Donald Trump sent more money to bail out Argentina than it would have cost to extend the ACA tax credits for just 1 year. I don't plan to let anyone forget it.

white house has joined bluesky click here to block all official us government accounts instantly bsky.app/profile/did:...

eclypsium.com/research/pwn... - This is the blog version of the Ekoparty talk I did in 2022; while the Chinese APTs have developed more advanced techniques, a lot of this may still be useful as you deal with the bombshell that dropped today.

www.youtube.com/watch?v=6T4Q... Probably a decent time to reshare a talk I did nearly 3 years ago about the post-exploitation TTPs you can do on an F5 device. These things are CentOS Linux servers with some fancy vendor middleware slapped on top of them. Good luck out there.

#defcon #defcon33 #defconmusic

The photos coming from Trump’s birthday parade are just incredible. No one showed up.

Trump looking absolutely inconsolable at his fascist-themed 79th birthday party which no one turned up to other than those who had to because he's their boss.

Donald Trump does NOT want you to share this footage of his pathetically tiny birthday parade crowd.

Fucking fascists.

Linda McMahon wrote Harvard a letter to which they responded by noting areas that are in need of corrections and then posted it on social media. Great job Harvard!👏👏👏

Here is the pre-RFK vaccination schedule for your kids. Please download it before he is confirmed and changes/deletes it. Give it to your pediatrician and say this is the schedule you want your kids on. Making this my pinned post.

Holy shit

One of the finest hackers & humans to ever hack the planet needs our help. Marc Rogers (@marcwrogers on the other site) is lucky to be alive & we are luckier to be able to help him. Donate if you can, and please *share* to spread the word. gofund.me/27112e30

There are two stages of a security career: Before you know the truth of what you read in the news on an incident, and after, when you know exactly what happened and can't say a single fucking thing.

Amazing and really stupid that he came for her of all people!

After blocking hundred of the fucktards by hand over the past few months, I finally decided to make a moderation list for new blocks. Whee! bsky.app/profile/did:...

threat actor = someone who wants to punch you in the face threat = the punch being thrown vulnerability = your inability to defend against the punch risk = the likelihood of getting punched in the face

Around 1500yrs ago, the Talmud my students study addressed the topic of incels and experts demanding redistribution of sex. Somehow this source went viral on twitter when I first posted it.

Do you want to help manage the people that make me unhappy every week? MSRC wants a PM manager. jobs.careers.microsoft.com/global/en/jo...

soundcloud.com/n0x08/groves... I went down to Boulder Creek last month & threw down what’s easily the filthiest DnB set I’ve done my 20+ yrs as a DJ. You’ll need a bath after this one 🤘😈🤘

I’ve been saying this for 10+ years and it’s the reason the few times I *do* still use FB, I use the browser on my phone. IG & all the rest of the stuff they own probably do the same thing.

soundcloud.com/n0x08/defcon32 - my DJ set from #defcon32 is finally uploaded :)

This is gonna be a blast 😎

www.hackcon.org/he-who-contr... I’m starting the 2024 conference circuit with @hackcon - I’m excited to meet InfoSec practitioners from one of my bucket list countries & elevate the defensive knowledge of folks who attend.

For anyone concerned about the latest F5 vuln, CVE-2023-46747. I've been hacking around with the PoC and this is what successful exploitation looks like. In /var/log/audit on the F5 you can see a new user being created & then logging in. Also of note is the randomly generated username. Patch!

www.youtube.com/watch?v=qCgf... - my talk from BruCON 0x0F is online now.

Epic fourth speaking engagement at BruCON this week. Great to see old friends, make a couple new ones, get a signed copy of Mikko’s new book and packed the room for my talk.

CVS is now taking appointments for updated COVID boosters! You can schedule your shot starting Monday, September 18. Please please please get your booster, and tell your loved ones too!

https://m.soundcloud.com/n0x08/defcon31bombthreat I was the only drum&bass DJ who got to drop a Saturday night set this year because of a bomb threat & here it is 🤘

https://eclypsium.com/blackhat-supply-chain-workshop/ - I'll be at hacker summer camp from the 8th-13th next week and around Mandalay to participate in these workshops Eclypsium is putting on. Stop by to chat firmware, research, supply chains or just say hi; you might win a Flipper Zero =)

I'll be at @defcon.bsky.social next month & coming back for my third year to blow a few eardrums out with the Lord's music: drum&bass 😈

http://securitydojo.ms/ - I did a podcast appearance with some friends & we chatted about a bunch of things, including the MS17-010 patch and the story around it. Fun times :)

Some ‘roided-out rando at my local watering hole asked me “where do you [cage] fight?” tonight so I guess that means CrossFit is working? 😂 Full disclosure I’ve been in 2 fights in my life, both of which I tried to walk/talk my way out of. Won both ¯\_(ツ)_/¯

I have an idea for a company. We build a submarine without windows, full of HD screens to “see the Titanic via the outboard cameras”. Charge a “reasonable” $50k/per. Take it down 20’, sit for 3hrs as we “dive”, send a rover down & the passengers are none the wiser. 0% fatality rate guaranteed

https://github.com/n0x08/ConferenceTalks/blob/master/Building%20on%20Shaky%20Ground_ISSA_SV.pdf - I spoke at an ISSA monthly meeting in San Jose yesterday & the slides are on my GitHub now.

Sitting in a dive bar in San Jose, with shit cell service, listening to 4 millennials bitch about waiting an hour for Door-dash taking an hour to bring them Taco Bell from … 0.3miles away is simultaneously what I expected from this city and what’s wrong with humanity.

Savage AF set by the one & only AndyC 🤘

New research from my team this morning, definitely worth reading. If for nothing else because I had a nightmare this morning that I forgot to give @agreenberg.bsky.social all the details in time. Haven’t had a “forgot my homework” dream in a long time, how’s your Wednesday going? 😆

From megalomaniac who brought you “When our rockets explode we cheer” and most recently “I lit $44B on fire, can haz electrodes in your brain?” comes this summer blockbuster.

I am Jack’s complete lack of surprise.

This worked out great in Black Mirror & I’m sure nothing could possibly go wrong with a company run by a right wing nut job who tanked one of the biggest social media companies by firing all the competent programmers. But if ya wanna turn humans into batteries, ya gotta start somewhere right? 😆

w00t my abstract for BruCON0x0F was accepted today so I’ll be heading to Belgium in September for my *fourth* time on stage hacking for beer 😁 Gotta be a record at this point & I’ll never not submit to their CFP because it’s simply an amazing conference.

NSO Group sharing password tips is like a landmine manufacturer posting first aid advice for papecuts.

Bluesky seems to agree that all Nazis should be punched & there hasn’t been this good a film about it since Inglorious Bastards. The minefield scene … {chefs kiss}.

I just learned what I’m doing right now is called “skeeting” or “sky tweeting”. Call it what whatever you want but we ALL know who invented that word & what it means 🤣

w00w00 I was just asking myself SELF you know what I miss? Refollowing hundreds of my friends on a new social network! Anyhow I’m Nate & I hack things for a living & hacker conferences are where I see my family. First stranger who says “BRO I follow you on Bluesky” at a con gets stickers LOL.