Userify @userify

Userify provides SSH key and sudo user management. Designed for the cloud and on-prem. userify.com Texas, USA Joined November 2011

Tweets

503
Followers

1K
Following

468
Likes

53

Blake Scholl 🛫 @bscholl

4 months ago

This morning, I was on the road with the Symphony engine team, shopping for scalable industrial capacity to build jet engine parts. "Getting that part will take 18 months best case," we were told. Why?? The answer was a stunning revelation about the non-obvious ways China has…

470 1K 9K 1.2M 2K

Blake Scholl 🛫 @bscholl

a month ago

Stockpiles are terrible defense strategy. If the enemy can outlast the stockpile even by 24h they can inflict brutal damages. USA needs responsive dual use supply chain that can pivot in a heartbeat from civil to defense production. (Yes we're building @boomaero this way)

25 25 605 21K 32

Download Image

Userify @userify

2 months ago

Ubuntu 25.10 is switching to sudo-rs (a memory-safe and more secure version of the venerable sudo that @userify has supported for more than a decade). We are pleased to announce that Userify will 'just work' with sudo-rs out of the box, thanks to its near-perfect compatibility.…

0 0 0 22 0

Download Image

Userify @userify

5 months ago

bleepingcomputer.com/news/security/…

0 0 1 2 0

Userify @userify

a year ago

Quick tip if you are wanting to see exactly what the user accounts are that Userify is sending to your instance: curl -u api_id:api_key -sX POST configure.userify.com/api/userify/co… |jq . Replace configure.userify.com with your server hostname if you're running on prem.

0 0 0 26 0

BleepingComputer @BleepinComputer

a year ago

Cisco warns of large-scale brute-force attacks against VPN services - @billtoulas bleepingcomputer.com/news/security/… bleepingcomputer.com/news/security/…

4 178 278 30K 48

Userify @userify

a year ago

Putty Vulnerability Every version of the PuTTY tools from 0.68 to 0.80 inclusive has a critical vulnerability in the code that generates signatures from ECDSA private keys which use the NIST P521 curve. (PuTTY, or Pageant, generates a signature from a key when using it to…

0 0 0 45 0

Architecture Notes @arcnotes

a year ago

Major security breach discovered in popular Linux tool sabotages secure SSH connections. Read more at arstechnica.com/security/2024/…

0 10 53 7K 20

Userify @userify

2 years ago

Remote access giant AnyDesk resets passwords and revokes certificates after hack techcrunch.com/2024/02/05/rem…

0 0 0 38 0

Userify @userify

2 years ago

Great writeup by @Cloudflare on how the Okta hacks were leveraged to gain access to various Atlassian systems. Great transparency! blog.cloudflare.com/thanksgiving-2…

0 0 0 81 0

Userify @userify

2 years ago

By virtue of their design, containers can never offer the same strong security boundaries like virtual machines or instances. So, if you prioritize security, choose instances.

Matt Johansen @mattjay

2 years ago

By virtue of their design, containers can never offer the same strong security boundaries like virtual machines or instances. So, if you prioritize security, choose instances.

7 242 1K 153K 502

Download Gif

0 0 0 12 0

Userify @userify

2 years ago

We just worked with @ManavBankatwala for some pentesting, and he helped us find some places where we could improve security, such as by rate-limiting on Forgotten Password emails to prevent spammy behavior. We especially liked how he didn't just run Burp Suite or skiddy sort of…

0 0 0 32 0

Userify @userify

2 years ago

Yet more malicious NPM packages, this time that steal SSH (private) keys if you install them on your desktop. thehackernews.com/2024/01/malici… For these reasons, it's probably a good recommendation that you should not perform development on your desktop, but in a VM or remote server.…

0 0 0 12 0

IAM!ERICA @EricaZelic

2 years ago

First, I want to compliment @Microsoft for being forthright with details. Some of the problems I see in this report, I SEE EVERYWHERE due to VULNERABLE DEFAULTS. Let's start with creating malicious OAuth applications. By default, ANY USER can create app registrations and…

27 214 889 205K 804

Download Image

Userify @userify

2 years ago

We just received a series of emails (attached) to different @userify email addresses. Note the minor differences in wording, like {major|real|serious} issue. This appears to be a phishing expedition or social engineering attack. BOLO, be careful out there! (Our reply at end.)