Cyber
@Cyber@feddit.uk
- Comment on What's your opinion on CEH & EC Council 1 week ago:
True, although some are good differentiators, like CISSP.
But, for CEH, it felt like doing a CCNA from 1982
- Comment on What's your opinion on CEH & EC Council 1 week ago:
Good point on the branding, I think most of the fees are.going to the marketing dept. not the course content dept.
- Comment on What's your opinion on CEH & EC Council 1 week ago:
Yep, partially we see the certs as just differentiators between us and “the others” for our customers.
In reality, we don’t even do half the things needed to get the certs (take CCNA for example… IPv6 still isn’t in use for our customers)
- Submitted 1 week ago to cybersecurity@infosec.pub | 9 comments
- Comment on What are You Working on Wednesday 1 week ago:
Too many things to do… hence responding to a Wednesday post on Thursday.
Cyber Security burnout is definitely real… I just don’t think I’m there yet…?
- Comment on EY discloses third-party support platform breach exposing client tax information 4 weeks ago:
This doesn’t explain which countries are affected, but I presume from the sample letter, it’s US only?
- Comment on This week on Windows... 1 month ago:
Is?
Ok… it was… but is…?
I guess you’re helping out by absorbing allll the malware 🤔😉
- Comment on Websites have a new way to spy on visitors: Analyzing their SSD activity 2 months ago:
By measuring the manifestations, attackers can decrypt encrypted traffic
? How ?
- Comment on Someone has publicly leaked an exploit kit that can hack millions of iPhones 4 months ago:
FYI, you can just use
!gitor!ghwith duckduckgo to focus on github(But interesting that Google’s filtering results…)
- Comment on Someone has publicly leaked an exploit kit that can hack millions of iPhones 4 months ago:
Please tell me that this is due to government surveilance backdoors
- Comment on Primary time scale failure at NIST Boulder campus; significant impact on NTP services 7 months ago:
How / does this affect ntppool.org? (Which I refer to)
Seems all is calm there, but I guess they ref those time sources too?
- Comment on 8 months ago:
Thanks. Not sure why you’re getting downvoted for linking to the source with the actual IOCs…
- Comment on Hackers Replace 'm' with 'rn' in Microsoft(.)com to Steal Users' Login Credentials 8 months ago:
Back to monospaced fonts then.
- Comment on Hackers Replace 'm' with 'rn' in Microsoft(.)com to Steal Users' Login Credentials 8 months ago:
Kerning or Keming?
But thanks for the link had a good “lol” from those (few) posts.
- Comment on What are You Working on Wednesday 11 months ago:
Employee satisfaction results (mid-year reviews)
Living the dream…
- Comment on AI-Generated Malware in Panda Image Hides Persistent Linux Threat 1 year ago:
“Impersonation and psychological warfare will be a big thing in the coming years,” warns Rem Dudas from Palo Alto Networks, noting how AI enables malware to mimic other threat actors’ techniques
Might be <%your country%>
- Submitted 1 year ago to cybersecurity@infosec.pub | 0 comments
- Comment on Solar PV vulnerabilities 1 year ago:
It’s just “easier” to connect devices to the internet and provide the end user with an (unmaintained, insecure) app on their phone to see it’s doing something.
But, I seriously doubt I could find any updated firmware for my inverter (which is not connected to the internet)
- Submitted 1 year ago to cybersecurity@infosec.pub | 3 comments
- Comment on 20,000 malicious IPs and domains taken down in INTERPOL infostealer crackdown 1 year ago:
Participating countries reported the seizure of 41 servers and over 100 GB of data,
That seems like a small amount of data considering the size of the operation.
- Comment on New Chrome Zero-Day Actively Exploited; Google Issues Emergency Out-of-Band Patch 1 year ago:
Users of Chromium-based browsers such as Microsoft Edge, Brave, Opera, and Vivaldi are also advised to apply the fixes as and when they become available.
- Comment on Supply chain attack hits npm package with 45,000 weekly downloads 1 year ago:
Wow.
I never knew wordwrap was a vulnerability scanner until now 🤭
- Comment on Nvidia RTX 5090 can crack an 8-digit passcode in just 3 hours — password cracking benchmarks show tremendous performance 1 year ago:
Yeah, I tried cracking my own pass_phrase_ once… it was doing well until it got to (I think) digit #9 and showed it would take another year…
- Comment on DOGE software engineer’s computer infected by info-stealing malware 1 year ago:
So… breaking this down…his work laptop has malware on and the gov IT system isn’t finding it… for ~2 years…?!
- Comment on Off-Topic Friday 1 year ago:
OT…
Does anyone know how high a cast iron firepit has to be above black limestone patio slabs to ensure they don’t crack from the heat?
- Comment on Off-Topic Friday 1 year ago:
Well, I disagree <folds arms across chest>
It works fine, it’s just that there’s layers of bugs on layers of bugs, right down to the silicon.
If we could just stop innovating new stuff for a while and innovate bug fixing, then just think how stable everything would be, and then there wouldn’t be any logic gaps and then there wouldn’t be any security gaps and then we wouldn’t need… cyber… security… consultants… hmmm… ok… carry on.
- Comment on What are You Working on Wednesday 1 year ago:
Might be helping a contractor to cut down some willow trees that have gotten out of hand.
If that doesn’t happen, then frantically pulling together a list of cyber security maintenance tasks for a large client, that I’m a few weeks late on.
So… backups… er… check the AV… er… firewalls… that’s a good start 😉
- Comment on What are your methods to harden *nix servers? 1 year ago:
Thanks for the links, I’ll take a look as I’ve never actually played with port knocking.
- Comment on What are your methods to harden *nix servers? 1 year ago:
Is this for internal facing servers? Not much more than CIS and the usual Best Practices (no root for SSH, etc)
For a DMZ node, minimal software (ie Arch) and automated defenses like fail2ban, key authentication, etc…
Firewalls with Geo-IP blocking also help, but that’s not technically what you’re asking for.
- Comment on What are your methods to harden *nix servers? 1 year ago:
Would you use that on internal LAN connections or only external internet facing connections? I’m not aware (not checked) if any firewalls support it… not sure why?