I am retiring this social media account. Find me as @hal_pomeranz@infosec.exchange

Orlando, FL
Joined November 2008
We were talking about abusing ssh-agent in my Linux Security class recently, and it caused me to do a little research. I found this helpful. blog.ropnop.com/extracting-s…
4
7
Hal Pomeranz retweeted
Our son lost his beloved Penguin called Pauline sometime on Sunday 15th at @WillardHotel in Washington DC. We are over here from Scotland. Someone must know where Pauline is! Please retweet and help reunite them before we head home on Friday #findpaulinethepenguin
21
610
44
303
See also “Zoot Suit Riots”, which was less a riot than mob violence against ethnic minorities primarily by US servicemen during WWII. Another one they don’t talk about much in school.
2
Hal Pomeranz retweeted
Hal Pomeranz (@hal_pomeranz) will be at #SANSSecEast teaching #FOR508 Advanced Incident Response. Will you be there? Register before January 1st and save $150 at sans.org/u/UY1
1
1
Hal Pomeranz retweeted
Join our Solution Engineers, Tim Thorne & Stephanie Thompson on 12/19 at 11am EST as they use MacQuisition to walk through acquiring various Mac computers installed with APFS and/or a T2 secured Mac computer, taking the mystery away of imaging. Register: bit.ly/2RSTGwG
3
6
Threat Hunting, A Methodology: 1) Grab a PCAP anywhere on your network 2) WTF is that? 3) That can't be right 4) Who would do that? 5) It's the dumbest thing 6) Where is this asshole program sending this traffic? 7) It's your core business app 8) It's working as intended Repeat
30
426
35
1,690
Hal Pomeranz retweeted
Today I got off a stressful flight, made a conscious effort to be kind to everyone I met, then volunteer coached a bunch of teens from vastly different backgrounds for a couple hours. This is what we can do. Try to improve the world a little daily even when it seems impossible.
27
44
4
757
Replying to @fwiles
“Hey Siri! Flip a coin!”
1
3
Hal Pomeranz retweeted
Anyone who works with <cough> legacy <cough> *nix systems should read this. Actually - you should read all of Larry's writings.
I wrote a blog post on Exploring Legacy Unix Security Issues - Akamai Security Intelligence and Threat Research Blog bit.ly/2RFuZE4
2
3
Last time I saw that boot screen it was a 2.4.x kernel. I don’t imagine it’s been upgraded.
2
Replying to @dragon199421
I need to work on this. Inode blocks can be found by magic number. Also deleted directory entries are often recoverable.
1
Hal Pomeranz retweeted
Big boomer energy. Read and weep, kids.
OK SO let's say it's 1962 and you're lucky enough to be a programmer working somewhere that has an IBM 7090. This is a top of the line transistorized revision of the IBM 709, capable of 100,000 floating point operations per second. But how do you code for it?
3
4
11
“Courage doesn't always roar. Sometimes courage is the little voice at the end of the day that says I'll try again tomorrow.”
Don't let life get you down. Tomorrow is another day. I've been in some really dark places in my life. As I wake up this morning and head to speak at BlackHat EU, I'm reminded of what a crazy ride my life has been. If you're feeling down today, stick in there - it gets better.
5
Replying to @falconsview
Apple gift certificate?
Replying to @wimremes
Not worth it. Briggs and Rikey is the way to go.
3
Hal Pomeranz retweeted
How security can complement the business practice:
2
14
It’s the victim’s fault
3
Hal Pomeranz retweeted
Language like “simply” or “intuitively obvious” implies that you believe everyone thinks like you and has the same experience, knowledge background and expectations. If you want your software to be widely used, then that won’t ever be the case.
2
2
17
Hal Pomeranz retweeted
Can confirm, the real flu is often a hospitalization level event, even for otherwise healthy adults. Don't mess with the flu. Go get your flu shot if you can. I can't, so it makes me really grumpy when others say they don't care. You're basically making the choice for all of us.
A friendly reminder: Anyone who tells you that ‘they had the flu and it wasn’t that bad’ 100% did not have the flu to begin with. (or was vaccinated and had milder symptoms because of it) Most people will remember the EXACT week(s) they had their last bout with the flu.
28
32
4
120
Replying to @MalwareJake
“Lockout on failure” taking out the admin account and locking you out of the box
6