Logged on to social media, saw a sick person celebrating people's mistakes and demonstrating their toxicity in the workplace, happy their coworker might be having a hard time. Logging off social media. I don't need to be reminded there are hateful souls in the world today. Try Love, Less Hate.

This time I tried something new: I'm burnt out and defeated. I'm not used to these feeling coming from offsec. So I took a couple days off, instead of quitting.

What is the equivalent of windows event view in iOS?

😞

If nothing else, the last 2 months have allowed American's to see each others' true colors. Ignorance is bliss.

This is great.👇

As a public figure, what matters the most is whether or not people like you. Elmo has been given a lesson. It's up to him what he does with it. He can continue a state of denial or he can learn. The choice is his.

Imagine calling yourself the master race and have to resort to erasing the achievements of minorities to make yourself feel better.

Once upon a time, long long ago, people used to go over to each others' houses and just sit and talk.

Has anyone ever had a bad call with a vendor? I had one today. It was my first bad call with a vendor.

Offsec was way more fun

Wow

Omg Intune. I swear, managing M365 requires 10 PhD equivalencies.

The price of tuna has increased 700% since the 80s. Invest in tuna 😋 🐟

As many people are aware, there have been ongoing issues with Exchange the past few weeks. The latest *incident* (not advisory) is about NDRs. We have been seeing tons of NDRs but do not match the NDR codes in the Incident. /1

Today I learned the difference between TPMv2 and fTPM. It seems like a lot of devices are using firmware versions of TPM although the specification version lists 2.0 with a subversion.

Dear SharePoint developers. If your SharePoint Online application is more than one year old, your delegated API permissions may no longer follow least privilege. Microsoft now has the sites.selected API permission which is akin to SP on-prem ACS permissions. learn.microsoft.com/en-us/sharep...

Can someone tell me what this app registration is that I see absolutely everywhere?

Labeling your entire data estate is challenging, especially when you start considering service principal access to data.

Travel bans will be next?

😂🤣😆

This is heart breaking and I wonder how many of our senior are experiencing this right now. Disgusting

This was the same guy who resigned after he was found making a bunch of wildly racist remarks. Musk, Vance and Trump all insisted he be brought back into government. And for what? So be could access and share private personal data in violation of the law? This is our new era of merit?

Desired State Configuration (DSC) has been re-engineered and given new life in the just-released v3.0. "DSC is a declarative configuration and orchestration platform that defines a standard way of exposing settings for applications and services." devblogs.microsoft.c...

When you increase tariffs on wine, while it may increase sales of domestic wine, it also increases demand, which increases prices for domestic wine as well. Increased tariffs increases prices for consumers who will have to make sacrifices in purchases, which has net negative effects on the economy.

One of my companies informed me they cancelled a $2m conference in Florida. Why ? They didn’t feel they could pass on the incremental cost of tariffs. So they are cutting expenses. That’s a city that lost a ton of tourism revenue. The cost of tariffs isn’t just the cost of the tariff

When you're good at something, insecure people will hate you. Just remember that's a them problem and not a you problem.

My account was suspended on X lol. No idea why. Maybe because I referred to Elon as Edolf.

There's a lot of people in transition right now, especially in tech related roles. Consider pursuing consulting: You get to see so many different organizations and learn common problems. You interact with the entire tech stack when doing offsec. You have more opportunity and exposure.

One good thing about being a techie - we are not easily enslavable. Only other uber nerds understand what we are doing anyway.

One day, people are going to want me to come in and fix the stuff being destroyed as we speak. They better be prepared to pay... a fucking lot.

I got laid off today, with the rest of 18F. 18F was an elite federal software shop. We made gov't websites work better, more efficiently for the American people. We saved taxpayers from getting screwed over by contractors. And were fired for it. We made this website to tell our story: 18f.org

2. If you want to deliver cyber effects, prepositioning matters. You can't just preposition days or even weeks before you need to deliver a capability. Think in many cases on scales of double digit months. 3. I strongly suspect CYBERCOM "planning" already includes prepositioning operations. 2/

Listening to Sarah McLachlan on Spotify and reminiscing of the wonderful youth I had. After 20, I lived a carefree life rich with depth, experience, and emotion. I did extraordinary things people will never know. It was a very unique path most cannot relate to. open.spotify.com/track/0oPZm6...

In 2010, Aaron Swartz faced 35 years in prison for downloading 70GB of JSTOR articles. He died by suicide in 2013. Meanwhile, Meta illegally downloaded 80+ TERABYTES of books to train AI models with zero consequences. The law doesn't punish corporations—only idealists fighting for open knowledge.

lol www.youtube.com/watch?v=CUpO...

What would Edolf be without sucking the tit of the US gov?

If you work with Entra, you'll want to bookmark and monitor this page 😎 Much of this is in Identity / Secure Score, but it's great to see security guidance cleanly laid out in one doc You might think this is well known stuff, I assure you it is not :( learn.microsoft.com/...

I've never been good at corp politics and never will be. I tell people what they need to hear and not what they want to hear. This is also why I did well working for myself. It was just exhausting to do alone.

Keeping it real Sunday: In meritocracy, merit based work is virtually non-existence. What ends up happening is echo chambers promoting and adding budget to incompetence.

VSCode Extensions & Themes are terrifying. Latest example of a suspected popular malicious theme. Not isolated to VSCode, but being conditioned to not trust random applications, but installing plugins willy nilly...

Idk who might need to hear this, but in Architecture, most mature orgs with greater than 100k users only draw those diagrams when trust boundaries are crossed. If you don't know what I mean by that, you probably shouldn't be doing architecture.

This is why I don't like Guests or Anonymous Users

If your org's approved architecture is based on Zero Trust and you use Teams, here is a nifty chart from Microsoft which lays out your plan. If you store any type of controlled data in your tenant, anywhere, you will fall into the Specialized Security Category. learn.microsoft.com/en-us/securi...

If you're in a GCCH cloud, be aware of this very important gotcha before your CMMC auditors come in and start running scripts: Settings displayed from PowerShell output using Exchange Online Management, Teams PowerShell, and SPOService are OFTEN DIFFERENT from what is displayed in the UI

Dear C-Suite, you have hard jobs. I don't envy you. Ultimately, some decisions boil down this: 1. Do I want to get popped by skidz or potentially lose contracts due to compliance? Or, 2. Do I want to endure users complaining about unfamiliar buttons and restrictions. It's a hard choice, I know

5 things I did last week: 1. Fought with people for security 2. Implemented security stuff 3. Found people removed security stuff 4. Explained multiple times why security stuff was needed 5. Got blamed for security stuff that caused a problem ... that wasn't security related ... again

I guess something was missing a configuration to block LLM access/indexing. This will be a giant problem for most big orgs www.windowscentral.com/software-app...