Picture

Security Fail @TheSecurityFail

Whenever security fails you ... security.fail ::/0 Joined August 2014
  • Tweets
    8K
  • Followers
    270
  • Following
    147
  • Likes
    6K
Security Fail retweeted
fs0c131y Profile Picture

Baptiste Robert @fs0c131y

a year ago

The identity of the Lockbit leader has been revealed. It's #OSINT time! THREAD 1/n

NCA_UK Profile Picture

National Crime Agency (NCA) @NCA_UK

a year ago

The identity of the Lockbit leader has been revealed. It's #OSINT time! THREAD 1/n

Security Fail retweeted
IroncladDev Profile Picture

IroncladDev @IroncladDev

a year ago

Security Fail retweeted
owasp Profile Picture

OWASP® Foundation @owasp

a year ago

Unsafe memory handling can lead to a whole host of bugs...and security vulnerabilities! While good CI/CD can mitigate some of that, it isn't fireproof. It may be time to think about adopting a memory safe programming language. dev.to/owasp/memory-s… #developers #memorysafety

Security Fail retweeted
angealbertini Profile Picture

Ange @angealbertini

a year ago

A nice polyglot entry at Revision, with complete source: Shell DOS C64 GBA GBC SNES GC NDS ZIP PDF... pouet.net/prod.php?which…

Security Fail retweeted
x0rz Profile Picture

x0rz @x0rz

a year ago

A suicide drone attacking a suicide drones factory 🔥

visegrad24 Profile Picture

Visegrád 24 @visegrad24

a year ago

A suicide drone attacking a suicide drones factory 🔥

Security Fail retweeted
GinieSigonney Profile Picture

Virginie Sigonney @GinieSigonney

a year ago

Do you recognize this aircraft? 😜 . . .

Security Fail retweeted
matthew_d_green Profile Picture

Matthew Green is on BlueSky @matthew_d_green

a year ago

Don’t worry everyone. There’s only one backdoor and we found it, so everything’s totally ok now.

Security Fail retweeted
oss_security Profile Picture

Open Source Security mailing list @oss_security

a year ago

Backdoor in upstream xz/liblzma leading to ssh server compromise openwall.com/lists/oss-secu…

Security Fail retweeted
SwiftOnSecurity Profile Picture

SwiftOnSecurity @SwiftOnSecurity

a year ago

Get into the habit of denying meetings it’s a meeting request not a meeting mandate.

Security Fail retweeted
IroncladDev Profile Picture

IroncladDev @IroncladDev

a year ago

Security Fail retweeted
amlweems Profile Picture

Anthony Weems @amlweems

a year ago

I've been reverse engineering the xz backdoor this weekend and have documented the payload format and written a proof-of-concept exploit for the RCE. The payloads are signed with an ED448 key, so I patched my own key into the backdoor for testing. :-) github.com/amlweems/xzbot

Security Fail retweeted
julianor Profile Picture

Juliano Rizzo @julianor

a year ago

Reverse engineering by @amlweems reveals 3 flaws that allows attackers to use the backdoor without the private key, using only a captured message signed for the target host: 1. Lack of replay protection 2. Symmetric encryption with a hardcoded key, 3. Partially signed commands

amlweems Profile Picture

Anthony Weems @amlweems

a year ago

Reverse engineering by @amlweems reveals 3 flaws that allows attackers to use the backdoor without the private key, using only a captured message signed for the target host: 1. Lack of replay protection 2. Symmetric encryption with a hardcoded key, 3. Partially signed commands https://t.co/oC36WlNlAw

Security Fail retweeted
UnixToolTip Profile Picture

Unix tool tip @UnixToolTip

a year ago

Security Fail retweeted
ghidraninja Profile Picture

stacksmashing @ghidraninja

a year ago

So, the @RIGOL_Tech DP832 had the issue that when you turn it on it had a significant voltage spike (with enough power to drive a motor). Unfortunately it looks like this was not fixed on the DP932, the successor of the DP832 😐

AlperenAkkuncu Profile Picture

Alperen @AlperenAkkuncu

a year ago

So, the @RIGOL_Tech DP832 had the issue that when you turn it on it had a significant voltage spike (with enough power to drive a motor). Unfortunately it looks like this was not fixed on the DP932, the successor of the DP832 😐 https://t.co/oGBJAizRjN

Security Fail retweeted
IroncladDev Profile Picture

IroncladDev @IroncladDev

a year ago

Security Fail retweeted
linuxopsys Profile Picture

Linuxopsys @linuxopsys

a year ago

Updating xkcd Dependency

Security Fail retweeted
jamonholmgren Profile Picture

Jamon @jamonholmgren

a year ago

git push --force

Security Fail retweeted
IroncladDev Profile Picture

IroncladDev @IroncladDev

a year ago

Security Fail retweeted
yacineMTB Profile Picture

kache @yacineMTB

a year ago

Trends for United States

#SmackDown
38,1 B posts
Chiefs
105 B posts
Worthy
40,1 B posts
Kelce
21,2 B posts
Sami
27 B posts
Mahomes
20 B posts
#KCvsLAC
1.994 posts
Mr. Beast
6.369 posts
Quentin Johnston
1.843 posts
Hollywood Brown
1.778 posts
Brazil
126 B posts
Ryan Clark
9.335 posts
Rich Eisen
Tylenol
30,2 B posts
#BoltUp
3.094 posts
Louisville
4.357 posts
End 1Q
Derek Carr
1.121 posts
Carl Cheffers
Department of War
94,8 B posts

You might like

Penetration Tester | #OSCE³ | #OSWE | #OSEP | #OSED | #CRTO | #CRTL | #CRTE | #OSCP | #BSCP | Offsensive Security Consultant
Ivan Spiridonov
@xbz0n
2K Followers
Chief Scientist at Red Sift. Founder of Hardenize and author of Bulletproof TLS and PKI. Previously, founder of SSL Labs and ModSecurity.
Ivan Ristic
@ivanristic
11K Followers
Spend less time collaborating, more time achieving your team projects ⚡ #SaaS #remoteworking #ProjectManagement Available on: 💻📱🌍 💌: support@proofhub.com
ProofHub
@proofhub
15K Followers
US Correspondent RND German Newsrooms Network. Reporting for Hannoversche Allgemeine, Augsburger Allgemeine, Frankfurter Rundschau, Der Standard (AUT) et al.
Karl Doemens
@Doppelgeist60
7K Followers
Advisor & builder. Formerly security @dropbox, product @instart & @google, authored Surreptitious Software, TL for Caja. I love good food, fine wine & great JS.
Jasvir Nagra ✨
@jasvir
1K Followers
Researcher @sppgatech | Instructor @gtomscyber | Partner @IGPAlert | Footballer @ManliusManiacs | Part Owner @TheBravesFC
Brenden Kuerbis
@bkuerbis
327 Followers