Marcus Hutchins :verified:

If you're wondering what it is I do, don't worry, so am I.

Public Key

npub1t5y3qpya5m4v4tv73yw447uglfsn7j44znv2d38m2xsrah4kpm0qt338yv

NIP-05 Address

Profile Code

nprofile1qqs96zgsqjw6d6k24k0gj826lwy05cflf263fk9xcna4rgp7m6mqahspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsw9ae04

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1t5y3qpya5m4v4tv73yw447uglfsn7j44znv2d38m2xsrah4kpm0qt338yv

Show more details

Last Notes

2024-08-03 23:53:41

It's wild that the UK has been having race riots for days now because some teenager stabbed a bunch of kids and then someone (presumably a bot) went on Twitter and claimed it was a radical Muslim who arrived in the UK by refugee boat (none of that was true).

2024-07-02 23:27:54

On no, the Tankie brainrot side of TikTok found my video about WannaCry. They're very upset because the great democratic nation of North Korea would never do such a thing and anyone saying otherwise is obviously a CIA plant

2024-06-26 00:55:22

I feel kinda bad for my accountant because I'm completely brainless when it comes to tax stuff and he has to just figure it all out for me. I thought I just pay taxes on the money I make but there's like 50 different tax rates that depend on how specifically I made that money, and I don't keep track of how I made money, I don't even know how much money I make.

2024-06-23 23:52:24

Algorithm's a little confused but has spirit
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/668/150/309/054/115/original/2e1f9ba7b78b2270.png

2024-06-23 21:41:58

ADHD is pretty expensive. I just remembered I forgot to invoice someone for some work I did, so searched "invoice" in my email inbox and found over $15,000 worth of invoices I never collected on 🥴

2024-06-23 17:24:19

Do people not know that most LLMs have a pretty rigid linguistic style and that it's fairly easy to tell LLM output at a glance?
Someone sent me a resume that was clearly entirely LLM generated and just by scanning through it I could even tell specifically which LLM they used.
You might be good for the job, but why am I going to take the time to read something nobody could be bothered to write?

2024-06-20 23:23:11

Made a video about planning to return to content creation since quitting my day job and someone commented that it "sounds like a poor financial decision" lol.
Brother, I quit my job because I was making more as an influencer than as cybersecurity professional with a specialist skillset covering 4 different domains. As it turns out, trying to have a serious career was a poor financial decision. My landlord won't even accept my shares of "at least I'm not a dumbass influencer" as rent payment.

2024-06-18 19:41:42

Saw a dog training video on Instagram titled "how to have good recall with your husk" then the video was just
step 1: get another dog
step 2: tie husky to other dog
Then saw another video where someone had a cattle dog for going and retrieving their husky

2024-06-16 03:41:01

- reply

@npub1nlt…t44t oh wow, I just learned there's an even worse version

2024-06-16 03:32:14

Can we make polished concrete floors illegal? People in LA really be asking for $6.5k/month in rent for their garbage ass warehouse cosplay. If your place has concrete floors and you're asking more than $3k/month in rent, right to jail right away.

2024-06-15 20:00:28

Fuck it, I’m doing meth
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/621/938/805/134/634/original/742205251c939647.png

2024-06-08 23:29:29

Someone just reminded me of the part of the pandemic where people were sticking keys to their foreheads and convincing themselves the vaccine made them magnetic. Feels like forever ago now

2024-06-08 07:00:49

My Uber Eats guy gave me the wrong order and I didn't even get the consolation prize of some free food to enjoy while I wait. The order I got consists entirely of those energy drinks that have 300mg of caffeine and probably contain radioactive waste

2024-06-08 06:51:12

- reply

@npub15nw…s0l7 I lost brain cells reading this comment

2024-06-07 19:31:29

The thing about LLMs/AI that confuses me so much is how is it that these multi-trillion dollar tech companies can't come up with like a single good use case for their technologies.
If my friend came up to me and pitched me on something like Microsoft Recall, LinkedIn AI post summary, or Instagram Search Chatbot, I'd ask if they were dropped on their head as a child.

2024-06-05 19:12:19

My American friend was telling me she's worried one of our mutual friends is an alcoholic because she drinks every day, but I'm pretty sure she's just British. 😆
In the UK it's fairly normal for people to get off work and meet up somewhere like a local pub for a couple of drinks. So for British people you can't really use daily drinking as a sign of alcoholism. Usually my rule of thumbs is when they start drinking. AM = probably an alcoholic, PM = probably just British.

2024-06-02 03:09:31

People keep telling me to do consulting, but I legit have no idea what consultants do or what services I'd even offer. The nice thing about being a contractor was I didn't have to think about business stuff, I just build tech.

2024-05-27 20:24:06

- reply

@npub17lg…9uux shout out to my friend for getting me a dog like 2 months before I decided that actually I don't want to live here anymore

2024-05-27 20:16:51

Holy hell it's insanely expensive to get dogs out of the US. It seems like either you have to risk it in the cargo hold, or pay $17k for a shared private jet that allows non service dogs in the cabin.

2024-05-27 03:00:57

Am I out of touch with how unhinged British conservatives have become, or does “we promise to draft 18 year olds into the military if you vote for us” seem like a guaranteed way to lose the election?

2024-05-15 22:03:59

Hypothetically, if you burned out so hard that you quit your job with no backup plan and your options were either look for a new job immediately knowing you're not over the burnout yet, or move somewhere cheap but miserable and take as long as you need, what would you pick?

2024-05-14 22:05:44

Bruh. I just want a nice luxury EV that doesn't fund the world's most obnoxious man baby and his awful social media platform. If you're gonna lock BYD out of the US market, at least ask one of the US manufactures to make some good cars first.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/441/225/524/588/444/original/b0814b44b155a0fb.png

2024-05-11 18:06:52

I'd heard about the price war between BYD and Tesla, but I'd never actually seen any of the BYD cars because they're banned in the US. Some influencer imported one and did a review and now I'm pretty sure the ban is the only thing keeping Tesla alive

2024-05-10 22:17:16

The latest TikTok drama is absolutely hilarious. Some celebrity went to the Met Gala dressed as Marie Antonette and lip synced “Let Them Eat Cake”, which was a little too on the nose for just about everyone ever, so now they’re getting cancelled so hard that it’s not just them personally being cancelled but celebrities in general. People are just blocking all the celebrities and it’s total chaos

2024-05-02 21:07:39

It’s beautiful the way in which Biden has managed to create unity in America by bridge the political divide between left and right
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/373/056/518/163/173/original/54dd6503c8ae42f5.mp4

2024-05-01 20:52:37

I've lived in the US for nearly 7 years now, and this is how the political spectrum looks to someone from the UK.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/367/337/186/738/741/original/2b070b22a4370e26.png

2024-04-30 18:38:51

I feel semi bad for instantly blocking everyone who replies telling me they followed me for tech and that I need to post more of that, but it's really really obnoxious. This is my personal account, I talk about what I want to talk about. If I have interesting tech stuff I want to talk about, I'll talk about interesting tech stuff. I don't make a single dollar from this platform, so what you're basically saying is that you expect me to spend days researching and creating content tailored to your personal taste, entirely for free.

2024-04-24 20:11:15

I just saw the funniest video on TikTok. It's from I think Adam Schiff's victory speech. He starts getting heckled by protestors so begins rambling about "how great it is that we live in a democracy where people have freedom to protest like this" then the camera pans to the audience where you see his security manhandling the protestors out of the room. It reminded me of this scene from The Dictator
https://www.youtube.com/watch?v=CmkKI8IuynA

2024-04-21 19:56:47

It's wild watching the US completely unravel in real time. Biden was meant to be the safe option, but instead basically just showed everyone how absolutely dead democracy is. People were like "hey, what if we didn't enable all of Gaza to be completely decimated and 10s of thousands of civilians to be killed" and the US government basically went "best I can do is more bomb".

2024-04-15 17:36:58

Someone brought their husky into the cafe and i guess they all just sleep like this 😂
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/275/968/807/407/404/original/333d4c2746897fad.png

2024-04-14 05:06:28

My friend left her husky puppy with me for the weekend, so right now I have a baby husky and a teenage one. I don't think anything has ever made me more sure of the fact that I don't want kids. I already have enough work without these things having opposable thumbs.

2024-04-09 01:56:14

Pretty much the only thing that ever makes me feel patriotic is when I have to deal with the government and regardless of if I need a passport, birth certificate, to pay taxes, I can do it all online from a single portal and then have it mailed to my foreign address

2024-04-08 23:21:39

The concept of cars as status symbols is so funny to me. I was looking for a cheap car and just learned that all those Porsche SUVs everyone here drives to grocery store cost about the same used as a new Prius. Like, I could literally just go and buy a used one and almost nobody would be able to tell that I'm not some baller who vaporized $40k buying it new.

2024-04-04 23:25:32

AI bros promised so much and all they did was accelerated the enshitification of the entire internet by 100x.

2024-04-04 21:34:29

Oh no, the woke feminism has gotten to my dog 🥲
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/214/600/565/181/209/original/3c3e411bd2d53f10.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/214/604/427/703/865/original/9919444b51034fa1.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/214/622/985/483/944/original/924138f23866ce21.png

2024-04-01 09:30:05

Microsoft just straight up disabling the entire ZX git repo feels like something that would hinder rather than help.

2024-03-27 04:52:37

I genuinely don't think the people using LLMs to write posts understand how actually painful they are to read. For me the enjoyment in reading comes from the fact that everyone has their own unique style. Often you catch bits of their personality reflected in the words. LLM output on the other hand, is completely soulless, and half the time reads like a 5th grader trying to meet the word count on their essay.

2024-03-25 23:23:42

These video transitions are getting out of hand 😆
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/158/663/460/241/577/original/5c881fb040f2f494.mp4

2024-03-24 22:15:17

Today on annoying physics: I put my bottle of coke in the freezer to cool it faster. Since higher co2 concentration means lower freezing point, it remained completely liquid until I opened the bottle to drink it, then the whole thing immediately turned into ice 😭

2024-03-23 19:45:09

Omg, they're real. 💀
I thought it was a meme, but no, this is an actual take from an adult on LinkedIn.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/146/479/867/009/566/original/eb3b23ae763e4cda.png

2024-03-22 06:57:27

Just learned that apparently India and Pakistan speak English because American movies 🥴
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/137/799/328/387/504/original/b5fe51a651ca17be.mp4

2024-03-22 02:36:47

Whilst I agree that Apple's AppStore monopoly is harmful and its fee structure is predatory, one positive side effect of their walled garden approach is the high barrier to entry for malware that relies on social engineering for initial entry (which is the majority of all malware). Should 3rd party AppStores be introduced, we can likely expect to see an uptick in malware/spyware/stalkware targeting iOS device.

2024-03-21 19:14:08

I was sad so my friends gave me this. Shes so pretty 🥹
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/135/032/891/382/251/original/13d34a7080c2e53a.png

2024-03-17 17:55:37

US democracy feels like going to a restaurant where the only menu options are chefs choice or raw chicken. They tell you you should be glad you live somewhere where you have a choice, but also if you don’t just let the chef do whatever he wants he’s going to come and force feed you raw chicken.

2024-03-15 05:56:03

I hit myself in the face with a surfboard and ended up with $3,000 in medical expenses. Since my health insurance costs nearly $9000 per year, I just need to get hit in the head 2 more times this year to get my moneys worth. An added bonus is each head injury brings me closer to the belief that I live in a developed nation.

2024-03-14 02:26:53

Can someone start a bill that'll force the authoritarian police state that consistently weaponizes social media to undermine democracy to divest control of Facebook and Twitter

2024-03-13 01:47:21

Mark my words, compilers are going to replace programmers!

2024-03-10 23:55:52

I'm kind of surprised but also not really
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/073/855/768/901/153/original/e73110a06efafa51.png

2024-03-08 01:06:57

I just checked LinkedIn and apparently some questionable security firm made a very handwavy claim that BlackCat/AlphaV ransomware has ties to a Chinese government and the media are just running with it lol

2024-03-06 23:08:59

I want to laugh at this, but the average investor is so dumb that it's entirely possible that Crowdstrike could become a $1tn company "because AI cyberattacks or something™". There's no shortage of people who know nothing about anything, are high as shit on hopium, and are willing to funnel money into any company that slaps an AI label on
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/051/014/257/660/311/original/bb2a4ab6b1105587.png

2024-03-05 22:33:20

In 2022 I wrote an article predicting Twitter’s paid verification system would do nothing to stop bots, but I’m still regularly surprised by just how low effort the verified bot accounts are
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/045/203/870/990/379/original/c7d07d5361c6ec0e.png

2024-03-05 20:49:00

My main defense against scam phone calls is that I have zero attention span and will hang up on absolutely anyone if I feel like they're taking too long to get to the point, asking too many questions, or the call feels boring. Unless you can convince me of your scam in under 10 seconds, it's probably not happening.

2024-03-01 01:20:02

An underrated perk of working in big tech: the office bus. Programmers yearn for the office bus.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/017/563/458/271/088/original/c20f79ebf2fc4b5e.mp4

2024-02-28 22:26:11

It honestly feels like the US government have just completely given up trying at all. What the hell is this lmao
https://www.engadget.com/biden-signs-executive-order-to-stop-russia-and-china-from-buying-americans-personal-data-100029820.html?guccounter=1

2024-02-24 23:52:28

The LockBit dude pretending to be American then randomly segueing into "Biden is too old, and also blah blah blah, the border crisis" halfway through a press release about their servers being breached is giving major Russian Psyop vibes 🤣
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/988/905/650/716/048/original/26e933796d820240.png

2024-02-17 00:32:54

lmaoooo. Companies really out here trying to avoid hiring employees by putting a LLM in charge of customer service, but when said LLM misleads customers into wasting money it's suddenly "a separate legal entity" and the company is "not liable for anything it says". 🤣
https://arstechnica.com/tech-policy/2024/02/air-canada-must-honor-refund-policy-invented-by-airlines-chatbot/

2024-02-16 17:43:54

Some dude stole my work and then tried to pass it off as his own to advertise his business. When I called him out on it he called me greedy for asking to be credited for my own work. I'm currently deciding whether 2024 is going to be the resurgence of completely unhinged MalwareTech.
Options are:
a) let it go
b) spend $100 registering an LLC with the same name as his business then use my website's much higher SEO rank to pollute all the search engine results for his business with my own and also give all his products away for free

2024-02-16 02:29:05

Every time I turn on the news it's like some new level of wtf. I understand the logic behind most of what the right does. It usually boils down to getting everyone riled up about some made up issue in order to draw eyeballs and cash check. but undermining funding for Ukraine in favor of Putin is a whole different ball game. They're basically doing stuff that borders on treason, and for what? Like what is the end game here? Appease Putin and pray to god when Russia regains power they remember how much you helped them?

2024-02-16 01:57:51

I find it amusing how people will claim every celebrity death was a CIA assassination, but when one of the most influential media personalities in America flies to Russia to personally lick Putin's balls, then come back and runs a propaganda campaign seeking to undermine US interests the CIA is just like "sounds good to me"

2024-02-15 23:23:52

I feel like I could write an entire book just from 2023 alone. Was by far the worst year of my life, and I literally spend 2017, 18, and 19 with the US federal government trying to put me in jail.

2024-02-13 19:11:56

Came up with a new EDR bypass technique that makes it possible to block the EDR from loading its DLL into our process, preventing any user mode hooks from being deployed.
I've currently tested it with a few major EDRs, but it should theoretically work against most with only a few small tweaks.
https://malwaretech.com/2024/02/bypassing-edrs-with-edr-preload.html

2024-02-11 05:56:57

The traffic always sucks but at least it’s scenic
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/911/066/705/297/836/original/6084d6ab72c0b015.png

2024-02-10 21:15:20

I saw a TikTok recommending putting olive oil in cappuccino. I love olive oil and I love cappuccino, so I was super excited to try it. Can't get over how well it did not work. Somehow combining two things I like turned into undrinkable coffee.

2024-02-04 21:17:26

[ ] avoid falling for deep fakes by implementing one of the many tried and tested means of digital verification
[✔️] AIs for detecting AIs for detecting AIs that detect AIs

2024-02-04 20:57:12

I really don't know how to deal with these extremely frugal upper middle class people. It's like the most infuriating thing on earth. They have the money to afford to do what they want, don't have to worry about making rent, but instead decide to board the working class strugglebus for literally no reason. Why?

2024-02-03 22:02:00

I'm actually finding the US driving theory test to be much harder than the UK one, because the UK one is entirely about driving whereas the US one has lots of questions about what fines and you have to remember the exact dollar amount.
All the fines like like sub $200, so I'm struggling to remember them because my brain just lumps them all into the category of "basically free subscription service to drive however you want".

2024-02-03 02:07:35

- reply

Would be cool if there were an option for "I'm tired of the housing crisis and bombing the middle east"

2024-02-03 01:58:14

That clip of Biden supporters drownings out protestors calling for a Gaza ceasefire by chanting "4 more years" is some pretty dystopian shit. Between that and Pelosi claiming everyone is a Russian plant, it feel like the options for 2024 are literally just gonna be MAGA or MAGA lite.

2024-02-01 17:59:51

It's extremely funny to see US senators parroting the conspiracy that the Chinese version of TikTok only promotes positive & educational content whereas the US version is addictive and harmful.
The conspiracy comes from the fact that the Chinese version of TikTok has a mandatory "kids mode" enforced for anyone under 14, which imposes time limits and content restrictions, as a result of strong regulatory pressure from the Chinese government.
Like twice a year US congress makes the TikTok CEO fly in from Singapore so they can yell at him and ask why the Chinese version of TikTok (Which he has nothing to do with) is regulated, whereas the US version is not, as if congress isn't entirely responsible for making said regulations, but were instead too busy eating lead paint and being xenophobic.

2024-02-01 04:45:43

🥴
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/854/166/587/584/013/original/f3e57b067199758b.mp4

2024-01-29 23:49:15

Why is it so hard to find friends in the US who can afford to do fun things during the weekday and actually want to? Everyone either has a full time job, or has the financial freedom to do whatever they want and then 'whatever they want' just constitutes spending every waking hour trying to make even more money.
Like, I'm pretty sure I'm not gonna be on my deathbed telling my family that my greatest regret in life is not having more money to die with...

2024-01-27 07:33:53

I’m a little ashamed that 90% of my music playlist comes from TikTok memes. I’ve listened to this one so much that YouTube has started giving me ads in Chinese 😆
https://youtu.be/IBaWc3C00kU?si=BXUvgLnIWvZ5P1_E

2024-01-26 00:13:36

Here's to hoping my computer skills get me drafted into the cyber army, or my lack of any other skills get me disqualified for the regular one. I wasn't build for fighting, I need wifi and pizza delivery
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/819/095/728/263/623/original/1e25a72cb837cad6.png

2024-01-23 01:34:44

I just got the most dystopian YouTube ad. It's made using an AI to sound like Donald Trump warning everyone that America is about to be attacked and the food supply will be destroyed. The link just goes to some weird website selling meal rations 🥴
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/802/449/878/391/390/original/e5ed76c708adb56d.mp4

2024-01-20 18:15:49

After a year off Twitter, I'm surprised that I don't have even a single regret about leaving. The more I think about it, the more I realize it wasn't the takeover that did it. Sure, there was a massive and harmful political shift, but there's just always been something about the platform that attracts extremely unhealed people regardless of political leaning.
You can make a post like "I just got a coffee and the milk was sour" then someone on the right will be like "Biden's border crisis is the reason we can't get good milk anymore" and then someone on the left will be like "do you think starving children in Africa would complain about sour milk?". Eventually, you just realize the platform is designed for people who's only form of therapy is logging on to the internet and being annoying as fuck.

2024-01-16 22:01:11

We haven't done any layoffs, we just happened to relocate our office to the worst state in the US, resulting in many of our employees leaving.

2024-01-14 21:59:53

Am I the only one who feels like still using employment rate as a metric for a healthy economy is basically just gaslighting at this point?
Employment used to mean you had a good chance of affording a home, maybe two kids, and potentially even on just a single income. Now you can have a full time job and still need food stamps or a side job just to pay bills.
Then of course, because salaries are so low relative to the cost of living, it makes employment numbers look even better because people who wouldn't have been forced to work now are. You have households where both parents have full time jobs, people with disabilities forced to work because they can't cover bills, students dropping out of college because it's now unaffordable.
Then some goober economist comes on TV and goes "well, unemployment is at record lows so obviously everything is fine"

2024-01-12 19:42:42

I wonder if Tesla shareholders are upset because Elon is preoccupied with Twitter instead of fixing Tesla, or happy because he's busy killing Twitter instead of turning more of his finger paintings into unsellable cars

2024-01-12 15:46:55

Real freedom is saving 4% on my taxes by living in in a country with no healthcare, child support, or functional education system, then paying like 50% of my post-tax income if I happen to want any of those things
Europeans simply cannot comprehend this level of freedom

2024-01-06 20:56:21

AI in fiction: "we've automated all the physically intensive jobs so humanity can focus on creative endeavors like art and writing"
AI in real life: "we've automated all the art & writing so that there's more people to do backbreaking manual labor"

2024-01-05 21:08:00

My favorite thing about tech is every few years there's some new overhyped technology that results in a bunch of people picking $thing and founding a company that does $thing with $technology, without any understanding of either, or a single clue what problem they're trying to solve.
They'll literally be like "we're disrupting the dog food industry with ChatGPT" and their product will be like a $99/month subscription service for a LLM that reminds you to remind your dog.

2023-12-27 05:48:08

Someone was telling me about how their psychiatrist wouldn't prescribe them adderall because "It's Addictive™", and it reminded me to check the bottle of adderall I put right in front of my monitor so I'd remember to take it. It expired in 2019.

2023-12-22 05:47:54

It feels like a lot of news sites kind of buried the lede with the "GTA6 hacker sentenced to life in mental hospital" headlines.
He wasn't sentenced to life for hacking rockstar. He was sentenced to psychiatric hold for doing hacking, then getting arrested for hacking, then while arrested for hacking doing even more hacking, then when arrested for that hacking and having all his computers taken away, doing ever more hacking to get computers to do even more hacking with. Like, he made it pretty clear he has no intention of ever not doing crime.
Then on top of that he was posing as a law enforcement officer and sending fake emergency disclosure requests to tech companies in order to get the home addresses of several women he was stalking and harassing. When they finally did put him in custody, he was then involved in several dozen violent incidents.
There's plenty of cases of the justice systems being heavy handed with hackers, but this is like the exact kind of person that psychiatric detention was made for. It's not a life sentence or even a sentence at all. In the UK you can be released from psychiatric detention at any time, so long as the doctors assess you're no longer a continuous threat to society.

2023-12-19 21:43:44

Twitter quietly dropped the government identity check requirement for verification, as well as the requirements that the account be 30 days old, have an avatar, and are not impersonating anyone.
I was able to get verification on a 2 day old account named Barack Obama with no avatar or posts.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/609/034/063/938/479/original/0e59a48cde3d8ae9.png

2023-12-16 16:23:44

Why doesn't Mastodon / ActivityPub have an equivalent of other platform's abilities for a post author to hide certain replies for everyone, or disable replies entirely? Someone on another platform brought this up and actually I'm curious

2023-12-15 17:31:36

Did you know that on 64-bit Windows you can execute x64 Assembly inside of a 32-bit process?
All you need to do is perform a FAR call or jump using the segment selector 0x33. This will transition the CPU mode from 32-bit to 64-bit, a technique commonly referred to as Heaven's Gate.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/585/387/484/681/538/original/e54add69ba86cda0.png

2023-12-15 03:15:50

- reply

@npub1wf4…94wn Unless we're talking executives going to jail, corporations will just factor the fines into the payment. Ransomware itself is a fine for bad security, so they're not going to think twice about paying a government fine on top. Any amount of fines are better than complete data loss.
It'll also harm security/LE because corporations will be unwilling to be transparent about malware attacks in case they need to cover up a ransomware payment.

2023-12-14 23:58:07

I wish someone warned me how hard having plants is in LA. I had to buy a water distiller because the tap water has so many chemicals in it that my plants just unalive themselves if I give them it. I can't even collect rain water to feed them because it doesn't rain.

2023-12-13 19:13:43

Need a super simple way to make a reverse shell in C? Winsock sockets can be used as handles! When launching a process via CreateProcess() you can replace the stdin, stdout, and stderr handles with a socket. This will result in all command line I/O from the application being redirected over the socket connection. Great for CMD and PowerShell!
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/574/464/563/573/463/original/6570e0e7e10b6f53.png

2023-12-13 02:17:58

The high end apartment complexes here are absolute hilarious. In a regular apartment complex the landlord basically just refuses to fix your washer. In a high end apartment complex they'll be like hosting DJ'd pool parties with dinner, drinks and fireworks, but then still won't fix your washer. It's like the corporate equivalent of ADHD. They're always on some elaborate side quest instead of doing basic necessities

2023-12-11 15:28:18

A common technique malware uses to detect if it's running in a virtual machine is via CPUID. The 31st bit of ECX on leaf 1 is set to 1 if the OS is running on top of a hypervisor.
On leaf 0x40000000 the EBX, ECX, and EDX values combine to create a text string that identifies the hypervisor vendor.
With VMWare, both methods can be easily countered by modifying your VMX file to override the CPUID registers. Simply shut down your VM and add the following lines to your config file:
cpuid.1.ecx="0---:----:----:----:----:----:----:----"
cpuid.40000000.ebx=”0000:0000:0000:0000:0000:0000:0000:0000″
cpuid.40000000.ecx=”0000:0000:0000:0000:0000:0000:0000:0000″
cpuid.40000000.edx=”0000:0000:0000:0000:0000:0000:0000:0000″
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/562/252/254/641/916/original/7bdc40c826b3647f.jpg

2023-12-10 17:10:39

- reply

@npub17lg…9uux Unless he's planning to to eat the full operating cost personally, they have maybe another year of runway at best before the platform is bankrupt.
I think the titanic analogy is apt. The life rafts have already left, now there's just a bunch of people sat there saying "look how well this ship is doing, there's so many people still on board!" while is slowly sinks into the ocean.

2023-12-10 15:45:28

- reply

@npub17lg…9uux Usage has been declining pretty consistently since the purchase and those signup stats are just a poor attempt to convince what's left of their advertiser to stay. It's dead in the sense that they already hit the iceberg, we're all just waiting for the ship to finally sink.

2023-12-10 15:16:28

- reply

@npub17lg…9uux lol ya, 10s of millions of people totally just woke up and were like "wow, I really need to sign up for Twitter right now". After over a year of pandering to only a tiny demographic of right wing nutjobs, magically a whole new demographic of people want to join.

2023-12-02 03:15:27

Why do people keep renaming random well known malware techniques and passing them off as something new? I just came across "Hells Gate" which appears to just be directly calling syscalls, a technique known since syscalls were introduced.

2023-11-29 21:30:42

Got a Co2 monitor and was pretty surprised to find that simply just preheating the oven takes my entire apartment to over 2000 ppm
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/495/730/679/981/802/original/33d03eb3243ca329.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/495/730/844/326/040/original/b89408d82feba6c5.png

2023-11-29 03:26:34

I made a LinkedIn post asking for feedback on a course I'm making and the amount of people who showed up in the replies to shamelessly promote competing courses was surprising

2023-10-19 23:02:30

90% of social media takes on deeply complex and nuanced geopolitical conflicts
https://media.infosec.exchange/infosecmediaeu/media_attachments/files/111/263/695/736/196/565/original/5e662b3cc8cade57.png

2023-10-11 12:35:10

- reply

@npub17lg…9uux another day another log4j that actually turns out to be badlock

2023-10-11 12:30:44

The curl CVE-2023-38545 affects curl clients that are configured to use a SOCKS5 proxy with remote DNS enabled. To exploit the vulnerability, the attacker needs to cause curl to look up an arbitrary hostname (which could be done via a malicious webserver issuing a HTTP redirect header). The attacker does not need to control the SOCK5 server curl uses, but doing so would likely provide a path to easier exploitation.
https://daniel.haxx.se/blog/2023/10/11/how-i-made-a-heap-overflow-in-curl/