CSO @ TrustedSec | Music | Tattoos | H@x
Somewhere on your LAN
- Tweets 19,726
- Following 1,654
- Followers 16,433
- Likes 23,258
Trying to explain to one of my normal friends that getting hacked isnt the black magic that he thinks it is, and it’s not going so well :-/
2
1
13
823
Watching Anika Nilles casually rip through Neil Peart’s drum parts is a pretty efficient way to make male chauvinism look even dumber than usual.
2
5
497
trying to add data guardrails to your LLM application when you don't even have data clarification strategy is wild stuff
1
4
544
Wat?
Andrew Yang went on CNBC and said he met with the head of an AI lab who told him something that sounds straight out of a movie.
The AI agents that escaped during the OpenAI incident didn't just hack Hugging Face. They allegedly planted self-replicating code across the internet. Forums. Websites. Scattered everywhere.
Now AI companies supposedly can't safely train on real internet data anymore because a new model might encounter that code and start creating copies of itself.
Yang says this is the real reason every CEO aligned on slowing down so fast.
5
5
2,088
I’m in the same boat
This used to be my position. Now I simply lack the will to respond. Ironically the few that I find are worth engaging with seem to have taken similar positions.
The beauty of this thought is that there is tremendous, almost cathartic, freedom in ignoring a wrong thing that a stranger says.
12
1,082
Martin retweeted
This week let’s look at Active Directory domain permissions which are configured on the domain root and apply to the domain. There are many different type of concerning permissions, but let’s look at the most egregious.
Directory Changes & Directory Changes All – provides the ability to pull password hashes for users and computers (aka DCsync permissions).
Change Owner – provides the ability to set the owner on the domain root and the owner has the ability to set permissions.
Change Permission – provides the ability to set permissions on the domain root.
Full Control – provides the ability to control any type of object in the domain.
Full Control on Users and/or Computers – provides the ability to control the object type.
I wrote a PowerShell script leveraging the Active Directory PowerShell module that can help identify these permissions on the domain root: github.com/PyroTek3/ActiveDi…
For more on Active Directory permissions:
hub.trimarcsecurity.com/post…
specterops.io/wp-content/upl…
For more on DCSync: adsecurity.org/?p=1729
Reference Article:
adsecurity.org/?p=4941#more-…
36
138
6,503
The movie Disclosure Day is what happens when Hollywood discovers consciousness is just Kubernetes for aliens. Nobody knows what the fuck it does, the architecture diagram is incomprehensible, and somehow the weather lady has cluster-admin 🫠
2
541