SwiftOnSecurity's profile picture. computer security person. former helpdesk.

SwiftOnSecurity

@SwiftOnSecurity

computer security person. former helpdesk.

SwiftOnSecurity أعاد

UPDATE: balenciaga NIMBY is back to oppose ballot measures that would streamline affordable housing… and this time he has upgraded his balenciaga hat to a $3k balenciaga jacket (don’t listen to balenciaga NIMBY. vote YES on ballot measures 2-4)

sam_d_1995's tweet image. UPDATE: balenciaga NIMBY is back to oppose ballot measures that would streamline affordable housing… and this time he has upgraded his balenciaga hat to a $3k balenciaga jacket

(don’t listen to balenciaga NIMBY. vote YES on ballot measures 2-4)
sam_d_1995's tweet image. UPDATE: balenciaga NIMBY is back to oppose ballot measures that would streamline affordable housing… and this time he has upgraded his balenciaga hat to a $3k balenciaga jacket

(don’t listen to balenciaga NIMBY. vote YES on ballot measures 2-4)

they have another video where a guy wearing a balenciaga cap is complaining about “luxury development” I am dead

sam_d_1995's tweet image. they have another video where a guy wearing a balenciaga cap is complaining about “luxury development”

I am dead


SwiftOnSecurity أعاد

You can engage with people who are rude, or stupid, or incorrect, but when someone is a shameless liar that’s where I feel like all hope is lost. Even a stupid asshole, if they’re honest, cares about truth. There’s at least *one* shared value you have with them: reality


SwiftOnSecurity أعاد

such a cool video. wish i had a whole playlist of similar breakdowns

Sick today but found this recent two-hour video on Apollo 13: live audio, terminology, animations, graphics. People have donated $100 and saying it's the best in existence. The competence and deliberativeness of everyone in fog of war is gobsmacking. youtu.be/uCObwsXbSeU

SwiftOnSecurity's tweet image. Sick today but found this recent two-hour video on Apollo 13: live audio, terminology, animations, graphics. People have donated $100 and saying it's the best in existence.

The competence and deliberativeness of everyone in fog of war is gobsmacking.

youtu.be/uCObwsXbSeU


SwiftOnSecurity أعاد

I bet at least 80% of Entra admins would blindly grant RoleManagement.ReadWrite.All to an Enterprise app that was purchased by their company Most wouldn't even know what that means - and in doing so, they practically give Global Admin level permissions to the application vendor

Yeah, not long ago an app requested app role RoleManagement.ReadWrite.All - and by using Graph logs in a dev tenant I found out that the ONLY reason was that the automated onboarding process had to assign a non-GA Entra role to a service principal. 😵‍💫 «How ‘bout no»



My safe space is watching 23 minute monologues by a guy sitting at a table talking about the politics of the security services of 1958 Czechoslovakia because it's important to explain how they ended up with 1,788 submachine guns in a new caliber developed by a town doctor.


SwiftOnSecurity أعاد

SwiftOnSecurity أعاد

It was probably a mistake for the Supreme Court to legalize selling pardons.

President Trump has pardoned Changpeng Zhao, the convicted founder of the crypto exchange Binance, following months of efforts by Zhao to boost the Trump family’s own crypto company. w/@rebeccaballhaus and co: wsj.com/finance/curren…



SwiftOnSecurity أعاد

"I don't understand how we got ransomwared! We never saw anything in our consoles, there were no alerts, nothing that would make us think that this was happening! The consoles:

SecurityAura's tweet image. "I don't understand how we got ransomwared! We never saw anything in our consoles, there were no alerts, nothing that would make us think that this was happening!

The consoles:

SwiftOnSecurity أعاد

And so if e.g. one’s parent gets taken for several hundred dollars because they answered the text message that suggested they need to pay missing postage to the USPS and not the text message that said to pay for a totally legitimate bill, then call bank and they get it back. Fin.


SwiftOnSecurity أعاد

Anyhow the good news, such that it is, is that financial industry and American public mutually understand “Retail cannot possibly win this contest at a high enough percentage rate and therefore the financial system reimburses them for losses. The end.”


SwiftOnSecurity أعاد

Without commenting on a named site: I was once asked by my wife whether a particular domain was safe, said “I don’t know”, was able to conclude “Very probably yes.” in 5 minutes, and thought “OK so the strategy is marry someone who works in payments and *maybe* that works.”


SwiftOnSecurity أعاد

This blog reveals how a silent HP OneAgent update (version 1.2.50.9581) deleted the MS-Organization-Access certificate, causing devices to disconnect from Entra ID. And yes, it’s as bad as it sounds patchmypc.com/blog/hp-oneage… #Intune #MSIntune #Entra #Windows #Windows11

⚠️ Heads up!!! Big warning for HP AI Devices! ⚠️ Some of HP’s latest Next Gen AI PCs, including the EliteBook X Flip G1i, are getting the updated OneAgent 1.2.50.9581 build. That version seems to run a cleanup script removing any certificate containing “1E” in its subject ....…

Mister_MDM's tweet image. ⚠️ Heads up!!! Big warning for HP AI Devices! ⚠️

Some of HP’s latest Next Gen AI PCs, including the EliteBook X Flip G1i, are getting the updated OneAgent 1.2.50.9581 build.

That version seems to run a cleanup script removing any certificate containing “1E” in its subject ....…


SwiftOnSecurity أعاد
kmcnam1's tweet image.

SwiftOnSecurity أعاد

If you care about the engineering details of a failure like AWS experienced, and you haven't read that Richard Cook piece, stop reading anything else about AWS and go read that first.


Loading...

Something went wrong.


Something went wrong.