mandatory (@IAmMandatory)

@mandatory@infosec.exchange
625 Followers
95 Following
13 Posts
RedTeam @Snapchat | Previously @google, @uber, @BishopFox. XSS Hunter author, DNS/TLD/web security researcher.
@E_Briannica do you know of an idiom database that includes examples from all languages (not just English), or any attempts to compile them for all languages?
This shitpost may be a little too niche, but it's how the scraping struggle be these days (turn video audio on).

Matthew Bryant's (@mandatory) @defcon 32 talk is amazing: Secret Life of Rogue Device: Lost IT Assets on the Public Marketplace: https://www.youtube.com/watch?v=QgeEHdAmJDg

Way more entertaining than anything currently on Netflix.

(thank you @jduck for the link!)

DEF CON 32 - Secret Life of Rogue Device: Lost IT Assets on the Public Marketplace - Matthew Bryant

YouTube

CursedChrome now has (beta) manifest V3 support, since Google appears to be "for real" about the MV2 deprecation this time: https://github.com/mandatoryprogrammer/CursedChrome

Please report any bugs you find, I'll try to get to them on the weekends when I have free time 👍.

GitHub - mandatoryprogrammer/CursedChrome: Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims. - mandatoryprogrammer/CursedChrome

GitHub
Looks like DEF CON talks are up on YouTube! If you want to see a fun talk on crawling online markets for the spicy silicon, check mine out here: https://youtu.be/QgeEHdAmJDg
DEF CON 32 - Secret Life of Rogue Device: Lost IT Assets on the Public Marketplace - Matthew Bryant

YouTube
Cool article about the talk I did at DEFCON today :) https://www.wired.com/story/apple-prototypes-corporate-data/
Apple Prototypes and Corporate Secrets Are for Sale Online—If You Know Where to Look

On the hunt for corporate devices being sold secondhand, a researcher found a trove of Apple corporate data, a Mac Mini from the Foxconn assembly line, an iPhone 14 prototype, and more.

WIRED

We're aware of reports that access to Signal has been blocked in some countries. As a reminder, Signal's built-in censorship circumvention feature might be able to help if your connection is affected:

Signal Settings > Privacy > Advanced > Censorship circumvention (on)

New blog post: Image Stacks and iPhone Racks - Building an Internet Scale Meme Search Engine https://findthatmeme.com/blog/2023/01/08/image-stacks-and-iphone-racks-building-an-internet-scale-meme-search-engine-Qzrz7V6T.html
Image Stacks and iPhone Racks - Building an Internet Scale Meme Search Engine

Anyone who’s spent any amount of time on the Internet has a good idea of how prevalent meme usage has become in online discourse. Finding new memes on the latest happening and sharing them with various friend groups to share in the humor is a long-enjoyed pastime of mine. Working in tech and in the InfoSec field has netted me an unsurprisingly “terminally-online” groups of friends who all do the same.

FindThatMeme.com Blog