ዘየሃ @hpy_downunder

| Detection and Response @GoogleDownUnder | Half of @acoupleofhacks on H1/Bugcrowd | Tweets are my own Sydney, New South Wales Joined May 2010

Tweets

621
Followers

701
Following

351
Likes

11K

shubs @infosec_au

a year ago

I'm helping build HackerOne's Australia club. If you're in Australia and want to join, head over to h1.community/australia-hack… We aren't participating in AWC 2024 this year, but the plan is to build our community and participate next year :)

0 7 76 6K 5

LiveOverflow 🔴 @LiveOverflow

2 years ago

Did you know that the CPU vuln "Zenbleed" 🩸 (CVE-2023-20593) was found through fuzzing? I was able to talk to @taviso and learned about his novel approach 🤯 it is so clever!!

10 138 703 82K 140

Download Video

Google VRP (Google Bug Hunters) @GoogleVRP

2 years ago

From July 14th 5:00 UTC to August 14th 5:00 UTC we will award a 75% bonus to any valid vulnerabilities in YouTube Studio & youtube.com/tv (support.google.com/youtube/answer… - this is not tv.youtube.com). Keep on hacking! 📺🤘 Rules: bughunters.google.com/about/rules/54…

0 38 142 21K 31

Manoel Abreu @reefbr

2 years ago

Our happiness was ephemeral. @FIRSTdotOrg (silently?) removed the `self-service provisioned accounts` statement! Take a look at the doc now and the doc in the webarchive. What happened? first.org/cvss/v4.0/spec…

ramsexy @plmaltais

2 years ago

15 36 229 66K 14

7 13 35 29K 0

ramsexy @plmaltais

2 years ago

Good news, CVSS 4.0 spec has this line regarding Privileges Required (PR) : Self-service provisioned accounts, that may be necessary to attack a cloud service, do not constitute a privilege requirement if the attacker can grant themselves privileges as part of the attack.

15 36 229 66K 14

Google VRP (Google Bug Hunters) @GoogleVRP

2 years ago

Until 1 December 2023, the first report of a functional full chain exploit in Chrome Browser is eligible for the Full Chain Exploit bonus – TRIPLE the FULL reward amount. Not the first? Any following eligible full chain exploit receives DOUBLE rewards! security.googleblog.com/2023/06/announ…

1 58 180 32K 29

Google VRP (Google Bug Hunters) @GoogleVRP

2 years ago

Do you have experience security testing ML/AI – especially LLMs? Would you be interested in participating in a secret hackathon on this topic? 🤫 If yes, let us know by filling out this form. forms.gle/irxKr6EdgeMyLu…

3 37 128 26K 26

Google @Google

2 years ago

Introducing: Google Cybersecurity Certificate goo.gle/cybercert Flexible, online training designed to help you prepare for a career in the fast-growing field of cybersecurity, contributing to a safer internet for all — no experience required. #GrowWithGoogle

53 226 919 359K 243

Download Gif

J. Alex Halderman @jhalderm

2 years ago

Big news from Chrome Security Team! With HTTPS encryption now nearly ubiquitous, they're finally killing off the browser🔒icon, which tends to give users a false sense of security about other threats. blog.chromium.org/2023/05/an-upd… A huge milestone for web security. h/t @davidcadrian

3 32 76 18K 6

Rachel Clun @rachelclun

2 years ago

Poor policies, greed and NIMBYism - we've started a series at @theage and @smh looking at the problems with housing in Australia. Here's a small thread:

11 20 90 26K 7

vx-underground @vxunderground

2 years ago

Today VirusTotal announced that each sample uploaded will be accompanied by "Code Insight". Code Insight uses Sec-PaLM, one of the generative AI models by Google, to explain what the malicious binary is doing. Code Insight is available to all users. tl;dr "they took my job"

33 495 2K 212K 312

Download Image

Royal Hansen @royalhansen

2 years ago

"At the RSA Conference 2023, we are excited to announce Google Cloud Security AI Workbench, an industry-first extensible platform powered by a specialized, security LLM, Sec-PaLM." cloud.google.com/blog/products/…

0 7 18 1K 2

Heather Adkins - Ꜻ - Spes consilium non est @argvee

3 years ago

I can’t wait until Gmail will summarize centi-threads (email threads with 100’replies!) I don’t have time to read!!!! Thank you @GoogleWorkspace !!! youtu.be/6DaJVZBXETE

3 2 17 2K 0

BSidesCanberra @BSidesCbr

3 years ago

BSides Canberra 2023 tickets are now on sale: eventbrite.com.au/e/bsides-canbe…

0 21 42 11K 2

JS0N Haddix @Jhaddix

3 years ago

For consumers of LastPass: If your master password wasn't LONG and COMPLEX, I'd make it a priority to go through your Lastpass and change passwords on all the sites. Like... asap. IMO don't abandon the idea of password managers, but strongly consider 1Password or Bitwarden.

7 30 112 46K 17

Michael Ron Bowling @mrbcyber

3 years ago

TikTok admits China staff can access user data and said staff is required to assist in espionage. fortune.com/2022/11/03/tik…

88 666 1K 0 39

Heather Adkins - Ꜻ - Spes consilium non est @argvee

3 years ago

Musk’s Starlinks go offline in Ukraine at critical time in war, he lays off 1/2 the people that run and secure the ‘town square’ a few days ahead of US elections, and then impersonates Michael Corleone on a stage. If you wrote this up in a novel, no one would believe it.

The Kyiv Independent @KyivIndependent

3 years ago

613 3K 10K 0 136

2 3 27 0 0

ዘየሃ @hpy_downunder

3 years ago

Last kids birthday party for the year done and dusted! Free from party host duties until May!!!

0 1 5 0 0

Download Gif

International Grace Station 🌙 @__nolang

3 years ago

me on the left when i see some bizarre shit in process exec logs me on the right when it’s just an employee doing their job, just another day another dollar just another net user administrator

Kieran Drew @ItsKieranDrew

3 years ago

me on the left when i see some bizarre shit in process exec logs me on the right when it’s just an employee doing their job, just another day another dollar just another net user administrator