ً @samuel_acker

#infosec ~ Joined July 2019

Tweets

47
Followers

46
Following

921
Likes

1K

ً @samuel_acker

3 years ago

Digital fission

0 0 0 62 0

View Details

ً @samuel_acker

3 years ago

@wiz_io IMO the real vuln here is allowing users access to any environment where code can use system resources (import os). Basically defacto command injection.

1 0 1 92 0

View Details

@wiz_io Cool attack, but this is a great showcase for a big gripe I have with infosec: poor concept naming. There IS actually a file being created here it's just anonymous and only lives in memory. This attack is fileless like aws lambda is "serverless". Can be very confusing.

2 0 7 1K 0

View Details

ً @samuel_acker

3 years ago

@xQcChatMessages Any ip addresses starting with 192.168 is not internet routable, it is a private network address. i.e. this ip is not accessible from the internet, only from within his private local network. The real concern is malware from BO3 RCE changing windows firewall rules

0 0 1 934 0

View Details

ً @samuel_acker

3 years ago

@seytonic Wow you too?! Sca- I mean philanthropy sure is popular these days :)

1 0 2 436 0

View Details

ً @samuel_acker

4 years ago

Number perception is so weird. 2/3 feels a lot bigger than 1/2, but 66% does not feel that much bigger than 50%.

0 0 0 35 0

View Details

ً @samuel_acker

4 years ago

@pry0cc Give them the honor of being converted into cutoffs 💪🏻

0 0 1 0 0

View Details

ً @samuel_acker

4 years ago

@SyntaxGandu Semgrep!

0 0 1 0 0

View Details

ً @samuel_acker

4 years ago

@patmorgan235 @HackingDave I completely agree, but in this situation they wouldn’t really be doing work like in an internship. More like a free learning opportunity. You’re doing work in college too but you don’t get paid for that either.

0 0 0 0 0

View Details

ً @samuel_acker

4 years ago

@HackingDave Then if the company sees potential they can hire for a junior position and get real results now that the new person is up to speed. Basically, build cheap ramp instead of the expensive ledge we have now.

0 0 0 0 0

View Details

ً @samuel_acker

4 years ago

@HackingDave This way the corporate bean counters are not upset about cost/benefit of the new person and they actually get an opportunity to be exposed to real infrastructure, real problems, real problem solving.

1 0 0 0 0

View Details

ً @samuel_acker

4 years ago

@tom_swiss @DethVeggie @Coleens_ Bitwarden is open source and has a self hosting option if you are wary about the cloud.

0 0 0 0 0

View Details

ً @samuel_acker

4 years ago

@Evil_Mog That’s it. I have decided that I will not be getting any older.

0 0 1 0 0

View Details

ً @samuel_acker

4 years ago

@LazyTitan33 @theXSSrat You’re right, but I tried several search term combinations and the one with security spelled all the way out had the least results. I also tried several combinations for the ejpt. Was the most fair comparison I could get while still getting my point across.