Sean Gallagher :verified: 🐀 :donor:

Synapse, you're killing me.

#cyberwarneverchanges

A breach story I wrote 10 years ago.
Best practices. Who's got 'em?

https://arstechnica.com/information-technology/2016/03/after-an-easy-breach-hackers-leave-tips-when-running-a-security-company/

Also, 10 years ago, one of my many conversations with John McAfee. Love him, loathe him, whatever, nobody deserves the ending John got. #mentalhealthawareness

A decade ago in my Ars Technica history: https://arstechnica.com/information-technology/2016/03/dam-you-justice-dept-to-indict-iranians-for-probing-flood-control-network/

Dammit.

This weekend, I demonstrated to my dad that passwords on MacOS are no barrier to someone with physical access (he forgot his password he set the last time he opened his computer to do his taxes).

On a related note, I am hoping he doesn't connect that to my statement that I could not get into my […]

Proof AI is not ready for CTI #36,453,325:

Prompt: Here is some base64-encoded text. Can you extract the URL for me?

AI: (gives an actual URL to an example from an unrelated source)

Me: You hallucinated that didn't you?

AI: Please do your own Cyberchef-ing, I don't deobfuscate malware asshole

It’s been a long winter.

Red throated loon in non-breeding plumage

Surf Scoters and Black Scoters hanging out in the surf

Northern Shovelers in flight.

Brace yourselves for critical birb updates.

Looks like someone on RAMP had a thing about Louai Abboud

Went in today, there was a lunch scheduled, got to see people I haven’t seen since September, was super productive, and no cats walked across my keyboard.

This is going to sound weird, but I am actually excited at the opportunity to work from the office occasionally.

They’re being led by Ulysses S Brant

Canada[s] in control at Ft McHenry

@thepacketrat.net tried to post this with my mobile mastodon client and it failed. 🤷

House of Pidge. #birds

Apple iOS facial recognition fails when you have a tissue stuffed up your nose to stop a nose bleed.

The lunch crowd at my place is a little more polite these days

A photo of a Red-Shouldered Hawk, his/her head turned to viewer's right.

Murderkeet

A screenshot of an Outlook phishing site with a "made with Softr" graphic and an advertisement popping up at the bottom for some game.

When the phishing adversary uses a free platform to create a phishing page but forgets all the flare (and monetization) the platform provider injects...

And people still give their credentials.

A downy woodpecker looks a little overwhelmed but is hanging in there.

Hey, everyone!

Sorry for the extended period of silence. A lot of stuff has been going down irt dealing with aging and ailing parents, and since the start of the new year I have been focusing on getting back to work. The infosec and bird-related content feed is now ready to resume.

My pottery efforts have taken a strange turn.

Hey all. I have been quiet on this channel for a minute , because, well, things. My parents both have had health crises in the last six months and in October I relocated them to Baltimore for surgery and memory care, respectively. My dad’s now a below-knee amputee and a few weeks away from […]

The complexities of caring for a parent you don’t like.

I just spent five days on a rescue mission. Immediately after returning home from a business trip, my wife and I loaded up and drove to distant upstate NY to retrieve my parents to bring them back with us for medical reasons. The primary […]

I have been trying to get a document signed with my dad’s lawyer for nearly six months.
First draft: my first name was misspelled.
Second draft: my last name was misspelled.
Third draft: reviewed whole doc, my first name was misspelled and my address was in the wrong state.
🫠🤦🏻‍♂️🤦🤦‍♀️🙈

@Prometheus 🤪

Spilling the Tea

A security failure in a safety app creates the opposite of safety (thx 4Chan) What Happened? Last week one of the more dangerous hacks happened. Tea, an application used by women to trade information on potential harms and dangers, had a major security lapse. Their database was […]

A screen shot with the following text: CyberThreaterator The APT/Cyber Threat Name Generator Your APT name is: Doom Metal PotatoBeetle Sandals based Jeff Bezos-worshipping religious cul Motivation: will hack for food Modus operandi: fake malware alert scamming

I've made various improvements to CyberThreaterator over lunch breaks, while watching TV, and other non-work brain cycles. There's a plan here: eventually, I want to produce full threat briefs on demand for imaginary actors with IoCs and the rest of what […]

[Original post on infosec.exchange]

Night Herons nesting in Fells Point have gotten…numerous.

Team building exercise.