ISSM | Product Security | Unyielding
LA ↔️ Seattle
Joined March 2021
- Tweets4.5K
- Following501
- Followers2.9K
- Likes2.9K
Rootkit Randy retweeted
Taking advice from people who have had no success in doing what you are trying to do makes 0 sense lol
Rootkit Randy retweeted
>admits to felony on Xitter
>blames AI
What a time to be alive
Ah yup. That was indeed me. No mallace intended. I've been running some agents to do signups + agentic testing on similar platforms. Just halted the harness I was designing around this as it was definitely going off the rails and reaching too far
Readers added context they thought people might want to know
In many jurisdictions this is a crime. In the US under Computer Fraud and Abuse Act, 18 U.S.C. §1030, in the UK under Computer Misuse Act (CMA) 1990, in Germany Strafgesetzbuch (StGB), and many others.
justice.gov/jm/jm-9-48000-…
legislation.gov.uk/ukpga/1990/18/…
gesetze-im-internet.de/stgb/
Rootkit Randy retweeted
They told me I was crazy…
I have completely caught up on One Piece.
Want to send a special thank you to @_lifeofkrystal_ for the rec.
Rootkit Randy retweeted
"It's crazy how there's so many major hacks all of a sudden"
- people who started paying attention to cybersecurity 3 weeks ago.
Rootkit Randy retweeted
I have no idea how people look at all of these hacks AI is causing daily and say that Cybersecurity as a career is cooked lol
Rootkit Randy retweeted
Pessimistic and unhappy people rub off on you
It may seem rad or empathetic for a while but eventually you realize it’s lame and just people resolved to having no agency over their lives well into adulthood
Rootkit Randy retweeted
UPDATE: Specific mitigation guidance for the recently identified PHP critical vulnerabilities is now available. Secure your servers today. Guidance and technical steps here: nsa.gov/Press-Room/Press-Rel…
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
Rootkit Randy retweeted
OpenAI researchers being behind the discovery of the PHP zero day is a glimpse into cybersecurity’s next era
Rootkit Randy retweeted
Stop Russian compromise of your network devices by hardening your SNMP. We urge NSS and DIB admins to move to SNMPv3 immediately to ensure payloads are authenticated and encrypted. Full hardening guidance here: nsa.gov/Cybersecurity/Cybers…
ALT A slide detailing actions for administrators to mitigate Simple Network Management Protocol (SNMP) issues. It includes the following points: utilize SNMPv3 with authPriv for security, ensure administrative credentials are properly configured with different passwords for authentication and encryption, limit object identifiers to a predefined list, apply Extended Access Control Lists (ACLs) to mitigate unauthorized access, and segregate SNMP traffic to a separate management network.
Rootkit Randy retweeted
Twitter is unique because ambitious, high agency people end up debating what’s possible with timid, risk averse people and both sides mistake their abilities, limitations and life experience for universal truths. The disconnect is these two groups rarely interact in the wild.
