271 Followers
382 Following
4.5K Posts

Hacker. Consultant. Leader. Backpacker.

I'm a Senior Security Consultant and Ethical Hacker. My goal is to help businesses and people stay safe and secure in both cyberspace and the real world.

Used to be |the sys admin| at ieXbeta. This was a long time ago.

Websitehttps://maloley.me
Githubhttps://github.com/maloleyr

Musk becoming the "First Trillionaire" should not be a thing. It should not be a story. The story should be the failure of our markets and regulation that allowed this hoarding to happen.

If you hoard a bunch of newspaper society calls you crazy. If you hoard a bunch of money society calls you a titan.

The story should be "Why isn't the first trillionaire using his fortune to feed the world?"

Wait. Wait. Watching season 3 of The Walking Dead. So Rick's neighborhood and town are a short distance from the prison. Yet he didn't know about the prison ... The writers really hate the audience.
First time cooking salmon!
Email should not have an emoji reaction ability. It's annoying to receive a notification that I have a new email yet there is no new email.

A comment in my local Slack instance: "there are legitimate security concerns with taking a shit in the morning"

Love ya K.

#funny #ic

I found this Akira Ransomware writeup absolutely fascinating today. Why did I find it fascinating? Because this is a direct profile of many of the clients that I work with.

(1) The attack surface was external using credential spraying.
(2) NGFW matches most of the clients I work with.
(3) Any sort of simple monitoring and log aggregation would have alerted internal resources that something was amiss.
(4) The cost of implementing the basic fundamentals here are minimal.

I truly don’t believe that an organization has to spent infinite funds on their security program. Too many organizations chase the latest tooling or product because of flashy marketing. Oooh it has AI and all that.

No. You just need to cover the basics. Don’t let perfect become the enemy of good.

Cycle credentials. Disable accounts. Monitor your attack surface and reduce it as you can. Set up basic monitoring so you know when odd things (like the clearing of event logs!) happens.

All credit to Manuel Humberto Santander Peláez and SANS for this excellent write up.

https://isc.sans.edu/diary/Reconstructing+an+Akira+Ransomware+Kill+Chain+from+Perimeter+and+Endpoint+Logs/33024/?is=2d2fbe785afc9b8e2c6eea7c1d709cc40114a256e13b934fc4d3e4e0efacc396

My fundamental view on this is simple. LLM AI systems being operated by Big Tech, and presented as "virtual humans", that is, interacting with users in a manner similar to that of a human being and presenting LLM created first person content, should bring to bear on the firm and its leadership the same financial, legal, and other responsibilities that would be borne by an actual human being providing the same information and interactions.
I'm pretty sure this post is from the threat actor and you cannot convince me otherwise.
https://www.reddit.com/r/sysadmin/s/taOyLVJ2xI

How Republican's can call themselves the party of family values will never make sense. How can they be against a program that literally helps people have families?!?!

https://michiganadvance.com/2026/06/02/michigan-gop-lawmakers-grill-rx-kids-program-as-its-founder-points-to-tangible-outcomes/

Michigan GOP lawmakers grill Rx Kids program as its founder points to tangible outcomes • Michigan Advance

In a Tuesday morning hearing of the House Oversight Committee on the prenatal and infant cash support program known as Rx Kids, there was a clear disconnect between many of the questions asked by Republican legislators and the information presented by Michigan State University professor Dr. Mona Hanna, who runs the program. Republicans during the […]

Michigan Advance

RE: https://cosocial.ca/@mhoye/116686849642460077

The entire thread is great but THIS is it. This is the basic fundamental of being in society. We can actually do good things together and WE SHOULD.

Can we please build and run society to a benefit of all?