da_667

Senior Security Researcher, Proofpoint Emerging Threats.

I've been doing this cybersecurity thing for the better part of a decade now. Probably longer than that. I'm starting to forget. Time is relative, but it surely isn't kind to my memory.

I'd like to think I do cybersecurity well, but blue teamers collectively get told they're doing it wrong constantly. So maybe I just failed forward throughout my career.

Oh, I wrote a book. Its a good framework for setting up a virtual machine lab. See my bookmarked toots if you're curious.

Work-Related hashtags:
#Iocs #ThreatIntel #DFIR #Malware #NSM #suricata #snort #BEC #phishing #APT #ThreatDetection

Hobbies:
#VideoGames #XCOM2 #Minecraft #Synthetik #Fallout #Skyrim #Anime #Manga #Adventure #Fantasy #Isekai #HomeImprovement #WoodWorking #MetalWorking #HomeLab

self-verification: https://www.yeettheayys.cf/v_me/
Emerging Threats NSM rules: https://community.emergingthreats.net
How to Homelab: https://leanpub.com/avatar2

Public Key

npub1vca66tdd35k3mcxqgaydujqnlqsxfnsvqlmrsnfpp7s0p9na85gs0p2tep

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsxvwad9kkc6tgaurqywjx7fqflsgryecxq0a3cf5sslg8sje7n6ygpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsgk8aks

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1vca66tdd35k3mcxqgaydujqnlqsxfnsvqlmrsnfpp7s0p9na85gs0p2tep

Show more details

Published at

2024-06-19T12:51:55+02:00

Kind type

0 Metadata

Event JSON

{ "id": "f6b0666db577e0326fcfe24650e55fff755a2c4c14e0abfde8d75f51930bb23d", "pubkey": "663bad2dad8d2d1de0c04748de4813f82064ce0c07f6384d210fa0f0967d3d11", "created_at": 1718794315, "kind": 0, "tags": [ [ "t", "anime" ], [ "t", "fantasy" ], [ "t", "dfir" ], [ "t", "manga" ], [ "t", "minecraft" ], [ "t", "videogames" ], [ "t", "woodworking" ], [ "t", "phishing" ], [ "t", "adventure" ], [ "t", "threatintel" ], [ "t", "metalworking" ], [ "t", "malware" ], [ "t", "snort" ], [ "t", "nsm" ], [ "t", "xcom2" ], [ "t", "apt" ], [ "t", "suricata" ], [ "t", "fallout" ], [ "t", "skyrim" ], [ "t", "homelab" ], [ "t", "homeimprovement" ], [ "t", "bec" ], [ "t", "iocs" ], [ "t", "threatdetection" ], [ "t", "isekai" ], [ "t", "synthetik" ], [ "proxy", "https://infosec.exchange/users/da_667", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/da_667", "pink.momostr" ] ], "content": "{\"name\":\"da_667\",\"about\":\"Senior Security Researcher, Proofpoint Emerging Threats.\\n\\nI've been doing this cybersecurity thing for the better part of a decade now. Probably longer than that. I'm starting to forget. Time is relative, but it surely isn't kind to my memory.\\n\\nI'd like to think I do cybersecurity well, but blue teamers collectively get told they're doing it wrong constantly. So maybe I just failed forward throughout my career.\\n\\nOh, I wrote a book. Its a good framework for setting up a virtual machine lab. See my bookmarked toots if you're curious.\\n\\nWork-Related hashtags:\\n#Iocs #ThreatIntel #DFIR #Malware #NSM #suricata #snort #BEC #phishing #APT #ThreatDetection\\n\\nHobbies:\\n#VideoGames #XCOM2 #Minecraft #Synthetik #Fallout #Skyrim #Anime #Manga #Adventure #Fantasy #Isekai #HomeImprovement #WoodWorking #MetalWorking #HomeLab\\n\\nself-verification: https://www.yeettheayys.cf/v_me/\\nEmerging Threats NSM rules: https://community.emergingthreats.net\\nHow to Homelab: https://leanpub.com/avatar2\\n\",\"website\":\"https://infosec.exchange/@da_667\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/246/372/915/700/755/original/6a124c5ef4db6d16.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/246/372/915/700/755/original/0fb07a7aac74af8f.png\",\"nip05\":\"[email protected]\"}", "sig": "e262b44ccd257265911db28ac264d2d8789f398947209c0a726603ff0035caae7060e345a3e746578b7b403a4d07273ac5302bdfb353a71ff2b3e7f1055f0e94" }

Last Notes

2024-06-15 06:19:41

https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/618/712/499/923/408/original/ed4e09e6e286c706.png

2024-05-08 03:28:38

- reply

kinda sortta. It takes a lot of effort to build deb packages and get them to the point where they are just fire and forget. Then the packages all require maintenance to update, and packages it depends on, as well as packages depending on that package need to be checked for compatibility.
Its a pondorous thing, and the trade-off for pre-packaged binaries: You get the convenience of: Its in a central location, managed by a trusted entity, and I don't need CPU cycles or systems know-how to compile it. Give me a laundry list of things to install for the thing I want to run, and boom, its done.

2024-05-04 07:04:28

- reply

I pirated BF1942 when I was young and dumb and before infostealers were fucking EVERYWHERE.
we ran on a separate, weird gamespy network were people would have their pirate DC final servers. One server had a modified El Alamein map. They spawned a harrier in the northwest corner of the map.
I fucking loved flying it, because the "hover" mode could be used to make the plane do an instant 180.
They also modded the humvees with nitrous that would make them FLY across the map, and put miniguns on the top of them.
The server mode with CTF and it was so much fun.

2024-05-04 06:41:22

- reply

Used to play Battlefield 1942 and/or Desert Combat Mod with friends in the way back when. Man was that fun. Local mario kart 64 was always a blast.

2024-05-04 06:38:46

- reply

I miss lan parties or local multiplayer.

2024-05-04 06:34:30

- reply

I don't have an opinion. I don't play the game. Probably never will.
I don't play multiplayer games anymore. I'm tired of getting yelled at by pro gamers, tryhards, and 12 year olds.

2024-05-04 06:28:45

- reply

Game enjoyed a Very Positive Steam review rating. It got review bombed. 14,000 negative reviews just yesterday.
Have a feeling they aren't going to drop the PSN requirements. Probably publisher demands, considering how popular the game is right now.
Only thing I think would make them reconsider/make it optional would be for steam to start issuing refunds.
Its really interesting to watch something like this unfold.

2024-05-04 06:25:10

- reply

"But wait, there's more!"™
Community leaders have called the users entitled and said it takes 120 seconds to set up a PSN account.
Completely disregarding regions that don't have PSN access.
"Use a VPN!" you say. If Sony detects VPN usage, your account gets banned. If they detect failed password login attempts, your account can get banned.
Allegedly some users are posting screencaps that Sony demans gov issued ID to create an account. Photoshop is a thing, I can't verify that. I didn't need to in the US.
But even better yet, is that someone high up at arrowhead was mentioning that this was to help "benefit from the Security of the PSN".
Allegedly PSN has had security problems. Recently.
Edit: Neither of these are PSN *specifically* but Sony networks have been getting popped by ransomware gangs recently.
https://www.securityweek.com/sony-confirms-data-stolen-in-two-recent-hacker-attacks/

2024-05-04 06:13:17

- reply

Game had so many players that the devs would put major goals like "Kill 1 billion bugs in 7 days", and fuckers had it done in like 3 and a half days.
So, recently, they announced that they're bringing back the ability to link your PC game with PSN accounts. Only, its not optional, its mandatory.
Which is all well in good, but this directly contradicts Sony's policy (that they changed literally yesterday) that states that PSN linking isn't supposed to be mandatory for PC releases.
Which is also all well and good, but the PSN network doesn't exist or allow users from some countries. They support 60ish countries? Not even the entirety of the EU is supported.
This means there are a lot of people who bought a game who are out the 40 bucks this game cost.

2024-05-04 06:09:11

- reply

I imagine most of you have better shit to do than wax philosophical about video game news, but that's why I'm here: I'm a no-lifer.
Helldivers 2 is a pretty popular squad-based FPS. Think of it as Starship Troopers. Its basically that. Fight bugs, or fight autonomous robots.
It developed quite the following. The developer, Arrowhead Studios (I said publisher earlier. Pretty sure Sony was the publisher) had a lot of problems during initial launch. Turns out the game was very popular on launch. So much so, they disabled PSN account linking until they could scale things and work on stability.

2024-05-04 06:05:41

I have never witnessed a publisher set their good will on fire as fast as Arrowhead has in the past 24 hours.

2024-04-13 07:38:27

- reply

My wife and I did the song and dance... about five years ago now. 2019 Ford Flex "The magic schoolbus", and 2019 Ford Edge "High-Fiving the Reaper".
We've been swapping between them every six months, and storing the other in the garage, and they both are just now nearing the 50k mile mark and are all paid out.
Even still, every so often I get that itch to see how automotive tech has progressed in the last few years and.... things are fucking *weird* right now.
I had like two more paragraphs of car rambling here but I deleted them because regular car reviews has ruined me. Congrats though, friend :)

2024-04-09 14:38:37

- reply

whatevs, its done. Got my 5 miles.

2024-04-05 18:51:55

- reply

We were there all fucking night. How incredibly fucked up is it that we nearly missed the SECOND connecting flight in spite of being in the airport, one of the first to check our bags.
I'm at a loss. We're filed a massive complaint with them, but I don't really foresee anything coming out of it other than "sucks to be you".
We called to try and get a refund already and they said to submit our complaint first. So.. I made a five-page document and attached it for them to read.

2024-04-05 18:49:04

- reply

You all know that, you must be on the plane 20 minutes prior to departure. In the span of 40 minutes AFTER the bag check we:
-Got through a rapidly expanding TSA line with two attendants on duty to check us into the freedom fondle line
-Discovered the T-terminal was on the opposite end of the airport, and required its own fuckin' subway ride.
-Made it to the gate at 5:38. Two minutes before the cut off.

2024-04-05 18:47:08

- reply

I understand the need for personal cleanliness and the need to ensure that you're prepped for the day, I'm not saying that you don't deserve to have the time to prepare. but even the slightest bit of personal interaction would've been great.
"We're getting our stations set up, I promise we'll get you all processed as fast as we can, thank you for your patience, etc."
about 4:50ish, first customers start getting served. there was maybe 1-2 people in front of us. While we wait, I observed an attendant at the sky club line literally throw bags on to the conveyor belt over his fuckin' shoulder. I observed the same guy insulting a hispanic family, and saying "they're gonna start crying any minute".
We get seen. We check our bags, and we move the fuck out. Our flight starts board at 5:30 am.

2024-04-05 18:43:25

- reply

6 ish hours passes by fitfully. We're lined up, first mother fuckers in line at 4:30 am.
Nobody home.
First attendants start the slow walk up at 440ish. Nobody acknowledges the growing, sizeable line at the delta check-in desk. 445 the only acknowledgement we get is that we were all in the premium sky club line. Move to the other side.
We acknowledge and we power walk to the opposite terminals, first in line again. We wait another 5-10 minutes as workers meandered, made small talk, put on lotion, lysol'd their computers, and absolutely refuse to engage the crowd at all. It was about 4:50ish and my wife, very kindly asks "Our flight is at 6. Are we gonna make it?" to a passing attendant.
She immediately goes "how should I know?" and just keeps doing whatever.

2024-04-05 18:38:41

- reply

We heard Delta attendants yelling "Desk closes in twenty minutes"
and
saying they didn't sign up for overtime.
I heard one of them having an argument with another co-worker about how their job is interrupting with their second, part-time job and they were fucking pissed.
I... understand. Life fucking sucks right now. and if you have to take on two jobs, I'm sorry.
None of us wanted to be here to inconvenience you. But here we all are.

2024-04-05 18:35:55

- reply

I heard attendants telling people that some folks had connecting flights they might be able to make, but TSA closes in twenty minutes and "good luck"
Others? they left to go check in to a hotel that the staff recommended, only to discover the hotel was booked solid.

2024-04-05 18:34:53

- reply

so we camped out. in total, 8 hours in ATL at the F terminal. By the way, the benches there have hostile architecture with molded metal arm rests between each chair. You can't sleep on the benches.
But stepping back a minute. You know that we weren't the only ones left there. Several people were fucked over like us. They had children with them.
There were heating exchanges at the service desk. The attendants were shouting back at customers. No soft skills, no de-escalations, they did not give one single iota of a fuck for any of us.

2024-03-28 19:23:36

- reply

I never understood the draw of rolling releases. Do you enjoy not having support of any of your shit breaks, or the first step being 'schedule a shit ton of downtime, and just update all of this. Fuck the consequences.'

2024-03-27 15:40:18

- reply

[@catsalad](https://infosec.exchange/@catsalad)
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/168/168/089/590/994/original/5d92158fa2b13de8.jpeg

2024-03-21 01:49:02

my advice if you work in cybersecurity is to pace yourself. You're playing a roguelike in which there isn't a win condition. It just loops, and becomes harder.