Notices by :rainbowCrow: (cr0w@infosec.exchange), page 2

Hold up. There was a perfect 10 in WordPress Core the other day and I have heard nothing about anyone popping the White House website. That seems... huh.

Gotta love how my EDR changed "Alerts" and "Incidents" to "Issues" and "Cases" with no heads-up but they are "unable" to change "Blacklist" and "Whitelist" to "Block list" and "Allow list."

SMDH don't the ransomware nerds know not to fuck with cats on the Internet?

#ransomware

Scrolling through my history to find a specific toot.

RE: https://infosec.exchange/@nyanbinary/116952670917734805

And that is the story on how JavaScript was invented.

RE: https://defcon.social/@infosec/116942473843157209

Honest question that will probably sound like I'm trying to dunk on them but I'm not: Is this something anyone actually cares about? What's the theoretical concern? AitM SSH sessions? Decrypting past SSH sessions? Cracking private keys?

I honestly don't understand how whether the SSH config is PQC capable is a concern when these are already Internet-facing OT and medical devices.

cR0w Consulting, LLC

We fix what Copilot fucked up.

ref: https://post.lurk.org/@rose_alibi/116931404071137369

RE: https://mastodon.social/@arstechnica/116931268277476717

Typical asshole tech bro flip-flopping on very loud, public opinions to the extreme and treating everyone with whom they ( currently ) disagree with ridicule, all while maintaining zero self-awareness.

RE: https://mastodon.gamedev.place/@Doomed_Daniel/116909174836113298

sheepishly raises hand

@Epic_Null Is this the new one?

https://git.projectnightcrawler.dev/NightmareEclipse/LegacyHive

You know how there are weird tricks with computer stuff that you think everyone knows but they don't? I live learning and teaching new things like those when they come up.

Today's was the carat substitution in bash. It probably works in other shells too but IDK, I'm too old to learn a new shell.

The way it works is fairly similar to the / in sed or similar. You can use them to run the previous command but with a string substitution.

For example, let's say I entered this command:

dig A cascadiacrow.org

When it fails to resolve, I realize it was a .com domain. Rather than retyping the command, or hitting the up arrow to change the previous command, you could do this:

^org^com^

And it would run:

dig A cascadiacrow.com

Kind of cool with those one liners you spend way too much time on and find a typo.

Anyway, I used it and someone thought it was magic so if it's new to you too, happy Monday.

RE: https://infosec.exchange/@patrickcmiller/116897619718666207

Let me fix that headline real quick:

The Hidden Security Risks of Understaffing

Why are the cute ones always so stinky?

RE: https://infosec.exchange/@BleepingComputer/116891090766065286

Let me fix that for you: Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover introduce vulnerabilities in its codebase.

RE: https://infosec.exchange/@securestep9/116884683751982510

WTF? :brdLol:

shut up and taste the rainbow

@mattly In that case, I would say your best bet is to look for a Netflow setting somewhere. I don't do much with home routers so there may not be one but it's worth a look.

@mattly Do you have root access on the router?

@soatok Not just Trump but yes.

RE: https://cyberplace.social/@GossiTheDog/116759868416707730

CSAM generation is now openly "critical for national security." So yeah, America is going about as expected.