Notices by Jake Hildreth (acorn) :blacker_heart_outline: (horse@infosec.exchange), page 17

@AndHuman What app(s) are you trying to sideload? What methods have you attempted so far?

@cstross Mine only has one hard disk! Its trench coat is really fancy tho.

New Year, New Release!

BlueTuxedo, a tiny tool built to find and fix misconfigurations in Active Directory-integrated DNS, is now at a place where it can start getting "official releases" - whatever that means for a tool worked on during spare time with no real commitment! Expect a release more-or-less monthly unless life happens.

In this release, we added more information about what BlueTuxedo actually IS to the README, added a couple checks, and improved DHCP server identification. Also, BlueTuxedo is now available in the Powershell Gallery for ease of installation!

Improvements:

• New Data Collected:
  • DnsUpdateProxy group membership
  • Name Protection on DHCP servers
• New Checks:
  • Do ADI DNS zones enforce secure updates?
  • Is the DnsUpdateProxy group membership >0?
• Published to PSGallery

Known Issues:

• Certain multi-domain forest configurations result in inability to enumerate ADI Zones.

Contributors to this release:
@horse (code)
@JimSycurity (research and testing)

@Sempf Oh? What’s better?

@Sempf 🤣

Did you know all modern versions of Windows include "capture the flag" challenges built into the OS?

Run C:\Windows\system32\ctfmon.exe to give it a try!

<refusing to shut off the iPhone alarm so I can keep listening to the soothing af ringtone>

(it's called "Daybreak")

@Sempf How'd it go?

@selzero @Aedius @bsod @aral 👋

@jwgoerlich Anytime you see a new fruit at the grocery store, try it!

@CryptoJones Accurate

@cybeej That’s too many changes.

@lex https://trailers.getyarn.io/yarn-clip/134612d7-6dab-4861-abd7-ba836259825b

@BetoOnSecurity @jerry @hacks4pancakes @admitsWrongIfProven @reverseics My door is always open to you, buddy!

@jerry @hacks4pancakes @admitsWrongIfProven @reverseics anything where you want a little umami pop. The weirdest one I do regularly is probably collard greens.

@GossiTheDog > Notify users when relationships are severed due to domain block (transparency on admin decisions)

This one please yes.

@burritosec I like namecheap because their DNS panel is simple enough while still having some power. My co-workers like porkbun.

@dko @xabean @Da_Gut @tinker Of course! PRIMADA Premium White Chin Strap... https://www.amazon.com/dp/B006O8LVX2

@krypt3ia TFW

@xabean @Da_Gut @tinker I use nasal pillows because of my beard. Combined with a wide comfy chin strap, I never have to worry about air blowing out my mouth. And it looks suuuuuuper cute.