I am retiring this social media account. Find me as @hal_pomeranz@infosec.exchange
Orlando, FL
Joined November 2008
- Tweets 19,311
- Following 237
- Followers 13,672
- Likes 12
Hal Pomeranz retweeted
It would be really great if we could realize that this has been an utterly traumatic few years (& beyond these past few years for many) and humanize one another. We are all trying to do our best and no one is 100% okay. Trying to remind myself this and be more compassionate.
2
18
85
Hal Pomeranz retweeted
Want to help to stop the madness of car-centrism?
It is simple!
Start crossing the road like this. Reveal the key design flaw of the iron cage.
#Monkeywrenching
8
266
58
1,113
0
Hal Pomeranz retweeted
"Algospeak refers to code words or turns of phrase users have adopted in an effort to create a brand-safe lexicon that will avoid getting their posts removed or down-ranked by content moderation"
the effects of content moderation are the water we swim in
washingtonpost.com/technolog…
3
29
4
84
Hal Pomeranz retweeted
In June we have another run of "Linux Forensics" w/ @hal_pomeranz. This course is now offered on-demand!
If you want more info on Linux, be sure to also check out this past @BHinfoSecurity webcast w/ Hal. ➡️ youtube.com/watch?v=bXCmroKa…
Course details here ➡️ antisyphontraining.com/linux…
15
2
28
Thanks! We also found a copy hidden away in a dusty corner of the internet. And we were able to make an analyzable .dmp file in one of two cases.
1
Looking for Microsoft’s vm2dmp utility or another way to process Hyper-V .vmrs files with @volatility. All the links to vm2dmp seem to lead nowhere. @gleeda or @attrc any suggestions?
3
2
Hal Pomeranz retweeted
Since 2020, I've been writing a book on how Bitcoin, once said to be untraceable, turned out to be the opposite. Today we're releasing an early, 15,000-word excerpt: Inside the crypto tracing case that took down the largest known child sex abuse site ever. wired.com/story/tracers-in-t…
80
426
78
1,055
Hal Pomeranz retweeted
1\ #DefenceEvasion Technique: Maliciously Modifying Registry Timestamps 👿👀
This technique doesn't log events in the Security.evtx and is almost trivial to perform as a defence evasion technique...
Read my blog for technique + detection:
bit.ly/3r7jfuO
TL;DR 👇👇
5
185
6
471
If you want to drive value from these relationships then maybe we should call interns what they really are— seasonal junior employees. Employees should expect to be paid and mentored. And companies should focus on incentivizing employees to stay with the firm.
2
4
17
I was reading @k8em0’s tweet about paid internships and it struck me that in the modern corporate world “intern” has become a synonym for “exploited”. Young professionals endure weeks of corporate hazing, sometimes unpaid, in exchange for a blurb they can put on their resume.
1
6
27
Hal Pomeranz retweeted
LOLBIN to dump LSASS:
Path: C:\Program Files\Microsoft Visual Studio\2022\Community\Common7\IDE\Extensions\TestPlatform\Extensions
Binary: DumpMinitool.exe
The params are case sensitive.
16
314
2
952
Hal Pomeranz retweeted
Just uploaded a video showcasing DDExec, which is Linux Living Off The Land script/technique to execute Linux binaries without touching the disk. Learned about both DDExec and the process substitution bash-fu on yesterday's stream. Hope ya enjoy it. youtube.com/watch?v=MaBurwnr…
4
63
271
Hal Pomeranz retweeted
This is a brilliant thread.
"Vaccines only" #COVID19 strategy w removal of other protections makes perfect if you hold 6 beliefs
Each belief WAS reasonable in 2020, yet proved wrong w time. Now, to maintain the idea that things are OK, each of these 6 beliefs must be defended with ever more vigor 🧵
5
14
Hal Pomeranz retweeted
The Changing Role of IP Addresses in the Architectural Evolution of the Internet circleid.com/posts/20220131-… >> Interesting insights into the diminished stature of IP addresses via @randymarchany
1
2