ippsec @ippsec

youtube.com/c/ippsec Joined December 2016

Tweets

5K
Followers

123K
Following

365
Likes

1K

0xdf @0xdf_

a week ago

Watching @ippsec inspired a question - How does auto-calibration (-ac) work in ffuf? Let's explore it! youtube.com/watch?v=scHcQI…

1 4 34 6K 27

View Details

ippsec @ippsec

2 weeks ago

@shenetworks Out of context that is actually a good tweet as I initially took it as intellectual property…. until I saw the name 😂

0 0 6 3K 1

View Details

@lawndoc @apiratemoo It is a 10.0 CVE on software that does not have any real risks associated with patching and doesn't require a reboot. If an organization is thinking about priority in this case, I would hate to run an audit on their environment... Especially after the recent flood of CVEs

1 0 2 95 0

View Details

ippsec @ippsec

4 weeks ago

@lawndoc @apiratemoo You shouldn’t need to see the exploit to triage or patch. However, I do have videos on those chains.

1 0 3 78 1

View Details

ippsec @ippsec

4 weeks ago

@UK_Daniel_Card @AICyberHome I think it is rare for the TA to turn around and sell the breach advertised as the company breach. They likely sell it as a "combined list" with the victims name removed. Which in terms of PR is an infinitely better outcome for the victim than a public dump/outage/etc.

1 0 1 115 0

View Details

ippsec @ippsec

4 weeks ago

I've only read between the lines, but I think the crux of the issue is the reduction in pay is due to changing departments because the role no longer exists. I don't think FMLA really provides any protection in that case as it is not retaliatory, it's likely just an unfortunate coincidence. Why do I think that? Because the person in question was visible under a title that is not "Penetration Testing". When you have your picture on a public website for your company, I think it is expected that position have a large salary tied to it. I imagine that position got removed, they moved to a penetration tester (doing the right thing to not fire them). During some audit, they realize they didn't adjust the pay during the move and when correcting it something happened which caused this all to blow out of proportion. Talking about it over social media made it worse. It's reasonable to be let go at that point. Is it retaliatory? Idk. Given the context of the original messages, I'd say it is but not illegal. I'm really grasping at straws for the next part but I'm guessing to try and plug the PR Disaster. The original employment contract/agreements were brought up and one of the parties thought that included a non-compete. I only say that because the founder says they removed it, never enforced it, and there is plenty of other people leaving the company and working for (or becoming) competitors.

1 0 0 43 0

View Details

strandjs - [email protected] @strandjs

4 weeks ago

There has been a lot of talk about BHIS and our maternity and employment policies. Please check out the following site for more details. blackhillsinfosec.com/bhis-employmen… Thanks!

29 6 106 106K 44

View Details

ippsec @ippsec

a month ago

@MJHallenbeck Metasploit does support python/go/etc already -- The value of Metasploit isn't really the core, it is the community that keeps exploits up to date (and does Q/A). Just forking it to python wouldn't magically bring the community over to the python edition

2 0 92 6K 2

View Details

ippsec @ippsec

a month ago

@x509dot @LiveOverflow Didn't say it was purely bug bounties.

1 0 1 427 0

View Details

ippsec @ippsec

a month ago

@0xTib3rius Haha I just don’t think I’m sane enough to have that type of opinion. Tenure is no longer rewarded. I’ve had friends in similar positions and my comment to them was always lay low, do the bare minimum while you job hunt as it takes time to fire for laziness.

0 0 11 1K 1

View Details

ippsec @ippsec

a month ago

@MJHallenbeck I'm guessing you are thinking of bustakube.com - Not sure how up to date it is.

1 7 27 4K 42

View Details

ippsec @ippsec

2 months ago

The HackTheBox Sorcery Video is up! An extremely long video, but for good reason, there were a lot of tough parts of this box. My favorite part was near the beginning, when we had an XSS Bug and had to use CSRF to MITM PassKey Enrollment youtu.be/aFa1ike_Q7I

2 8 35 7K 9

View Details

ippsec @ippsec

2 months ago

I can't seem to find any examples on your timeline atleast within the last week. Again I don't doubt it, but I'm pretty tired of just seeing negative takes on things that have reasonable explanations. I just empathize a lot with the employee's trying to manage and correct things when there is an overflow of random crap that gets started by a couple of YT/Twitch people that ought to know better but fell victim to the instant gratification hate/clickbait can bring. Then when they do finally find/fix the problem and try to be transparent just get more crap flung at them. All that does is discourage them from being open in the future.

0 0 1 49 0

View Details

ippsec @ippsec

2 months ago

@MJHallenbeck @HackingDave Have anthropic employee's gaslit people? Or is that just the algorithm amplifying hate? I could be wrong, but I don't think I ever saw someone like Boris say there isn't a problem. Just try to debug via X which is a noble but impossible effort, so they direct people to /feedback

1 0 1 57 0

View Details

ippsec @ippsec

2 months ago

Yeah, but "exact public build" could mean a lot of things. Modification could be as simple as pointing to nightly models or something. Which is backed up by the following paragraph of them targeting specific models. I'm not saying there wasn't an issue, definitely was. I just hate all the quick negative takes when people are trying to do good.

1 0 1 43 0

View Details

ippsec @ippsec

2 months ago

I think that could be a gross oversimplification. It is equally as likely they weren't impacted as much because they "use it properly", which partially masked the problem. I'd imagine their pre/post hooks among many other things look vastly different than the normal person, which could mask the problem slightly.

1 0 1 44 0

View Details

ippsec @ippsec

2 months ago

@MJHallenbeck @HackingDave Easy to point fingers but I’m not sure Claude being vibe coded is a bad thing. Vibe coding does seem like a major goal of theirs, so eating their own dog food does help them in the long run. I’m pretty sure “department being disconnected” can be said about any large company.