Taggart :donor:

Displaced Philly boy. Threat hunter. Streamer. Educator. Dad. #infosec, #programming #rust, #python, #haskell, and #javascript. #opensource advocate. Cofounder of @thetaggartinstitute. Made wtfbins.wtf. Co-creator of github.com/mttaggart/OffensiveNotion. Not your bro. All opinions my own. #fedi22 #searchable

Public Key

npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx

NIP-05 Address

mttaggart_at_infosec.town@mostr.pub

Profile Code

nprofile1qqsy47ecxrmutkc96kf5gwrhna3u8mg5qx4q8ghtpnpumf6rvvaw5cgprpmhxue69uhhyetvv9ujumn0wdmksetjv5hxxmmdqyt8wumn8ghj7un9d3shjtnwdaehgu3wvfskueqcutsyf

Publishing to

relay.noswhere.com

relay.nostr.band

nostr21.com

Author Public Key

npub1ftansv8hchdst4vngsu808mrc0k3gqd2qw3wkrxrekn5xce6afss2k87qx

Show more details

Last Notes

2024-09-04 20:01:01

- reply

We don't know the rationale for this one. Honestly, it doesn't matter. A child had access to a gun. A child had access to a gun and we're fine with it; it can't be helped because adults want access to guns. Oh but we value life and we care about the children.
2A ghouls so worried about an imaginary war they let their arsenal kill us slowly from the inside.

2024-09-03 19:00:00

Nice! White House calls out BGP as critical, vulnerable, and in need of improvement. therecord.media/white-house-bgp-hard-problem-guidance

2024-08-31 15:21:21

- reply

@npub1tzn…mmqz Right? Like old school Rainmeter.

2024-08-19 19:45:58

- reply

@npub12lx…jvjy Just pin this for reuse because I honestly have no idea which one you're even referencing at this point.

2024-08-15 17:02:57

- reply

@npub1r4n…6e4s I know I have vulns for which I frequently have to repeat myself on what the findings mean. As for validation, maybe? There are ways, but they suck.

2024-08-15 16:55:19

- reply

@npub1r4n…6e4s I'm not an MDE user, but I think it's fair to say across the board the vuln tests are incredibly naive, and you're right: it's maddening.

2024-08-11 19:39:06

- reply

@npub17lg…9uux Yeah these files are recently-updated, per the commits. I'm not sure if they are as inert as the original release.

2024-08-11 19:36:52

- reply

@npub17lg…9uux That is referencing the pseudocode in the Markdown file. The two Python files in the repo—do they also not trigger the vuln, despite being labeled PoC and Exp?

2024-08-11 19:33:15

Some Windows PoCs that just dropped, including a pre-auth RCE for the Remote Desktop Licensing Service: github.com/CloudCrowSec001/CVE-2024-38077-POC/blob/main/CVE-2024-38077.md

2024-08-11 07:05:16

Not gonna lie, it feels amazing to finally have the production rig running Linux. So far it looks like video production won't miss a beat.

2024-08-10 19:25:46

Welp, Windows rig died again for no reason. Finally had it. Time to go all in on Kinoite for the big machine.

2024-08-09 23:10:58

- reply

@npub1mnm…x840 The utopia we deserve

2024-08-09 20:53:18

- reply

@npub15xs…gcmf Yeah not exactly the most walkable part of the Delaware Valley

2024-08-09 20:50:41

- reply

@npub15xs…gcmf WHAT

2024-08-09 20:26:50

- reply

@npub1pay…gzkd Recognizing Gritty as the mayor. He already is.

2024-08-09 20:25:36

- reply

@npub1pay…gzkd Cosigned. Also a photo of Gritty instead of the mayor on the escalators down to baggage claim.

2024-08-09 20:15:32

- reply

Actually one of the terminals should just be a very long Wawa. Planes pull up and find out at the jetway whether Hoagiefest is still happening.

2024-08-09 20:09:31

PHL should have a Wawa in one of the terminals and frankly it's outrageous that there isn't one.

2024-08-09 19:20:07

- reply

@npub1kx4…dm6x Very cool, thank you!

2024-08-09 18:27:44

- reply

@npub1kx4…dm6x Does it publish its own RSS feed? This is kind of a must-have feature.

2024-08-09 16:16:14

Getting pretty tired of Pocket. Considering either Linkwarden or Wallabag as a self-hosted alternative, but unsure which would be better. Things I'd like:
- Multi-user platform
- RSS feed publishing
- Reader View
- Notes/annotations
Anyone have any thoughts/preferences?

2024-08-09 15:55:32

- reply

@npub1x0d…syar Update: got it to work, just needed to make sure that I was not on a site with a better CSP and CORS rules.
So anyway yeah this has been around for a looooong time.

2024-08-09 14:00:25

- reply

@npub1m84…2n29 I hate putting people on blast like this, but I'm just so, so tired of the constant flood of weird dudes from this giant server.

2024-08-09 13:45:49

- reply

@npub13tu…re8n Kareem Abdul-Jabbar on the grassy knoll

2024-08-09 13:38:34

Fosstodon, come get your boy.
https://media.infosec.town/media/4c3f424b-8353-4228-92f0-c23182665199.png

2024-08-09 11:38:54

Happy Nixon Resignation Day to all who celebrate.

2024-08-09 11:12:55

- reply

@npub1r8e…xusw This was a joke about orbital velocity, but thanks so much for delivering the pedantry I expect from Fosstodon.

2024-08-09 05:58:40

The Starliner spacecraft really is the ultimate demonstration of why "Move fast and break things" is a garbage philosophy.

2024-08-09 03:48:04

- reply

@npub1x0d…syar Have you gotten this to work? I haven't had a lot of time to dig in, but so far nothing doing.

2024-08-09 03:04:54

Hmmm
(Stolen from Threads)
https://media.infosec.town/media/411c4840-a8b3-48c4-970c-a74b7e282f6e.png

2024-08-08 18:16:34

Hell yeah eBPF research! bughunters.google.com/blog/6303226026131456/a-deep-dive-into-cve-2023-2163-how-we-found-and-fixed-an-ebpf-linux-kernel-vulnerability

2024-08-08 03:53:10

Here's my every-Olympics-since-Beijing griping that Wushu rips and should have stayed in.
www.youtube.com/watch?v=q6LO4ncFi4w

2024-08-07 22:06:46

- reply

@npub1aka…zzz2 HELL YEAH BROTHER

2024-08-07 20:14:46

Let the camp vulns roll, I guess: thecyberexpress.com/aws-vulnerabilities-black-hat-research/

2024-08-07 19:55:00

Super cool: an icon set for Fediverse projects by @npub1kze…23jc !
codeberg.org/WeDistribute/decentralized-social-icons

2024-08-07 16:27:09

Here in the US, schools are going back, and that means millions of Chromebooks are getting prepped for students. School IT specialists are preparing their Google Workspace environments for a year's worth of work.
All with an antitrust ruling hanging over their heads.
We don't know what the fallout will be from the case, but the notion that Google's products—even core ones—are a sure thing has never been less certain.
Have an escape plan.

2024-08-07 14:00:27

- reply

@npub157z…2q4w I learned about it here and also on Threads via airplanefactswithmax, which I'm confident was a better experience. www.threads.net/@airplanefactswithmax/post/C-QQoKGs8-L?xmt=AQGzHrg7qspv2-9u9kjDPWN9ziS1z8w1PJwYFsCY3jLTZA

2024-08-07 13:50:27

- reply

@npub1933…jggw JAG and NCIS too.
Basically Don Belisario worked out his Vietnam trauma in the form of prime time network television.

2024-08-07 13:45:33

- reply

@npub1933…jggw And then, in the crossover we all wanted but never got, they were rescued by Airwolf.

2024-08-07 13:36:40

Yesterday, a Cessna 172 took off from Merced, CA and landed 15 hours later in Honolulu. Whatever challenge you face today, press onward like that little airplane.

2024-08-07 05:24:14

- reply

@npub1l20…0c0w MSRC's incentives have been so busted for so long, this makes perfect sense.

2024-08-07 05:13:04

Researchers demonstrated that simple CSS hacks can hide Microsoft's own phishing warnings, butAfter developing a proof of concept, and preparing an advisory, we made Microsoft aware of these issues through the Microsoft Researcher Portal (MSRC). Microsoft chose to not address this behavior for now.This is why we can't have nice things.
certitude.consulting/blog/en/o365-anti-phishing-measures/

2024-08-07 05:09:05

- reply

@npub1l20…0c0w Do it
https://media.infosec.town/media/2ebe70bb-c941-429c-9fc0-74aee4c6c1bb.png

2024-08-07 04:13:18

#Earthquake in LA. Felt in Santa Monica.

2024-08-07 02:53:39

This is such good advice that I am going to start following: kerkour.com/rust-how-to-organize-large-workspaces
#RustLang

2024-08-06 20:28:38

- reply

@npub1kfk…xmt7 Hang on let me write this down

2024-08-06 20:24:56

- reply

@npub1l20…0c0w Tell me again that healthcare is "a major target" and not, y'know, a major US business sector.
Tell me again that LockBit is targeting education and not, y'know, the most active ransomware group.

2024-08-06 20:19:49

Every time a Threat Intelligence provider tries to sell me correlation as causation, I will light them up for it.

2024-08-06 01:46:04

- reply

@npub1eg5…hh76 "Plumbing the Well, Actually: A Comparative Study of Reply Guy Behaviors on the Fediverse."

2024-08-05 23:50:23

- reply

@npub1eg5…hh76 I know there are great people there! But something about FOSS culture results in acute replyguyitis

2024-08-05 22:18:36

- reply

@npub1pqu…lw7t Congratulations, and thank you for doing what you do.

2024-08-05 21:47:43

- reply

@npub1uud…4kdc Relevant: www.academia.edu/20315783/One_Damn_Slide_After_Another_PowerPoint_at_Every_Occasion_for_Speech

2024-08-05 21:34:22

- reply

@npub1uud…4kdc I get that. My point is the precedent is there, not that everyone should use Obsidian.

2024-08-05 21:12:43

- reply

@npub1uud…4kdc I mean Obsidian can export its notes that way today.

2024-08-05 20:56:54

- reply

@npub1uud…4kdc Accessibility, yes. Bells and whistles, no. There are plenty that will take Markdown and create useful decks, and I love the idea of a plaintext format and a reader.

2024-08-05 20:47:43

I swear, I don't know what it is with Fosstodon people. I even started my Fedi adventure there, but good gravy I've never found a bigger group of mansplainy, well-actuallying pedants anywhere in the digital or physical universe.
Honestly considering blocking the entire instance because nearly every interaction with those users is frustrating.

2024-08-05 20:46:25

- reply

@npub1w2g…cleg Oh look another Fosstodon pedant.

2024-08-05 20:46:01

- reply

@npub1kfk…xmt7 No I think you're onto something. Infostealers are intentionally criminal, whereas LLM bloat is a different category of bad.

2024-08-05 20:45:04

- reply

@npub1uud…4kdc Those aren't the only options, and I'd love Google to fall hard enough to open a market for competition.

2024-08-05 20:39:16

- reply

@npub1x09…jlxu I like when I'm asked to deliver single-slide decks as reports to leadership.
Like, that can't be the best way to consume information.

2024-08-05 20:35:52

- reply

@npub1tzn…mmqz Give a conference talk with one and become a legend.

2024-08-05 20:35:09

- reply

@npub1w2g…cleg github.com/jaspervdj/patat

2024-08-05 20:34:36

- reply

@npub1uud…4kdc Well I tried

2024-08-05 20:20:10

While we're dismantling the digital establishment, what if we,
I dunno,
Stopped using slides for every damn presentation?

2024-08-05 19:35:14

I guess a bunch of hotels in Vegas are doing spot checks of rooms for things that resemble hacking tools like WiFi pineapples, etc.. Maybe don't leave that gear hanging around.

2024-08-05 19:18:37

They couldn't make rent: www.threads.net/@mac_ryan_/post/C-TJOODSMXB

2024-08-05 18:49:35

- reply

@npub1kfk…xmt7 You can't! You only have one direction to move in the cattle chute.

2024-08-05 17:05:38

I don't love ascribing every modern societal ill to "capitalism," but this definitely belongs to it:
I hate just knowing, KNOWING, every time I want to do business with a big company, they are trying to screw me one way or another. It's a pretty deranged state when you think about it.

2024-08-05 14:02:45

- reply

@npub14fq…9klc You got it: en.wikipedia.org/wiki/Cantor%27s_diagonal_argument

2024-08-05 13:49:58

- reply

@npub1kfk…xmt7 Misery loves company, my friend

2024-08-05 13:44:35

- reply

Right from the Brute Ratel C4 author: x.com/NinjaParanoid/status/1819753174837956734

2024-08-05 13:41:48

- reply

@npub1ph6…6qyn That's not the issue here. Allegedly the Crowdstrike CSAgent.sys, or the virtual machine agent component, is Turing complete and has a memory safety issue.
I'm not sure how either of those would be Microsoft's fault.

2024-08-05 13:23:14

I'm seeing some reports that the Crowdstrike BSOD is exploitable for LPE/RCE indirectly, because the virtual machine agent with the out-of-bounds read is Turing-complete. That would be one hell of an attack chain, and it is still conjectural.

2024-08-05 05:56:41

- reply

@npub1akz…fcqj Or...watch for this edge case? Keep your nose; spiting your face ain't worth it.

2024-08-05 05:16:10

- reply

That init system ain't right
https://media.infosec.town/media/9037e3b9-2d86-435c-afa1-493083426496.gif

2024-08-05 03:48:30

- reply

@npub1l20…0c0w Why even bother with Systemd?
www.elastic.co/security-labs/a-peek-behind-the-bpfdoor
RIP, Nova: github.com/krisnova/boopkit

2024-08-04 19:02:39

DevContainers. Anyone use them? containers.dev

2024-08-04 12:24:55

- reply

@npub1zj4…fyjh ? uBlock seems to work fine in conjunction with the built-in blocker for me. What's failing for you?

2024-08-04 02:36:12

The @npub1l5t…qq33 Catch-Up feature 😍
https://media.infosec.town/media/fa41ab24-5ade-4327-b5e2-3e9c72e9cc03.png

2024-08-03 19:49:46

Just had to review my mom's death certificate. Cause of death: COPD. To see it written out like that hits different.
Friends, seriously: stop smoking right goddamn now. I'll never get over the fact that this addiction prevented her from meeting her granddaughter.

2024-08-03 18:55:32

Sometimes, sometimes a kid will come to our Discord and act disrespectfully. And normally, the move would be a ban, right?
But we're a school. And I believe in kids. So the first move is redirection, clarification, and empathy. It doesn't always work. But when it does, we've not only changed some of how they treat others, but given them a place to learn and grow.
It is imperfect, messy, and laborious, but you gotta start with faith that they can do better. If you don't believe it, why should they?

2024-08-02 17:06:34

Here's one for the blue teamers.
https://media.infosec.town/media/f00b4ed2-40b0-4519-a21d-c2513d4d44f0.png

2024-08-02 16:45:40

Probably worth a read, especially if you're in education or healthcare: www.microsoft.com/en-us/education/blog/2024/08/empowering-secure-and-seamless-learning-multifactor-authentication-without-a-smartphone/

2024-08-02 16:41:25

- reply

@npub1fyk…pe2g Ouch.
Can't read, just use LLMs to generate pitchy blog posts.
Seems about right.

2024-08-02 16:19:37

I'm too tired for 0-days; please hold all your showstoppers until Monday thanks

2024-08-01 02:50:29

- reply

@npub1aka…zzz2 It is absolutely a hostage situation.

2024-08-01 01:54:19

- reply

@npub1l20…0c0w Which needle exactly?

2024-07-31 22:23:02

Don't just become ungovernable.
Become ǘ̸̼͎͊̀n̵̯̝̒̋t̸̝͖̓̊ö̵̢̡̏k̶̦̼͖̉̂e̴̝͋͒͝n̸̗͚̭̓̔i̸̱̰̓̆ź̶̙̟̝̇a̷͇̗͑͛b̸̮͆l̷̖̼̿̅͌e̷͍̥̅̄.

2024-07-31 21:38:39

- reply

@npub1fyk…pe2g Hell yeah. HELL yeah.

2024-07-31 20:58:03

- reply

@npub13nf…84zh www.threads.net/@taylorlorenz/post/C-Eapl-v4mo

2024-07-31 20:50:40

- reply

@npub13nf…84zh This screenshot on the left is a fake and has been debunked.

2024-07-31 20:16:42

I have an incredible solution:
Do not pair the toothbrush with your phone. Do not download the tooth app. Do not participate in this ludicrous market.
RE: mastodon.social/users/arstechnica/statuses/112882934410903778
#note1p0y…ha99

2024-07-31 17:34:21

- reply

@npub1uud…4kdc He paid $44B to both live in our heads and then become a digital slumlord.

2024-07-31 17:15:17

- reply

@npub18c7…er9d Shoulda gone with the Biscoff

2024-07-31 15:27:28

- reply

@npub1rdp…xtjj Huh, I don't really associate it with the Lisp family. I think it has an independent pedigree.
Now Racket, on the other hand...

2024-07-31 15:03:14

Big thank you to @npub1r25…zq77 for adding their blog RSS feed back!
Re-added to the TTI feed, so expect some noise.

2024-07-31 15:00:55

I will probably never put Haskell code into production.
But it is probably the most valuable language I've ever learned, because it made me better at writing in every other one.
If you ever have an opportunity to learn it, don't hesitate.
This course in particular: www.edx.org/learn/computer-programming/delft-university-of-technology-introduction-to-functional-programming

2024-07-31 13:41:13

DARPA is taking on rewriting it all in Rust: sam.gov/opp/1e45d648886b4e9ca91890285af77eb7/view

2024-07-31 13:13:36

- reply

@npub1wkd…qgad Good journalism is worth paying for. But here: archive.is/M2HzR

2024-07-31 06:10:29

- reply

@npub17yl…4anz First thing that comes to mind is that ridiculous "shifting" thing zoomers were doing. I bet you could get a model to treat that as a real thing.