imp🌻ster

66 Followers
115 Following
20 Posts
Old Linux nerd turned Blue Teamer. Enjoyer of puzzles. Fixer of toys. Thrower of frisbees. I also help out with prosversusjoes.net. (he/him/these hands)
Pros vs Joes CTFhttp://prosversusjoes.net
Twitter@_imp0ster_

It's time! BSidesLV 2024 is happening, and so is Pros V Joes! We are going to be onsite, it's going to be awesome, and we want YOU to sign up as a Joe or a Pro!!

Apply here!! Apply now!!

Pro reg: https://forms.gle/CtXX2FLeZxUE3z5E6

Joe reg: https://forms.gle/W8y22FaMq9TdgWLC6

BSidesLV 2024 PvJ CTF Sign-up for Pros

Calling All Pros! Pro registration for the BSidesLV Pros V Joes competition is now open! Pros V Joes website: http://prosversusjoes.net/ (Please note the game is on Tuesday, August 6 and Wednesday, August 7) What is the Pros V Joes CTF? This event is an opportunity for average users (Joes) to try their hand at both the offensive and defensive side of computer security. For the Pros, it's a chance to hone and show off their skills while helping others to learn and better themselves. It's also a lot of fun. Joes are split up into teams, each with a Pro captain, and given their own network to defend against the other Pros in our Red Cell. Each team's network comes complete with all of the services, servers, and desktops common to an organization today. Of course, there will be more than a few surprises... If you are applying as a Blue Pro, your mission is to help your team secure the services and systems, find the Red Cell, and expel them while keeping them from getting back in. If you are applying as a Red Pro...well, you know what your job will be. ;-) All Pros are expected to be courteous and friendly to Joes, helping them learn and better themselves throughout the event. For two days, players will attack and defend in live networks, breaking into each other's systems to steal flags for fame and glory. Each team is provided with their own network that is full of servers and workstations to defend. All of this gear is housed in a dedicated and isolated network that we affectionately call the Gaming Grid. Players need only to connect to the environment over VPN. (Players' personal machines will not be in the line of fire, if you follow the rules... ;-) You can’t join and learn if you don’t send in the form! The environment to host this CTF is currently undergoing active construction and will be laced with various surprises to keep the game interesting. The networks that the Blue Teams must defend will be a mix of Windows and Linux, with the typical Internet services (web, DNS, mail, etc) and more obscure systems and services. At the end, a winning team will be announced. You, the Pros, are pivotal for this event to be successful. We need your skills and experience, as well as your help training and tutoring the Joe's. I'd like to ask each Pro to respond with a bit of information about yourself - your background, your level of experience, and your area of expertise. This information will help tailor the game so that we can make the best use of the talent in the Pro pool. We will not share your responses with anyone other than our PvJ Staff. In the days and weeks ahead, I'd like to build a dialog amongst the Pros. As we get closer to the event, we will be reaching out to applicants to determine where the best fit might be. Red Applicants can expect to be tested in our Proving Grounds, so be prepared to show us your mettle. Blue Applicants will undergo an interview process before being accepted. Lastly, if anyone has questions, comments, or suggestions, please don't hesitate to contact me on https://infosec.exchange/@dichotomy. We have a whole team building and running this CTF. We’re very open to new ideas, and think a group collaboration can only make this event better. Thanks, ~dichotomy

Google Docs

Hello everyone. I know that these are tough times for many people. If you derive value from the fediverse and have the means to do so, please consider donating to support your instance. Most instances rely on donations to pay the bills (infosec.exchange and friends cost over $3000/month to host).

Instructions on how to donate are generally available on your instance's "about" page (for example: https://infosec.exchange/about)

Also, I firmly believe that access to the fediverse should not be tied to one's ability to pay, and I think it's even more important for those in difficult situations to maintain the social connections that the fediverse provides, so (at least in my view) donations are welcome, but not required in any way.

And for those people who already donate, my hats off to you. You make the fediverse possible.  

Infosec Exchange

A Mastodon instance for info/cyber security-minded people.

Mastodon hosted on infosec.exchange
Clip-cl0p, ya don't stop...
Mastodon fixes critical “TootRoot” vulnerability allowing node hijacking

Most critical of the bugs allowed attackers to root federated instances.

Ars Technica
Me: ow.
Wife: you ok?
Me: yeah I just...
Me: <sigh>
Me: I just closed the toolbox lid on part of my belly.

@BSidesLV BTW, not all talks need to break new ground. Foundational talks are helpful to bringing new folks into the infosec data science community.

Every year I like to get at least one "intro to ML" talk in @BSidesLV Ground Truth, preferably with some demos folks can do at home. If you think you could share that 'starting in ML talk' and get all the speaker perks, please submit! (https://pretalx.com/bsideslv23/cfp)

Security BSides Last Vegas 2023

Schedule, talks and talk submissions for Security BSides Last Vegas 2023

By the end of April, the bird site will be a substantially different user experience. Legacy check marks gone; only Blue in “For You”; no non-blue in polls.

This will have the effect of warping the entire ecosystem towards fascist shills, demagogues, and opportunists.

Now would be a good time to invest in alternative infrastructure, including making sure Mastodon instances are fast and robust. We are going to need them.

I'm noticing a lot of "I'm bored of Mastodon, I'm going back to #Twitter" posts.

In case they are genuine, here's what I've found works:

⚫ try to post content, not complaints. People want to engage with you, not your gripes

⚫ try to learn. If you're putting in an effort to be part of the community, the community will welcome you

⚫ Try to avoid posting links to tweets, definitely don't cross-post. People want Mastodon content

⚫ Reply! Reply! Reply! Everyone wants to know someone's reading and considering their content, even you

⚫ Don't lurk. Many of us check for a filled out profile, avatars, and posts, before we follow someone back

⚫ Chill. It's a big new world that doesn't serve everything up to you

⚫ Avoid the trap of rebuilding Twitter here

Feel free to link this post to people struggling with Mastodon. It's what I've found works, and may not work for everyone

😬
Omg. Stroopwafels. That is all.