SwiftOnSecurity (@SwiftOnSecurity) header
SwiftOnSecurity (@SwiftOnSecurity) profile picture

computer security person. former helpdesk.

Cyber, USA
Joined April 2014
Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)Photo by SwiftOnSecurity (@SwiftOnSecurity)
Oh, once in my career a week-long "P0" incident was caused behind a load balancer, behind a cluster, which had a member stored behind a RAID card – that was going bad. It would've been detected and fixed in an hour if it was on a server under a guy's desk.
Periodic reminder I've lost a RAID10 in real life. Almost boned reconfiguring a prod RAID5 when I was Helpdesk and local-hands, Turned out later it had bad backups. I lost files on a RAID with NTFS EFS using wrong certificate. RAID is an availability hack that's all it does.
4
4
106
9,074
There are use cases for layers and layers of redundancy. But you need to understand it takes real experience and real clarity to say, "Yes this would've prevented our five issues today, but it's going to cause One Issue in years - in ways I will never be seen as vindicated by."
2
1
24
3,318
Periodic reminder I've lost a RAID10 in real life. Almost boned reconfiguring a prod RAID5 when I was Helpdesk and local-hands, Turned out later it had bad backups. I lost files on a RAID with NTFS EFS using wrong certificate. RAID is an availability hack that's all it does.
Replaced a drive in my RAID array, looks like it’s rebuilding, no sweat. Turns out I knocked the power off another drive in the process, so let’s try this all again. Also, giant ad for RAID6.
28
8
2
260
24,008
The RAID10 were all behind a failed cooling fan. It cooked two redundant drives, and then killed the third irreplaceable one.
4
56
4,500
"Matt, you have failed your Knowledge Check with 79%. The answer was B, Do not sell coworkers your prescription medication."
3
8
148
7,508
Genuine nightmare mode. I can defend against users wanting a free burrito coupon. I don't know how you stop someone interviewing for a fake $150,000 job on a corporate asset and doing whatever the carrot says.
Imagine spending all your money to defend against “agentic swarms” only to have a developer laptop get compromised because they got malware while interviewing for a better job.
25
54
2
1,356
41,817
Well Claude just spent 20 minutes bisecting a massive powershell script and then testing individual environment variables until it figured out what precisely in a new AV update was alarming, and making it pass clean.
11
1
156
11,631
🤖 Made with AI
7
4
66
9,282
*plays Levels on the incident call so everyone can focus on getting in the zone, as they yell at me to turn it off*
5
1
34
10,957
I recently had an AI coding assistant need to install a dependency, and the command it ran, didn't work. That's weird. So I asked. Hey why did you try to install that version that's not on Nuget? "I'll be honest, I guessed."
34
4
3
282
15,933
Well I guess you're technically guessing the entire project, so...
1
75
3,809
Win+R > cmd > hostname|clip exit Now your computer name is in your clipboard You're welcome
29
14
279
18,938
I tweeted this after my YEARLY "nobody wants to have sex with you on an APAC trip" training. YEARLY.
Open the elevator door and leave because you’re in a foreign country on a business trip getting targeted by the intelligence service or a vendor cartel.
8
37
1
1,198
57,805
I figured out one of a code quality tool will give up the second time you try to do the exact same thing lol
4
1
19
9,789
Laying RTX 5090 in a line to my bedroom
9
3
69
12,334
Oh, she's got jokes.
only if u mean they sound like nothing. ain’t no crosstalk getting out of those bad boys
1
39
8,039
Woot came across a one-off software release obviously before they had it wired into their CI, with all the developer comments 🫶
5
1
1
28
12,753
You are just not prepared for what these sound like @TracketPacer @shenetworks
17
2
1
211
17,644
Swiftfender or Tayfender development and testing continues
The biggest SwiftOnSecurity-enabled tech announcement since sysmon-config is coming soon Swiftfender: An enterprise AV optimization engineer in your pocket
15
7
102
11,506
This is going to be able to run on collected support files, which I also have scaffolding for and run against your entire environment (eg, via SCCM collector) looking for defender health anomalies. Defender being unable to generate some/all support telemetry is its own finding!
2
1
10
3,344
Whats up with all the AI buzzkillers god damn
13
1
38
9,451
Honestly, having to corral various AI agents and give them super-explicit instructions for idiots, thinking of how they're gonna screw it up, and how the capabilities differ between them and their cost, has given me a lot more sympathy for (good) managers/executives.
40
14
2
257
17,095
"Well, why don't you just hire the very best person for the most money?" Dawg, I can't afford them AND my own health insurance 😭
1
41
4,768
Vibecoding exclusively Windows-native applications now we don't need a Chromium condom for our ideas
7
3
1
139
13,527
I posted this before I saw the Discord news. We're going fucking native, bois (gurlz) [enbies]
13
2,856