ทวีตที่ปักหมุด
Someone created a "37c3" message in morse code with IPv6 packets that is visible from the monitoring system.
Super cool 😎
#37c3
English
Jared Naude
1.9K posts
Jared Naude
@JaredNaude
Cloud Architect & Security Engineer. Security researcher focused on national security and foreign policy. Organizer @BSidesCapeTown & @BSidesJoburg
Johannesburg, South Africa เข้าร่วม Ağustos 2018
261 กำลังติดตาม593 ผู้ติดตาม
To mark the start of 2026, I made a short montage of the 2025 news events that stood out to me. Wildfires in LA, AI and privacy concerns, aviation accidents, space launches, Eurovision, and Poland's rebuke to Russia at the UN.
English
Nothing is more poetic than driving past the US Embassy on the way to work and seeing the US flag at half mast on inauguration day.
English
Hey infra folks. We're standing up a new Discord server to discuss CS infra. If you want an invite DM me (reply and I'll follow).
thanks!
English
Are cloud defenders focusing on the right issues when securing cloud environments? This is what I will be discussing during my talk at BSides Cape Town in December.
BSides Cape Town@BSidesCapeTown
🎤 BSides 2024 SPEAKER ANNOUNCEMENT 🎤 "Cloud Security Theater: Rising above the Noise of Misguided Strategies" - Presented by Jared Naude "To secure cloud environments effectively, a modern operating model needs to be created to solve the real security challenges faced during cloud adoption. However, are security teams focusing on the right problems when it comes to cloud security or we are just doing Cloud Security Theater?" Watch this space as we unveil more speakers and talks we have lined up!
English
You know you are having an impact on internal security culture when developers start making threat intel jokes during company meetings.
English
Watching at the Pwnie's at Defcon and saw this in the nominations 😂
English
These kinds of vulnerabilities extend to AssumeRoleWithWebIdentity where if a condition is not include in a trust policy, attackers could use the trust to a provider to gain unauthorized access to an AWS account. AWS has only fixed this for GitHub.
English
A confused deputy attack that was found in AWS AppSync. Really cool piece of research @Frichette_n
#Defcon
English
I feel vindicated after rallying against the use of CodeCommit now that AWS has decided to discontinue it. Storing code in an AWS account is a recipe for disaster.
In addition, AWS is also deprecating S3 Select, CloudSearch, Cloud9, SimpleDB, Forecast and Data Pipeline.
Jeff Barr ☁️@jeffbarr
After giving it a lot of thought, we made the decision to discontinue new access to a small number of services, including AWS CodeCommit. While we are no longer onboarding new customers to these services, there are no plans to change the features or experience you get today, including keeping them secure and reliable. We also support migrations to other AWS or third-party solutions better aligned with your evolving needs. Keep the feedback coming. We’re always listening.
English
Some thoughts on XZ Utils Backdoor criticalvoid.com/2024/04/02/tho…
English
@riskybusiness Having a car safety hammer to cut a seat belt and break a window is a good idea.
English
My team and I trying to understand the migration from @steampipeio to @powerpipeio and eventually how @flowpipeio will fit into our workflows.
GIF
English
Next up is the post team. 4386 postcards were sent externally of which 3125 were to Germany and 58 were to other countries. 38k postcards were used internally for the event. #37c3
English
Next up is the fashion operations center, who sold 8 products with a total of 78 size variations. There were 3755 preordered items. #37c3
English
37c3 infrastructure review
The infrastructure review is usually one of my favorite talks to get to see behind the scenes and the work that many teams did to make the event possible.
#37c3
English