phildini, to DEFCON
@phildini@wandering.shop avatar

I have booked travel for:

If you're going to be at any of these, I'd love to say hi!

loke, to infosec
@loke@functional.cafe avatar

I just booked my ticket for Black Hat Asia next week.

Anyone around here that are going?

0x58, to AWS

📺 One to watch today - Interesting @frichetten talk titled "Evading Logging in the Cloud: Bypassing AWS CloudTrail" :cloudcomputing:​

https://youtu.be/YP2XNAbB_Nw?si=mLK1z_fh8MZkgsVG

threatresearch, to infosec

An op-ed by two champions of women's professional tennis lays out a rationale not only for the WTA not to stage its championship in Saudi Arabia, but a perfectly cromulent reason why the conference should not now, or ever again - at least until its draconian social laws dramatically change - host an infosec conference in Saudi Arabia.

already treads a fine line and many members of our professional community are women, nonbinary, LGBTQ+, or members of other groups that are threatened, or have been subject to deeply offensive and (in some cases) genocidal behavior by those in charge of that country.

Nobody should have to wonder whether being accepted to speak at a professional conference will result in their death at the hands of the state where the conference will take place, or that their civil and human rights may be strictly curtailed by the host country.

It's disgusting that an organization with as much power as PLC would even consider hosting a professional conference in the KSA, as they plan to do in November.

I appeal to members of this community who care about human rights and their fellow community members who simply cannot travel to this part of the world without the fear of imprisonment, torture, or death not to support this conference, not to submit to their call for papers, not to promote or encourage others to attend, and to speak out about the human rights this government violates - KSA behaves abhorrently every day.

Informa PLC - you must end the practice of hosting this conference in Saudi Arabia until circumstances drastically change there.

Those of you who gladly appear on the Black Hat MEA website as speakers or keynote speakers - we see you, and this tells us everything we all need to know about you and your values. You should be deeply ashamed.

https://www.washingtonpost.com/opinions/2024/01/24/evert-navratilova-wta-saudi-arabia/

YourAnonRiots, to random Japanese
@YourAnonRiots@mstdn.social avatar

Join Webinar "Protect Unstructured Data at Petabyte Scale with Rubrik and AWS" on January 30 to learn how you can protect file data with air-gapped, immutable backups, scan billions of files at lightning speed and more. Register here>> https://bit.ly/3SkmfSK

ChristinaLekati, to random

In a few months @OSINTgeek and I will be returning to Singapore for another training at Asia!
However... this time, in addition to the updates we have made, there will also be a little surprise, something we have never done before 🤭🤫

cloudflare, to Cybersecurity
@cloudflare@noc.social avatar

Wrapping up an incredible last day at Black Hat!

Engaging conversations, an enlightening Zero Trust session, and plenty more on the horizon.

Our happy customers are leaving with awesome swag—don't miss out! Join us for a coffee and continue the discussions. ☕

image/jpeg
image/jpeg
image/jpeg

ksaj, to infosec

Was at Toronto's most of the day.

Managed to bump into a few old friends and colleagues, and even one of my students, who has stayed in the biz all these years.

So many new companies and products. I just break things. I don't know 💩 about cloud security these days, but I'm about to FAFO in the best way.

PS: Is Blackhat even on Mastodon? I can only find those fowl site leech bots that repost what they post on the X-fowls site. (cue in the echo theme song). But it seems like they should have a real presence here.

threatresearch, to infosec

I'd really like to know why some of the most important and influential conferences have decided that it's totally a-OK to host their event in the kingdom of Saudi Arabia, whose leader personally ordered his security staff to detain, and torture to death a US-based reporter who exposed corruption in the kingdom.

If you feel strongly that the industry should stand by its principles, demand that Informa PLC end the practice of hosting in Saudi Arabia.

kkarhan,
@kkarhan@mstdn.social avatar

@threatresearch as a has been a for decades.

The sheer fact that they choose to host their event in a location that would literally murder me for existing [and I'm just a white heterocisbinary dude] disqualifies said conference from being anything but a that'll make it trivial for the islamofacist regime to earmark anyone with any , , and skills for with like as well as ...

losttourist, to infosec
@losttourist@social.chatty.monster avatar

Oof. I've never used (nor even heard of) CloudNordic but this is ... not good.

CloudNordic has told customers to consider all of their data lost following a ransomware infection that encrypted the large Danish cloud provider's servers

Remember if you have data in the cloud then it's just on somebody else's computer, and could potentially vanish at any moment. Keep backups if anything you have is irreplaceable.

https://www.theregister.com/2023/08/23/ransomware_wipes_cloudnordic/

chiefgyk3d, to DEFCON
@chiefgyk3d@social.chiefgyk3d.com avatar

My coworker showed me his #blackhat badge and suddenly the #DEFCON31 badge isn’t so bad anymore. They spend $2,300 and get a flimsy card and I spent $460 and got a cool badge and another $60 for the embedded systems village badge to slot in. I’m making a push at work next time for an emphasis on #DEFCON and want to do the trainings next year

image/jpeg

simplenomad, to infosec
@simplenomad@rigor-mortis.nmrc.org avatar

For those that attended Black Hat last week and made it to the vendor area, tell those of us that were not there - how many companies were selling a compliance scanner that "uses AI"? Solely based on the scam/spam email that I am getting despite not attending, I will assume a lot.

cdarwin, to DEFCON
@cdarwin@c.im avatar

#BLACKHAT #DEFCON

PhD student admits he probably shouldn't have given this talk:

Want to pwn a satellite? Turns out it's surprisingly easy

https://www.theregister.com/2023/08/11/satellite_hacking_black_hat/

jgreig, to random
@jgreig@ioc.exchange avatar
jik, to DEFCON
@jik@federate.social avatar

Let's assume 30k people attended and .
If 1% of them catch , that's 300 people.
If 10% of them end up with , that's 30 people.
All the numbers are probably actually higher.
Is disabling 30+ people an acceptable price to pay for a bunch of security wonks to get to socialize in person for a week?
I don't think so. Do you? Explain your answer.

ian, to DEFCON
@ian@hachyderm.io avatar

since everyone and their dad is about to come home from #blackhat and #defcon with COVID: REST. Rest way more than you think you need to, even if your infection is "mild".

Hopefully you can keep it that way. Good luck

heiseonline, to poker German

Interne Kamera gehackt: Casino-Kartenmischer lässt sich in die Karten schauen

Wer die Karten seiner Mitspieler kennt, kann bei Poker abräumen. Vor allem, wenn er die Karten schon sieht, bevor sie zugeteilt werden.

https://www.heise.de/news/Interne-Kamera-gehackt-Casino-Kartenmischer-laesst-sich-in-die-Karten-schauen-9240885.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

&Wonder

jik, to infosec
@jik@federate.social avatar

Wow, who could have guessed that if you walk around a conference with lots of ex-military people during a COVID surge without keeping a good mask on you'll catch COVID and help spread it. Aren't people supposed to be good at measuring risk?

heisec, to Cybersecurity German

Pwnie Awards 2023: Blinkende LEDs, Zero-Days und Datenpannen

Wie jedes Jahr bedachte die Pwnie-Jury auf der Black Hat-Konferenz Tops wie auch Flops der Security-Szene mit niedlichen Pony-Trophäen.

https://www.heise.de/news/Pwnie-Awards-2023-Blinkende-LEDs-Zero-Days-und-Datenpannen-9242561.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

cubicgarden, to random
@cubicgarden@mas.to avatar

Veilid launch talk from today

https://veilid.com/defcon/talk/

> Dildog and Medus4 go over the how's and why's of Veilid in "The Internals of Veilid"

Veilid: an open-source, peer-to-peer, mobile-first networked application framework. Talk covers how it works as a protocol, structures, cryptography, and how to write applications.

robpegoraro, to random
@robpegoraro@journa.host avatar

I'm used to seeing tech-policy types from D.C. talk about security in unobjectionable generalities, so it was something else to see a talk yesterday in which two CISA advisors offered detailed, actionable infosec advice to tech firms like "adopt memory-safe languages" and "offer SSO at no extra cost." https://www.pcmag.com/news/at-black-hat-feds-push-tech-firms-to-adopt-radical-transparency

itnewsbot, to DEFCON
@itnewsbot@schleuss.online avatar

This Week in Security: It’s Con Season - It must be Blackhat/DEFCON season. Up first in the storm of named vulnerabilities,... - https://hackaday.com/2023/08/11/this-week-in-security-its-con-season/

heiseonline, to security German

Interne Kamera gehackt: Casino-Kartenmischer lässt sich in die Karten schauen

Wer die Karten seiner Mitspieler kennt, kann bei Poker abräumen. Vor allem, wenn er die Karten schon sieht, bevor sie zugeteilt werden.

https://www.heise.de/news/Interne-Kamera-gehackt-Casino-Kartenmischer-laesst-sich-in-die-Karten-schauen-9240885.html?wt_mc=sm.red.ho.mastodon.mastodon.md_beitraege.md_beitraege

redezem, to DEFCON
@redezem@aus.social avatar

Well I guess that’s that then. is over, time to cast off this faux-corporate sheen and return to the cyber-punks we’ve always been.

Stefan’s out, Redezem’s here to hack the 🌍 once again.

It’s time.

redezem, to random
@redezem@aus.social avatar

Managed to catch up with @joy and the @zerotier team at yesterday, and they gave me this absolutely adorbs 🥰 ZeroTier Tardigrade plushie!

If you’re at Blackhat, don’t miss their booth out in the startup city… both for adorbs microanimals and for learning about why I keep telling people to use

image/jpeg

  • All
  • Subscribed
  • Moderated
  • Favorites
  • megavids
  • rosin
  • thenastyranch
  • GTA5RPClips
  • tester
  • InstantRegret
  • DreamBathrooms
  • ngwrru68w68
  • magazineikmin
  • everett
  • Youngstown
  • mdbf
  • slotface
  • kavyap
  • JUstTest
  • cisconetworking
  • khanakhh
  • normalnudes
  • osvaldo12
  • cubers
  • tacticalgear
  • Durango
  • ethstaker
  • modclub
  • anitta
  • provamag3
  • Leos
  • lostlight
  • All magazines