owyn
bcyber.social
owyn
@bcyber.social
pentester and hobbyist programmer
Reposted by owyn
Man-in-the-middle attacks on Public WiFi networks haven't been a realistic threat in a decade. Almost all websites use encryption by default, and anything of value uses HSTS to prevent attackers from downgrading / disabling encryption. It's a non issue.
They are useful to prevent man in the middle attacks where someone uses a pineapple to spoof a public wifi signal.
December 20, 2024 at 3:11 AM
all this technology and news anchors are still staring silently for 5 seconds between questions like .... 😀
March 1, 2024 at 12:56 PM
Riot Games in their public "internal" memo say: "Rather than immediately cut off email access we will continue to provide access to impacted Rioters for a limited time"

www.riotgames.com/en/news/2024...

seems like an unnecessary security risk when laying off 530 people...hope none are disgruntled!
An Important Update about Riot’s Future
The following is a copy of the internal message from our CEO.
www.riotgames.com
January 23, 2024 at 1:53 AM
is there a disclaimer somewhere that redeeming a bsky invite code will expose your username to the person that invited you?

gave my friend a code and discovered that he is a horny furry
January 21, 2024 at 8:53 PM
all these automated accounts reposting the same cyber security articles to farm engagement really think they're doing something
January 21, 2024 at 8:28 PM
the irony of using a bash oneliner installation method for your cybersecurity project
January 9, 2024 at 6:46 PM
headline: SSH vulnerability exploitable in Terrapin attacks (CVE-2023-48795) 😱😱😱😱!!

reality: Whitepaper details a novel flaw that requires an active MiTM, is cipher dependent, and will never be exploited in the wild
December 20, 2023 at 3:34 AM
microsoft when i'm trying to bypass a client's o365 mail filters using reputable aged domains, dkim, dmarc, spf, and no phishy text: 🙅

microsoft when it sees ".congrats,,,You are the lucky winner of an iPhone 15Pro" sent to my personal email: 😀👍
December 19, 2023 at 7:10 PM
the corporate world's worst nightmare is that some wfh sysadmin might be doing runescape quests during their monthly all-hands
December 19, 2023 at 5:46 PM