A git cheat sheet for all your needs!

https://t.co/H7QdOrthwV

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

why do I hear boss music

1/People I know on the Right tend to be obsessed with the idea of "crimethink", taboos, and the (supposedly) oppressive, omnipresent enforcement of liberal cultural norms.

Why?

My new theory: A lot of it is guilt.

2/It's true that in some circles - the media, universities, many big corporations - liberal norms *are* enforced to some degree, and the enforcement has probably gotten stronger in recent years.

But I don't think this explains all of the Right's obsession.

3/The stereotype is that people on the Right tend to be more threat-sensitive. That would help explain the perception that liberal norm-enforcers are lurking everywhere, ready to pounce and anathematize anyone who makes a misstep.

But I don't think that's all of it either.

4/And of course, it's always fun - whether you're on the Right or the Left, or playing a video game, or whatever - to style yourself as the brave iconoclastic rebel fighting against the oppressive forces of blah blah blah.

But I don't think this is all of it, either.

5/The reason I think it's more than these things is that even *in private*, people on the Right express their "crimethink" ideas very gingerly and hesitantly.

I get the sense that they're not just afraid of external censure, but have also internalized liberal norms.