Jon Aubrey @SecurityJon

UK Joined January 2014

Tweets

3K
Followers

2K
Following

109
Likes

946

Jon Aubrey @SecurityJon

a month ago

This. We said it was a bad idea from the start and it is. Privacy nightmare and easily bypassed

ẗäüẗöl̈ög̈ÿ @tautology0

a month ago

This. We said it was a bad idea from the start and it is. Privacy nightmare and easily bypassed

1 1 8 976 0

0 0 1 103 0

Jon Aubrey @SecurityJon

7 months ago

Got a new gym bag for Valentine’s Day. This is going to amuse me for months. #wehackhealth

0 0 1 109 0

Download Image

Jon Aubrey @SecurityJon

7 months ago

Spot on. Anyone that says ‘security isn’t hard’ has never had to deal with pre-existing conditions

0 0 3 957 1

Hey @LGUK Your recent firmware upgrade for the G1 TV just broke ARC support, and with no firmware downgrade permitted I now have no sound. Perhaps having a rollback feature or even a downgrade feature might not make for salty users..

0 0 0 140 0

Jon Aubrey @SecurityJon

9 months ago

Train tickets booked - see you all @BSidesLondon next weekend!

0 0 1 132 0

0xBB @bb_hacks

10 months ago

Fancy retrieving plaintext user credentials, deactivation passcodes and uninstall passwords for Palo Alto Global Protect VPN? Thank goodness Palo Alto make that easy for you ... Full write up here : shells.systems/extracting-pla… Tooling available here : github.com/t3hbb/PanGP_Ex…

2 71 202 64K 121

Jon Aubrey @SecurityJon

a year ago

I downloaded my Amazon Music data to try to figure out what song I was listening to, and included in the data is the amount of times they've tried to upsell me something recently. A paid service tried to sell me something over 500 times in the last few months...

0 1 1 284 1

Download Image

Jon Aubrey @SecurityJon

a year ago

For the first time in many years I tried to connect an iPhone to a Windows PC to do a backup. 1 hour in and I'm still no closer to getting either device to 'trust' the other - how did Apple mess this up so badly?!

0 0 1 160 0

0xBB @bb_hacks

a year ago

Cortex XDR full bypass with stock meterpreter payload. Screenshot from tooling demo, apologies for quality.

0 12 102 16K 60

Download Image

Jon Aubrey @SecurityJon

a year ago

Broken PCB trace/pad repair. I need some enamel wire me thinks….

0 0 1 146 0

Download Image

0xBB @bb_hacks

a year ago

Just a brief article showing how easy it is to figure out where the canary files are kept on systems using Cortex XDR and how to avoid them. Issue was reported to Palo Alto, but it was determined to be a non-issue, so … here you go 😊 shells.systems/cortex-xdr-ran…

4 43 127 13K 73

Jon Aubrey @SecurityJon

a year ago

Can confirm. I got the nerve up to talk to Dave in a queue for Blackhat many years ago. He was in a cast for a broken foot and was with friends and yet still was willing to have a chat for a few moments about random stuff.

Dave Kennedy @HackingDave

a year ago

9 4 75 5K 1

0 0 1 231 0

Jon Aubrey @SecurityJon

a year ago

We still do staged updates for our operating systems, small batches to confirm there are no issues before we push out globally. Is anyone doing the same for every other app on their machines? Today showed you need to be.

0 0 1 133 0

Jon Aubrey @SecurityJon

a year ago

Electrical people, please help settle an argument over how long a car battery could power a gaming console for: Console uses 210W and needs 110v, battery is 12v@55ah capacity(660W?) Battery CCA is 440, with a step up transformer can the battery power the console for 3 hours?

0 0 0 220 0

Jon Aubrey @SecurityJon

a year ago

It took me many years to get password policies changed in every org and the changes were made around this premise. Stop enforcing complexity, length and patterns and just prevent common themes

Cybergibbons 🚲🚲🚲 @cybergibbons

a year ago

It took me many years to get password policies changed in every org and the changes were made around this premise. Stop enforcing complexity, length and patterns and just prevent common themes