Ace Pace
@acepace.bsky.social
Recovering Windows Internals researcher turned hpc architect turned Web Apps security researcher.
There is never enough time, thank you for yours.
There is never enough time, thank you for yours.
Now that I can say more, any further questions?
October 22, 2025 at 2:06 PM
Now that I can say more, any further questions?
Reposted by Ace Pace
People keep talking about how we used to live in a high-trust society and now we don’t. They blame it for our politics. Maybe they’re right. Some politician wants to fix it in a tangible way? Promise to make these phone scams go away.
March 28, 2025 at 1:59 PM
People keep talking about how we used to live in a high-trust society and now we don’t. They blame it for our politics. Maybe they’re right. Some politician wants to fix it in a tangible way? Promise to make these phone scams go away.
Nothing if the software stack doesn't allow you to use it :)
February 7, 2025 at 5:54 PM
Nothing if the software stack doesn't allow you to use it :)
Channeling the bay area
February 5, 2025 at 7:47 PM
Channeling the bay area
Yes, as they said they would. No surprises
January 28, 2025 at 3:48 PM
Yes, as they said they would. No surprises
I live in a bubble where this rarely happens. But I know I'm in a bubble
January 26, 2025 at 3:47 PM
I live in a bubble where this rarely happens. But I know I'm in a bubble
So I'm not sure about perfect. For medium sized networks, attackers need to win but they're not with a five minute win. Defenders own the home ground.
For small networks, sure
For small networks, sure
January 26, 2025 at 3:03 PM
So I'm not sure about perfect. For medium sized networks, attackers need to win but they're not with a five minute win. Defenders own the home ground.
For small networks, sure
For small networks, sure
Oh. I agree. We really need to turn more problems into technical challenges which we can solve.
January 26, 2025 at 3:02 PM
Oh. I agree. We really need to turn more problems into technical challenges which we can solve.
So I believe we can automate a lot of the baseline stuff. Not 80/20, yes 60/40.
January 26, 2025 at 3:00 PM
So I believe we can automate a lot of the baseline stuff. Not 80/20, yes 60/40.
One of my pet beliefs is this is no longer true.
For example, disabling smbv1 is painful but methodically simple. Long but not risky
For example, disabling smbv1 is painful but methodically simple. Long but not risky
January 26, 2025 at 2:57 PM
One of my pet beliefs is this is no longer true.
For example, disabling smbv1 is painful but methodically simple. Long but not risky
For example, disabling smbv1 is painful but methodically simple. Long but not risky
I agree with the entire thread.
But I'd argue that the weak spot is, at heart many attacks are repeatable and defenses need to be unique.
But I'd argue that the weak spot is, at heart many attacks are repeatable and defenses need to be unique.
January 26, 2025 at 2:56 PM
I agree with the entire thread.
But I'd argue that the weak spot is, at heart many attacks are repeatable and defenses need to be unique.
But I'd argue that the weak spot is, at heart many attacks are repeatable and defenses need to be unique.
We assume that networks repeat themselves. At some scale, maybe. In practice, millions of unique snowflakes
January 26, 2025 at 2:53 PM
We assume that networks repeat themselves. At some scale, maybe. In practice, millions of unique snowflakes
But it's more complicated than that. We've created an ecosystem that is disaggregated so even when solutions are known, implementing them is a endeavor unique to every environment
January 26, 2025 at 2:53 PM
But it's more complicated than that. We've created an ecosystem that is disaggregated so even when solutions are known, implementing them is a endeavor unique to every environment
Had a solution, this was simply funny when I was discussing it with a director at MS
January 17, 2025 at 8:48 PM
Had a solution, this was simply funny when I was discussing it with a director at MS
Who uses the internet to shit post :)
January 7, 2025 at 6:01 AM
Who uses the internet to shit post :)