Detection and Response. Former pentester and red teamer.
🌎 Seattle, WA
| https://twitter.com/brian_psu |
“How Discord rolled out Yubikeys for all employees” - lots of great technical and nontechnical takeaways here.
https://discord.com/blog/how-discord-rolled-out-yubikeys-for-all-employees
I want to expand more on the comedy of errors that led to the eviction of #Twitter from their Boulder, Colorado office.
The story that leads up to this building even existing is bizarre and hilarious, so here goes...
A thread 🧵
"With AI, now any idiot can write malware!"
As a security researcher, I can assure you that idiots have been writing malware for quite some time.
I'm a little sad to see Stadia go, though I was pretty sure it was always going to end like this. I think cloud gaming could have a future, especially with games designed for the cloud, but Stadia repeatedly overpromised and underdelivered (remember "negative latency"? remember the promise of jumping in to the same game as a streamer directly from a stream).
A lot of people didn't know you could sign up for Stadia for free without providing a credit card by going directly to the Destiny 2 page and creating an account, and I actually did put in some time in an alt I created for Stadia and through cross-saving my main account. At first, there wasn't crossplay, so Stadia was a deadzone, and despite assurances to the contrary, there was definitely a level of latency and jank if you weren't on a wired connection. But with crossplay to fix the population issues, I quite enjoyed the various devices and setups I was able to play from, even if it wasn't optimal.
Someday I can see a Stadia-like game for things like Civilization, where you could keep a game running in the cloud and jump back into it from anywhere and any device, but Stadia wasn't it. RIP, a sad but inevitable addition to the Google Graveyard.
If you ever need an LDAPFilter for an object with parentheses in the value, use \28 for ( and \29 for ):
Get-ADComputer -LDAPFilter '(&(operatingSystem=Windows 10*)(operatingSystemVersion=10.0 \2817134\29))'
This will match computers with version "10.0 (17134)" aka Windows 10, 1803.
Maybe this saves you some time some day!
For more context:
These get sent from Paypal ([email protected] is the actual seller).
They often request money around $400-500. Subject line will say "You've got a money request." for these.
Otherwise, the sender will often set up a store/seller name that masquerades as a real bill ("Billing Department", "Invoice", "Billing Desk", etc) often with random numbers and letters appended presumably to avoid existing detections. Subject line for these will be "Invoice from Billing Desk", etc.
They'll attach a Seller's Note stating you must call a number to stop the charge, which is the lure to social engineer you further.
gradius
Rod Hilton
Eva
blake
Trail of Bits
SwiftOnSecurity