Security researcher 🇦🇺 Good-faith hacking 🤡 Weaponizing source code 🧬 https://xitter.twitterapi.xyz/t.co/qulkQaGWp9
Joined June 2020
- Tweets7.8K
- Following5.6K
- Followers16.8K
- Likes18.3K
Pinned Tweet
Playing Doom on a John Deere tractor display (jailbroken/rooted) at @defcon
Tried to buy a Ledger Nano X from an authorised seller here in Thailand (Shopee), hoping it was a bugged one so I could take a look for myself... He wouldn’t sell it though 😂
Wonder how they’ll do the inspection though… X-Ray all the current stock in the said Malaysian warehouse?
they need to indict his watch dealer too lol… all the seized Rolex watches are fake/replicas… except the one the he gifted to his partner (a women’s Datejust)!
A former student Australia (allegedly) hacked into Western Sydney University systems to get
- discounted parking on campus
- edited her academic results from fail to pass
- exfiltrated 100GB of data
- ransomed the University student data for ~$40,000
She was refused bail to appear in Parramatta Local Court on Thursday.
Charged with 20 offences, including multiple counts of accessing or modifying restricted data, unauthorised modification of data with intent to cause impairment, and carrying out unauthorised functions with intent to commit a serious offence.
Additional charges relating to possession of data for criminal purposes, dishonest financial gain, and making threats with the intent to obtain a benefit or cause loss.
I will be speaking at @OOTBconf on February 25th, 2025 @ Grand Hyatt Jakarta, Indonesia! @thegrugq will also be speaking.
Run by @l33tdawg & @HITBSecConf if you're nearby in South East Asia/Australia come join us for a day of cutting-edge offensive security research, networking, and hands-on workshops.
Conference page: ootb.net/
If you want more information about the conference you can contact @l33tdawg 🚀
35 year old Chinese man arrested in Bangkok, driving around populated areas with a SMS blaster with a 3km radio sending 1,000,000 phishing SMS per hour. "Phone users within range received a message stating: “Your 9,268 points are about to expire! Hurry up and redeem your gift now”. This was followed by a URL for phishing website."
Video of the arrest: youtube.com/watch?v=LELn9cpM…
Streisand effect in full swing, the repo is #1 top of GitHub trending today 😂 github.com/trending
Last week, our project Docker-OSX's Docker Hub account received a DMCA takedown notice from Apple to remove our Docker images from Docker Hub. The images have over 750k pulls. The GitHub page has 40k GitHub stars. It is a security research project that is geared towards Linux users (and now Windows) being able to participate in Apple Bug Bounty. Apple is obviously well aware of the project, as our project has been active for over 4 years.
You can read the DMCA notice here: bleepingcomputer.com/news/se… via @billtoulas from @BleepinComputer
The project: github.com/sickcodes/Docker-…
Clause 7. b. of the Apple Security Research program explicitly permits breaching Apple licenses including, copying, decompiling, reversing, create derivative works, etc. security.apple.com/terms-and…
The DMCA notice simply asked Docker Hub to cease hosting our automated Docker builds, that are automatically created from Dockerfiles in the GitHub project.
Anyone can build the Dockerfile locally. Yes, it will download the latest macOS installer for each version. Yes, the Docker builds therefore contain macOS (recovery) installer file.
Should I create a second set of Dockerfiles, that will download the macOS installer at runtime in order to comply with the DMCA? This will shrink the image size significantly, and every `docker run` will therefore use the very latest macOS installer for that major version.
bleepingcomputer.com/news/se…
Last week, our project Docker-OSX's Docker Hub account received a DMCA takedown notice from Apple to remove our Docker images from Docker Hub. The images have over 750k pulls. The GitHub page has 40k GitHub stars. It is a security research project that is geared towards Linux users (and now Windows) being able to participate in Apple Bug Bounty. Apple is obviously well aware of the project, as our project has been active for over 4 years.
You can read the DMCA notice here: bleepingcomputer.com/news/se… via @billtoulas from @BleepinComputer
The project: github.com/sickcodes/Docker-…
Clause 7. b. of the Apple Security Research program explicitly permits breaching Apple licenses including, copying, decompiling, reversing, create derivative works, etc. security.apple.com/terms-and…
The DMCA notice simply asked Docker Hub to cease hosting our automated Docker builds, that are automatically created from Dockerfiles in the GitHub project.
Anyone can build the Dockerfile locally. Yes, it will download the latest macOS installer for each version. Yes, the Docker builds therefore contain macOS (recovery) installer file.
Should I create a second set of Dockerfiles, that will download the macOS installer at runtime in order to comply with the DMCA? This will shrink the image size significantly, and every `docker run` will therefore use the very latest macOS installer for that major version.
bleepingcomputer.com/news/se…
Read the DMCA notice here: bleepingcomputer.com/news/se…
11
2,544
Trending on Hacker News for no reason again 😂 Security Researchers can use Docker-OSX to run macOS containers on Windows & Linux to perform security research. I jailbreak my phones with it (on Linux)
GitHub Stars: 37k!
Downloads: 700k!
Link to HN thread: news.ycombinator.com/item?id…
8,500,000 mission-critical machines must be manually fixed, many of those machines are customer facing. Bitlocker ones even worse outlook. Many of these machines will simply be written off.
Worse than the worst ransomware attack ever... incalculable business impact.
Microsoft on CrowdStrike-related outage: About 8.5 million Windows devices were affected by faulty Falcon update, or less than 1% of Windows machines on planet. blogs.microsoft.com/blog/202…
I love how they call @CrowdStrike a malware company 😂
Proton blames a user for using their iCloud email to sign up to ProtonMail. Proton required a second email during sign up. Shift blame to Apple for then doxing the user, yet Proton is the one who gave up the user’s privacy. Proton gives this secondary email up, on command now.
