BC INTERNET
Saved by @Alex1Powell

Twas the night before Christmas and all over the ‘net,
Not a creature was stirring except a few cyber threats
The firewalls were configured at the egress with care,
But that wouldn’t stop us from being hit by ransomware. 1/

 The children were nestled all snug in their beds,
While attackers hit the web server and established a beachhead
Mama with her EDR and I with my IDS
Were ready to tackle this hot infosec mess. /2
Down in the SOC there arose such a clatter,
I logged into my dashboard to see what was the matter.
This thing had better work, it cost so much cash.
How in 2020 can this thing STILL require Flash?! 3/
The alerts lit up the dashboard, it produced such a glow
But it’s because the threshold for alerting was configured so low.
When what to my wondering eyes did appear,
But 300 false positive alarms. I thought “I’ll be here all year.” 4/
Then a little old DLL, signed by SolarWinds,
Was really the Russians, masters of supply chain break-ins.
We need some new vendors said the CISO, and the salespeople came. 5/
She shrugged, and she grunted, and she called them by name:
Now AlertDashboard, Now FaceDancer, Now PacketPrancer, and CyberOxen.
On DarkComet, On WebCupid, On DataDumpDonner, and BlinkenBoxen! 6/
With no DNS filtering and egress that was open to all,
The Russians said “why even bother to deploy a firewall!
The off-site DFIR team prepared here to fly,
But with no logging configured, things were going awry. 7/
Their OPSEC was bad and the attackers they knew,
So their rootkit crashed a critical server with a death screen of blue.
“It might not be Russia, the packets could be a spoof!”
“But attribution is nuanced, and you’ll never have proof” 8/
The analyst checked the logs, and then spun around,
Saying “there’s nothing we missed, supply chain attacks are profound”
The CEO was worried Russians wanted his secrets to loot,
But the CISO said “we told you that’s China, you’re not being astute.” 9/
A cluster of servers, secured in their locking rack,
Still fell victim to this insidious cyberattack.
The alarms on the dashboard – oh how they twinkled! This one’s gonna be hairy…
The CISO admitted “this one is bad, I’ve never seen malware so scary!” 10/
The boss said “get this incident done, wrapped up with a bow”
But the CISO said “this isn’t CSI:Cyber, it’s going to be slow”
The boss said “this was preventable but your skills are beneath”
The CISO responded “stop insulting my team or I’ll knock out your teeth” 11/
The CISO ruled with an iron fist, just like Machiavelli,
And said “follow the 3-2-1 rule so we aren’t all so smelly!”
The budget was plump, a sign of cybersecurity health,
Everything purchased had been installed – nothing bit-rotting on the shelf. 12/
A wink of her eye and a twist of her head,
Soon gave me to know infosec misogynists would be dead.
“Why?!” said the analyst, “we’re just having fun at work!”
She said “Stop being a Neanderthal, a dope, and a jerk!” 13/
As every incident responder most certainly knows,
Working incidents through the holidays absolutely blows
The IR team remediated the issue and one of them let out a whistle.
The team lead said “if you leak to the press, expect a dismissal.” 14/
Then I heard them exclaim as they drove out of sight – “Just stop clicking on stuff, we can’t do this again tonight!”

Happy whatever you celebrate from all of us at @RenditionSec to you and yours! /FIN
https://t.co/tdwkMSseJc

More from Internet

Amit Ganguli
Amit Ganguli
@amit_ganguli
Many conversations happening on #WhatsApp (WA) groups about new #WhatsAppPrivacyPolicy .
This thread has arguments to help ditch WA & move to @signalapp:
https://t.co/En4fe9VxUN
Share, use, copy-paste, modify with understanding as you deem fit on any platform in whole or part
1/n

Note: No affiliations, conflict of interest
Info presented with NO bias, prejudice, malice or indemnity.
Open to corrections: individual tweets may be deleted, tweets added to thread or corrected as replies.
Points that are unclear or uncertain are marked with "(?)".
2/n

CONTENT OF WA MESSAGES SHALL REMAIN ENCRYPTED END TO END.
BUT, there's data: contacts, group affiliations, co-affiliations, locations (live?), frequency of contacts, *tags* generated when we send or forward a message or file to contacts or groups, links, clicks on links, etc.
3/n

It is unclear whether this data is anonymized.
NOTHING in latest policy *prevents* the collection, retention, sharing or sale by FaceBook (FB: owner of WA) of this data in part or whole whether with identifying information or anonymized.
Meme source:
https://t.co/nMDTUlb0rl
4/n


Companies need to make money & generate profits:
To create software, install & maintain infrastructure.
Google, FB, Insta, Amazon etc sell data created from our content & data generated from our interactions (searches, clicks, purchases etc).
This makes many uncomfortable.
5/n
INTERNET
Simon Wardley
Simon Wardley
@swardley
X : Can you apply pace layers to maps?
Me : You can but what is where evolves. However, same rules apply to things, practices, data, knowledge and ethical values. All are forms of evolving capital. In the mapping world, we refer to this with pioneers, settlers and town planners.


X : What's the robot for?
Me : Image from an older presentation slide, don't worry it has no relevance.
X : Is this linked to diffusion?
Me : Not simply. Evolution of a single component can consist of many hundreds of diffusion curves i.e. a virus diffuses but it also evolves.

X : Why have you got DevOps in legacy? We haven't even started yet.
Me : That's not my problem. I would take a look at serverless.
X : DevOps is serverless.
Me : Some of the practices maybe co-opted (see ITIL vs DevOps) but the new faction will decide what it is or isn't.

X : I also disagree with your methods graphic.
Me : Do you mean this? As applied to the following map?
X : Yes. Lean is suitable for innovation.
Me : Ah, that depends upon what you mean by innovation. If you mean Genesis then lightweight XP has it beat.


X : I disagree.
Me : Well, I've had 15 years of people telling me that Agile works everywhere or Lean works everywhere or Six Sigma works everywhere and why all the competing methods don't. I have no interest in the conversation. Use appropriate methods based upon context.
INTERNET
Advertisement
Logan | Landing Pages \U0001f4da
Logan | Landing Pages ...
@LoftedLearning
7 Tactics To Increase Engagement on Your Threads

// THREAD //

People are constantly seeing the same stuff over and over again on their timeline.

This is why you need to learn how to stand out.

When they’re scrolling you need to grab their attention and reel them into something they want to read.

If you think about it, your job is just to get them to click your tweet. Once that’s done, they’ll be reading your other ones in no time.

In order to get them to click you need to show one of these 7 things:
> authority
> experience
> value
> lesson
> mystery
> opinion
> numbers

The easiest way to write headlines based off of these things is to write out your audience’s objections.

Then, indirectly counter their objection within your headline (sounds cool right?).

An old copywriting trick 😉

1. Authority

“Why should I read your thread? What have you done that makes me trust you”

Headline:
“$97,840 in Profit This Month Using This 5-Step Plan to Make Landing Pages”

Authority shows people you know what you’re doing by telling them a true stat/claim.
INTERNET , TWITTER
Kristine Schachinger
Kristine Schachinger
@schachin
@curaffairs The author doesn't know enough about search to have written that article and the reason he's having those problems is AI algos like Rank Brain and Google's attempts to use natural language processing nothing to do with SEOs.

1/x

YMYL is not evaluated at the site level, but the query level.

Again this is on Google, not SEOs because they want to surface better sites.

And those devaluations are part of Core Updates which SEOs like me recover sites from.

2/

Featured Snippets are not optimized for - you can use certain HTML to be pulled in one but there is no definite use case where Featured Snippets are shown or that your site's will show for it. Also doesn't always come from the #1 result.

& that's Google not the SEO.

3/

Also there are many times when an SEO doesn't want their site in the Featured Snippet cuz it doesn't result in a click to the website. But we have no control over what Google pulls as Feature Snippets except to put in a meta tag to exclude us from them

4/

And Neil Patel is not an SEO. Most senior level SEOs see him as nothing more than a scammer because reportedly he's ripped them off by stealing their content and articles and passing them off as his.

5/
CULTURE , INTERNET , SEO
GAVNet
GAVNet
@GAValueNetwork
Daily Bookmarks to GAVNet 01/16/2021
INTERNET

You May Also Like

The Troll Zoo
The Troll Zoo
@TrollZoo
1. This is "Hollie The Card".

She's a Doctor, Physician, PhD, MA, Clinical Psychologist, Hospital Consultant, PTSD consultant, Long Covid Consultant.

(Thread)


2. Although sometimes she’s also an AUTHOR and English Academic.


3. A Hospital Consultant and ex Gymnast.

(Pinterest public profile)


4. A Physician, Doctor, or hospital consultant.

A “Hospital Consultant”, would probably mean a senior doctor, in the UK at least.


5. Hollie changes her Twitter picture and bio so often, it’s hard to keep up with her qualifications.
TWITTER
Brian Armstrong
Brian Armstrong
@brian_armstrong
1/ Productivity tip: when I keep procrastinating on something I often trick myself by saying, "ok just work on it for the next 20 minutes" or some short period of time, "and then you can chill/relax guilt free" and give myself some treat (sugar, netflix, etc)

2/ Usually at the 20 minute mark (sometimes I set a timer) I'm so engrossed in what I'm doing that I don't want want to stop and end up working on it for the next hour or two. But getting started seems to be the hardest part.

3/ Key to this: you have to actually be ok with stopping after 20 minutes and being guilt free if that's how you feel. So it's not a trick, i have the option every time, I just often don't want to use it once i'm in the zone.
PRODUCTIVITY
Advertisement
\u0936\u094d\u0930\u0940\u092e\u093e\u0932\u0940 \u0939\u093f\u0924\u0947\u0936 \u0905\u0935\u0938\u094d\u0925\u0940
श्रीमाली हितेश अवस्थी...
@HiteshAwasthi89
#Thread
Benefits of writing SRI RAMA Jayam!!!

Writing Sri Rama Jayam is known as Likitha Japam- Writing Meditation. This gives one a complete sense of surrender to an inner conscience and peace while writing or chanting the mantras.

#Sri_Rama_Jayam #RamaNavami

Cont 👇

You can write this in any language of your choice. It is the connecting chords with the divine and your inner self.

Below are some points that we came across on the benefits :

Cont 👇

1. Vedas tell that as the sun dispels the darkness, the chanting of Rama Nama dispels all evil and obstacles of life. It is a way of liberation and salvation of human suffering.

2. When you think, that all roads are blocked to walk away from day to day problems..

Cont 👇

writing ‘Sri Ram Ram Ram’ gives you the most needed clarity of thoughts to find away out of odd situations.

3. It was told that a calmness engulfs as one indulges in writing the Sri Rama Jayam bringing in more clarity of mind, tolerance & strength to withstand obstacles in life.

4. Devotion of service of life and its varied forms is devotion to God. So there is no right or wrong way of writing this. The very thought and process to write is a connection with god and finds a inner meaning.

Cont 👇
ALL
Anu Satheesh
Anu Satheesh
@AnuSatheesh5
Dhanwanthari Temple, Nelluvai
Thrissur District, Kerala.🚩🚩

ॐ नमो भगवते वासुदेवाय धन्वन्तरये अमृतकलश हस्ताय
सर्वामय विनाशनाय त्रैलोक्यनाथाय श्री महाविष्णवे नमः
#temples

Dhanwanthary Moorthy temple in Nelluvai is one among the ancient temples in Kerala.


Dhanwanthari is the Deva of Ayurveda. It is said that the murthy at the temple was installed by Ashwani Devas and it was the same idol worshipped by Sri. Vasudevar in the Dwapara Yuga. The Dhanvanthari Moorthi is facing towards the west
@SriramKannan77


Smrata-Matrarti-Nasanah', Srimad Bhagavatam states that the one who remembers the name of Dhanwantari will be cured and protected from all the diseases. Temple is known for its Oushada Prasada with Ayuvedic medicinal values, called Mukkudi.


Mukkudi Nivedyam is a very special offering to Dhanwantari. It is prepared by using dry ginger, pepper, pomegranate peel, cumin seed, turmeric, rock salt and other medicinal items. It is offered during 'Usha- Pooja', and is later on distributed to the devotees present there.
ALL
\u09a8\u09bf\u09ac\u09c7\u09a6\u09bf\u09a4\u09be
নিবেদিতা...
@NiveditaNarayan
Remembering the Bengali scientist Dr Subhash Mukhopadhyay- the Pioneer of IVF in India, the creator of India's first and world's second child using IVF on his birth anniversary. The Father of IVF in India who was rewarded with suicide was born on 16.01.1931in Hazaribagh.
#Thread


Dr. Subhash was the son of a doctor and studied at the National Medical College in Kolkata after completing his schooling. Fascinated by innovations in gynaecological surgery from his early days as a medical student, he completed his PhD in reproductive physiology +


from the University of Calcutta before going to the Edinburgh University in UK for a PhD in reproductive endocrinology. On his return to India in 1978, he started researching ovulation and spermatogenesis. Soon after, he teamed up with Sunit Mukherji, a cryobiologist +


and Saroj Kanti Bhattacharya, a gynaecologist, to work on a method of in-vitro fertilization for a patient (Bela Agarwal) with damaged fallopian tubes. +


Mukhopadhyay with a double PhDstarted work on IVF techniques in the mid 60s and created history by becoming the first physician in India and second in the world after British physicians Robert Edwards and Patrick Steptoe) to perform the In-vitro fertilisation. +
INDIA