Pinned Tweet
“Atticus told me to delete the adjectives and I'd have the facts.”
― Harper Lee, To Kill a Mockingbird
c retweeted
🚨 𝗢𝗙𝗙𝗜𝗖𝗜𝗔𝗟: Kylian Mbappé becomes the FIRST French player in HISTORY to finish in the Ballon d'Or TOP 10 for NINE CONSECUTIVE editions! 🇫🇷💫
Effective Immediately, all organizations using PHP for their systems are advised to be prepared for an update addressing two critical vulnerabilities. PHP is widely used for web applications. These vulnerabilities often provide a direct path to the server's file system or database. If an immediate update is not feasible, it is recommend that organizations take the system offline until it can be fully mitigated. NSA will follow up shortly with more specific guidance.
c retweeted
My Phrack article, "Calling All Hackers" is finally out!
It's about what I learned going from a hacker to running a company—and how hackers can make a difference in today's world. And the shitty parts of startup culture no one talks about.
Read here: phrack.org/issues/71/17.html…
c retweeted
All I see are powerful Kenyan women. So, use the correct poem:
"Nobody warned you
the women whose feet
you cut from running
would give birth to
daughters with wings."
— Ijeoma Umebinyuo, Questions for Ada
c retweeted
After fighting off A TON of imposter syndrome I've finally gotten around to publishing some of my work. Just published part one of "Dynamic Analysis of Windows Exploit Mitigations — Import Address Filtering." Enjoy! link.medium.com/C7EtZ0xPdvb
c retweeted
We are only few hours away from our #BSidesNairobiCyberChallenge2022, we can't wait to meet everyone and have some fun with the challenges.
c retweeted
The #Aspire mentorship Lead .@iamckn taking students through an introduction to #cybersecurity and a brief in #cybercareers!
To learn more: ekraal.org/programs/mentorsh…
#Cyberwarriors #infosec #LearnAspireInnovate #eKRAAL #OSINT #infosectionary
c retweeted
Some notes about using plugins to persist via 2 of my favorite editors:
+ Sublime Text (Python)
+ VS Code (.NET in JavaScript)
[BLOG]
thevivi.net/blog/pentesting/…
c retweeted
Probably the best visual I’ve seen of #log4j from govcert.ch/blog/zero-day-exp…
c retweeted
#SEESTechweek is a chance to learn from some of the best minds in the fields of Electrical and Electronics engineering.
our panelists below will be addressing various topics extensively.
Come and engage them from the 12 -16 th at UoN.
Week 2 of #HackFest2021 was really fun and insightful! A big thank you to our partner @OPCDE for collaborating with us on this one and to last night's speakers @msuiche @sneezy_ladybug and @iamckn for the interesting sessions. Shukran!
Our third speaker for week 2 of #HackFest2021 is @iamckn who leads the aspire team at @eKRAALhub CK has experience in diverse areas of #infosec and currently focused on the area of operational tech. Join for his segment on exploring the ICS/IoT world
bit.ly/HackFestWeek2
c retweeted
Keeping up with security research is near impossible.
Vendor pitches & bombastic claims add to the noise.
ThinkstScapes fixes this.
Grab quarterly reviews¹ by sec researchers with decades in the field. (PDF or audio)
thinkst.com/ts
__
¹ Free. Not even reg. needed
c retweeted
Join us for the #networking #aspireCTF walkthrough.
As well as an opportunity to meet the #aspireCreators
#linux #OS #cybersecurity #100daysofcode #CTF
c retweeted
Humans are astonishingly bad at setting goals.
We consistently establish targets that invite manipulation.
THREAD: A mental model on goal setting and unintended consequences:
c retweeted
Continuing the tweet-chain of @colinoflynn on AirTag hacking, we will look at the flash contents now!
c retweeted
OK I didn't appreciate how jam-packed this thing is from @iFixit teardown photos. Also it's 0.3mm PCB so I'm pretty sure I broke some solder joints getting it out. Test pads are accessible w/o removing PCB so if this one isn't working will test another one.
c retweeted
A few months ago Cellebrite announced that they would begin parsing data from Signal in their extraction tools. It seems they're not doing that very carefully.
Exploiting vulnerabilities in Cellebrite's software, from an app's perspective: signal.org/blog/cellebrite-v…



































