's connection with an amplified setup (e.g., SDR spoofing the phone's BLE master role). A lot of "ifs" here just wondering if it's technically possible based on what I know these conditions would need to be true: The implant uses RF telemetry that can transmit without an external programmer actively interrogating it. The device is configured to advertise or beacon. The identifier is detectable passively. The identifier is not randomized. The device is currently transmitting. You are within viable range (which is likely very short). The RF environment is not swamping it. If solely using MICS frequencies this wouldn't work (402-405mhz): Very low power Designed for short-range use Often magnet-activated or programmer-initiated Session-based communication Encrypted/authenticated in modern systems The 2.4 GHz band is crowded; distinguishing one pacemaker from thousands of BLE devices in a city like Tucson would require a lot of noise reduction/filtering, but technically I think it's possible. Also note that law enforcement did state that the phone disconnected from the pacemaker - hinting at bluetooth was actually enabled. Papers used for analyzing this as a viable option: mdpi.com/1424-8220/20/1… mdpi.com/1424-8220/23/7… mdpi.com/1996-1073/13/4… pmc.ncbi.nlm.nih.gov/articles/PMC28… pmc.ncbi.nlm.nih.gov/articles/PMC10… digitalcommons.calpoly.edu/cgi/viewconten… secure-medicine.org/hubfs/Archimed… sciencedirect.com/science/articl… medtronic.com/en-us/e/produc… armis.com/research/bleed… thinkmind.org/articles/cyber…
English
14
6
136
29.6K
mike johnson
mike johnson@reddrum·
@Manifest_Lord Nice writeup. Everyone should have a couple beehives at least briefly. Amazing!
English
0
0
1
2.2K
Manifest_Lord
Manifest_Lord@Manifest_Lord·
A queen bee and a worker bee have identical DNA. Literally the same genes. But one lives 45 days. The other lives 7 years and rules 80,000 bees. The difference? What they're fed for 5 days. Here's the process that will blow your mind (and why it's relevant to humans): 🧵
Manifest_Lord tweet media
English
148
1.3K
6K
959.6K
Tyler Rogoway
Tyler Rogoway@Aviation_Intel·
This Is The LOCUST Laser That Reportedly Prompted Closing El Paso’s Airspace The U.S. Army has been acquiring multiple versions of the LOCUST laser weapon system to bolster it ability shoot down hostile drones. Story: twz.com/news-features/…
English
11
57
176
23.1K
mike johnson
mike johnson@reddrum·
@adxtyahq I thought they used Ada, HAL, and maybe Julia for critical systems. No? Though C is in everything. Lol
English
0
0
1
101
aditya
aditya@adxtyahq·
NASA writes mission-critical flight software in C. And the rules are absolutely INSANE. > No recursion. Ever. > Every loop must have a provable upper bound. > No dynamic memory allocation after initialization. > Max ~60 lines per function. > Minimum 2 assertions per function. > Every return value must be checked. > Zero compiler warnings allowed. > Daily static analysis. Zero warnings there too. > No function pointers. > Restricted pointer dereferencing. This is how they write code at NASA / JPL for mission-critical systems.
aditya tweet media
English
804
1.5K
19.6K
1.8M
Jefe
Jefe@JefeXCoach·
Should $NVDA be worth more than the entire GDP of India and Japan? For context, NVIDIA has 36,000 employees. India has 1.46 billion people producing economic activity and Japan is the most technologically disciplined nation on Earth. @michaeljburry I need answers.
Jefe tweet media
English
3
1
5
149
Afaq
Afaq@saleemafaq·
@reddrum @TheFigen_ Oh, i did not know that, learned something new today. thanks
English
1
0
2
162
The Figen
The Figen@TheFigen_·
A rainbow is a 360° circle, but only someone at a very high altitude can see the complete circle.
English
404
4.4K
32.9K
1.2M
mike johnson
mike johnson@reddrum·
@clarity_pursued @robertgraham When in fact the opposite is true. Never trust a computer until it has been checked. How many gov cybers regulations require audits? A lot! Lol
English
0
0
0
5
Declined
Declined@clarity_pursued·
@robertgraham "There's no reason to doubt computer security unless you have evidence of a security problem." ROFL
English
1
0
1
199
Robert Graham
Robert Graham@robertgraham·
"What qualifications for that, I have no idea" -- Dolezal I do. It was CISA talking about election computers. They weren't talking about anything non-computer related. Among the reasons is that "DREs" have been replaced with "BMDs", everywhere it matters (swing states). DRE's record votes electronically, you simply have to trust them, there is no verification. BMDs use computers to mark paper ballots, which can be audited, by the voter themselves, as well as later audits. Now, voters can't practically review the entire ballot, but they can certainly look to verify that if they voted for TRUMP, that it says TRUMP on the paper ballot. This, alone, made 2020 the most secure election (from the computer perspective) in history, well, going back to 2000, when the Bush-v-Gore fiasco made so many states adopt DREs to fix the problem with mechanical machines. They meant even more. They worked with county election officials all over the country. They understood the problems, and how they were being mitigated. Managements systems, BMDs, and other equipment were more secure as a whole than they had been in the past. Moreover, CISA didn't mean this as "just trust us". That's an obvious fallacy which is why Republicans mis-represent that statement. What CISA instead meant is "don't trust them" -- don't simply trust Trump's claims of hacked computers without evidence. There's no reason to doubt computer security unless you have evidence of a security problem. No such evidence exists. Mike Lindell spent millions promising to have "Absolute Proof" of hacked computers, and then when the time came, refused to show anybody the proof. Somehow Republicans ignore this "just trust me" claim from Lindell and are now eagerly voting for him for governor. After 5 years, Trumpists still have provided zero evidence of any problems with the computers. They only keep pointing out things they and their followers don't understand about computers, claiming anything not understood is evidence of computer problems. Somehow Republicans recognize a fallacy of a government agency saying "just trust us" without evidence, but not the equally obvious fallacy of Trump/Trumpists saying "just trust me" without evidence. Yes, yes, there are some fact-checkers who also point to the CISA "most secure" claim, so the Republicans aren't completely unjustified in their criticism here. But overall, Trumpists who are the intellectually bankrupt side, not the Democrats. It was @C_C_Krebs who made that statement. He can better describe the qualifications, and where I err in describing them. The point is simply that "qualifications" exist, and that if Sen. Dolezal doesn't know them, it's because he's willfully ignorant. Most of Trumpism is about willful ignorance, not simply not knowing such things, but deliberately so.
Senator Greg Dolezal@DolezalForGA

"The most secure election in American history" was a lie. Let’s talk about 2020 and the issues that remain in Georgia today.

English
17
72
231
37.6K
Jobo Baggins
Jobo Baggins@LordShovelDick·
@vxunderground @mqudsi I don't know if i'm autistic enough to notice this despite Twitter compression, but in this centre line the relevant Characters are 1, L and 1 (L1N, VHl, L1d) Can you confirm?
Jobo Baggins tweet media
English
4
0
6
1.4K
vx-underground
vx-underground@vxunderground·
Non-nerds are asking how Mr. Al-Qudsi (@mqudsi) is working to reconstruct redacted Epstein data. Here is a high-level summary that isn't as nerdy schizo Mega tl;dr > Send email > Add attachment > Emails no understand files > Email turn files in text (Base64 encoding*) > Image 1 is email turning attachment into text > Send email > Someone receive email > Email reads add-on text > "oh thats an attachment" > Transforms into attachment you can see (Base64 decoding*) > DoJ releases Epstein emails > Didn't censor attachment stuff > hehe big mistake, we can recover this > Boom, all attachments "censored" now uncensored > All hidden attachments now public > Go to work > Problems arise > DoJ printed emails (???) > Scanned printed emails back (???) > Try to rebuild from email stuff > Fails > wtf.mp4 > Look inside > DoJ printed as "Courier New" font > L and 1 look the same > Try to reconstruct > Fails > Computer can't figure difference between L and 1 > (Look at image 2) > Can you even tell the difference??? To manually reconstruct all attachments from Epstein emails data forensic experts must find a way to programmatically determine which characters are L's and which are 1's. This is only a problem because the DoJ printed it as Courier New. Proposed solution right now is bruteforce. Try every possible combination, swapping L's and 1's, check email thing, does it work? No? Repeat. However, this could take a long time. Another solution is taking known email encoded thingies that work and compare it to Epstein files. Try to identify patterns and reconstruct it using machine learning.
vx-underground tweet mediavx-underground tweet media
English
100
401
4.2K
334.5K
Julian Röpcke🇺🇦
Julian Röpcke🇺🇦@JulianRoepcke·
A3 1️⃣ – Shahed 0️⃣ Wahrscheinlich eine der besten Werbungen für @AudiOfficial der letzten Jahre. Vielleicht ja ein guter Anlass, im Gegenzug dem @SESU_UA ein paar Generatoren zu spenden?!
Deutsch
44
272
2K
100K