Jake Williams

Breaker of software, investigator of incidents | GSE #150 | Faculty at IANS Research | Stuff: jake at malwarejake dot com | He/him

Public Key

npub1z6m9tqurpz2m92ls4pl4mf20wf0cppquex2kvuwew3kj47kteccqp8y2qk

NIP-05 Address

[email protected]

Profile Code

nprofile1qqspddj4swps39dj40c2sl6a548hyhuqsswvn9txw8vhgmf2lt9uuvqpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qxt97tu

Publishing to

relay.mostr.pub

Author Public Key

npub1z6m9tqurpz2m92ls4pl4mf20wf0cppquex2kvuwew3kj47kteccqp8y2qk

Show more details

Last Notes

2024-06-15 13:25:43

Gen-AI boosters love to claim AI is suitable for all sorts of use cases, but the reality is that if requirements for your use case include "provide consistently correct (or even just consistent) results" then it's not a good use case...

2024-06-06 19:12:46

Smart people of Mastodon - what are you using to sync Google and M365 calendars? I need bidirectional sync so that when an event gets created on one calendar, it blocks the time on the other calendar saying it's blocked because of the other calendar but without event details.

2024-05-27 13:31:12

Broadcom is a cancer.

2024-05-13 16:51:13

Injecting into a legitimate process to hide from defenders...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/434/339/035/178/024/original/14e3a4524713f10e.png

2024-05-12 19:29:42

I was looking at shelving a few weeks ago and now Amazon is retargeting me on every website I visit (as one does).
But who is this guy they very clearly photoshopped into the picture? And why? Suits don't sell shelving. I'm so confused...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/429/298/114/793/897/original/5f1531c4f9612041.png

2024-05-03 14:24:13

Real talk: students are protesting genocide.
It's your right to be against them, but be very clear what you're aligning yourself with in the process.

2024-05-01 13:16:02

Your AI is only as good as your data.
Most enterprise orgs can't even get asset inventory complete, so let's not talk about the quality of the unstructured data spread across your SharePoint sites...

2024-05-01 12:44:11

If you feel safer after watching a government unleash violence against its citizenry, you and I obviously have VERY different lived experiences.

2024-04-29 21:40:05

Nothing in security is easy.
Anyone who tells you otherwise is misinformed, outright delusional, or selling you something.

2024-04-29 16:27:39

After doing some testing with a customer, I've created this handy flowchart for determining whether you should adopt Security Copilot...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/354/972/023/185/694/original/16712b7230e3ac46.png

2024-04-23 17:50:18

I swear I want to scream. I hope Change Healthcare executives see prison time. Not being facetious - this is negligence of the highest order. Make an example of them.
And don't @ me about "victim shaming" - all of you are the real victims here.
https://www.wsj.com/articles/change-healthcare-hackers-broke-in-nine-days-before-ransomware-attack-7119fdc6
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/321/323/858/505/667/original/50ae133f6458a172.png

2024-04-21 18:19:30

- reply

@npub1asa…n9sr 512GB

2024-04-21 16:24:49

Happiness is not running out of RAM anymore on those memory intensive tasks...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/309/661/945/951/009/original/f7e4c4c803a281a9.png

2024-04-15 16:54:46

- reply

@npub1yck…ujmw Is your position actually "that's all that matters really?"

2024-04-15 11:51:11

If you support the US providing active air defense for Israel and not Ukraine, I'm interested to know why. If your answer is "Russia" please note whether you would defend other European nations (and why Ukraine is different).
Our foreign policy is inconsistent...

2024-04-01 01:59:19

If you're a vendor calling clients telling them to replace their OSS with your software because it's more secure not being open source, I hope you get hit with a ransomware attack that puts you out of business.
You'll deserve it and the industry will be better off without you.

2024-02-14 20:40:47

Calling it now re the "National Security Threat" - Russia has developed and/or deployed an orbital launch platform that is nuclear capable.

2024-02-09 16:57:20

Management "helping" with the incident response...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/902/312/000/516/320/original/20c3c853c70c6162.mp4

2024-02-01 16:19:08

As you get ready to watch the big game next weekend, here's gift link (no subscription required) to a fantastic investigation by Washington Post detailing how the NFL is routinely denying compensation to players impacted by CTE/dementia.
https://wapo.st/3Ukpdb9

2024-01-23 21:08:08

If you weren't planning on threat actors going everywhere with your data, but you use GoAnywhere, patch now. Authentication bypass allows unauthorized entities to create admin users 🤦‍♂️
https://www.fortra.com/security/advisory/fi-2024-001

2024-01-22 20:54:16

Ensuring you've specified requirements for a project is important. Making sure those doing the work understand them is critical.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/801/352/457/408/341/original/7a152a8941072cd6.mp4

2024-01-14 02:57:07

By the looks of things they're "guarding the identities" of all the women in our industry. Bravo - way to fight for their privacy!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/751/817/494/463/088/original/e315be35c6b35892.jpeg

2024-01-05 00:10:43

Incidents like this demonstrate why you only get one try at getting containment right. We know the outcome was a destructive cyberattack, but we don't know the decision calculus leading to it. Wiping may well have coincided with an incident response.
https://www.reuters.com/world/europe/russian-hackers-were-inside-ukraine-telecoms-giant-months-cyber-spy-chief-2024-01-04/

2023-09-30 21:01:49

I can't wait for my AI generated email that gets 75% of my intent to be summarized by the recipient's AI assistant that misses the message and tells them I feel awkward ordering coffee online, when in fact I'm trying to warn them about a vulnerability in their Java web interface.

2023-09-05 02:19:59

Amazing article from Washington Post addressing the need for and challenges of undersea volcano monitoring.
Gift link, no subscription required:
https://wapo.st/3R7EmLr

2023-08-31 20:28:19

I hope this email finds you well. I'm writing to ggin4yhg9316hj49nbT56B U7 3IU87J2N U2B6V 5Cfgtrj576kj8638509ol,men whg,./;/UP[p987j6q54`2ewfzxczzju
https://media.infosec.exchange/infosecmediaeu/media_attachments/files/110/985/638/479/608/912/original/c82ae973cdfa1928.mp4

2023-08-07 04:55:04

Holy carp, the successful fusion reaction experiment at Livermore Labs has been replicated, only this time with higher yield!
Gift article, no subscription required.
https://wapo.st/3YsG23J