Social 📸 Photography

Kevin RussellMalicious compliance. When they're ordered to stop hitting you, so they start kicking you."Apple Is Selling iPad Repair Parts for Astronomical Prices""I don't know why you're angry, you said make phones repairable. La la la, can't hear you! La la la LA!" ___Apple owes about a trillion dollars in skipped taxes. Also. As well. On top. (They pretend to be a small Irish Company, no joke)<a href="https://apple.slashdot.org/story/25/07/31/193224/apple-is-selling-ipad-repair-parts-for-astronomical-prices" rel="nofollow noopener" translate="no" target="_blank">https://apple.slashdot.org/story/25/07/31/193224/apple-is-selling-ipad-repair-parts-for-astronomical-prices</a><a href="https://mstdn.social/tags/repair" class="mention hashtag" rel="nofollow noopener" target="_blank">#repair</a> <a href="https://mstdn.social/tags/fix" class="mention hashtag" rel="nofollow noopener" target="_blank">#fix</a> <a href="https://mstdn.social/tags/owned" class="mention hashtag" rel="nofollow noopener" target="_blank">#owned</a> <a href="https://mstdn.social/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> <a href="https://mstdn.social/tags/Apple" class="mention hashtag" rel="nofollow noopener" target="_blank">#Apple</a>

Kevin Karhan :verified:Hey, <a href="https://social.bund.de/@AuswaertigesAmt" class="u-url mention" rel="nofollow noopener" target="_blank">@AuswaertigesAmt</a>, ihr wisst schon dass eure <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> <a href="https://www.youtube.com/watch?v=linNxisuCFU&t=1932s" rel="nofollow noopener" target="_blank">wurde?</a><ul><li>Vielleicht solltet ihr eure <a href="https://infosec.space/tags/SMS" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMS</a> über <a href="https://infosec.space/tags/Iridium" class="mention hashtag" rel="nofollow noopener" target="_blank">#Iridium</a> verschlüsseln...</li></ul>Vielleicht mal <a href="https://github.com/KBtechnologies/PocketCrypto" rel="nofollow noopener" target="_blank">in OpenSource investieren</a>?CC: <a href="https://social.bund.de/@bsi" class="u-url mention" rel="nofollow noopener" target="_blank">@bsi</a> <a href="https://social.bund.de/@Bundesregierung" class="u-url mention" rel="nofollow noopener" target="_blank">@Bundesregierung</a> <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsec</a> <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a> <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> <a href="https://infosec.space/tags/Krisenkommunikation" class="mention hashtag" rel="nofollow noopener" target="_blank">#Krisenkommunikation</a> <a href="https://infosec.space/tags/40diplo" class="mention hashtag" rel="nofollow noopener" target="_blank">#40diplo</a> <a href="https://infosec.space/tags/Privatsph%C3%A4re" class="mention hashtag" rel="nofollow noopener" target="_blank">#Privatsphäre</a> <a href="https://infosec.space/tags/Datenschutz" class="mention hashtag" rel="nofollow noopener" target="_blank">#Datenschutz</a> <a href="https://infosec.space/tags/Informationssicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Informationssicherheit</a> <a href="https://infosec.space/tags/Kommunikationssicherheit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Kommunikationssicherheit</a> <a href="https://infosec.space/tags/DEpol" class="mention hashtag" rel="nofollow noopener" target="_blank">#DEpol</a>

plinthI don't think this Scrabble-like game uses the OSD. <a href="https://infosec.exchange/tags/slang" class="mention hashtag" rel="nofollow noopener" target="_blank">#slang</a> <a href="https://infosec.exchange/tags/words" class="mention hashtag" rel="nofollow noopener" target="_blank">#words</a> <a href="https://infosec.exchange/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>

Kevin Karhan :verified:<a href="https://kolektiva.social/@chojzina" class="u-url mention" rel="nofollow noopener" target="_blank">@chojzina</a> <a href="https://mastodon.world/@ApostateEnglishman" class="u-url mention" rel="nofollow noopener" target="_blank">@ApostateEnglishman</a> "Hit dogs Bark!"<ul><li>German Proverb</li></ul><a href="https://kolektiva.social/@chojzina/114669259784543478" rel="nofollow noopener" translate="no" target="_blank">https://kolektiva.social/@chojzina/114669259784543478</a><a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> <a href="https://infosec.space/tags/thxbye" class="mention hashtag" rel="nofollow noopener" target="_blank">#thxbye</a> <a href="https://infosec.space/tags/next" class="mention hashtag" rel="nofollow noopener" target="_blank">#next</a> <a href="https://infosec.space/tags/EOD" class="mention hashtag" rel="nofollow noopener" target="_blank">#EOD</a>

Kevin Karhan :verified:<a href="https://infosec.exchange/@cR0w" class="u-url mention" rel="nofollow noopener" target="_blank">@cR0w</a> <a href="https://haunted.computer/@Dio9sys" class="u-url mention" rel="nofollow noopener" target="_blank">@Dio9sys</a> <a href="https://infosec.exchange/@da_667" class="u-url mention" rel="nofollow noopener" target="_blank">@da_667</a> Propably Soon: another <a href="https://infosec.space/tags/DDoS" class="mention hashtag" rel="nofollow noopener" target="_blank">#DDoS</a> <a href="https://infosec.space/tags/botnet" class="mention hashtag" rel="nofollow noopener" target="_blank">#botnet</a> made out of them , cuz even the most butchered <a href="https://infosec.space/tags/linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#linux</a>-based <a href="https://infosec.space/tags/firmware" class="mention hashtag" rel="nofollow noopener" target="_blank">#firmware</a> can run a statically-linked version of <a href="https://infosec.space/tags/curl" class="mention hashtag" rel="nofollow noopener" target="_blank">#curl</a>. <ul><li>In fact I'd not be surprised if cybercriminals later on will basically flash their own <a href="https://infosec.space/tags/CFW" class="mention hashtag" rel="nofollow noopener" target="_blank">#CFW</a> (custom firmware) to prevent others from pwning their <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> boxes and retain persistent control.</li></ul>It would certainly make sense IMHO! I just don't do it as a matter of principle!

Kevin Karhan :verified:Ouch...<a href="https://infosec.space/tags/Oracle" class="mention hashtag" rel="nofollow noopener" target="_blank">#Oracle</a> <a href="https://infosec.space/tags/VirtualBox" class="mention hashtag" rel="nofollow noopener" target="_blank">#VirtualBox</a> got <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>! <a href="https://www.youtube.com/watch?v=3HfJj5S_tbk" rel="nofollow noopener" translate="no" target="_blank">https://www.youtube.com/watch?v=3HfJj5S_tbk</a>

Kevin Karhan :verified:Dat feeling when you <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> your first System... Kinda like <a href="https://www.youtube.com/watch?v=tFXYuw96d0c&t=43s" rel="nofollow noopener" target="_blank">this track</a>...<a href="https://infosec.space/tags/Nostaliga" class="mention hashtag" rel="nofollow noopener" target="_blank">#Nostaliga</a> <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsec</a> <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a> <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a> <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a> <a href="https://infosec.space/tags/mukke" class="mention hashtag" rel="nofollow noopener" target="_blank">#mukke</a> <a href="https://infosec.space/tags/mood" class="mention hashtag" rel="nofollow noopener" target="_blank">#mood</a> <a href="https://infosec.space/tags/Hacking" class="mention hashtag" rel="nofollow noopener" target="_blank">#Hacking</a>

Kevin Karhan :verified:<a href="https://chaos.social/@kasiandra" class="u-url mention" rel="nofollow noopener" target="_blank">@kasiandra</a> <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> Ich fasse das als bedingungslose Kapitulation auf...<a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> <a href="https://infosec.space/tags/thxbye" class="mention hashtag" rel="nofollow noopener" target="_blank">#thxbye</a> <a href="https://infosec.space/tags/next" class="mention hashtag" rel="nofollow noopener" target="_blank">#next</a> <a href="https://infosec.space/tags/EOD" class="mention hashtag" rel="nofollow noopener" target="_blank">#EOD</a>

Kevin Karhan :verified:<a href="https://freiburg.social/@ditol" class="u-url mention" rel="nofollow noopener" target="_blank">@ditol</a> <a href="https://mastodon.world/@samueljohn" class="u-url mention" rel="nofollow noopener" target="_blank">@samueljohn</a> <a href="https://23.social/@linuzifer" class="u-url mention" rel="nofollow noopener" target="_blank">@linuzifer</a> THIS is where I disagree...You may think it's elitist, but if people are too lazy to learn even fundamentals like how to use <a href="https://infosec.space/tags/Tails" class="mention hashtag" rel="nofollow noopener" target="_blank">#Tails</a> then maybe they should just not do <a href="https://infosec.space/tags/tech" class="mention hashtag" rel="nofollow noopener" target="_blank">#tech</a> at all?<ul><li>Like: We expect people to show at the every least theoretical proficiency in terms of <a href="https://infosec.space/tags/TrafficCode" class="mention hashtag" rel="nofollow noopener" target="_blank">#TrafficCode</a> and <a href="https://infosec.space/tags/VehicleSafety" class="mention hashtag" rel="nofollow noopener" target="_blank">#VehicleSafety</a> in +every juristiction I'm aware of* and literally mandated <a href="https://infosec.space/tags/DrivingLicense" class="mention hashtag" rel="nofollow noopener" target="_blank">#DrivingLicense</a>|s for that reason.</li></ul>I'll gladly teach <a href="https://infosec.space/tags/TechIlliterates" class="mention hashtag" rel="nofollow noopener" target="_blank">#TechIlliterates</a> but I won't waste my time on <a href="https://infosec.space/@kkarhan/113344834546549105" rel="nofollow noopener" target="_blank">people that spread disinfo</a>...It's 2024: <a href="https://venera.social/profile/tails_live" class="u-url mention" rel="nofollow noopener" target="_blank">@tails_live</a> / <a href="https://fosstodon.org/@tails" class="u-url mention" rel="nofollow noopener" target="_blank">@tails</a> has been out for over a decade and there are a shitload of guides ranging from written documentation to Zoomer-friendly TikTok-Style shorts on how to get started.<ul><li>I don't expect people to do <a href="https://infosec.space/tags/airgapped" class="mention hashtag" rel="nofollow noopener" target="_blank">#airgapped</a> <a href="https://www.youtube.com/watch?v=vdab4T_CoN8" rel="nofollow noopener" target="_blank">pffline-PGP</a> but with <a href="https://mastodon.online/@thunderbird" class="u-url mention" rel="nofollow noopener" target="_blank">@thunderbird</a> including <a href="https://infosec.space/tags/Enigmail" class="mention hashtag" rel="nofollow noopener" target="_blank">#Enigmail</a> and not requiring any external dependencies like the god-awful <a href="https://infosec.space/tags/GPG4Win" class="mention hashtag" rel="nofollow noopener" target="_blank">#GPG4Win</a> stuff's easier than ever.</li><li>Same with <a href="https://infosec.space/tags/mobile" class="mention hashtag" rel="nofollow noopener" target="_blank">#mobile</a>: <a href="https://infosec.space/tags/Appls" class="mention hashtag" rel="nofollow noopener" target="_blank">#Appls</a> like <a href="https://monocles.social/@monocles" class="u-url mention" rel="nofollow noopener" target="_blank">@monocles</a> / <a href="https://infosec.space/tags/monoclesChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#monoclesChat</a> are so easy, I've been able to onboard literal tech-illiterates remotely with few steps and <a href="https://docs.monocles.eu/apps/chat.app/" rel="nofollow noopener" target="_blank">simple instructions</a>. </li></ul>FOR THE LAST TIME: *STOP MAKING EXCUSES TO JUSTIFY ESCALATING COMMITMENT TO EVIDENTLY BAD SOLUTIONS!"<ul><li>Cuz <a href="https://web.archive.org/web/20240000000000*/https://twitter.com/thegrugq/status/1085614812581715968" rel="nofollow noopener" target="_blank">when push comes to shove</a> <a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener" target="_blank">@Mer__edith</a> herself would introduce a <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Govware</a> <a href="https://infosec.space/tags/backdoor" class="mention hashtag" rel="nofollow noopener" target="_blank">#backdoor</a> into <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> when faced with indefinite jailtime...</li></ul>Whereas with <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfCustody</a> of all the keys as well as <a href="https://infosec.space/tags/ReproduceableBuilds" class="mention hashtag" rel="nofollow noopener" target="_blank">#ReproduceableBuilds</a> and real <a href="https://infosec.space/tags/decentralization" class="mention hashtag" rel="nofollow noopener" target="_blank">#decentralization</a>, this would be evidently impossible even if all the devs wanted to comply honestly and not just because they could be held at gunpoint.<ul><li><a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> is not your friend. It's merely a tax-exempt "non-profit" corporation, and corporations are explicitly nobodys friend - espechally when they demand <a href="https://infosec.space/tags/PII" class="mention hashtag" rel="nofollow noopener" target="_blank">#PII</a> like <a href="https://infosec.space/@kkarhan/111968251463697943" rel="nofollow noopener" target="_blank">phone numbers</a> for useage.</li></ul>Compare that to <a href="https://infosec.space/tags/monocles" class="mention hashtag" rel="nofollow noopener" target="_blank">#monocles</a> where you do pay like €2 p.m. but in return get <a href="https://infosec.space/tags/standard" class="mention hashtag" rel="nofollow noopener" target="_blank">#standard</a> <a href="https://infosec.space/tags/protocols" class="mention hashtag" rel="nofollow noopener" target="_blank">#protocols</a> like <a href="https://infosec.space/tags/IMAP" class="mention hashtag" rel="nofollow noopener" target="_blank">#IMAP</a>, <a href="https://infosec.space/tags/SMTP" class="mention hashtag" rel="nofollow noopener" target="_blank">#SMTP</a> & <a href="https://infosec.space/tags/XMPP" class="mention hashtag" rel="nofollow noopener" target="_blank">#XMPP</a> and <a href="https://monocles.eu/more/#payment-section" rel="nofollow noopener" target="_blank">can pay anonymously</a> and not have to provide any PII whatsoever!<ul><li>And unlike <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> they ain't dependent on <a href="https://infosec.space/tags/VC" class="mention hashtag" rel="nofollow noopener" target="_blank">#VC</a> funding and <a href="https://infosec.space/tags/grant" class="mention hashtag" rel="nofollow noopener" target="_blank">#grant</a> money to keep the lights on.</li></ul>Make of that what you will, but just like allowing flatearthers to roam freely without caretaker supervision doesn't make the world less round, so won't the facts change about <a href="https://infosec.space/tags/ITsec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ITsec</a>, <a href="https://infosec.space/tags/InfoSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#InfoSec</a>, <a href="https://infosec.space/tags/OpSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#OpSec</a> & <a href="https://infosec.space/tags/ComSec" class="mention hashtag" rel="nofollow noopener" target="_blank">#ComSec</a>. <ul><li>The only reason Signal is still online and not <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> like <a href="https://infosec.space/tags/EncroChat" class="mention hashtag" rel="nofollow noopener" target="_blank">#EncroChat</a> is because it's either a Sting op like <a href="https://infosec.space/tags/AN%C3%98M" class="mention hashtag" rel="nofollow noopener" target="_blank">#ANØM</a> aka. <a href="https://infosec.space/tags/OperationIronside" class="mention hashtag" rel="nofollow noopener" target="_blank">#OperationIronside</a> aka. <a href="https://infosec.space/tags/OperationTr%C3%B8janShield" class="mention hashtag" rel="nofollow noopener" target="_blank">#OperationTrøjanShield</a> or they have already backdoored their <a href="https://infosec.space/tags/backend" class="mention hashtag" rel="nofollow noopener" target="_blank">#backend</a> so hard that all their <a href="https://infosec.space/tags/marketing" class="mention hashtag" rel="nofollow noopener" target="_blank">#marketing</a> is just <a href="https://infosec.space/tags/lies" class="mention hashtag" rel="nofollow noopener" target="_blank">#lies</a> like <a href="https://infosec.space/tags/Apple" class="mention hashtag" rel="nofollow noopener" target="_blank">#Apple</a>... </li></ul>Because all <a href="https://infosec.space/tags/centralized" class="mention hashtag" rel="nofollow noopener" target="_blank">#centralized</a>, <a href="https://infosec.space/tags/SingleVendor" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleVendor</a> & <a href="https://infosec.space/tags/SingleProvider" class="mention hashtag" rel="nofollow noopener" target="_blank">#SingleProvider</a> solutions are bad, and if they don't even allow for <a href="https://infosec.space/tags/SelfCustody" class="mention hashtag" rel="nofollow noopener" target="_blank">#SelfCustody</a> then they are just a <a href="https://infosec.space/tags/grift" class="mention hashtag" rel="nofollow noopener" target="_blank">#grift</a> to <a href="https://infosec.space/tags/scam" class="mention hashtag" rel="nofollow noopener" target="_blank">#scam</a> tech-illiterates that don't know and/or don't care! <a href="https://infosec.space/tags/thxbye" class="mention hashtag" rel="nofollow noopener" target="_blank">#thxbye</a> <a href="https://infosec.space/tags/EOD" class="mention hashtag" rel="nofollow noopener" target="_blank">#EOD</a>

Kevin Karhan :verified:<a href="https://mastodon.laurenweinstein.org/@lauren" class="u-url mention" rel="nofollow noopener" target="_blank">@lauren</a> <a href="https://thecanadian.social/@Ulrich_the_elder" class="u-url mention" rel="nofollow noopener" target="_blank">@Ulrich_the_elder</a> <a href="https://mastodon.social/@torproject" class="u-url mention" rel="nofollow noopener" target="_blank">@torproject</a> <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>!<ul><li>Honestly I didn't want to spoil it to him, that <a href="https://thecanadian.social/@Ulrich_the_elder/113340334294824573" rel="nofollow noopener" target="_blank">this</a> was a BAD MISTAKE...</li></ul>

Kevin Karhan :verified:<a href="https://mastodon.net2o.de/@forthy42" class="u-url mention" rel="nofollow noopener" target="_blank">@forthy42</a> <a href="https://mastodon.social/@fj" class="u-url mention" rel="nofollow noopener" target="_blank">@fj</a> <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>! <a href="https://infosec.space/@kkarhan/113292738181126901" translate="no" rel="nofollow noopener" target="_blank">https://infosec.space/@kkarhan/113292738181126901</a>

Kevin Karhan :verified:<a href="https://social.treehouse.systems/@marcan" class="u-url mention" rel="nofollow noopener" target="_blank">@marcan</a> nodds in agreement <a href="https://infosec.space/tags/Apple" class="mention hashtag" rel="nofollow noopener" target="_blank">#Apple</a> doesn't need to have backdoors in Hardware when their entire <a href="https://infosec.space/tags/iCould" class="mention hashtag" rel="nofollow noopener" target="_blank">#iCould</a> <a href="https://www.youtube.com/watch?v=Ev9_oDHNf-4" rel="nofollow noopener" target="_blank">is</a> <a href="https://www.youtube.com/watch?v=r38Epj6ldKU" rel="nofollow noopener" target="_blank">backdoored</a> and can be <a href="https://www.youtube.com/watch?v=ifOifNBgyRg" rel="nofollow noopener" target="_blank">weaponized</a> to <a href="https://www.youtube.com/watch?v=ZzS2vwDUO9U" rel="nofollow noopener" target="_blank">brick devices</a>.<ul><li>OFC similar functionality can be achieved with <a href="https://infosec.space/tags/CompuTrace" class="mention hashtag" rel="nofollow noopener" target="_blank">#CompuTrace</a> on <a href="https://infosec.space/tags/amd64" class="mention hashtag" rel="nofollow noopener" target="_blank">#amd64</a>-based <a href="https://infosec.space/tags/Laptops" class="mention hashtag" rel="nofollow noopener" target="_blank">#Laptops</a> (i.e. <a href="https://infosec.space/tags/ThinkPads" class="mention hashtag" rel="nofollow noopener" target="_blank">#ThinkPads</a>) and compared to that, <a href="https://infosec.space/tags/AMT" class="mention hashtag" rel="nofollow noopener" target="_blank">#AMT</a> + <a href="https://infosec.space/tags/ManagmentEngine" class="mention hashtag" rel="nofollow noopener" target="_blank">#ManagmentEngine</a> is trivial to <a href="https://infosec.space/tags/exploit" class="mention hashtag" rel="nofollow noopener" target="_blank">#exploit</a> and should be considered real <a href="https://infosec.space/tags/backdoors" class="mention hashtag" rel="nofollow noopener" target="_blank">#backdoors</a> (abeit "well meaning" in the sense of remote provisioning of entire fleets of devices, but still allowing to bypass the OS and offering DMA access to the CPU, so basically "<a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>")...</li></ul>Either way, these are not inherent to the used <a href="https://infosec.space/tags/Silicon" class="mention hashtag" rel="nofollow noopener" target="_blank">#Silicon</a>, but entirely <a href="https://infosec.space/tags/Firmware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Firmware</a>-based.<ul><li>AMT for example requires a "<a href="https://infosec.space/tags/Intel" class="mention hashtag" rel="nofollow noopener" target="_blank">#Intel</a> <a href="https://infosec.space/tags/vPro" class="mention hashtag" rel="nofollow noopener" target="_blank">#vPro</a>" configuration with Intel-made Ethernet NICs (i.e. i2xx & i3xx - Series) with a Q- or C-series Chipset & supporting <a href="https://infosec.space/tags/UEFI" class="mention hashtag" rel="nofollow noopener" target="_blank">#UEFI</a>, so most Systems with cheap <a href="https://infosec.space/tags/Realtek" class="mention hashtag" rel="nofollow noopener" target="_blank">#Realtek</a>-NICs aren't exploitable straight-away, and even then it requires certain settings to work, so not an easy "<a href="https://infosec.space/tags/Pwn2Own" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pwn2Own</a>" style exploitability...</li></ul>

Kevin Karhan :verified:<a href="https://det.social/@Der_Waeller" class="u-url mention" rel="nofollow noopener" target="_blank">@Der_Waeller</a> +1 <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>

Kevin Karhan :verified:<a href="https://mastodon.bentasker.co.uk/@ben" class="u-url mention" rel="nofollow noopener" target="_blank">@ben</a> OFC that works...<ul><li>I bet you <a href="https://mastodon.world/@signalapp" class="u-url mention" rel="nofollow noopener" target="_blank">@signalapp</a> will integrate <a href="https://infosec.space/tags/Govware" class="mention hashtag" rel="nofollow noopener" target="_blank">#Govware</a> <a href="https://infosec.space/tags/Backdoors" class="mention hashtag" rel="nofollow noopener" target="_blank">#Backdoors</a> (they claim don't exist) if <a href="https://mastodon.world/@Mer__edith" class="u-url mention" rel="nofollow noopener" target="_blank">@Mer__edith</a> were to be threatened with a lifetime in jail until <a href="https://infosec.space/tags/Signal" class="mention hashtag" rel="nofollow noopener" target="_blank">#Signal</a> complies...</li></ul>Cuz this is how all "<a href="https://infosec.space/tags/secure" class="mention hashtag" rel="nofollow noopener" target="_blank">#secure</a>" providers get <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>!

Kevin Karhan :verified:<a href="https://hackers.town/@cypnk" class="u-url mention" rel="nofollow noopener" target="_blank">@cypnk</a> I'd call this a "teambulding exercise that also trains staff and calibrates the tooling""... <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>

unfa🇺🇦So uh... If you happen to use a <a href="https://mastodon.social/tags/RabbitR1" class="mention hashtag" rel="nofollow noopener" target="_blank">#RabbitR1</a> device, just be aware that it's <a href="https://mastodon.social/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> is not great. <a href="https://www.youtube.com/watch?v=eKpKXVGc418" rel="nofollow noopener" translate="no" target="_blank">https://www.youtube.com/watch?v=eKpKXVGc418</a> All your keys are belong to us, basically. <a href="https://mastodon.social/tags/technology" class="mention hashtag" rel="nofollow noopener" target="_blank">#technology</a> <a href="https://mastodon.social/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> <a href="https://mastodon.social/tags/Rabbit" class="mention hashtag" rel="nofollow noopener" target="_blank">#Rabbit</a> <a href="https://mastodon.social/tags/CommunityService" class="mention hashtag" rel="nofollow noopener" target="_blank">#CommunityService</a>

Ricardo Harvin<a href="https://mstdn.social/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a>: A higher level.From: <a href="https://press.coop/@latimes" class="u-url mention" rel="nofollow noopener" target="_blank">@latimes</a> <a href="https://press.coop/@latimes/112700797440521175" rel="nofollow noopener" translate="no" target="_blank">https://press.coop/@latimes/112700797440521175</a>

Jonathan Kamens 86 47I am so sick of the <a href="https://federate.social/tags/infosec" class="mention hashtag" rel="nofollow noopener" target="_blank">#infosec</a> field's fascination with shiny new toys while ignoring the fucking basics. This isn't complicated: a corporate policy mandating <a href="https://federate.social/tags/MFA" class="mention hashtag" rel="nofollow noopener" target="_blank">#MFA</a>, with auditing and enforcement, with a big enough budget for security to actually do the auditing and enforcement. It's a known problem with a known, straightforward solution. If your company got <a href="https://federate.social/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> because you weren't requiring, auditing, and enforcing MFA, it's your fucking fault. You were grossly negligent. Jesus. <a href="https://federate.social/tags/Snowflake" class="mention hashtag" rel="nofollow noopener" target="_blank">#Snowflake</a>

PrivacyDigest<a href="https://mas.to/tags/Roku" class="mention hashtag" rel="nofollow noopener" target="_blank">#Roku</a> Makes <a href="https://mas.to/tags/2FA" class="mention hashtag" rel="nofollow noopener" target="_blank">#2FA</a> Mandatory For All After Nearly 600K Accounts <a href="https://mas.to/tags/Pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#Pwned</a> - Slashdot <a href="https://mas.to/tags/security" class="mention hashtag" rel="nofollow noopener" target="_blank">#security</a> <a href="https://it.slashdot.org/story/24/04/15/2052206/roku-makes-2fa-mandatory-for-all-after-nearly-600k-accounts-pwned?utm_source=rss1.0mainlinkanon&utm_medium=feed" rel="nofollow noopener" translate="no" target="_blank">https://it.slashdot.org/story/24/04/15/2052206/roku-makes-2fa-mandatory-for-all-after-nearly-600k-accounts-pwned?utm_source=rss1.0mainlinkanon&utm_medium=feed</a>

Kevin Karhan :verified:<a href="https://mstdn.ca/@ned" class="u-url mention" rel="nofollow noopener" target="_blank">@ned</a> m8, I hope your account has been <a href="https://infosec.space/tags/pwned" class="mention hashtag" rel="nofollow noopener" target="_blank">#pwned</a> cut that toot is absolute bs!

Recent searches

Search options

Administered by:

Server stats:

#pwned