Notices by IAintShootinMis (iaintshootinmis@digitaldarkage.cc)

Little worrisome though, while the commands are executing, w doesn't show that you have a session active on the machine.

Wondering if @hal_pomeranz or someone has some insight into whats happening here.

If I weren't passing the command like that, i would normally see two sessions. One for each logged in ssh session.

Man, #ssh never ceases to amaze me.

Just learned (after 15years on #linux) that you can execute a command on a remote host using the ' ' convention.

E.g.; ssh root@host 'date' will 1) start a connection, 2) execute date on the remote host 3) return the output of date 4) and finally close the connection.

Even better you can pipe things to the command. So echo "dog" | ssh root@1.x.x.x 'wall' will send the word "dog" to all logged in users.

I should have assumed something like this exists

@hal_pomeranz

Here the output of w when logging in via ssh normally.

@hal_pomeranz Here's a side by side example of what I'm trying to relate. If I were to run something like 'nc' it could be up for days with no one noticing another session had been started. At least from the output of w.

Due to nudity and sexual content I had to find alternative viewing for tonight's #Monsterdon

I have to highly recommend the 1980 movie The Changeling for an upcoming one. Was a lot of MST3K style fun for us and the kiddos.

@Taweret

@ryanc oh, no thank you. I'll just ask chatgpt /s

@ryanc this was great. Fun surprise. Do you have a howto?

@GossiTheDog @cR0w @campuscodi meh, these were shared with me from someone else's breach and they have paperwork and lawyers and other things to deal with. I got em shared with me in confidence, so I'm trying to do the same, but your sentiment is appreciated and understood.

@cR0w @GossiTheDog @campuscodi have iocs for the sap one that were shared with me, slightly redacted but available of you want them. Dated 14th march

@cR0w @GossiTheDog @campuscodi quietly though anyone may request them, tlp:red like

What is the point of amassing knowledge if you hoard it like a dragon. You will die alone on top of your pile of facts.

Share your knowledge. Teach someone something. Write a blog post.

Maybe a hundred people have written about it before. But so what. YOU haven't written about it before.

And that's what makes what you have to say special.

Lots of people can have the same knowledge as you. No one else can have the wisdom and experience you uniquely gained.

@patrickcmiller if you don't, did you even enjoy it?

After a week of road tripping, we finally ended up in #NewOrleans We've had #BBQ in #Memphis Dug Diamonds in #Arkansas and now have had gumbo in the Bayou. This is a panoramic shot right on the #MississippiRiver a few feet from #CafeDuMonde in the #FrenchQuarter: a thread

We started off the morning at #CafeDuMonde enjoying the famous #beignets and #chikorycoffee Highly recommend getting here around 7 am as the line quickly grew out of control and people waited long periods of time. The prices are great for beignets and coffee au lait and great music from local musicians.

@GossiTheDog respectfully sir, and I mean this sincerely (your toots are considered Infosec scripture in this house), I argue there's a lot to do and I've been doing it. (Its in my Troop Leading Procedures thread here: https://digitaldarkage.cc/@iaintshootinmis/113189506131608638 )

I can't put mitigations in place, or start patching, but we can brace ourselves and partners for the oncoming Storm.

Who is paying attention to #EvilSocket on X and wheres the conversation happening? I'd like to follow whoever's mastodon is talking about it.

If no one is, then there is a #Linux unauth #RCE being disclosed to openwall on the 30th.

Appears to affect Linux and #BSD with a 9.9 CVSS score.

From reading X thread seems to be not kernel or user space. Assuming protocol implementation?

https://x.com/evilsocket/status/1838169889330135132

#ThreatIntel #Vuln #Exploit #infosec #cve

Schrodinger's Data: Data that is immensely valuable to the company and must be protected at all costs, until Security or GRC tries to requires controls to protect it. Then its worthless, open source, public data, and theres no reason to protect it.

#InfoSec #GRC #Risk

@silverwizard @hal_pomeranz @zak Wasn't Western Digital just suffering massive customer data leaks, or was that just their cloud service?

@hal_pomeranz @zak everyone's recommendation has been seagate so far,. Any dissenting opinion?

I'm in tears. This is hilarious. Poignant. And timely.

Please, take the profanity for what it is, a way to make you laugh, and remember, don't you dare use a spreadsheet.

#Engineering #Automation #Security #InfoSec #Spreadsheet #Excel

https://ludic.mataroa.blog/blog/i-will-fucking-dropkick-you-if-you-use-that-spreadsheet/