Aaron Grattafiori

@dyn___

Red Team Lead at $BIGTECH. Ex-Principal Consultant and Researcher @ iSEC Partners/NCC Group. Keyboard cowboy. Cyber Pathogen Dealer. Views solely mine.

Colorado
hack.industries
Joined March 2014
1,291 Photos and videos Photos and videos

Tweets

You blocked @dyn___

Are you sure you want to view these Tweets? Viewing Tweets won't unblock @dyn___

  1. Retweeted
    Mar 18

    Welcome to the first Asahi Linux alpha release! 🎉

    54 replies 665 retweets 2,145 likes
    Undo
  2. Retweeted
    Mar 17

    👀

    79 replies 730 retweets 4,257 likes
    Undo
  3. Retweeted
    Mar 17

    OK, after community feedback, revised edition of the wheel of controversy!

    4 replies 12 retweets 68 likes
    Show this thread
    Show this thread
    Undo
  4. Retweeted
    Mar 17

    I love the Russian people. That is why I have to tell you the truth. Please watch and share.

    38,002 replies 422,395 retweets 1,292,846 likes
    Show this thread
    Show this thread
    Undo
  5. Retweeted
    Mar 16

    While this was quickly debunked and labelled fake it could have been much worse if combined with multiple account take over attacks. It will likely be remembered as a watershed moment for deepfakes. Whether they continue to play a role in IO or not is anyone's guess.

    A Ukrainian news outlet’s website and live broadcast were reportedly hacked and used to promote a of President Zelenskyy. CSET researchers have been studying the threat of deepfakes for years. Check out this 🧵 for more.
    Show this thread
    2 retweets 11 likes
    Undo
  6. Mar 16

    Fuck fuck fuck fuck Fuck fuck fuck fuck Fuck fuck fuck fuck Fuck fuck fuck fuck this shit already.

    When South Korea, a model country for the pandemic, has >400,000 new cases in a day, leading the world per capita, you take notice. Tests 4X the US with <1/6th the population. BA.2 is 26% as of this week's report. Very high 2-shot vaxx 87%, 3-shot 63%. The pandemic isn't over.
    Show this thread
    2 replies 2 retweets 13 likes
    Undo
  7. Retweeted
    Mar 15

    Today we release a special 24 page report into TikTok’s activities in Russia. Our researchers exclusively discovered that TikTok has blocked an estimated 95% of content previously available to its 55 million users in Russia ~without announcing this move~

    16 replies 409 retweets 710 likes
    Show this thread
    Show this thread
    Undo
  8. Retweeted
    Mar 16

    Good 🧵 on how TikTok is blocking and censoring content for people in Russia.

    Finding 2/3: The restriction is happening at the application layer rather than the transport layer, which requires the direct involvement of TikTok. It is the first time a global social media platform has restricted access to content at this scale
    Show this thread
    7 retweets 22 likes
    Undo
  9. Mar 15

    C'mon now... I saw NY times and now Twitter looking to capitalize on the crisis. Not cool.

    Undo
  10. Mar 15

    Safari auto unzips files automatically... "However, it will lose the .quarantine extended attribute when decompressing the gzip file." 🤦‍♂️🤣

    [New Blog Post] Simple way to bypass GateKeeper, hidden for years Demo:
    1 retweet 15 likes
    Undo
  11. Retweeted
    Mar 15

    [New Blog Post] Simple way to bypass GateKeeper, hidden for years Demo:

    5 replies 120 retweets 265 likes
    Undo
  12. Retweeted
    Mar 14
    Replying to

    here's an archive of my post from 2000.

    3 replies 7 retweets 25 likes
    Undo
  13. Retweeted
    Mar 11

    Love this timeline of attacks and defenses for memory safety!

    4 replies 31 retweets 144 likes
    Undo
  14. Mar 14

    Excellent thread for folks looking to start a career in information security.

    It's 9am and I'm 2 coffees deep on a Monday morning. Time for a thread about starting and building your cybersecurity career. 👇🧵
    Show this thread
    1 retweet 2 likes
    Undo
  15. Mar 13

    Quick "Lambert" facts are always great for wisdom, contemplating and including with attribution into your own slides... 🧠

    I am preparing for an internal talk on career advice learned from working security crises. My notes 🧵
    Show this thread
    6 likes
    Undo
  16. Mar 13

    This "friend is X meters away" location vulnerability has been found and solved in so many platforms already, the fact it was still in telegram shows how much they care about user security...

    What the fuck why are you literally THIS stupid in giving me METER ACCURATE LOCATION DATA on random users by writing ~20 lines of code, registering an API key and some basic math? 🙃🙃🙃 More Info:
    Show this thread
    2 replies 50 retweets 118 likes
    Undo
  17. Mar 13

    And of course it's by ... Thanks.

    Show this thread
    Show this thread
    Undo
  18. Mar 13

    This is an excellent article, finally one of the "cyber war" takes that is accurate and realistic... Refreshing.

    “Are they going to take down the power grid [in Moscow]? No.” Superb analysis of cyber realism & limitations of cyber in war by the always brilliant ⁦⁩ in ⁦⁩ featuring ⁦⁩ & ⁦⁩ & others
    2 replies 3 likes
    Show this thread
    Show this thread
    Undo
  19. Mar 13

    Interesting section of the thread, and maybe some parallels to Ransomware gangs? (And before then other hacking/ spammers)

    And only much later prisoners realise: thieves are not a parallel state. They're just another branch of the same state machine. They're controlled opposition which actively cooperates with authorities, do whatever state commands and never ever cross the line, or they're doomed
    Show this thread
    2 replies 1 retweet 2 likes
    Undo
  20. Retweeted
    Mar 11

    Today I learned CrowdStrike's ML AV component looks at total entropy in an executable and will block it if the entropy level is above some threshold. Successful bypass by adding English words in character arrays to decrease overall entropy.

    24 replies 163 retweets 855 likes
    Undo

@dyn___ hasn't Tweeted yet.

Loading seems to be taking a while.

Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.

    You may also like

    ·