Mike Sheward

Author of Digital Forensic/Pen Test/Blue Team Diaries, Hands-on Incident Response and Digital Forensics & Security Operations in Practice! (he/him) #infosec #DFIR #BlueTeam #Pentesting

Infosec Diaries: https://infosecdiaries.com
Business Inquiries: https://www.securebeing.com
Medium: https://mike-sheward.medium.com/
Goodreads: https://www.goodreads.com/author/list/8153753.Mike_Sheward
Author Page: https://www.amazon.com/Mike-Sheward/e/B00JKND75S

Public Key

npub1m47njpj30eznnlfll04m7t4thfa5awwy62m6jk3a965kl2rd9n0svx49em

NIP-05 Address

secureowl_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsd6lfeqeghu3fel5llh6al964m576wh8zd9daftg7ja2t04pkjehcpzemhxue69uhhyetvv9ujuurjd9kkzmpwdejhg00t537

Publishing to

relay.primal.net

Author Public Key

npub1m47njpj30eznnlfll04m7t4thfa5awwy62m6jk3a965kl2rd9n0svx49em

Show more details

Last Notes

2024-06-16 18:19:44

- reply

the thing that I always remind folks about Red Teaming / Pen Testing is that the only tangible output of these functions to the customer or business is the reporting. So guess which part of the process takes up the most of your time.

2024-06-16 18:19:44

- reply

2024-06-12 15:44:06

Screenshot came up in my memories from 11 years ago today, thank goodness software error messages aren't as useless as this one anymore, oh wait
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/604/413/065/946/309/original/5f91ef12243d0ed8.png

2024-06-04 02:52:48

Here’s an example of how I like to both inform and scare people. Infoscarement if you will.
I start off by asking if they’d ever hand their unlocked personally owned iPhone to their IT or HR teams, the answer is, 100% of the time, a resounding, “no way”.
Then I ask if they have logged into their personal iCloud account, specifically to iMessage, on their company issued Mac laptop. The answer is, a lot of the time, “yes.”
It is at that point I explain that all those messages, all those attachments, all those things you were worried about sharing from the iPhone are also just sitting there on the laptop.
Then I walk off and go about my day.

2024-06-03 19:52:36

The future we were promised: all aircraft will be supersonic, robot butlers will be in every home
The future we got: we had a power outage and my toilet seat factory reset

2024-06-01 17:36:36

NASA Administrator: “well?”
NASA Engineer: “it was DNS.”

2024-05-25 22:08:25

Got the steak rub Google recommended
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/504/004/548/905/241/original/60a5af18f9e5ee15.jpg

2024-05-25 16:44:34

If you are struggling to get customer service from a larger company, a fun trick is to create a Slack workspace that allows automatic sign up from said companies domain. Then give it a few days and employees from the company will start rolling in on accident because they selected the wrong workspace. At which point you’ve created a private direct line to customer service.

2024-05-22 17:42:09

Has anyone found the LinkedIn profile with the headline, 'Lead Product Manager at Microsoft Windows Recall, ex-FTX, ex-Theranos, ex-Enron' yet?

2024-05-21 21:50:59

When Uber started, they just ignored regulations and laws around Taxicabs because they figured people would eventually get used to it and forget that it was even regulated to begin with.
When tech companies started adding AI to all their products, they just ignored regulations and laws around data privacy because they figured people would eventually get used to it and forget that it was even regulated to begin with.

2024-05-17 04:16:38

Another issue with an AI trained on Slack user data is that it’s going to respond to every question by first saying “hi”, then typing for a few minutes before it slowly completes the response over the course of several more messages, rather than just typing the whole message out up front.

2024-05-17 02:14:12

if Slack is going to start training an AI on my Slack messages, that AI is going to be extremely hostile towards Jira and also Slack itself

2024-05-11 21:36:49

“And what made you want to join the resistance and attack the computers?”
“Deepfake ABBA.”
“Yeah we hear that a lot.”
#eurovision

2024-05-11 19:59:20

Bambie-Thug sounds like one of those autogenerated docker container names #eurovision

2024-05-07 00:37:32

- reply

I believe “my nudes in profile” is the title of a forthcoming non-fiction book in which the author takes a nuanced look at the various aspects of their nudes

2024-04-30 17:18:01

Nothing quite like freshly picked AA’s still on the vine, only way to guarantee they are fresh
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/361/303/307/178/017/original/8259ad87e7d5a9f3.jpg

2024-04-29 15:05:51

My current guilty pleasure is responding to sales emails asking if I’ll be at RSA with “nah, I’m going to ED25519 this year instead, you get the same info as RSA but in half the time,” and seeing how many people get that joke and how many people say they’ve never heard of that conference but they’ll look into it.

2024-04-26 02:57:04

- reply

“enterprise single sign on is included with all tiers of our product, you don’t have to pay extra for it”

2024-04-13 20:33:47

- reply

I do endorse it fully yes, the people behind these chargers, whoever they may be, are extremely clever - so these are smart chargers managed by a cloud backend BUT they do not require fixed connectivity like Ethernet, Cellular, or WiFi - a deliberate security decision, and also beneficial in underground parking garages where signal is often lacking.
Unfortunately, not sold retail at the moment as they are designed for multi-family use cases such as apartment buildings, and commercial - but maybe one day.

2024-04-13 17:48:31

- reply

that’s a J1772 port, so no adapter should be needed for the vast majority of non Tesla public level 2 chargers in the US. As a totally random example here is a Xeal level 2 charger which has said J1772 connector, and yes totally random and absolutely not the company I run security for.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/265/160/468/315/620/original/13acb97459e86891.png

2024-03-30 17:22:07

Before folks start railing on open source - let’s not forget there are plenty of examples of undocumented backdoors in proprietary commercial products too, the Boeing 737 Max 9 for example

2024-03-30 02:45:45

people are saying the xz backdoor is likely the work of a nation state actor, and given that it appears to been slow rolled for a couple of years and immediately became obsolete before it was fully launched - you do have to admit it bears the hallmarks of a government IT project

2024-03-29 19:59:54

“Are we impacted by this XZ vulnerability?”
“No. Fortunately, our patching process prevented the malicious code from ever getting anywhere close to our environment.”
“But we don’t have a patching process?”
“Exactly.”

2024-03-21 19:36:24

11 thousand people were notified
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/135/357/334/499/950/original/08e25bd04178c8c1.jpeg