Brazilian Security Analyst | Malware Analysis | Responsible for the Slowest Algo in HashDB | Can barely reverse Hello World | PTC
- Tweets 24,780
- Following 1,397
- Followers 2,505
- Likes 348,959
Pinned Tweet
Racists are retards. Also I've been on the internet for like 20 years, you're gonna have to do better than "Brazil is liveleak" to rile me up. Funny that someone can call me antisemitic over criticizing a country, then on the same breath do actual racism lol
6
1
26
14,017
Dodo on Security 🇵🇸 🇺🇦 retweeted
Private island of the corrupt American regime.
39
2,169
25,326
168,611
Dodo on Security 🇵🇸 🇺🇦 retweeted
No fucking way
ITS 4 AGAIN
DIFFERENT BUG
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
167
738
7,858
300,704
Dodo on Security 🇵🇸 🇺🇦 retweeted
minha mãe compro um lavagatos
pra um gato que ela nem queria em casa
KKKKKKKLLKL
246
4,956
89,284
1,204,144
Dodo on Security 🇵🇸 🇺🇦 retweeted
UPDATE: Israeli company we caught delivering zero-click infections is #1 bidder on Starlink ads in 105 countries.
Data from @trendai_RSRCH suggests worldwide surveillance op targeting @Starlink users. 1/
By @razhael
reuters.com/business/media-t…
🚨NEW INVESTIGATION: zero-click mercenary spyware hacking via targeted ads.
A normal-looking ad loads. If you're a target, you're infected. No click needed.
To protect yourself, block ads now.
First time it's been confirmed in the wild. We call it #AdFection.
Candiru spyware infections at @AJEnglish. 45+ devices infected.
Same ad pipeline operated by Israeli company Discover-Tech reached NATO, European Parliament, dozens of gov networks & critical infrastructure incl US nuclear giant Westinghouse.
Confiant, which worked with us, found signs ads were displayed at US @DeptofWar, IAEA & ICC.
Investigation ongoing 1/
READ our report by @billmarczak @WolfieChristl, me Astrid Perry, Siena Anstis & Ron Deibert : citizenlab.ca/research/how-d…
Confiant's blog: blog.confiant.com/p/adint-we…
86
2,037
5,907
250,774
Dodo on Security 🇵🇸 🇺🇦 retweeted
BREAKING: World gasps in relief as Israel looks set to replace Voldemort with Sauron
BREAKING: Former IDF chief Gadi Eizenkot projected to become Israeli Prime Minister after Tuesday’s election, replacing Netanyahu.
52% chance.
🔗 polymarket.com/r/IsraelPM
82
1,577
11,505
184,226
One of my recurring black pills about how conscious the average person is is having a plane land, seeing everyone who stands up as soon as seatbelts are off and then listening to them complain about it taking too long for doors to open. If only there was a seating area to wait on
1
8
422
Dodo on Security 🇵🇸 🇺🇦 retweeted
❌ Local gym keep your name and phone number
✅ Giant companies train AI on all your personal data
Did I get it right? What's the point of GDPR again?
‼️ EU governments approved a GDPR change to let companies train AI on Europeans' personal data without consent.
It makes AI training a possible "legitimate interest", judged case by case. Parliament must still agree.
Max Schrems calls it a "digital expropriation" of Europeans.
27
716
7,011
80,406
Dodo on Security 🇵🇸 🇺🇦 retweeted
Sir, this is a national park, not a portal to the underworld.
Photo of a bobcat pretending to be a tree demon at Joshua Tree National Park.
ALT Silhouette of a bobcat with glowing eyes is perched on a bare tree branch against a cloudy sky at dusk.
179
3,213
24,745
795,205
Dodo on Security 🇵🇸 🇺🇦 retweeted
"We over-hired"
I don't know that kind of seems like something I would get fired over, my boss gets unhappy when I spend a few grand on my company credit card and you just racked up like 200 million
9
28
1,205
37,129
Dodo on Security 🇵🇸 🇺🇦 retweeted
This also explains cyber refusals: cyber models are a paid feature. CVP requires KYC, which they use to build a client list. They will expand their offerings.
In parallel they spread FUD around Chinese or open models.
1
2
30
965
Even in the Brazilian elections @JWonggg catches strays lmao
3
135
"Sir, it says here I need a certificate installed to access this"
"Don't worry, I'll tell you the key"
"........you'll read out the whole key through the phone??"
"Yeah. 4."
"Go on"
"No, that's it"
7
389
Dodo on Security 🇵🇸 🇺🇦 retweeted
cak
Last Ditch, also known as the "COVID-conscious Western Massachusetts lesbian bar," is closing effective immediately.
7
265
4,062
97,177
What a curious thing to post after removing the "we'll never sell you data" promise
How is the internet less private than in 2006, when the whole family shared one computer?
Back then, the internet was weird, personal, and all of ours.
So, we got your favorite meme legends back together to say it louder: What happened to the internet? 1/3
1
163
Dodo on Security 🇵🇸 🇺🇦 retweeted
you don't need daybreak, you need to segment your fucking network
20
25
354
16,328
Dodo on Security 🇵🇸 🇺🇦 retweeted
One of the best parts about Lula's victory in Brazil 🇧🇷 is watching in real time all those Polymarket/Kalshi bros eat shit and lose their money.
107
2,046
21,478
187,919
