Ian Campbell

Security ops engineer, former congressional sysadmin, writer, voracious reader. he/him. Opinions here mine only. No LLM content from me, all flaws detected are human-generated. Autistic/depressed/anxious/hungry.

#infosec #cybersecurity #privacy #actuallyautistic #neurodivergent

Public Key

npub155t0ydv2yz5sc4sta5jmxnannmjm6y48rpur0huvj6seuqrseekszdnysn

NIP-05 Address

neurovagrant_at_masto.deoan.org@mostr.pub

Profile Code

nprofile1qqs229hjxk9zp2gv2c976fdnf7eeaedaz2n3s7phm7xfdgv7qpcvumgpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qzxrhwden5te0wfjkccte9ehx7umhdpjhyefwvdhk6rgw6dy

Publishing to

relay.mostr.pub

relay.noswhere.com

relay.primal.net

Author Public Key

npub155t0ydv2yz5sc4sta5jmxnannmjm6y48rpur0huvj6seuqrseekszdnysn

Show more details

Last Notes

2024-09-13 12:16:40

- reply

@npub1v8r…v7jm as an elder millennial I'd get mad about it, but it's true, including for me.... >:|

2024-08-26 11:34:07

- reply

Happy Monday, y'all.

2024-08-19 20:26:04

- reply

just realized the same toot also included "went down really hard"

2024-08-19 11:52:09

Anyone give weight to the concerns lawmakers are advancing about TP-Link routers?
https://www.reuters.com/world/us/us-lawmakers-urge-probe-wifi-router-maker-tp-link-over-fears-chinese-cyber-2024-08-15/?mod=djemCybersecruityPro&tpl=cs
#infosec

2024-08-19 11:03:09

Had a dream last night that we were giving Trent Reznor a tour of the office and access to our platforms because Nine Inch Nails was going to create a custom soundtrack for our next few webinars...

2024-08-15 17:01:55

how i know i'm foggy: just read a short toot about microsoft 4 times over and still have no idea what it says.

2024-08-12 22:27:46

- reply

@npub1n9x…wqtl ^

2024-08-11 17:09:30

- reply

@npub1f2z…kh0y so, the pentagram is drawn starting at the top point, with the circle drawn clockwise unless you REALLY want to have fun.
Then you light the candle and…

2024-08-11 02:57:04

- reply

@npub1lkr…hl0k well done!

2024-08-11 01:55:26

- reply

@npub1q9p…endx gotcha! Same if you make it to Boston.

2024-08-11 01:49:26

- reply

@npub1q9p…endx you’re not out here, right? Would kill to buy ya a cup of coffee.

2024-08-11 01:40:02

I mean, ya name your firm “entropic” and chaos is gonna ensue at some point

2024-08-10 18:04:48

- reply

@npub1swy…snpj jfc

2024-08-10 18:03:38

Laid out my sticker archives for grabbing. Unsurprisingly the autism and neurodiversity stickers were a hit, among others.
Obscure William Gibson reference stickers have gone over well too. ;)

2024-08-10 16:39:09

OpenSnitch is pretty great, I’ve run it on my linux laptops for a while
https://social.lansky.name/@hn50/112938595532808678

2024-08-10 16:17:25

Stoked to see @npub17u8…uhnv has a Voting Village talk today.
Her new book, INVISIBLE RULERS, is great so far.
DEF CON 32: Attending Stanford Digital Observatory on Aug 10, 2024 at 13:15 in LVCC - L2 - W223-W224
#hackertracker

2024-08-10 15:08:32

This makes me so proud of the community. https://hackers.town/@thegibson/112934390366647974

2024-08-10 15:02:21

The kids, they are far beyond alright and into greatness already
https://beige.party/@Lana/112938236462527534

2024-08-09 23:48:16

- reply

@npub1g7r…jnlp i needed a nap, okay?

2024-08-09 21:55:21

Random defcon chatter: walked by a pair of onsite staff to hear one explaining to the other how to bypass odometer stuff.
Love it!

2024-08-09 21:48:46

Crypto* and Privacy Village has me in the throes of joy and wonder.
First a talk by Dr. Rachel Cummings on differential privacy, then a talk by Yael Grauer on data brokers and how and why to smash them, from opting out to pressuring your reps for legislation.
(*crypto means cryptography)

2024-08-09 20:00:37

- reply

@npub193c…sr9u So sorry for what you’re all going through, but wishing the best possible for your daughter and family

2024-08-09 19:36:24

- reply

Sweet swag acquired
https://masto.deoan.org/system/media_attachments/files/112/933/744/135/083/190/original/95e8f2dcdee5eab0.jpeg

2024-08-09 19:21:53

- reply

Holy shit @npub15sw…j7m0 is setting it up like a community fair
I love this

2024-08-09 19:11:01

- reply

I blame that mic feedback on @npub1ep0…8t62

2024-08-09 19:08:42

- reply

And now the @npub15sw…j7m0 meetup
Woooooo beta app!

2024-08-09 18:30:05

Defcon warstories track had been awesome so far.
First Jon DiMaggio on Lockbit, now Thomas Roccia on the xzutils backdoor.
Both presentations lean heavily on adversary behavior. 😍😍😍

2024-08-09 12:57:19

This is wild: ranked chessplayer poisons the chessboard of another player with mercury
https://arstechnica.com/culture/2024/08/in-world-first-russian-chess-player-poisons-rivals-board-with-mercury/

2024-08-09 00:42:10

- reply

@npub12lx…jvjy according to International Olympic Committee regulations, though, I believe they who smelt it is understood to have dealt it

2024-08-09 00:26:37

Sure, looks legit. I have a lot of shared interests with
*checks profile*
… Bangladesh.
…though that does make me wonder, is this an in-Dhaka-tor of compromise?
https://masto.deoan.org/system/media_attachments/files/112/929/222/954/553/760/original/82e97411f128f4f1.jpeg

2024-08-08 23:51:33

Red team/blue team
https://mastodon.world/@WilliamKretschmer/112928807109189157

2024-08-08 20:36:48

- reply

@npub1hyp…aehm <Crowne Sterling jokes goes here>

2024-08-08 17:55:47

- reply

@npub1ydq…czs0 your awesome work is your best advertisement- I will settle for second best ;)

2024-08-08 16:56:59

Repping @npub1ydq…czs0 tee design at BlackHat today, got three enthusiastic comments within ten minutes.
https://masto.deoan.org/system/media_attachments/files/112/927/455/051/621/176/original/b7daac579337b32a.jpeg

2024-08-08 04:28:58

So many good conversations with people today.

2024-08-07 13:50:22

- reply

@npub12hq…cac4 great reminders, thanks!

2024-08-07 13:33:59

- reply

@npub1dgs…nfw8 boopdepressing sounds like my vibe

2024-08-07 03:17:39

- reply

@npub1sn6…8vx8 much appreciated ;)

2024-08-07 01:32:57

- reply

also the toilet in my hotel room was broken when i finally got into the room
so i fixed it rather than calling maintenance
hackershrug-emoji

2024-08-07 01:30:36

also, am at the age where for one terrifying moment i thought i forgot to pack my ibuprofen
but i've got my ibuprofen *and* my backup ibuprofen

2024-08-07 01:26:08

might be using jira tickets as a crutch to avoid unstructured peopling tonight >.<

2024-08-06 21:17:39

- reply

@npub1uv2…v650 Getting a statement under oath is the point (and some cspan clips to show in their home districts, on either side)

2024-08-06 19:48:46

- reply

@npub1r4n…6e4s yup - Worcester here. But we’re just made different.

2024-08-06 19:32:42

- reply

People really out here in Vegas in August buying hot coffee from Starbucks

2024-08-06 18:04:47

Did you all know Las Vegas is hot?
Like really goddamn hot?
Many people don’t know this.

2024-08-06 13:34:48

There’s a lot of hackers on this here flight to Vegas.
Someone oughtta investigate.

2024-08-05 22:57:19

If you’re headed to hacker summer camp, don’t forget to pack your meds.
Signed, someone who almost forgot to pack his meds.
(I remembered while realizing I forgot to take them this morning.)
See you tomorrow, Vegas.

2024-08-05 19:57:07

There's a whole series of TV commercials from Progressive Insurance about "new homeowners turning into their parents" and they're pretty funny, except for the whole "if you don't own a home yet, you're unlikely to" thing my generation and younger are facing.

2024-08-05 18:56:02

Whoever asked Hacker Santa for the AI hype crash to happen the week of Hacker Summer Camp, I dunno what you did to get so high on the Nice List, but keep it up.

2024-08-05 18:24:35

Looking back at the 2016 Rio olympics, this looks different.
Primarily because I'm wondering if JD Vance was somehow involved.
https://masto.deoan.org/system/media_attachments/files/112/910/808/600/520/016/original/91f9314f4761cf89.jpg

2024-08-05 18:04:45

- reply

@npub1hxf…g8qu sure makes me want to go nuclear, I'll give 'em that

2024-08-05 16:42:31

"the AI pentester our business is built around scored the same as a Principal with 20 years experience in these 100+ benchmarks we totally arranged"
i hope someone beats you with a yardstick labeled "METHODOLOGY"

2024-08-05 14:53:50

Today's "nah, i'm all set without that, thanks" domain is:
password-storage[.]ru
Registrar, NS: reg[.]ru
IPspace: JSC ER-Telecom (RU)
Newly active: 2024-08-04
rising from the dead after going inactive in 2018
#threatintel

2024-08-05 12:26:32

- reply

@npub1hz9…6rsm TBH I don't know enough about the laws at hand to comment intelligently. May well be true.

2024-08-05 11:58:30

CrowdStrike to Delta: Stop Pointing the Finger at Us
Cybersecurity company says it isn’t to blame for airline’s dayslong meltdown, calling it a ‘misleading narrative’
https://www.wsj.com/business/airlines/crowdstrike-to-delta-stop-pointing-the-finger-at-us-5b2eea6c?st=f8ipr3daf24ilt2&reflink=desktopwebshare_permalink

2024-08-04 18:43:27

Trying to resist my pre-travel urge - happens every time - to unpack my gear bag and change out the gear bag and most everything I'm bringing.

2024-08-03 14:57:17

If only Don Jr. had been born a box of classified documents, his father might've wanted him.

2024-08-02 14:10:43

- reply

@npub1fyk…pe2g MSRC and DCU must be having a time.
I was part of a hunt group that tried to use Teams and it was just the worst in almost every way.

2024-08-02 13:55:40

- reply

@npub15f2…5ync same exact response for me.

2024-08-02 13:55:11

- reply

@npub1dgs…nfw8 i worry any of the jokes I instantly thought up and then locked deep in my brain vault might be in poor form.
so yes, unix shell scripts.

2024-08-02 12:11:54

I... this...
Unsecured elasticsearch cluster exposes 8GB of user data from... BangBros
https://cybernews.com/security/bangbros-data-leak-expose-users/

2024-08-02 05:01:35

- reply

@npub1wf4…94wn I’m glad you feel a lot better now, but please take it seriously and take care of yourself.

2024-08-01 22:32:32

- reply

@npub1x9k…gp0g nakhenge

2024-08-01 22:13:55

- reply

@npub1gu5…mzsp eugh, sorry, feel better

2024-08-01 20:56:02

- reply

@npub14fa…99fr the DNS records are a neat tug-of-war.
Also, they appear to have filed for bankruptcy the day after?
This story is weird.

2024-08-01 17:36:26

- reply

@npub1l20…0c0w hmmm, gonna have some pleasant daydreams about that one.

2024-08-01 17:30:40

- reply

@npub1l20…0c0w If the AI bubble pops *during* hacker summer camp I will laugh my ass off.
but we're not that lucky.

2024-08-01 17:29:04

- reply

@npub1xez…m4dz Bill & Ted now waiting for Godot makes me feel really, really old.

2024-08-01 16:54:42

- reply

@npub12lx…jvjy preparing my Amicus brief for the court case:
"May it please the court, fuck that other guy. Seriously."

2024-08-01 16:36:57

- reply

@npub142n…nu7q argh!
glad it's not just me though.

2024-08-01 16:34:34

Any other Apple device folks having serious issues with airpods constantly skipping to devices not playing sound?

2024-08-01 16:25:12

Cool findings by @npub1qsy…ne6h
though I'm gonna have to quibble about the word "abuse" - I think it's criminals using Cloudflare, once again, as designed.
https://infosec.exchange/@threatinsight/112887664058707583

2024-07-31 23:44:41

- reply

@npub1wdx…q5g9 granted, being autistic already predisposes me, with the whole changeling thing

2024-07-31 23:44:11

- reply

@npub1wdx…q5g9 💯

2024-07-31 23:31:45

- reply

@npub1675…nd5w thank you, thank you, I am proud of that one I admit

2024-07-31 23:18:13

Filched from FB.
https://masto.deoan.org/system/media_attachments/files/112/883/655/640/122/050/original/cf14b5ff499ba65b.jpeg

2024-07-31 19:38:06

- reply

@npub1a8e…ywga I've seen some cursed regex before but this takes the title

2024-07-31 19:31:05

- reply

@npub1dyu…9tp5 *THAT* was an indelibly nerdy cut, and I salute you

2024-07-31 19:26:12

- reply

@npub12lx…jvjy "iPhonia - because we're changing *everything* about ai, including its order"

2024-07-31 19:23:07

Between BlackHat and DEFCON there are three different talks named "Behind Enemy Lines."
I can't decide if the lesson is to name your talk something different to stand out when you submit, or just named it "Behind Enemy Lines" as that may increase the submission's chance...
🤪

2024-07-31 18:47:18

- reply

Palworld just has the chillest low-stakes survival crafter vibes, along with a sense of humor.

2024-07-31 18:46:12

This is one of the healthiest viewpoints i've seen from a gaming CEO, and also, I marathoned Palworld a few months ago for 130+ hours, and am eager to go back to see what's been updated.
https://mastodon.social/@arstechnica/112882538316819609

2024-07-31 17:51:24

I only had one cup of coffee, I swear

2024-07-31 17:50:31

- reply

a DNS hijacking most fowl

2024-07-31 17:47:07

- reply

I mean, the Sitting Ducks attack is clever, but really just enabled by mallardministration of DNS providers.

2024-07-31 17:44:50

This @npub1zgv…wdy4 "Sitting Ducks" research is so cool, I'm gonna have to take a quack at this data later.
https://infosec.exchange/@InfobloxThreatIntel/112881119948156150

2024-07-31 17:14:35

I hear Delta was offered compensation for their outage prior to filing suit but were unimpressed with the partial travel voucher and a bag of nuts.

2024-07-31 16:32:44

- reply

@npub1rkj…ufed that was just partner marketing.
I think technically, Crowdstrike will come out much the better after this, assuming they come out of it.
I like the cut of their jib, to be honest, and stand by 'em.

2024-07-31 16:29:53

- reply

@npub1rkj…ufed maybe they were offered a travel voucher and a bag of nuts

2024-07-31 16:22:30

- reply

@npub1dvj…vdle Thanks!
And oh, good god, I am spending as little time out of doors as possible there.

2024-07-31 16:17:50

Finally penciled up my summer camp schedule and I'm already tired just looking at it, but also psyched.

2024-07-31 14:36:35

- reply

@npub1md2…h9zd I'm sure this was Crowdstrike's fault somehow. ;)

2024-07-30 21:33:33

- reply

@npub1t45…s7u2 Don't burritos get dressed for us?

2024-07-30 18:35:23

- reply

@npub1wf4…94wn Fuck that noise. Boosted it.

2024-07-30 17:39:21

- reply

@npub1zj4…fyjh did someone not get the memo

2024-07-30 15:50:59

Idly wondering: next week, does a threat actor do something big to ruin the week of a bunch of hacker summer camp attendees,
or do they take next week for softer activities to avoid pissing off a bunch of infosec folks and earning targeted wrath,
or does it just not rate on their decision-making at all?
Anyone have thoughts?

2024-07-30 15:23:06

- reply

@npub1rkj…ufed They can't blame Crowdstrike for this one!

2024-07-30 15:05:56

- reply

@npub19qm…sn8k Given Delta seems to have outsourced the overwhelming majority of its information techops, I'm hoping Crowdstrike subpoena any and every internal outsourcing and IT underfunding doc Delta has.

2024-07-30 14:58:34

from my buddy pi, looks like Azure is having a Monday, globally
https://azure.status.microsoft/en-us/status

2024-07-30 11:27:49

- reply

In particular, complexity comes in as solutionism for the problems of growth and territorial extensiveness.
The whole thesis feels deeply applicable to defending technology environments that insist on growth and attack surface spread as matters of business priority.