@hacks4pancakes@infosec.exchange cover
@hacks4pancakes@infosec.exchange avatar

hacks4pancakes

@hacks4pancakes@infosec.exchange

I am eminently qualified to speak from experience about a variety of dumpster fires.

Director of Incident Response at Dragos, ICS cybersecurity person, @pancakescon organizer, martial artist, marksman, humanist, level 14 Neutral Good rogue, USAF retired. Speaker available for gigs.

Gin connoisseur. Hamster parent. Some dipshit from Chicago.

I post very serious things about infosec. Thoughts are entirely my own.

'they/them' 🏳️‍🌈 :nonbinary_flag: :asexual_flag:

This profile is from a federated server and may be incomplete. View on remote instance

hacks4pancakes , to Random stuff
@hacks4pancakes@infosec.exchange avatar

Omg, the myths that go around rather than turning on MFA...

https://youtube.com/shorts/TgTPievQJB0?si=OgiFq3oEEZ4bMd2C

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@ohmu How they have to go together is that this somehow went viral enough that people are chopping up their room keys but I bet you most of those people don't have MFA on on their most personal stuff. Because that has not gone viral.

bethpdx , to Random stuff
@bethpdx@mas.to avatar

When I was an editor at the Chicago Tribune, I would’ve been in trouble if I’d let my wife put a political bumper sticker on our car. But a Supreme Court justice’s home can fly a flag of insurrection and he’s still allowed to rule on whether the head insurrectionist has immunity.” https://open.substack.com/pub/heathercoxrichardson/p/may-17-2024?r=13f3k3&utm_campaign=post&utm_medium=web

hacks4pancakes ,
@hacks4pancakes@infosec.exchange avatar

@bethpdx @Nonya_Bidniss or when I was in the military…

hacks4pancakes , to Random stuff
@hacks4pancakes@infosec.exchange avatar

As the Person Who Gets asked a lot, Meta’s “go it alone yourself” response to account hacking / theft is still utterly crazy.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@darkuncle @jgoguen I thought it was pretty common knowledge but thanks for summarizing it so well. Been like this for years.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@darkuncle you basically have to start over if you can’t beat the criminals to a reset fast enough.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@darkuncle i hate having to break the news to victims. It’s horrible.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

I should have said “non-response” - and these stories in the comments are heartbreaking ❤️‍🩹

hacks4pancakes , to Random stuff
@hacks4pancakes@infosec.exchange avatar

Come hang out, Australia! https://www.linkedin.com/posts/hayley-turner-47a845113_icscybersecurity-otcybersecurity-otincidentresponse-activity-7196739825696129024-6rYt?utm_source=share&utm_medium=member_ios

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@ravirockks omgggg

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@kcarruthers omgggwee

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@davedave I’ll be in Canberra tho, want to get a meal?

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@zate yes I will and dates at bottom of image!!!

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@boomfish My talks are generally focused on OT cybersecurity.

zackwhittaker , to Random stuff
@zackwhittaker@mastodon.social avatar

New, by me: Two universtiy students have uncovered a security bug that lets millions do their laundry for free.

CSC ServiceWorks provides internet-connected laundry machines to thousands of residential homes and universities around the U.S., Canada and Europe.

The students found that any security checks are done by the app on the user’s device and automatically trusted by CSC’s servers,

But CSC still hasn't fixed the isue — or acknowledged their findings.

More: https://techcrunch.com/2024/05/17/csc-serviceworks-free-laundry-million-machines

hacks4pancakes ,
@hacks4pancakes@infosec.exchange avatar

@zackwhittaker oh dammit they had to tell somebody

hacks4pancakes ,
@hacks4pancakes@infosec.exchange avatar

@D_70WN @mattblaze @zackwhittaker I’m not not saying I have used a CSC laundromat

hacks4pancakes ,
@hacks4pancakes@infosec.exchange avatar

@zackwhittaker I joke, but it was kind of one of those things people maybe didn’t not know about… 🤷🏻‍♀️🍸

hacks4pancakes ,
@hacks4pancakes@infosec.exchange avatar

@D_70WN @mattblaze @zackwhittaker every non cash laundromat near me is run with their smart cards.

hacks4pancakes , to Random stuff
@hacks4pancakes@infosec.exchange avatar

Have y'all seen the trailer for Thelma, about grandparent phone scams? https://youtu.be/RFAFsDEM0j4?si=2e-bSz3W09VJyMTX

Looks pretty fun.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@samofhearts it's a Sundance dark comedy, so yea

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@marcprecipice I can't wait to watch it!

thomasfuchs , to Random stuff
@thomasfuchs@hachyderm.io avatar

Just for the record, I don’t know any of the mods or admins of the Hachyderm server.

(People are accusing me, with zero evidence, of “conspiring with the mods” to “cancel people”.)

hacks4pancakes ,
@hacks4pancakes@infosec.exchange avatar

@thomasfuchs jeez Louise everything ok over there?

hacks4pancakes , to Random stuff
@hacks4pancakes@infosec.exchange avatar

I feel a world’s smallest violin bad about this, but every week when I go to the range I wear my nice business clothes and makeup and then I look for the dude with the most ridiculous gun and tacticool gear or being the most condescending to his wife - and put my target deliberately 10 feet further out and start nailing bullseyes.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

It’s just my little thing

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@da_667 guy with a desert eagle today jfc

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@mentallyalex I have no idea what the range officers think of me or this but they probably know

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@da_667 it’s like a freaking cannon going off next to me even with good hearing protection on

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@paul_ipv6 @da_667 not to mention how much every single shot costs… I cannot fathom

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@wendynather oh stop you’re my hero :)

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@michaelwareman I go there sometimes for a longer range. A lot of the indoor rifle ranges are a little short closer to the city. But more often I drive to Ottawa or Indiana because pricey membership

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@mentallyalex diversity is key

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@da_667 @whereisthespai my best advice is it’s like picking an infosec role. Everyone’s best choice is different and everyone thinks theirs is the best one and has OPINIONS. Rent a bunch of (no bigger than 45 caliber) guns and see what fits your hand and feels good in terms of safety, trigger pull length. Lots of good YouTube’s on maintenance for every common pistol and rifle now.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@da_667 @whereisthespai absolutely. Most have pretty much anything popular and common. You have to be legally able to own a gun.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@wendynather see look at you harping 💜

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@helgztech @da_667 it’s not like riding a bicycle alas. That is why I go every week now when I’m not traveling because after a couple months it’s dismal.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@da_667 @paul_ipv6 @whereisthespai I forgot to add that we also say start with 22 not for the cost but also because human brains, no matter how tough you are, are wired to not like big booms. It makes you anticipate shooting and sometimes jerk the gun or yank the trigger and miss earlier on. Bigger caliber, bigger boom. So it can make you start anticipating and making mistakes early on that are harder to correct later. It’s better to work up and get comfortable.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@The_Asshat @da_667 @whereisthespai that’s a great deal. It’s a flat fee per gun where I have a membership. But still not expensive

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@da_667 @paul_ipv6 @whereisthespai it is definitely hard - and it takes regular practice and preferably professional training to be good but it’s definitely something everyone can enjoy.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@Lando so true. I found a membership based range that’s got very strict rules and it’s been somewhat better. I also go at lunchtime.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@johnelamb they’re definitely a contentious topic for good reason. 🙏

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@helgztech @da_667 unfortunately I’m also a queer femme who lives alone in America, alas.

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@NosirrahSec @da_667 it’s like that motorcycle they made with a viper engine

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@The_Asshat @da_667 nononono I got a 9mm casing stuck between my glasses and ear today and that was bad enough

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@lyrptr honesty it’s probably rather petty but the fun kind of petty 💜

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@xabean this one time I wore a firefly shirt and they asked if I was a space pirate in need of arrest and I can’t

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@malwareminigun but seriously and sadly more LGBTQIA people need to be armed and know how to defend themselves these days and it sucks

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

Yes I’ll go to the range with any of y’all, zero toxic bro culture here 💜

hacks4pancakes OP ,
@hacks4pancakes@infosec.exchange avatar

@m4iler it’s zeek now tho lol

hacks4pancakes , to Random stuff
@hacks4pancakes@infosec.exchange avatar
@JBsTwoCents I'm never leaving timothy • faust @crulge - 4h My friend/kidney recipient is doing very well, but noticed she was going to the bathroom at night a lot. She asked her doctors, and it turns out her new kidney is still operating on *my* schedule. How does that even work????? Bio-memory???? 074 17 413 15.4K il 540K Jaap Stronks @jaapstronks You gotta log in to your other kidney and click the 'log out on all other devices" button it's under profile (top right) -> settings -> security and activate two factor authentication while you're at it
ALT
  • Reply
  • Expand (9)
  • Collapse (9)
    • + pauliehedron
    hacks4pancakes OP ,
    @hacks4pancakes@infosec.exchange avatar

    @kkarhan it’s too amazing for llm lol

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • Mordhau
  • WatchParties
  • Rutgers
  • jeremy
  • Lexington
  • cragsand
  • mead
  • RetroGamingNetwork
  • loren
  • steinbach
  • xyz
  • PowerRangers
  • AnarchoCapitalism
  • kamenrider
  • supersentai
  • WarhammerFantasy
  • itdept
  • AgeRegression
  • mauerstrassenwetten
  • MidnightClan
  • space_engine
  • learnviet
  • bjj
  • Teensy
  • electropalaeography
  • khanate
  • neondivide
  • fandic
  • All magazines
    •