@Viss@mastodon.social
@Viss@mastodon.social avatar

Viss

@Viss@mastodon.social

D̒͂̕ᵈăᵃn̕ᶰ Ť̾̾̓͐͒͠ᵗe͗̑́̋̂́͡ᵉn̅ᶰtᵗl̀̓͘ᶫe̓̒̂̚ᵉrʳ
:: Founder, Phobos Group
:: Quad Flooper :: Scoville Addict
:: Public Speaker :: food pornographer
:: Twitter Alum (2011-2012)
:: security longhair :: tattoo'ed nerd

<script>alert(1)</script>
'>"></div><blink><marquee>visit hax.lol for a good time

#startups #security #infosec #redteam #publicspeaking #asm #attacksurfacemanagement #orbital #fundraising #saas
#drones #quads #hotsauce #spices #homeassistant #homeautomation #cartoons #animation

This profile is from a federated server and may be incomplete. Browse more on the original instance.

Viss, to random
@Viss@mastodon.social avatar

go to the cloud they said
itll be fine they said

Viss,
@Viss@mastodon.social avatar

@tankgrrl yup! and they do all the security and IT for you!

Viss, to random
@Viss@mastodon.social avatar

RSA is coming!
and this was on lastnights after midnight.

so i made a gif.

SEND IT TO ABSOLUTELY EVERYBODY GOING TO RSA :D

video/mp4

ai6yr, to random
@ai6yr@m.ai6yr.org avatar

Weather and natural disasters are much easier to figure out solutions/mitigations for than social disasters.

Viss,
@Viss@mastodon.social avatar

@ai6yr the weather doesnt argue :D

Viss, to random
@Viss@mastodon.social avatar
Viss, to random
@Viss@mastodon.social avatar
Viss, to random
@Viss@mastodon.social avatar

https://www.scmagazine.com/news/microsofts-ai-watchdog-defends-against-new-llm-jailbreak-method

i feel like i need to somehow shoehorn stan from monkey island into this attacks designer reference name.

im ignoring theirs beacuse its the text equivalent of clip art.

danhon, to random
@danhon@dan.mastohon.com avatar

Love to ask the solar salesperson how their installations are financed and what loan companies they use 😬

Viss,
@Viss@mastodon.social avatar

@danhon if you really wanna watch them sweat ask them "can i review and redline the contract" followed by "do you do work on existing systems that you didnt install?"

Viss,
@Viss@mastodon.social avatar

@danhon oh dude, i went through like four companies before having to resort to a 'broker', and even then the only way they agreed to me redlining stuff (it was really only the forced arbitration clause) was if i paid in cash. absolutely wild. if you ask to modify the contract they literally turn 180º and walk away

Viss,
@Viss@mastodon.social avatar

@suzannealdrich @danhon youre not wrong! but i had given them the benefit of the doubt in that i solely wanted to strike the forced arbitration bulletpoint and make no other changes, and that change was simple enough they wouldnt need legal review, but their reply of no came back so fast I'm not sure they would have been willing under any circumstance.

its wild.

100% always avoid "un negotiable contracts" because they're always full of fuckery and bullshit

you shoulda seen vivints one.

Viss, to random
@Viss@mastodon.social avatar

every time i get one of these that I didnt ask for, what its really doing is confirming for me that a shitload of people who call themselves "ceo" and "founder" who didnt really start a company and just gave themselves that title have thrown in the towel and "this is where they ended up"

Viss,
@Viss@mastodon.social avatar

@joy recruiters from fb/google/etc would poke me from time to time because my linkedin profile (i think the place is radioactive and only check it a couple times a month for messages) says im a founder - they think i'm one of THOSE types and they try to bat their corporate eyelashes at me with some kinda midlevel IT or security position.

when i get super excited about getting acquired and ask why M&A isnt cc'ed they panic.

it was fun for a while, but it didnt scale so i gave up

Viss,
@Viss@mastodon.social avatar

@ai6yr *floundered :D

they were the CEO of their own business card

Viss,
@Viss@mastodon.social avatar

@ai6yr i thought it was somewhat disengenuous to say i was a 'ceo' of a company whos full time staff can be counted on one hand

Viss,
@Viss@mastodon.social avatar

@redbassett i am TECHNICALLY a "ceo" of a company with under five people.

Viss, to random
@Viss@mastodon.social avatar

https://www.openwall.com/lists/oss-security/2024/04/16/5

this sorta 'chunking code in bit by bit' reminds me of the 'grooming' done in the doublepulsar backdoor, except that thing i described as a "loading dock for binaries", whereas this one is just straight up auth bypass for an interactive session, or command injection.

crafty!

Viss, to random
@Viss@mastodon.social avatar

as long as companies continue to think shifting liability using contracts is just as effective as real security but cheaper, the beatings will continue

Viss, to random
@Viss@mastodon.social avatar

its sort of another strike against using hosted exchange, isnt it

Viss, to random
@Viss@mastodon.social avatar

go to the cloud they said
it'll be fine they said

danhon, to random
@danhon@dan.mastohon.com avatar

Tuesday?!

Viss,
@Viss@mastodon.social avatar
jschauma, to random
@jschauma@mstdn.social avatar

Here's a thorough analysis of all the commits by "Jia Tan" from 2023-08 through 2024-03, showing the many legitimate code changes done before the introduction of the :

https://tukaani.org/xz-backdoor/review.html

Viss,
@Viss@mastodon.social avatar

@jschauma wild!

_lennart, to random
@_lennart@mastodon.social avatar

oh yeah! cc @Viss

Viss,
@Viss@mastodon.social avatar

@_lennart glorious! bon appetit!

_lennart, to random
@_lennart@mastodon.social avatar

@Viss you have a big outdoor griddle, right?

Viss,
@Viss@mastodon.social avatar

@_lennart its also pretty great if you're entertaining and cooking for folks live -you can just dish out street tacos every 60 seconds :D

Viss,
@Viss@mastodon.social avatar

@_lennart you may want an outdoor table nearby too, cuz the thing is really good for a BUNCH of food, so you'll need a place for mise en place and also for food thats done. also the victorinox giant metal spatulas are pretty great, i got a set of those and they work like a champ.

Viss,
@Viss@mastodon.social avatar

@_lennart i figure you'll enjoy the thing! i got mine for like ~250 delivered via amazon. surprisingly inexpensive!

  • All
  • Subscribed
  • Moderated
  • Favorites
  • relationshipadvice
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • ethstaker
  • everett
  • Youngstown
  • slotface
  • Durango
  • modclub
  • osvaldo12
  • mdbf
  • rosin
  • bokunoheroacademia
  • InstantRegret
  • khanakhh
  • lostlight
  • tacticalgear
  • cubers
  • normalnudes
  • cisconetworking
  • GTA5RPClips
  • tester
  • HellsKitchen
  • anitta
  • Leos
  • sketchdaily
  • All magazines