I am retiring this social media account. Find me as @hal_pomeranz@infosec.exchange
Orlando, FL
Joined November 2008
- Tweets 19,311
- Following 237
- Followers 13,672
- Likes 12
Hal Pomeranz retweeted
🔴1 simple trick to do position independent code analysis statically in IDA Pro, so you can see cross references in your disassembly (which means analysis becomes much easier)
IDA Pro - Position Independent Code Analysis
youtube.com/FNFZjdPlHc8 via @YouTube
Like & subscribe 🕶️
34
2
123
Hal Pomeranz retweeted
I second this. No one would be where they are without a community and society. We need to support each other and invest in our people.
It shits my brains to see people work three jobs to feed their family while I sit in front of a computer eight hours a day. I'd gladly pay more taxes to help mothers spent evening with their kids instead of doing another shift at walmart.
2
5
Hi @fancy_flare! Remember me? Almost being electrocuted by a bar together and a hazy memory of stealing glassware...
1
1
Hal Pomeranz retweeted
Popping this up. A lot of folks now canceling holiday plans. Show your appreciation.
Your front line infosec folks are working non stop right now. Feed them. Give them breaks. Remember they have a life outside of work. Show appreciation. Be grateful. It costs $0 to be kind & respectful. They are under tremendous stress - even if they hide it.
1
23
87
Hal Pomeranz retweeted
I’m not suggesting automation and orchestration are bad. You should absolutely use them. You should also make sure they don’t make you weak.
If you landed in a job today where you don’t really understand fundamentals, take some time to fix that. You’ll never regret it. /FIN
20
32
2
488
Hal Pomeranz retweeted
Well I finally got the first version up. You can now search to see if a crypto currency wallet address is on the OFAC sanctions list.
canipaytheransom.com
I'll be adding more info and making it SSL soon.
2
28
5
104
Hal Pomeranz retweeted
The latest CISA advisory on the SolarWinds compromise is sobering. It suggests we don't know the worst of it yet, and that a great many organizations have a herculean task in front of them in terms of incident response. us-cert.cisa.gov/ncas/alerts…
25
244
34
440
Hal Pomeranz retweeted
Some of the best response guidance I've seen. Thanks @TrustedSec!
🚨URGENT🚨 Our #IncidentResponse team has put together a playbook of recommended actions to provide some level of assurance that your organization is no longer affected by the SolarWinds backdoor #solarigate
hubs.la/H0CPz9r0
6
44
Hal Pomeranz retweeted
We need real change & deliberate dismantling of systems of systemic oppression. We have so much work to do, work that starts with me, you, & every org around the world doing what is right, not just saying they are committed but without action #PayEquityNow
payequitynowfoundation.org/p…
1
8
41
Hal Pomeranz retweeted
FWIW, here are some of the reasons often cited by infosec practitioners on attacker advantage, collected by the NY Cyber Task Force
sipa.columbia.edu/sites/defa…
1
1
2
Hal Pomeranz retweeted
#BlogPost - SolarFlare Release: Password Dumper for SolarWinds Orion - j.mp/3mhXKlP
7
76
8
172
But most of all #SUBURST has me thinking again why "May you live in interesting times" is a curse
4
If #SUNBURST demonstrates what a hostile power can do with a supply-chain attack, never question what intelligence services can do with cooperating domestic vendors. And again the majority of those vendors are based in the West.
10
One long-term cost of #SUNBURST will fall on ISVs and their customers who now need to validate the rest of their enterprise software stacks. This cost will fall disproportionately on Western Democracies where these technologies are highly leveraged.
1
Hal Pomeranz retweeted
Fantastic report by FireEye on the SolarWinds supply chain compromise into organizations around the community including the FireEye intrusion: fireeye.com/blog/threat-rese… great insights for defenders to go burn the adversary’s efforts to the ground
1
38
1
137
Hal Pomeranz retweeted
In case you haven't seen these yet, Kim has IOCs for the SolarWinds breach.
I have report from Microsoft about SolarWinds hack, including IoCs. Excerpts in this thread: "Microsoft security researchers recently discovered a sophisticated attack where an adversary inserted malicious code into a supply chain development process.... 1/
2
7
1
26