UK_Daniel_Card

Suspected 0day in Fortinet Firewalls being exploited in October maybe away before that...

www.pwndefend.com/2025/11/13/s...

LOL

Just in time for my annual review. 🙌 This should get me at least another 10% salary increase.

Thanks @mrr3b00t.bsky.social

mr-r3b00t.github.io/how_to_be_a_...

Publishing a Website With No Public IP (And No Attack Surface) Recently, I needed to publish a simple website for a small community, nothing fancy, but I didn’t want to open any unnecessary holes. I wanted it secure. I also wanted caching to save bandwidth and CP...

Hosting a site with no public IP and minimal attack surface.
No open ports. No brute-force noise. No drama.
@cloudflare.social Tunnel for the win :)

clarkee.co.uk/hosting-a-st...

I haven't done anything on this in a while. Too much IRL work instead of fun internet pews :D

never left mate, I just struggle to use more than one social platform.... If I had a choice I would use DAN-NET :D

Secret Service agents dismantle network that could shut down New York cellphone system Agents discovered electronic devices in five locations in and around the city that could be used to disable cellphone towers. The system could also be used for criminal activities.

1/ Hi, I'm TProphet. I write the Telecom Informer for @2600.com. A lot of people have been asking me about www.nbcnews.com/politics/nat... given that I'm somewhat knowledgeable in the area.

Here's my take: I'm kind of astonished that this is public, and it isn't normal that it would ever be.

Night All,

LMAO👇😁😆😂🤣💜

yo dude, hows u?

The Secret Service isn't claiming it foiled any plot targeting the UN General Assembly. Just that a big collection of SIMs (probably used for fraud) could have *potentially* disrupted NYC cell service. The SIMs were in a *35 MILE* radius of the UN.

These headlines are all pretty egregiously wrong:

Will maybe share in a few weeks.... It's not got any secrit stuff in it :)

I'm quite tired today... working on some slides for a presentation, hopefully this one is fun :)

👀👀👀👀👀👀👀

a man in a suit and tie is standing in front of a destroyed building and says please disperse ALT: a man in a suit and tie is standing in front of a destroyed building and says please disperse

How's the airports? Clothes stores, food stores and everything else looking ;)

Yo bleeps, how's it going?

yes mate...

ah and that yes! came up this week again I think :)

also I want to go back to summer m8!

I was talking about this the other day. Maybe IRL, maybe online or both....

Working on what matters is important, we don't have unlimited budgets, unlimited resources and unlimited levels of support.

Only ~6% of CVEs are ever exploited… yet scanners still flood teams with endless alerts.
More signatures ≠ more security. They guess. We validate.
Curious what actually matters? Check out our latest blog: The Coverage Lie 👉 projectdiscovery.io/blog/why-cur...

also my original post was sarcastic AF

not just that but look at all the incidents.... :S

is everyone loving salesforce today???

also, another consideration, if suitable enable client isolation.

Also consider using a guest network.

lastly... changing defaults should be really specific guidance IMHO because yes:

if the PSK is static that's terrible, change it.

If the admin password is a static default, change it.

If the PSK and admin passwords are strong defaults, my honest view is do not change them.

I think educating people is sensible.

I think how that's done has widely different results.

Remote management is not enabled on 99% of routers by default.

Saying use WPA3 or WPA2 AES doesn't make sense...

You don't even mention PMF for WPA2.

you can try and quote whoever you want, it won't make you right.

an example: hide your SSID

this is terrible advice. Modern devices use wildcard probe requests to top people passively tracking you.

if you connect to a hidden SSID your device will constantly probe for a NAMED SSID

YESSSSS alive and kicking!

How's u dude?

hehe is funny :D

BOTH? :D