I am retiring this social media account. Find me as @hal_pomeranz@infosec.exchange
Orlando, FL
Joined November 2008
- Tweets 19,311
- Following 237
- Followers 13,672
- Likes 12
Hal Pomeranz retweeted
Slide Rule - another trip down the memory lane. Thinking I got to learn how to and actually use one of these: sliderulemuseum.com/SR_Cours…
2
3
Hal Pomeranz retweeted
CALL FOR PAPERS | CALL FOR TRAINING | CALL FOR CTFs for #bsidesaugusta 2022 OPENS on 4/28 BSidesAugusta.org #bsidesaugusta #cyber #csra #AugustaGA #cybersecurity #InfoSec
25
2
28
Hal Pomeranz retweeted
If I can offer an observation, 20+ years into my software career:
Long term, your kindness and helpfulness are vastly more impactful than your technical skills.
People will remember how you made them feel. They're much less likely to remember that awesome function you wrote.
46
798
132
4,745
Hal Pomeranz retweeted
While the ideal is to see a story of ongoing improvement and progress, the reality is that careers can be messy. This is especially true for those who lack privilege.
People sometimes take a job because they need access to health insurance for a sick loved one.
2
4
165
Let us not forget Paunch buying zero-days on the open market to further Black Hole back in the early 2010s…
This tweet is unavailable
1
This message brought to you by the proud husband of a high school teacher. @JBeanDesign I see what you do every day to provide a safe space for your kids.
2
5
Every day, across the nation and around the world, teachers save student lives quietly and without fanfare. And all we do is make their jobs harder and less rewarding.
2
3
19
Hal Pomeranz retweeted
It took a while, but the English version of the macOS Forensics Hands-on Workshop materials are now available. Have fun! jsac.jpcert.or.jp/archive/20… jsac.jpcert.or.jp/archive/20… #DFIR #JSAC2022
2
100
4
235
Certainly eliminates Exchange as the initial breach, but it will be a juicy target after they get in with stolen VPN credentials
1
2
Even if you still have to maintain local Exchange in a hybrid environment, those machines can be completely isolated from the Internet and most of your infrastructure.
1
Definitely avoids a raft of problems, and keeps a large cache of user creds away from your home network. Pay extra for higher levels of M365 auditing to help you troubleshoot cloud issues.
1
The most common indicator we’re seeing is w3wp.exe spawning csc.exe. Look for webshells under …\Exchange Server\*\FrontEnd\HttpProxy\{owa,ecp}\*
1
8
1
52
Recent experience is teaching me that it’s impossible to securely run Exchange on prem. It’s been the initial point of entry for numerous compromises.
2
31