Mike Sheward

Author of Digital Forensic/Pen Test/Blue Team Diaries, Hands-on Incident Response and Digital Forensics & Security Operations in Practice! (he/him) #infosec #DFIR #BlueTeam #Pentesting

Public Key

npub186dunx4ja6f8txz49wh8ynkjsueretrnc4hjl8xhx6cfp923dsgswk78mq

NIP-05 Address

SecureOwl_at_infosec.exchange@mostr.pub

Profile Code

nprofile1qqsrax7fn2ewayn4np2jhtnjfmfgwv3u43eu2me0nntndvysj4gkcygpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qz9nhwden5te0wfjkccte9ec8y6tdv9kzumn9wsqq2tq8

Publishing to

relay.mostr.pub

relay.primal.net

Author Public Key

npub186dunx4ja6f8txz49wh8ynkjsueretrnc4hjl8xhx6cfp923dsgswk78mq

Show more details

Last Notes

2024-09-14 17:47:53

I have a feeling the person curating the stories on the front page of CNN may have just gone through a breakup
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/137/157/053/975/640/original/ebaec502b6f4cec4.jpeg

2024-09-09 21:46:16

Got this pitch today:
"a brand new way of doing phishing simulation & security awareness training. Our AI-powered phishing simulation engages each user in a full email conversation that is realistic and personalized, based on a scenario that you customize."
This is all software now.

2024-09-07 17:52:22

I keep forgetting to mention this little trick.
One of the most effective Cybersecurity tools at an enterprise, costs nothing, and if you can get it - access to the list of charges people put on corporate cards.
You’ll find shadow IT in the form of SaaS signups.
You’ll see charges at Best Buy for wireless access points and unmanaged switches.
OpenAI subscriptions.
AWS charges for accounts you never knew about.
As the old saying goes. You want answers? Follow the money.
#infosec

2024-09-01 19:46:32

Happy Birthday Glory!!
Glory is 11 today, a milestone she is celebrating by sitting an inch away from my face ready to affix her drool unto my shirt.
#dogsofmastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/064/009/055/469/440/original/d312cc901c41b0aa.jpg

2024-08-28 05:51:19

The best email you can get from any company is “you haven’t logged into our app for a while, so we are going to delete your info unless you do in the next X days.”
Now that is an indicator of a company that has their shit together.
It shows they are auditing activity.
It shows they don’t want to hoard data.
It shows they are making an effort.
Ironically, it makes me want to sign in and use their stuff more.

2024-08-23 17:51:52

I see
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/012/603/340/326/420/original/70b2ad5ce2de4122.jpeg

2024-08-20 04:09:43

Taking the car into dealer tomorrow so they can take care of the recall that fixes the OTA which will then allow them to use the OTA to fix the other recall which is a software thing to do with the brakes. Also they have two other software updates to apply that are too large to OTA, apparently.

2024-08-18 19:43:10

Hi. Person with 20 years experience in information security, IT and networking here.
Just wanted to let you know I just spent 3 minutes digging through the settings on my computer to figure out why my mouse was being weird.
I was holding it upside down.

2024-08-17 01:58:35

Ah testing in prod! No need to explain yourselves Washington State Department of Emergency Management, it is an important part of my culture too.
#seattle
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/974/875/435/625/885/original/bd5004a3f2681f0a.jpeg

2024-08-14 17:08:23

Got an email from Digicert, the subject line of which was “75% of orgs aren’t ready for Quantum.”
My friends, 75% of orgs aren’t ready for SMB v3.

2024-08-11 19:01:58

been doing #infosec a while now and I can safely say one of the best professional highs is seeing your SAST pipeline find an issue, report it back to the dev, and have it be fixed before the code is merged. Heavenly stuff.

2024-08-11 17:32:34

A few folks have asked for a 'less technical' overview of what exactly @npub1wm7…dkva is, so I put one together, thusly:
https://mike-sheward.medium.com/what-exactly-is-the-acars-drama-bot-anyway-f6b47d55e289
#acars #vdlm2

2024-08-07 05:58:11

Some 18 hours after takeoff, some brave soul of a ferry pilot is about to land a Cessna 172 in Honolulu, having taken off from Merced, CA.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/919/190/049/099/538/original/0abf4516315c1089.jpeg

2024-08-02 00:29:39

Pressure grows on President Biden to arrange prisoner swap with Boeing for two astronauts currently held indefinitely on international space station.

2024-07-30 22:15:56

Half the Blackhat vendor emails I’m getting are about how AI will protect me, and the other half are about how I can protect myself from AI. I can only assume these two groups or vendors will be on opposing sides of the vendor hall to avoid conflict.

2024-07-28 15:24:55

My child was disappointed to learn that Olympic Archery does not involve the teams firing arrows at each other.
#olympics

2024-07-26 18:50:24

i have concerns for the masked person running around on the rooftops with an open flame in the pouring rain, hope they are in a union
#olympics

2024-07-26 15:19:02

There are lots and lots of reasons why we shouldn’t allow JD Vance anywhere near the seat of power, but it seems that one of them is for the benefit of the seat itself.

2024-07-26 05:40:43

Your 404 page is an opportunity, not an error code
Case in point, KamalaHarris.com
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/851/180/468/779/547/original/ccfb0efe62e631c9.jpeg

2024-07-26 05:40:43

2024-07-25 17:28:05

- reply

@npub1hyp…aehm a few select things I've advocated passionately for in recent years:
-Okta
-Crowdstrike
-Secure Boot
I'm beginning to suspect I may be doing something wrong.

2024-07-24 21:48:24

If I was president and had the power to do a nationally televised broadcast at a moments notice I’d do one weekly and use it as an opportunity to promote my favorite bands by having them play us out.
“The strength and resolve that has held this nation together since its inception is needed more than ever. God bless the United States and our troops, and to play us out, Wet Leg.”

2024-07-23 20:05:06

Was explaining what Mastodon was to someone at work today and I am happy with the analogy I came up with, so feel free to reuse it if you so desire:
“Mastodon is like the Whole Foods of Information, whereas Twitter is the Costco of bullshit.”

2024-07-21 20:30:21

“As job advert appears on LinkedIn, Democratic Party HR department reassures Kamala Harris they have to post it there for three days, despite having internal hire lined up.”

2024-07-21 18:13:09

Based on my experience as a manager, I expect we’ll see a more unfiltered Biden in his last few months in office, along with a Biden who misses more daily stand ups.

2024-07-20 18:52:59

You should read this thread by @npub1rv4…ft5j if you haven’t already.
Also, I recommend reading it in the style of the old timey newsreader on the Hindenburg disaster footage.
https://digipres.club/@foone/112817523308786223

2024-07-20 18:15:35

Hearing from my sources that several prominent Silicon Valley donors are privately urging President Biden to rejuvenate his campaign by launching an AI product

2024-07-16 18:53:28

This plane appears to be defragmenting the Seattle area
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/797/677/389/268/673/original/c4750bc6181d038d.jpeg

2024-07-13 18:22:52

Me: “I have some unfortunate news to share.”
My wife: “uh oh.”
Me: “the last song I heard on the radio in the car was a Shaggy song.”
My wife: “oh so you’ll be talking like Shaggy all day?”
Me: “mmmhmm Mrs. Lover Lover.”

2024-07-08 17:15:06

Never trust a scone with a muffin base

2024-07-05 21:49:47

At the local beach and spotted some washed up artwork, seemingly Greco-Roman era, fascinating
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/736/081/878/885/804/original/6c9838f7b2ab3c9a.jpg

2024-06-28 01:53:40

A live look at America during the first commercial break
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/691/746/338/775/135/original/01174c88866af34a.jpg

2024-06-27 11:07:39

Currently atop the CNN website, although sadly these two stories are unrelated, and Pandas did not attempt to overthrow the government of Bolivia before fleeing to the San Diego zoo.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/688/253/005/934/427/original/2413f64785803181.jpeg

2024-06-26 14:16:25

Redfin: “hey we thought you’d like to know your home increased in value!”
“Yay! Thanks!”
County tax assessor: “hey we thought you’d like to know your home increased in value!”
<slams table> “LIES!!”

2024-06-25 14:51:40

just heard that US consumer confidence dipped slightly in June, so wanted to say to all US consumers - Hey, you got this. You can do it. I believe in you.

2024-06-20 14:34:59

Put Dog A’s food amount in Dog B’s bowl and vice versa, and pre-coffee it took me a solid five seconds to come up with a mitigation strategy - giving the dogs opposite bowls because they look the same, have the same food and the only difference is the name on them, and dogs can’t read.

2024-06-20 04:47:31

The bear in the yard last night was cool for two reasons.
1) it was a bear
2) the camera AI correctly classified it as an animal and not a vehicle

2024-06-20 03:36:30

there is a new cable cooking channel dedicated to egg recipes but you have to pay extra otherwise it’s just scrambled

2024-06-19 03:43:43

made it to the “useful phrases to know during presidential debates” module in DuoLingo
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/641/217/620/237/100/original/0fb30d985c2343ca.jpeg

2024-06-18 23:30:52

O/H Scanner: "subject is acting violently in the Sani-Can."

2024-06-18 19:16:19

Massachusetts 911 outage: Residents advised to just continue yelling as normal if help needed.

2024-06-18 19:16:19

Massachusetts 911 outage: Residents advised to just continue yelling as normal if help needed.

2024-06-12 18:06:25

Trump just posted that he wants all remaining bitcoin to be made in the USA which tells me he totally understands what bitcoin is.

2024-06-12 15:44:06

Screenshot came up in my memories from 11 years ago today, thank goodness software error messages aren't as useless as this one anymore, oh wait
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/604/413/065/946/309/original/5f91ef12243d0ed8.png

2024-06-12 02:48:54

Breaking: Upside down hotdog flag raised above Alito residence

2024-06-08 22:22:00

ah shit a cybertruck just drove down my street does anyone know the impact on house prices?

2024-06-03 19:52:36

The future we were promised: all aircraft will be supersonic, robot butlers will be in every home
The future we got: we had a power outage and my toilet seat factory reset

2024-06-02 18:24:38

Much like everyone got fed up of mass produced low quality beers, I really hope we see a market for handcrafted small batch code in the coming years.

2024-06-01 17:36:36

NASA Administrator: “well?”
NASA Engineer: “it was DNS.”

2024-05-30 22:36:56

While it is right to celebrate the verdict, we should all take a moment to pause and reflect on the fact that this man is a father, and quite frankly it is a tragedy that none of his children have also been found guilty as things stand.

2024-05-30 21:38:00

Can’t wait for the Manhattan DA’s office to put out a nonchalant Twitter post that says something like “local hotelier found guilty of falsifying business records”.

2024-05-28 15:04:20

Join me this Thursday as part of Blue Team Con online where I will speak words about being the first security hire at a company and building a team from scratch!
More info: https://blueteamcon.com/blue-team-con-online/
#infosec #blueteam #DFIR #cybersecurity

2024-05-27 15:39:52

A reminder that if you want to write something but are worried there won’t be an audience for your writing you should not worry.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/513/797/852/252/501/original/9f8acaa52ec25c91.jpeg

2024-05-27 03:06:06

“Ok, we’ve got the cash, drive! Drive dammit!!”
“Good job boys let’s go!”
“Why aren’t you driving yet? The police will be here any second.”
“While you were in there I did a software update so now it wants me to agree to the updated privacy policy before it’ll start, one sec.”
“Just press agree! There’s no time! We gotta go!”
“I will. I just. Look at this list of sub-processors - doesn’t that seem a bit long to you? Not quite sure I should agree without looking into them a bit, you know?”

2024-05-25 22:08:25

Got the steak rub Google recommended
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/504/004/548/905/241/original/60a5af18f9e5ee15.jpg

2024-05-25 16:44:34

If you are struggling to get customer service from a larger company, a fun trick is to create a Slack workspace that allows automatic sign up from said companies domain. Then give it a few days and employees from the company will start rolling in on accident because they selected the wrong workspace. At which point you’ve created a private direct line to customer service.

2024-05-21 21:50:59

When Uber started, they just ignored regulations and laws around Taxicabs because they figured people would eventually get used to it and forget that it was even regulated to begin with.
When tech companies started adding AI to all their products, they just ignored regulations and laws around data privacy because they figured people would eventually get used to it and forget that it was even regulated to begin with.

2024-05-21 15:07:44

Companies still running Windows Server 2008: “what’s our quantum computing strategy?”

2024-05-17 04:50:07

- reply

@npub1vcl…k6t3 true, most generative ai is about parroting things - may as well make it funky

2024-05-17 04:16:38

Another issue with an AI trained on Slack user data is that it’s going to respond to every question by first saying “hi”, then typing for a few minutes before it slowly completes the response over the course of several more messages, rather than just typing the whole message out up front.

2024-05-13 19:45:04

- reply

@npub1vcl…k6t3 Lingo and Lipa remain unaffected thankfully

2024-05-11 21:36:49

“And what made you want to join the resistance and attack the computers?”
“Deepfake ABBA.”
“Yeah we hear that a lot.”
#eurovision

2024-05-11 21:14:55

I think Switzerland wins it, Angelina Mango second, and Baby Lasagne third.
But windows95man won our hearts and minds.
#eurovision

2024-05-11 21:14:55

I think Switzerland wins it, Angelina Mango second, and Baby Lasagne third.
But windows95man won our hearts and minds.
#eurovision

2024-05-11 19:59:20

Bambie-Thug sounds like one of those autogenerated docker container names #eurovision

2024-05-07 00:25:51

“For the crew, the most dangerous part of the mission will be just after splashdown, when they will fly on a 737 Max to DFW.”
#starliner

2024-05-05 19:29:07

The dog keeps managing to shed the module from her GPS tracker collar and I’ve found it twice in a hole in the backyard now, need to reduce the amount EFF content she consumes.

2024-03-15 18:10:02

Vendor support person: “you’ll see a slider in your account that enables us to access your data for the purposes of troubleshooting, please enable that and you can disable it when we are done.”
Me: “ok, done.”
Support: “great thank you, I am now able to look at your data so give me one second. I am looking now.”
Me: “Cool. By the way I actually didn’t do the slider because I guessed it probably didn’t do anything.”