9 year old child with COVID pneumonia.
Florida

So it turns out that Google Chrome was making everything on my computer slow *even when it wasn’t running*, because it installs something called Keystone which is basically malware.

I made a website because this shouldn’t

Wired first reported on how bad Keystone was 11 years ago when they put it into Google Earth (they seem to put it in all their popular

The fact that Keystone hides itself in Activity Monitor is bizarre. (The only sign of it was excessive CPU usage of WindowServer which is a system process).

I don’t know if Google was doing something nefarious with Keystone, or a third party figured out how to (which Wired warned about). But either way, I’m not inclined to give Google-the-organization the benefit of the doubt (despite the many good people who work on Chrome)...

...since it's been a decade+ and this still hasn't been "fixed".

There is no reason for auto-update software to need to do what Chrome/Keystone was doing. It also has a long history of crashing Macs.

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

THREAD: 15 of the most useful razors and rules I've found.

Rules of thumb that simplify decisions.

Bezos' Razors:

• If unsure what action to take, let your 80-year-old self make it.

• If unsure who to work with, pick the person that has the best chances of breaking you out of a 3rd world prison.

Skinner's Law:

• If procrastinating on an item, you only have 2 options:

1. Make the pain of not doing it greater than the pain of doing it.

2. Make the pleasure of doing it greater than the pleasure of not doing it.

Luck Razor:

• If stuck with 2 equal options, pick the one that feels like it will produce the most luck later down the line.

I used this razor to go for drinks with a stranger rather than watch Netflix.

In hindsight, it was the highest ROI decision I've ever made.

Bragging Razor:

• If someone brags about their success or happiness, assume it’s half what they claim.

• If someone downplays their success or happiness, assume it’s double what they claim.

The map is not the terrain.