Jake Williams

Breaker of software, investigator of incidents | GSE #150 | Faculty at IANS Research | Stuff: jake at malwarejake dot com | He/him

Public Key

npub1z6m9tqurpz2m92ls4pl4mf20wf0cppquex2kvuwew3kj47kteccqp8y2qk

NIP-05 Address

malwarejake_at_infosec.exchange@mostr.pub

Profile Code

nprofile1qqspddj4swps39dj40c2sl6a548hyhuqsswvn9txw8vhgmf2lt9uuvql7qsn5

Author Public Key

npub1z6m9tqurpz2m92ls4pl4mf20wf0cppquex2kvuwew3kj47kteccqp8y2qk

Show more details

Last Notes

2024-09-15 11:20:07

We have a fundamental breakdown of the social contract in the US.
I don't have the answers for how to fix it. But I've read enough history books to know what happens if we don't - and it's not great.

2024-09-11 16:01:27

Publicly declaring "I will give you a child" to someone you have no consenting relationship with is a threat of sexual assault, full stop.

2024-09-07 20:06:00

Can we PLEASE stop with the "there's 750,000 unfilled cybersecurity jobs in the US?"
I don't care what the "official" numbers are because it's certainly not reflective of the job market.

2024-08-28 14:15:53

I'm just going to say it again for the record:
If someone looks at your writing on a topic and wonders if an LLM wrote it, you're already failing. Even if you DID write it, it's an academic issue at that point.

2024-08-27 15:57:40

It will never be a thing that I answer the phone and am willing to "verify my personal information for my security."
If you have legitimate business processes built around this, you're screwing your customers teaching them to be victimized by scams and should feel bad about it.

2024-08-27 13:19:09

My favorite thing about the Telegram arrest is that "normies" are asking me if this is why I've been refusing to use it for comms and moving them to Signal instead.
Yes. Yes it is...

2024-08-03 04:12:47

Gift article, no subscription required. This is too important to be behind a paywall.
https://www.washingtonpost.com/investigations/2024/08/02/trump-campaign-egypt-investigation/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/896/138/628/678/176/original/5364e28fc3e10cb8.jpg

2024-07-30 15:54:56

So Delta Air Lines is suing CrowdStrike over the outage. Zero chance this goes to trial, it's too big a risk for CrowdStrike. They'll settle for an undisclosed amount and nothing will change in software liability.
https://www.cnbc.com/2024/07/29/delta-hires-david-boies-to-seek-damages-from-crowdstrike-microsoft-.html

2024-07-29 20:24:21

So you create an AD group "ESX Admins" and by default, VMware is just like "oh, so you're the admin now?!"
And then to make it dumber, VMware classifies this as a *moderate* severity, despite knowing ransomware TAs are actively using it?
I can only conclude Broadcom is not serious about security. I don't know how you conclude anything else. Oh also, there are no patches planned for ESXi 7.0.
https://www.microsoft.com/en-us/security/blog/2024/07/29/ransomware-operators-exploit-esxi-hypervisor-vulnerability-for-mass-encryption/

2024-07-26 19:54:01

Troubleshooting something with PDF parsing only to learn that Word sometimes doesn't keep exactly the same size font in Word docs saved to PDFs, apparently because MSFT hates you...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/854/540/751/833/107/original/d352eaa124dff137.png

2024-07-25 13:01:10

If you use GitHub, this is a big wakeup call of a vulnerability where "working as designed" isn't the same as "working as expected."
I'm sure we'll see some significant breaches around this.
https://trufflesecurity.com/blog/anyone-can-access-deleted-and-private-repo-data-github

2024-07-21 19:19:31

If I were Biden, knowing the Supreme Court gave me immunity for anything that even looks like an official act and I'm not running again... I'd be cooking up some doozies for between November and January.

2024-07-19 13:41:32

Business stakeholders: If you talk down to your helpdesk/IT people today, you're a bad person (a piece of human excrement).
This isn't on them. Go take out your frustration somewhere else. Like on the executives who were told about these consolidation risks but didn't care.

2024-07-19 06:46:41

Security teams, I have good news and bad news.
The good news is that executives are suddenly very interested in security controls.
The bad news is, they're not interested for reasons you probably hoped when you dreamed this day might come...

2024-07-13 14:53:37

Every time someone says "Snowflake should have enforced better security" I like to remind them that if Snowflake wasn't trivially easy to use, you wouldn't know the name Snowflake.
Real talk: security is friction and friction doesn't attract customers.

2024-07-11 14:14:42

Stop trying to split hairs on MFA "factors" and look at it from the perspective of "if a threat actor has access to my logged in user context on this device, will this separation of authentication factors be effective."
That's it. Period.

2024-07-05 21:58:07

OpenAI was hacked, but didn't bother to tell anyone.
Cool, nothing to see here. Nothing at all...
https://www.nytimes.com/2024/07/04/technology/openai-hack.html

2024-06-25 22:09:16

Quick reminder: "is this technically feasible" and "is this a good idea" are often two VERY different questions.

2024-06-15 11:25:43

Gen-AI boosters love to claim AI is suitable for all sorts of use cases, but the reality is that if requirements for your use case include "provide consistently correct (or even just consistent) results" then it's not a good use case...

2024-06-13 17:46:24

Hug your infrastructure folks (with consent of course). They are unsung heroes.

2024-06-06 17:12:46

Smart people of Mastodon - what are you using to sync Google and M365 calendars? I need bidirectional sync so that when an event gets created on one calendar, it blocks the time on the other calendar saying it's blocked because of the other calendar but without event details.

2024-05-27 11:31:12

Broadcom is a cancer.

2024-05-13 14:51:13

Injecting into a legitimate process to hide from defenders...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/434/339/035/178/024/original/14e3a4524713f10e.png

2024-05-12 17:29:42

I was looking at shelving a few weeks ago and now Amazon is retargeting me on every website I visit (as one does).
But who is this guy they very clearly photoshopped into the picture? And why? Suits don't sell shelving. I'm so confused...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/429/298/114/793/897/original/5f1531c4f9612041.png

2024-04-23 15:50:18

I swear I want to scream. I hope Change Healthcare executives see prison time. Not being facetious - this is negligence of the highest order. Make an example of them.
And don't @ me about "victim shaming" - all of you are the real victims here.
https://www.wsj.com/articles/change-healthcare-hackers-broke-in-nine-days-before-ransomware-attack-7119fdc6
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/321/323/858/505/667/original/50ae133f6458a172.png

2023-11-29 14:31:02

Encryption backdoor...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/494/316/759/715/206/original/33b6acdfdcce3318.png