Taggart :donor:

Displaced Philly boy. Threat hunter. Streamer. Educator. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Co-creator of https://github.com/mttaggart/OffensiveNotion. Not your bro. All opinions my own. Dad. #fedi22 #searchable

Pronouns: He/him.

M.Ed | Sec+ | CISSP | eCTHPv2 | eWPT | CRTO

Public Key

npub18wjp9tztznztxlxka5ttn5nz448la7c9ckmvdvlptcupgud3ygdqj6q6gg

NIP-05 Address

mttaggart_at_infosec.exchange@mostr.pub

Profile Code

nprofile1qqsrhfqj4393f39n0ntw694e6f326nl7lvzutdkxk0s4uwq5wxcjyxs29lsgu

Author Public Key

npub18wjp9tztznztxlxka5ttn5nz448la7c9ckmvdvlptcupgud3ygdqj6q6gg

Show more details

Published at

2024-11-09T03:57:31Z

Kind type

0 Metadata

Event JSON

{ "id": "bcfc2c357e4321e951e2f0611cbfa4d513f9654ea5edb5bba620f82db6819108", "pubkey": "3ba412ac4b14c4b37cd6ed16b9d262ad4ffefb05c5b6c6b3e15e381471b1221a", "created_at": 1731124651, "kind": 0, "tags": [ [ "emoji", "rust", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/029/155/original/c0a6c76c4e012ab5.png" ], [ "emoji", "python", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/029/197/original/3a384cedbffde920.png" ], [ "emoji", "haskell", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/028/818/original/35ece0354386bf51.png" ], [ "emoji", "javascript", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/029/136/original/02529a2e0c7ee0f6.png" ], [ "emoji", "donor", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/183/594/original/61a35b247fc91e55.png" ], [ "proxy", "https://infosec.exchange/users/mttaggart", "activitypub" ] ], "content": "{\"name\":\"Taggart :donor:\",\"about\":\"Displaced Philly boy. Threat hunter. Streamer. Educator. #infosec, #programming #rust :rust:, #python :python: #haskell :haskell:, and #javascript :javascript:. #opensource advocate. Runs @thetaggartinstitute. Made https://wtfbins.wtf. Co-creator of https://github.com/mttaggart/OffensiveNotion. Not your bro. All opinions my own. Dad. #fedi22 #searchable\\n\\nPronouns: He/him. \\n\\nM.Ed | Sec+ | CISSP | eCTHPv2 | eWPT | CRTO\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/108/196/880/698/187/602/original/0cef8947c107a7a8.jpg\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/108/196/880/698/187/602/original/1a834b355f8a1f41.jpg\",\"nip05\":\"mttaggart_at_infosec.exchange@mostr.pub\"}", "sig": "05b6e82f5b0f9ea09e97da10fd0c829260a133627b76ed46da4ee5df961d0b7c8d9d309154a5d56df562eb0b2f4ac7fae43f881845d51941e685b8929e2e6454" }

Last Notes

2024-11-19 22:05:15

Love reading books on climate change just a couple years old that breathlessly cite scary flood/heat records, knowing they've since been handily trounced.

2024-11-14 04:56:17

- reply

@nprofile…092m This may help: https://bsky.app/settings/following-feed
A lot of folks are having The Discourse
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/479/527/672/197/958/original/6f894e1e4dccdbcb.png

2024-11-13 05:14:29

I am pretty tired of the generally terrible experience of typing on a phone screen. Apple just decided in 2007 it was going to go all screen and we never looked back.
They'll make a folding screen, but I'd pay money dollars for a phone with a slide-out keyboard in the year of our lord 2024.

2024-11-12 16:09:16

- reply

@npub1fyk…pe2g Exploitation: ¯\_(ツ)_/¯

2024-11-09 07:21:41

- reply

@npub1zr7…ekna Developing muscle memory is crucial, especially in the use of any weapon. I personally am a little on the fence about the sprays of any kind, in part because in a true threat situation, drawing it and activating the button are fine motor skills you may not be able to access. In that same lane, gel vs. spray comes with an accuracy tradeoff: you hit only what you aim at, so your aim better be good.
When it comes to any defensive weapon, simplicity wins. It's about training not until you get it right, but until you can't get it wrong.

2024-11-09 07:01:56

- reply

@npub1u0z…fuse Exactly! I am neither big, nor do I have experience as a special operator. But as someone who people frequently think they can overpower, my own training has involved a great deal of situational awareness, tactical positioning and movement, and identifying attacker mannerisms to avoid having to use any physical training to survive and escape.

2024-11-09 06:59:01

- reply

@npub1fym…fpms I don't disagree, but that is the end of the story, not the beginning. I am adamant that you also need to learn how to identify potential threats and avoid them before anyone can get that close. That's not always possible, but it very frequently is. Locations and people have a lot of information to convey to the trained eye and ear.

2024-11-09 04:24:21

- reply

@npub1l3q…9zwa I am an Old, which is why I didn't add TikTok to this list, but it is now 100% the gateway of choice.

2024-11-09 04:05:06

If you haven't taught in middle or high school, you may not be aware of just how powerful and ubiquitous the alt-right radicalization pipeline is. It always starts with YouTube or Reddit, and always end on the Chans (and now X) with the vilest shit becoming their worldview.
And when we're serving up Andrew Tate and Joe Rogan as the male role models, it's no surprise. No man who makes these awful choices is beyond reproach, but I know in my heart we've failed boys and this is the result.
https://mstdn.social/@DrPsyBuffy/113439034218133401

2024-11-09 00:06:40

- reply

@npub1l3q…9zwa They are rarer than you think, and there is much more to what I'm getting at than what you mentioned.

2024-11-08 22:44:54

- reply

@npub1tk4…vrcl That's the formula for an active shooter, but there are ways in other scenarios to avoid even being a potential target.

2024-11-08 22:38:25

- reply

I guess the big point I want you to take away is this: learning a martial art or doing Krav Maga or whatever is a lot of fun, great for your health, and can feel empowering. However, there is a danger of a) premature escalation because you've only been given the tools to fight, and b) obliviousness to alternate methods of avoiding harm.

2024-11-08 22:32:13

- reply

Of course there are tons of situations (i.e. DV) where all of the above are not options, but even recognizing what is and is not such a situation is a trainable skill.

2024-11-08 22:30:53

Many of you are probably looking for some kind of self defense training right now. That's great, but as a long-time instructor/student, I want you to know something from the jump:
Hand-to-hand combat is a failure condition of self defense. If you get there, several other stages have likely been ignored. Consider how any potential trainer/school discusses things like situational awareness, body language, and deescalation. You need these skills more than the perfect kick.

2024-11-08 21:55:32

- reply

@npub1u0z…fuse So, what then? You expect me to use GlobalProtect to remotely manage my firewall? Ewww

2024-11-08 17:11:16

- reply

@npub1fyk…pe2g Dead internet confirmed.

2024-11-08 16:20:03

- reply

@npub1zr6…kn0s I just...I don't find comfort in a quick death and a ruined planet, sorry

2024-11-08 16:15:24

- reply

@npub1zr6…kn0s Depends where you live, and not exactly a comfort

2024-11-08 15:46:19

- reply

North Korea just did a record-altitude launch of a Hwasong-17 ICBM. The altitude indicates they can now reach the continental US. How do you imagine this president would respond to such a test?

2024-11-08 14:50:39

- reply

@npub1uu2…62a3 The thing with any nuclear war using ICBMs is that there is only escalation. You may not be a missile target, but the result of nuclear war won't leave anyone safe, or possibly alive.

2024-11-08 14:29:48

An often under-discussed aspect of Project 2025, for all the focus on domestic policy, is the defense component. P2025 envisions a much broader nuclear arsenal, including tactical nuclear weapons. This is a capability I shudder to imagine giving to this Commander in Chief.
I am not gonna shut up about nukes. Maybe an ICBM launch is unlikely, but the impact is so devastating we must contend with it. We've given a senile, vengeful, id-driven megalomaniac launch authority.
https://www.defenseone.com/policy/2024/11/how-trump-may-shake-dod-insiders-view/400911/

2024-11-07 21:27:53

Trying my damnedest to be noticed and pulled from destitution on LinkedIn dot com?
Call that serfing the web.

2024-11-07 18:27:12

- reply

@npub1wmy…93xs Hey now, the Phillies will be back again next season.

2024-11-07 15:40:48

Here is an excellent resource to guide you through the difficult work of maximizing your privacy/information hygiene. I encourage you all to work through these checklists.
https://digital-defense.io

2024-11-07 07:00:14

- reply

@npub1udr…8gc6 It's truly amazing how poorly Microsoft understands how people use their own OS.

2024-11-07 04:48:20

This is correct. I did an audit of Drip myself and it sends nothing off your device, and what it stores it does so securely.
https://hostux.social/@defcon201/113439519730275681

2024-11-06 18:09:03

This is getting gnarly. 40 acre fire in Malibu at Malibu Canyon Road and PCH:
Broad Fire @ Southwest of S Malibu Canyon Road & Pacific Coast Highway, Malibu - #BroadFire https://share.watchduty.org/i/37825

2024-11-06 17:25:42

- reply

@npub18yv…xxyn Absolute moral failure.

2024-11-06 17:23:15

I wrote a thing. Read it or don't.
https://taggart-tech.com/run-hide-fight/

2024-11-06 16:30:36

- reply

@npub1aka…zzz2 CA liberalism, as ever, has a nasty NIMBY element to it. We also failed to expand rent control.

2024-11-06 16:27:24

- reply

@npub1aka…zzz2 Big celebration for that one, but I'm also quite sad (albeit unsurprised) that we left prison slavery intact.

2024-11-06 16:12:39

Build a community, but before building a new one, look around and what is already built and that you can contribute your energies toward.

2024-11-06 07:33:51

Dunno about y'all, but my brain has no business making decisions right now.
Get some rest. Make plans the fire leaves space for anything else.

2024-11-06 02:53:15

- reply

@npub179c…w5df You have chosen...wisely.

2024-11-06 00:03:27

Under no circumstances should you click on this: https://election.omg.lol/

2024-11-05 16:49:05

Today's a great day to get comfortable using end-to-end encrypted means to communicate with everyone you care about.

2024-11-04 23:56:03

Any sufficiently large hosting surface should be monitoring for this.
https://unit42.paloaltonetworks.com/detect-dns-hijacking-passive-dns/

2024-11-04 22:30:42

Finally getting to my annual re-listen:
https://www.youtube.com/watch?v=zNGiWC0CH6c&list=PL3aG_EO-BmzeCVp4tpwljZKD89_UkOVW2

2024-11-04 04:43:53

Now that the LLM hucksters are adding proper search, I'd like to gently point you all to this piece on why that is so damn dangerous:
Imagine a future internet where you are presented—even more prominently than now—with naught but a text box and a blinking cursor. You type in your question, and what you get first (therefore, for most searches last), is text generated by a language model. There is a small disclaimer at the bottom about the accuracy of the results.
There is no disclaimer about the embedded ads disguised as recommendations.
https://taggart-tech.com/interfaces/

2024-11-03 04:08:21

Concerned by this playground promoting the Ptolemaic model.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/417/053/850/975/279/original/e76b374ec30e97bb.png

2024-10-31 14:04:17

Dunno about y'all, but for me the demise of botsin.space is a bleak reminder that, as great as open source is, much of it is dangling by a thread of marginal support and available time from maintainers. It makes me think a lot more carefully about what services in this space I rely on.

2024-10-28 23:26:32

- reply

@npub1nyq…vvvs I'm unaware of many preventions here, but it's standard to have high scrutiny on 4698, especially tasks running as SYSTEM.
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/security/threat-protection/auditing/event-4698

2024-10-16 21:57:26

Forgive a little doomerism, but with Offensive Security getting bought by a private equity firm, there's never been a better time to get comfortable with something besides Kali Linux.
Lmao imagine if they made Kali subscription-based.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/319/336/022/091/470/original/b37f65f9eaeeec72.png

2024-10-16 12:57:30

Hey Microsoft, I'm beginning to suspect that you are not so good at making egg baskets, and I'm pretty sure I don't want my eggs in there! Not sure how I missed this.
Affected products included Microsoft Entra, an identity-management service. Microsoft Sentinel, a security information and event-management product, was also impacted, along with Microsoft Defender for Cloud and Microsoft Purview, a data loss prevention product.
https://www.businessinsider.com/microsoft-tells-customers-it-lost-log-data-key-security-products-2024-10
Paywall free: https://archive.is/a3WcA

2024-10-15 16:39:42

- reply

@npub18yv…xxyn @npub1vqk…rv6h My current favorite container thing right now is what I am calling "Caddystack," which uses Alpine as the base for a Caddy/PHP web server. It's so light and easy to configure.

2024-10-12 03:29:45

With age comes wisdom
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/292/331/208/062/552/original/efed899beeab255a.png

2024-10-11 22:53:12

One of the strongest arguments for right-to-repair (that no one wants to make) is that as the supply chain collapses, maintaining all the technology in our possession becomes exponentially more important. Parts must be interchangeable, accessible, and open for this to really work at all.

2024-10-08 18:57:19

- reply

@npub18c7…er9d Does that mean you lose if anyone else does?

2024-10-08 18:47:37

- reply

Listen.
Yes there's every possibility something will intervene to make IANA not follow their stated policy (again), despite them showing every intention of not repeating that mistake. But that is different than a belief that big things can't happen because they are too big. Do not let a status quo bias overly influence your thinking about the future.

2024-10-08 15:56:08

For very good reasons, the .io TLD is going away.
Once this treaty is signed, the British Indian Ocean Territory will cease to exist. Various international bodies will update their records. In particular, the International Standard for Organization (ISO) will remove country code “IO” from its specification. The Internet Assigned Numbers Authority (IANA), which creates and delegates top-level domains, uses this specification to determine which top-level country domains should exist. Once IO is removed, the IANA will refuse to allow any new registrations with a .io domain. It will also automatically begin the process of retiring existing ones. (There is no official count of the number of extant .io domains.)
https://every.to/p/the-disappearance-of-an-internet-domain
(H/t @npub13n4…3h2h )

2024-10-07 22:07:48

Lmao accidentally learned that Signal uses WhatsApp/2 as its User-Agent for URL preview fetching.

2024-10-03 19:00:51

- reply

@npub1ke6…z7av @npub15c0…hxke !
https://vivaldi.com/blog/technology/vivaldi-wont-allow-a-machine-to-lie-to-you/

2024-06-21 05:09:54

Hey @npub12lx…jvjy, heads up that infosec.town is experiencing significant slowdowns. Not sure what's up, but I will say it was fine right before I attempted a crosspost using a service called Fedica. I can't imagine that was the cause, but the timing was like instant.