James 🏴󠁧󠁢󠁷󠁬󠁳󠁿

Teaching a New Dog Old Tricks - Phishing With MCP

As AI evolves with MCP, can a new “dog” learn old tricks? Senior Security Consultant @two06.bsky.social tests Claude AI’s ability to craft phishing pretexts—and just how much effort it takes to pull them off. Read it now! trustedsec.com/blog/teachin...

⛓️🔑

A few more for the collection 👀

Well that’s gonna be interesting

Who doesn’t use auto tho. Monsters that’s who

Nice one, UK government 🙄

The following can be attributed to Dr. Joseph Lorenzo Hall, Distinguished Technologist at the Internet Society: The Internet Society is saddened at the news that Apple has removed access to its cloud end-to-end encryption, known as Advanced Data Protection, for its UK users as a result of pressure by the UK government. This move will make British Apple users less safe, and make their cloud data more susceptible to criminals and other attackers. It is clear that the UK government continued to pressure Apple to weaken the security of its service despite global outcry from cybersecurity experts, civil society, private industry, and foreign politicians. In choosing to remove the feature rather than building a backdoor into its Advanced Data Protection, Apple ensured that at least its global users would continue to benefit from the security and privacy of end-to-end encryption. However, for UK users, their government ensured that their security and privacy is worse than before.

We at the Internet Society are deeply disappointed that Apple has had to stop offering end-to-end encryption in the UK. The following can be attributed to Dr. Joseph Lorenzo Hall, Distinguished Technologist at the Internet Society: 1/

Exploring NTDS.dit – Part 1: Cracking the Surface with DIT Explorer

Check out my latest blog post on how the NTDS.dit file is used by Active Directory, and my accompanying tool, DIT Explorer, for browing the data contained within NTDS.dit.

Blog post: trustedsec.com/blog/explori...
DIT Explorer on Github: github.com/trustedsec/D...

From RAGs to Riches: Using LLMs and RAGs to Enhance Your Ops

In our new blog, Senior Security Consultant Brandon McGrath explores how to apply Retrieval-Augmented Generation (RAG) to research capabilities. Find out how he leverages AI to enhance his ops. Read it now! trustedsec.com/blog/from-ra...

I feel like now is a good time to remind folks that posca paint pens can literally be used on anything that one could use spray paint on, and are much handier for carrying around.

Declassified CIA Guide to Sabotaging Fascism Is Suddenly Viral The World War II-era "Simple Sabotage Field Manual" is full of steps that office workers can take to resist leadership.

Suddenly, out of nowhere, a declassified World War II-era CIA guide to sabotaging fascism in the workplace has become one of the most popular free ebooks on the internet:

www.404media.co/declassified...

Lockmail is always good mail

A little light reading 👀

Abloy sentry cutaway 👀

Discovering a Deserialization Vulnerability in LINQPad

In our new #blog, Senior Security Consultant
@two06.bsky.social goes over methodology that led him to discovering a deserialization vulnerability in #LINQPad, a .NET scratchpad application commonly used by developers. Read it now! trustedsec.com/blog/discove...

Is it noise between pin 14 and 15? I’ve had problems with arduino where listening for triggers on adjacent pins causes weird behaviour.

The switch from not posting on Twitter to not posting here was surprisingly easy 😂

I canceled mine the other day as well.

Tad concerned this is like quitting smoking then trying a vape.

👀

The x1c did not disappoint

I ordered the x1 carbon. Passing this off as “work stuff” is gonna be tricky 🤣

I was *this* close to picking up a Bambu labs p1s, then new firmware for my Prusa mini drops. Guess I’m trying that first.

#include <iostream>

int main() {
std::cout << "Hello, BlueSky!";
return 0;
}