Lee Holmes :donor: / is on Nostr

Partner Security Architect, Azure Security. PowerShell developer, fanatical hobbyist, and author of the PowerShell Cookbook.

Last Notes

2024-09-07 20:02:53

Loving @npub1f7a…gvsx talk policy of at least 50% defence content. Just watched a talk that would for sure have been all about the attack tools. But then they started getting into mitigations and all the phones started coming out to take notes.

2024-06-07 18:14:34

- reply

@npub1rv4…ft5j Would getting yourself a small macro pad that supports QMK save some time?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/576/695/876/771/099/original/82284adb70c2761b.png

2024-06-04 16:25:15

- reply

@npub1zj4…fyjh Regions in Canada are called provinces :)

2024-02-08 21:18:45

Watch this gif if you think there's anything left at xitter.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/897/941/988/130/014/original/8f45d8b0efa592b1.mp4

2024-01-29 22:12:04

Postman is a security risk and you should pursue other options: https://www.leeholmes.com/security-risks-of-postman/

2024-01-26 01:00:06

- reply

@npub172v…689n How am I supposed to follow all of these rules when my armchair is so comfy and I've never been out of it!

2023-12-20 18:01:06

Yikes. Postman recently pivoted to store all of your session data (including authentication tokens etc.) in their Cloud Service, which you can fully browse and explore in their online tool.
Their security page makes it clear that they have not considered the Okta-style risks associated with this change. If your company has any devs using Postman for production testing, I would strongly recommend Insomnia: https://insomnia.rest/, and then consider any credentials stored in Postman history to be at risk and should be rotated.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/614/036/761/296/971/original/ad271845f4e75671.png

2023-12-20 18:01:06

2023-12-07 06:25:31

- reply

@npub172v…689n Cool, hadn't seen Dygma before. Are you going to be learning Colemak?

2023-03-06 22:01:57

Ouch, my heart is breaking. We just had about a dozen Security Program Managers have their positions eliminated from our group as part of the MS layoffs. Skills range from security product development to fundamentals and compliance to threat modeling and secure software design. If you're hiring for any positions like this, please respond below and I'll make sure they see these opportunities.
#[0]