TDMzdA== H@x04 @masterhacker09
Joined October 2017-
Tweets132
-
Followers7
-
Following100
-
Likes237
For the newcomers out there... I’ve been doing InfoSec stuff for ~20 years now, & every 3-5 years I discover a better understanding of the subject. Just when I think I’ve got it figured out, I get a little closer still. This is for your edification to stick with it 1/
Really good bit on shortcomings of SSO and how it relates to Facebook's recent breach
Given the scale and severity of the @facebook breach, I’ll share some thoughts based on our recent @USENIXSecurity paper with @m0eb1t, amrutha, @kaytwo, @stevecheckoway, where we explored the ramifications of your Facebook account being compromised. cs.uic.edu/~polakis/paper… (1/n)
So much this.
Given the scale and severity of the @facebook breach, I’ll share some thoughts based on our recent @USENIXSecurity paper with @m0eb1t, amrutha, @kaytwo, @stevecheckoway, where we explored the ramifications of your Facebook account being compromised. cs.uic.edu/~polakis/paper… (1/n)
I was hoping you may be able to address the scenario of implementing sec code frameworks at a company that is developer-centric, large, and uses a variety of languages. How is standardization/assimilation of sec frameworks possible in this scenario? 2/2
"Seeing an exploit without understanding how any of it works felt like witnessing someone doing actual magic.” @IAmMandatory has found some iconic bugs. He chatted with us about some of those finds and much more. Read the full Q&A hackerone.com/blog/Hacker-QA… … #TogetherWeHitHarder
New breach: Data aggregator Exactis exposed a list of 131M email addresses and extensive personal data ranging from contact info to family structure. It was sold to "increase marketing results". 76% of addresses were already in @haveibeenpwned. Read more: wired.com/story/exactis-…
Windows Event ID 4624 displays a numerical value for the type of login that was attempted. These numbers are important from a forensic standpoint but also for understanding credential exposure and mitigating risks. Descriptions in replies.
Ticketmaster had embedded a chatbot (by Inbenta) on their payment pages. Attackers found a vulnerability from the Javascript code, and used that to extract customer's payment information as they were paying for tickets. inbenta.com/en/inbenta-and… #ticketmaster #lippupalvelu #GDPR
Psst. Hey you. Yeah, you over there. It’s Sunday night. A new week is starting. Don’t compare yourself to others, but make plans THIS WEEK to become a better version of YOU. Hint: that probably involves learning from people right in front of you, NOT on twitter. (Yeah, I know.)
We need more big vendors who actively think about scaling down. Most don’t because big customers are where the money is. But those customers CAN subsidize the smaller ones. The industry is leaving (has left) most behind because it ignores the little guy/gal. 1/6
There's "I had a crazy week" and then there's "I had a 'John McAfee crazy' week." x.com/officialmcafee…
I apologize for my three day absence but I was unconscious for two days at the Vidant Medical Center in North Carolina and just woke up. My enemies maged to spike something that i ingested. However, I am more difficult to kill than anyone can possibly imagine. I am back.
My ~90 year old grandparents desperately want to use @Lyft as they can’t drive anymore, but the app is way too unintuitive to use for them with only basic smartphone use. Writing a guide with screenshots and printing+laminating. They should really consider that demographic.
Along these lines, I developed a tool to track changes in relative urls (i.e. API endpoints) in JS files. See github.com/cablej/filecha… or filechangemonitor.io. More official release planned later, feedback welcomed.
Bug bounty tip: JavaScript files are a great way to gain insight into hidden/inaccessible functionality of a website, but minified files are a pain. Chrome reconstruct original source code files using source maps which makes reading code much more efficient.
Want to use a password manager with your bank? Send them this from @1Password: blog.agilebits.com/2015/03/23/an-…
Automate all the things! Got my garden watering automated with a rain barrel, solar powered timer, and drip irrigation.
@chrissanders88 This is so cool! Can you share some of the details how you engineered it? I've had this dream of programming a little irrigation system to just water one house plant. This is a whole nother level!
MidBrain @MissMidBrain
191 Followers 1K Following #mentalhealthadvocate. trying to find balance though I am chaos. if I'm wrong, educate me. writing is my passion. will argue but willing to be humbled.
0x0sec @0x0sec
1K Followers 4K Following OSCP Student, DFIR, Reverse Engineering, Exploit Dev, Entrepreneur, NEO Sports Fan... Tweets are Tweets... RT != Endorsement.
Me.using(X.comms) ~ M... @HansBPetersen
134 Followers 225 Following Security Engineer, Researcher, Pentester, Mal.Rev.Eng, OSINT, Linguist, hax0r!st (I hack, therefore I am). GABF Beer Geek. Tweetz R My Pwn.
Aryeh Goretsky {@info... @goretsky
4K Followers 5K Following Security researcher. Antivirus pioneer ● formerly w/ @ESET & @McAfee ● MS-MVP recipient ● mod: Lenovo, Neowin, ScotsNewsletter forums ● Intel Insider's Council
Ryan M. Montgomery @0dayCTF
130K Followers 630 Following Pentester / Serial Entrepreneur / Child Safety Warrior
Chris xorrior@infosec... @xorrior
11K Followers 1K Following @[email protected] Husband | Father | Pentester | Red Teamer | macOS security | Manager - Red Team @Zoom https://t.co/af3c0fgU2v
Andy Robbins @_wald0
37K Followers 2K Following Co-founder of SpecterOps. Co-creator of BloodHound. https://t.co/rub1i3Fs9g
Rohan Vazarkar @CptJesus
16K Followers 110 Following Penetration Tester and BloodHound Developer @specterops
Matt Nelson @enigma0x3
33K Followers 378 Following @specterops | Enjoys abusing features | https://t.co/aN1kcQxRJt
rpw @esizkur
8K Followers 907 Following
HackerOne @Hacker0x01
344K Followers 3K Following HackerOne makes security continuous. We unite AI and human insight through a unified platform to expose risk and eliminate it.
mandatory.bsky.social @IAmMandatory
12K Followers 501 Following Red Teamer @OpenAI, meme archivist, XSS Hunter author, DNS/TLD/web security researcher.
BleepingComputer @BleepinComputer
261K Followers 208 Following Breaking cybersecurity and technology news, guides, and tutorials that help you get the most from your computer. DMs are open, so send us those tips!
Have I Been Pwned @haveibeenpwned
180K Followers 1 Following Check if you have an email address or password that has been compromised in a data breach. Created and maintained by @troyhunt.
Catalin Cimpanu @campuscodi
106K Followers 2K Following Cybersecurity reporter. I'm mostly active on BlueSky and Mastodon.
Aaron Grattafiori @dyn___
6K Followers 3K Following Offensive Security / AI @Umbriel_AI. Ex-AI RT and OffSec at NVIDIA, RT lead @ Meta. Ex-Principal Consultant and Researcher @ NCC Group/iSEC Partners. Neg9//CTF.
Second World War twee... @RealTimeWWII
540K Followers 1K Following I livetweet the Second World War as it happened on this date in 1941, & for four years to come. Third time's the charm. Alwyn Collinson, [email protected]
Google VRP (Google Bu... @GoogleVRP
44K Followers 0 Following We ❤️ 🐜🐞🦗🦟🦋. {echo,{{{Google,Chrome,Android,Abuse,Mobile,OSS,Cloud}Vulnerability,Patch}Reward,VulnerabilityResearchGrants}Program}
Nathan Kirk @sekirkity
751 Followers 765 Following
Matt Jezorek @MattJezorek
2K Followers 1K Following These are my own views, not my employers. Views likely to change as I learn. GP @ReEntryCapital him/he
Simone Giertz @SimoneGiertz
462K Followers 2K Following I build things and make videos about it. Business inquiries: [email protected]
Kialo @Kialo
32K Followers 119 Following A simple yet powerful tool for critical thinking, serious discussion, and decision-making. Educators please visit @kialoedu.
OWASP Top10 @OWASPTop10
5K Followers 25 Following
Zed Attack Proxy @zaproxy
15K Followers 5 Following Official announcements (low vol) for ZAP by @Checkmarx - the worlds most popular web app scanner. Free and open source. https://t.co/pxO8zZ6usH
Andrew van der Stock @vanderaj
8K Followers 6K Following Please come see me on Linked In. DMs not monitored.
Pwnallthethings @pwnallthethings
127K Followers 2K Following
Today In Infosec @todayininfosec
40K Followers 1 Following Tweeting news from the world of information security that occurred or was announced on today's date in a previous year. Managed by @stevewerby.
Robert M. Lee @RobertMLee
75K Followers 397 Following Co-Founder & CEO @DragosInc | SANS #FOR578 & #ICS515 course author & Faculty Fellow |@_LittleBobby_ writer | NSA & USAF Veteran
haroon meer @haroonmeer
17K Followers 3K Following Security Geek at Thinkst. We build https://t.co/Sv6Gp3sG6b
Nick Percoco @c7five
30K Followers 1K Following Chief Security Officer at @krakenfx, hacker, @THOTCON OPER, @IamTheCavalry, @DEFCON NOC, @SpiderLabs founder - Opinions are my own, not my employer’s
Sebastian Schinzel @s... @seecurity
4K Followers 49 Following Husband, dad, mountain biker, professor of computer security @fh_muenster. Active at https://t.co/Nz50fZXGNd @[email protected]
Kelly Villanueva @kellthenoise
4K Followers 280 Following Previously Red team @ Salesforce, SpecterOps & Big4 | Interested in security, puns, and mountains | Opinions my own @[email protected]
I am The Cavalry @iamthecavalry
8K Followers 100 Following The Cavalry Isn't Coming: It falls to you. Be a voice of reason. Drive cyber security for public safety & human life.
ටل 🧗 @TheColonial
13K Followers 152 Following Given up on the Twitter trashfire. TheColonial.01 on Signal.
Josh Corman ♘ @joshcorman
35K Followers 2K Following Protector | Philosopher | Strategist | “Lighthouse Keeper” | Co-Founded https://t.co/Jlmny0WGL0 & https://t.co/8XxdejMUK1 | comments are my own
Wendy Nather @wendynather
31K Followers 373 Following
Trimarc @TrimarcSecurity
5K Followers 132 Following We are the experts in Active Directory, Entra ID, and Identity security. Find out more about our services at https://t.co/3kWA6f7dh1.
Alex Stamos @alexstamos
92K Followers 2K Following CISO at @Cognition and teaching at Stanford (https://t.co/qi1lzlkg3K).
Jack Cable @jackhcable
14K Followers 1K Following Ethical hacker. CEO & Co-founder @Corridor. Prev @CISAgov @Stanford
Me.using(X.comms) ~ M... @HansBPetersen
134 Followers 225 Following Security Engineer, Researcher, Pentester, Mal.Rev.Eng, OSINT, Linguist, hax0r!st (I hack, therefore I am). GABF Beer Geek. Tweetz R My Pwn.
Keren Elazari @k3r3n3
20K Followers 5K Following Friendly Hacker | Geek Pride 🌈 | Cyber Punk | Security Researcher | Founder @Bsidestlv & @Ladiescyber | @TEDtalks Speaker | Faculty @icrctau
Mari0n @pinkflawd
12K Followers 614 Following nutcracker by heart • tweets are my own, but if someone wants to buy them.. errr kidding
0patch @0patch
8K Followers 222 Following Microscopic cures for big security holes. 0patch (pronounced 'zero patch') Bluesky: https://t.co/js7yaM3lqN Mastodon: @[email protected]
Sebastian Neef @gehaxelt
3K Followers 251 Following PhD Candidate & Freelancer. WhiteHat. Bughunter. CTFs @ENOFLAG Blogs @0daywork, @blogbasis and Founder of @internetwache @[email protected]
Joy 😅 @_Joyous_
553 Followers 601 Following I seek what I am. Therefore I am complex, beautiful, inspirational, and entertaining. Techie, gamer, foster kid. Founder: Defender Academy. My views are my own.
James Breakwell, Expl... @XplodingUnicorn
854K Followers 760 Following Father of daughters. Owner of pigs. Writer of books: https://t.co/V7JWbsTXJ9
Boyan Slat @BoyanSlat
201K Followers 224 Following Studied aerospace engineering, becomes a cleaner. Founder/CEO @TheOceanCleanup
Internet of Shit @internetofshit
401K Followers 235 Following screw it, put a chip in it. say hello: [email protected]
Dave Kennedy @HackingDave
234K Followers 6K Following Founder @Binary_Defense @TrustedSec. @WeHackHealth Pod. God + Family/Hacker/CSO/USMC/Intel/Fitness. Make the world a better place.
The Ocean Cleanup @TheOceanCleanup
346K Followers 124 Following The Largest Cleanup in History. Follow the latest updates on our mission to rid the world's oceans of plastic.
The Honeynet Project @ProjectHoneynet
19K Followers 200 Following To learn the tools, tactics and motives involved in computer and network attacks, and share the lessons learned.
ᴅᴀɴɪᴇʟ ᴍɪ... @DanielMiessler
161K Followers 2K Following Building Vector: The Enterprise AI Operating System @ https://t.co/D38E5CY488, and LifeOS: The Human Magnification OS @ https://t.co/muV0Un0Hi8 | Ex: Apple, Robinhood, HP, ArmyTrends for United States
You might like
