·· 𝘗𝘢𝘯𝘤𝘢𝘬𝘦 𝘍𝘭𝘪𝘱𝘱𝘪𝘯𝘨 𝘛𝘪𝘮𝘦 ··
I work in cyberspace, security department.
·· 𝘗𝘢𝘯𝘤𝘢𝘬𝘦 𝘍𝘭𝘪𝘱𝘱𝘪𝘯𝘨 𝘛𝘪𝘮𝘦 ··
I work in cyberspace, security department.
I don't suppose that trusting #sigstore to run a centralized CA and transparency logs just to issue short-lived certs for me to generate signatures is much more secure than #PGP signing using my own keys. I'm just increasing the attack surface...
The whole Googlesque philosophy of "trust us; don't be evil" is contrary to my take on information security.
But I'm also open to anyone convincing me otherwise.
Today I was told that if I'm working in security, I must be familiar with #Microsoft #Purview.
I wonder: is Microsoft even a player in the security game?
@da_667 hahahaha dude for a talk i did at securityfest last year, i think i even pointed out that you can change the shell of a user to a bash script instead of /bin/bash or whatever..
you can like
echo "curl parrot.live" > /tmp/fucktardia.sh
chmod +x /tmp/fucktardia.sh
chsh loser
(aim it at /tmp/fucktardia.sh)
user loser now sshes into a box and gets party parrot.
control c? connection drops.
i am currently unaware of a way to bypass that, but if we find one, we should tell @bagder