Displaced Philly boy. Threat hunter. Streamer. Educator. Dad. #infosec, #programming #rust, #python, #haskell, and #javascript. #opensource advocate. Cofounder of @thetaggartinstitute. Made wtfbins.wtf. Co-creator of github.com/mttaggart/OffensiveNotion. Not your bro. All opinions my own. #fedi22 #searchable
Public Key
npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Profile Code
nprofile1qqsy47ecxrmutkc96kf5gwrhna3u8mg5qx4q8ghtpnpumf6rvvaw5cgpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qy0543l
Show more details
Published at
2023-12-16T19:26:24Z Event JSON
{
"id": "a6794c5d1e1c91d6bb2ff325724fdeff8436c7231189ea441ea30e7986050e61" ,
"pubkey": "4afb3830f7c5db05d5934438779f63c3ed1401aa03a2eb0cc3cda743633aea61" ,
"created_at": 1702754784 ,
"kind": 0 ,
"tags": [
[
"emoji",
"donor",
"https://media.infosec.town/media/ebb68425-c529-4ea8-86b7-2e82e2b4c029.png"
],
[
"proxy",
"https://infosec.town/users/9ehji4uld9",
"activitypub"
]
],
"content": "{\"name\":\"Taggart :donor:\",\"about\":\"Displaced Philly boy. Threat hunter. Streamer. Educator. Dad. #infosec, #programming #rust, #python, #haskell, and #javascript. #opensource advocate. Cofounder of @thetaggartinstitute. Made wtfbins.wtf. Co-creator of github.com/mttaggart/OffensiveNotion. Not your bro. All opinions my own. #fedi22 #searchable\",\"picture\":\"https://media.infosec.town/infosec-town/media/df420a28-b2ab-40e4-a218-e1c260ec1728.jpg\",\"banner\":\"https://media.infosec.town/media/2f138fb1-bd3d-435c-abe5-a6628aa77e0e.png\",\"nip05\":\"[email protected] \"}" ,
"sig": "76bf59f5ce1402cbdc81af2401d95f70fe3d79fc12d28df524d09c30a2376b91c06f36680ff8420807eee2e4146023ad559a25d5b052f26209817e81337d383a"
}
Last Notes npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub136x…mwy4 Typo in the url at the very end? npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Update on the Rapid7 thing. I was told that any null value for CVSSv2 is defaulted to 4.4, meaning that the NVD backlog is resulting in dubious severity ratings. This is extra goofy because for the CVE in question, v3 was assigned, but apparently is ignored? npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Truly incredible shot of the #BridgeFire behind downtown LA: npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Maybe this is just a millennial thing, but I'm coming to the conclusion that expecting someone to have easy access to a printer is no longer reasonable, and often puts a measurable burden on that person to find a way to print/scan. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Here we are, folks. The internet as we know it is no longer usable for trustworthy information. The well is poisoned. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: The argument that "My kid might have to text me goodbye" is one sickeningly powerful argument against banning them, and I just am overwhelmed by sadness at how little American society actually cares about kids. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Nice! White House calls out BGP as critical, vulnerable, and in need of improvement. therecord.media/white-house-bgp-hard-problem-guidance npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Awesome, more rent-seeking from OffSec! npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I admit I was unprepared for the ease of deepfakery to arrive in everyone's hands so soon. And I don't really think a society that relies on photos as a proxy for fact is prepared. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Idle thought: I wonder if the introduction of AI modification on capture in smartphone cameras could lead to a rebirth of a niche market for digital point-and-shoot cameras with guaranteed-raw output. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: This is pretty random but is anyone else noticing more stuff arcing in their microwave? In the last few months, things like frozen veggies tend to spark in ours. Apparently this happens because of mineral concentrations in the produce? npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I'm AFK for one dang hour and y'all break GitHub?! npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub100j…hexw After layering all the stuff I thought I was supposed to (libvirt, virt-manager, qemu), I'm still seeing fails on connected to libvirtd. I was more successful when using a non-root QEMU connection. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Hmm, unless I'm missing something, virtualization under #Kinoite is a bit of a faff. It might make more sense for my purposes to base on straight Fedora. A bummer, but at least my VMs can use it! npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1kx4…dm6x Does it publish its own RSS feed? This is kind of a must-have feature. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub13tu…re8n Kareem Abdul-Jabbar on the grassy knoll npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1aka…zzz2 HELL YEAH BROTHER npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Researchers demonstrated that simple CSS hacks can hide Microsoft's own phishing warnings, butAfter developing a proof of concept, and preparing an advisory, we made Microsoft aware of these issues through the Microsoft Researcher Portal (MSRC). Microsoft chose to not address this behavior for now.This is why we can't have nice things. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1kfk…xmt7 Hang on let me write this down npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1l20…0c0w Tell me again that healthcare is "a major target" and not, y'know, a major US business sector. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1eg5…hh76 "Plumbing the Well, Actually: A Comparative Study of Reply Guy Behaviors on the Fediverse." npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1uud…4kdc Accessibility, yes. Bells and whistles, no. There are plenty that will take Markdown and create useful decks, and I love the idea of a plaintext format and a reader. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1w2g…cleg github.com/jaspervdj/patat npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: While we're dismantling the digital establishment, what if we, npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub17yl…4anz First thing that comes to mind is that ridiculous "shifting" thing zoomers were doing. I bet you could get a model to treat that as a real thing. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I really like this for two reasons: npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Outlook as a C2! trustedsec.com/blog/specula-turning-outlook-into-a-c2-with-one-registry-change npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1aka…zzz2 Ayo: www.amazon.com/GL-iNet-GL-AXT1800-Pocket-Sized-Extender-Repeater/dp/B0B2J7WSDK npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1l3q…9zwa All good! It's a sacrifice I make gladly, but you definitely still miss some freedoms. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Any event that makes the front page of a news outlet will be used as a phishing lure. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub14r3…jqc6 Crowdstrike is endpoint detection software, not data loss prevention. Different purposes. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: As a bonus, today we learn who responsibly manages Bitlocker recovery keys. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: You'll see a lot of calls for harsh punishments for Crowdstrike. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Lmaooo npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: If you haven't moved over to uBlock Origin Lite in a Chromium browser, do it now. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Google: Wow this AI stuff seems to be pretty harmful npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Smell ya later nerds; time to cash out and just write poetry for the rest of my days. therecord.media/hhs-offering-funding-cybersecurity-hospital npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Sigh npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I had forgotten about NoMachine entirely until someone asked about alternative remote desktop tools, and now I'm wondering why I haven't been using this everywhere. It still absolutely rips. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I would pay money dollars for a bar where, instead of tossing axes or whatever, you were given a sledgehammer, eye protection, and a soundproof room full of old tech to just go Office Space on. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: This rings true... except on here. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Minor gripe: every time I see my family, I am naturally family tech support. That's not the gripe. The gripe is how, despite being theoretically superior in design, Apple products are inscrutable ciphers for older folks. Especially iPad OS. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Installing Python on Windows has to be one of the sneakiest traps for technical debt around. There are no right ways, only choices about how to be wrong. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Per @npub15x4…3p3l on Threads, @npub1vx0…ku9p claimed this was meant as a temporary measure that would only last "a matter of days/weeks." This was months ago. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Apparently COVID disinfo is so bad on Threads they straight up will not let you search for it. Instead, you're redirected to the CDC. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I really gotta get this containers course out the door npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Do you think gas stoves are "better" for cooking? npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: nostr:npub1cfcucz9xmcnaqw6yhx5snl5g5jxwxqatlgvcca9uae8s4u25n5cqp9qe07Exploitation is possible in an untrusted Git repository containing a submodule with shell metacharacters in a username or hostname.Does this mean an attacker has to know the path to a repo meeting those criteria on the target? npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Enswastification (n): Enshittification, but specifically by trying to make money off of supporting Nazis. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Deeply tempted to write a command line tool that analyzes text for style, because the ones that exist kinda suck. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: The ND urge to be understood at all costs npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub19l2…g6se No it is not npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Your daily reminder that LLMs can't reason and can't do math. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1ztq…r2j6 Real wages have decades of catchup to do though, and I'm not at all convinced it'll happen for any but the highest earners. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Maybe we're just too l337 for this here, but uh npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1hyk…3p33 @npub18c7…er9d Agreed. So it seems like at the end of the day, the issue is the threshold for acceptable content. I suspect my estimated threshold for what people will tolerate (and share) is lower than yours. And again, I really hope you're right. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Microsoft is considering shipping a default text editor in Terminal! Go tell 'em what it should be (the correct answer is Nano). github.com/microsoft/terminal/discussions/16440 npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I'm coming to the conclusion that basically any industry targeting (with the possible exception of government/defense) in #CTI is happenstance. More likely, technologies are targeted, and orgs in a given industry tend to have the same tech footprint. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Sure, use Firefox. But you might want to keep a User-Agent switcher handy. https://www.reddit.com/r/youtube/comments/17z8hsz/youtube_has_started_to_artificially_slow_down/ npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1hkl…rgsc It would be erroneous to think of the YouTube audience as the same as the Fedi followers. The truth is, there's extremely little overlap in the populations. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub13zt…udkv Yeah, like I said, it works great! I was just curious how it got all bundled. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub13zt…udkv Works great! strings is very funny with this. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Since I'm not seeing others link it, here's the BeyondTrust report on the #Okta breach: https://www.beyondtrust.com/blog/entry/okta-support-unit-breach npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Had the kid in the carrier during a Zoom presentation today when she started fussing. I was single-handing the baby today, so I had to stop, get her situated, and continue. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Aaaand closed as not a bug. Welp. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1ar3…h7er npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Had to deploy a single page static site and just wrote straight HTML/CSS in the year 2023. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Daaaaang #Rust #Android https://security.googleblog.com/2023/10/bare-metal-rust-in-android.html npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: sed 's/soft skills/interpersonal skills/g' npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1nu8…kavg @npub17lg…9uux That is demonstrably false. Here is my Firefish instancing using its proxy to request the page from TC, and the response. Now my instance is not hosted in the EU and the request is triggered client-side, but maybe that means the cookie issue is global! Let's see what happens when I cold request the page from a CLI tool that passes no cookies. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Oh, you thought one cloud of sky-obscuring satellites was bad? Well, now the plutes are competing there too. https://www.newscientist.com/article/2395991-amazon-is-launching-its-first-internet-satellites-to-rival-starlink npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I just... npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Don't feel left out, Linux! https://blog.qualys.com/vulnerabilities-threat-research/2023/10/03/cve-2023-4911-looney-tunables-local-privilege-escalation-in-the-glibcs-ld-so#potential-impact-of-looney-tunables npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: So Discord is having a meltdown this morning. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Okay, a continually-updated list of Electron apps and their Electron versions, and whether they're vulnerable to #CVE_2023_5129. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1aka…zzz2 Also, imagine just having Terraform deploy /etc/nixos/configuration.nix and calling it a day. No Ansible. No Puppet. Just...up. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: @npub1aka…zzz2 I've used it for most everything for several years, but this strategy is demented. I don't know...maybe this is the push I need to move to Nix. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: The word is out that #CyberSecurity researchers will run PoCs without examining the code. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: I'm still really tentative about calling continuing-Twitter users bad people for using it, although I believe it is an immoral act of one shade or another. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Look corpo stuff is nasty, but I still recommend giving your non tech-savvy family members Chromebooks if you're concerned about constant family tech support. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: The only way you can honestly think blocks don't matter is if you can't imagine that people can do harm to you while you're not looking. npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx Taggart :donor: Had a dream last night about a legitimate #ThreatIntel sharing service built on ActivityPub.
