BC WAR

Saved by @Alex1Powell

SwiftOnSecurity
@SwiftOnSecurity 5 years, 5 months ago 907 views

Save to PDF Share See On Twitter

The SolarWinds hack is a fundamental challenge, but I went into work yesterday focused on the same basics.

This may be a game-changer for policy and industry, but the essentials are what make the difference here. It revalidates basic visibility and monitoring. Same as before.

I do not see complex networks as they exist today as bastions where you can close your eyes anywhere assuming you're fine.

What if an attacker just compromised Orion with an exploit like a normal attacker? Or pivoted into its memory space from elsewhere?

What's the difference?

You've got to have pretty incredible network segmentation and administrative tiering and insider threat program before this kind of attack is the biggest risk to worry about.

That doesn't mean it's not incredibly serious. But we're failing way worse than this every single day.

This is a hard dichotomy to talk about without sounding dismissive, but I think it's worth bringing up. Be ever more mindful, but keep our foot on the gas on our fundamentals without letting up.

I'm putting some thoughts together, but I can't get over the fact _they didn't even try to infect your network if it looked like you were watching the machine_.

Like, we should be screaming about this. They know this shit works against them.

Note: This is not saying FireEye and other networks did not have monitoring in place, but it may not have been with tools in their list of "nope I'm not even trying" list.

The fact they hit FireEye seems like a massive mistake since they have internal custom tooling.

Everyone is doom and gloom while I'm like Neil Patrick Harris in Starship Troopers where he puts his hand on the bug and says "they feel fear" and everybody cheers.

It's worth saying, cyber hygiene may be in refutation of buzzwords, but it's not the end-all-be-all of IT protection.
You do need top-flight systems and people at the edges looking for the exceptional vectors.
But I want to keep harping on these fundamentals for everybody else.

More from War

$\U0001f1fa\U0001f1f8I Support Our Military & Law Enforcement\U0001f1fa\U0001f1f8$

🇺🇸I Support Our Milita...
@TheWiseOwl_AZ

1. We were informed that Tier 4B (us, the Internet Group) would receive 800# notification on Wed. 16 Dec. (A Shotgun Release of liquidity started on Mon. 14 Dec.).

Redemption Center personnel were scheduled to work for the next nine days from 8:30 am to 8:30 pm until...

2. ... Dec. 24, when they would close at 5:30 pm.

The general public would begin exchanging at the new International Rates on the first banking business day after the Christmas Holiday.

A. The RV, NESARA, GESARA, Restored Republic and Martial Law

3. According to Charlie Ward we began the Ten Days of Darkness on Tues. 15 Dec. The Ten Days would finish Dec. 24 Christmas Eve with the US going into NESARA and then the rest of the world would go straight into GESARA on 1 Jan. 2021.

4. Every single country and territory has agreed to GESARA. The UK government corporation was liquidated in Oct. last year and it was finalized last week. France has started breaking up their Parliament. Everything needed for implementation of NESARA/GESARA was finished.

5. Trump’s Christmas present: In a recent Executive Order President Trump declared that all government agencies (except for essential ones) permanently close on Dec. 24 2020. Trump had that authority since we were already under Martial Law (the US had been functioning under...

left lieutenant
@Google_12point7

Bravery

6 May 17, I was privileged to fly on the last chopper that brought back the released Chibok girls. Seeing the girls - young, naive BUT broken, was a reminder of how cruel man is. When we touched down, I stayed with them briefly in the C-130 before the Abuja lap.

Military medics began basic checks, deworming them and tending their wounds. There was one particular girl who had lost a leg. She said the Air Force had hit BHT positions & during the strike she lost a leg. I stared at her, wishing it was a dream.

Sitting beside her was another girl - the bravest girl I ever met. For the purpose of this thread, let us call her 'N'. N kept a daily journal of what happened everyday at the BH camp. I snapped as many pages as I could. The girls attested that she was the leader of the pack.

Right under Boko Haram's nose, every night, after the terrorists had ordered them for 'lights out', she would organise the girls for prayers & morning devotion the next day. I found myself smiling sheepishly at this. This is faith. This is bravery.

When the medics were done & we were notified that the C-130 would depart for Abuja, N made a signal & all the girls sat up, crossed their legs & bend their heads. N led them in prayers. I would later learn that this was their routine when there was danger or the bombs dropped.

Advertisement

1453
@Conquest1453

" Pakistan Model " To Solve Türkiye’s S-400 Crisis With The US

By Mehmet Acet

@acetmehmettw

Let us start with the statements President Recep Tayyip Erdoğan made ahead of his Azerbaijan visit concerning the U.S. & upcoming Biden term , which will commence on 20th January 2021 :

“ We still consider any statements we have made so far & will make as premature . Let Mr. Biden 1st take office & then we will sit down & discuss matters with him . Just as we came together in the past & talked , whether it be in Türkiye or the U.S. .

There can be no conflict between nations regarding politics . Diplomacy in particular requires such matters to be deliberated over in order to reach an agreement & find a solution . Certain people in your country may prompt negative action .

That is not important : they are amateurs in politics . I am confident that we will move forward with the U.S. in a very different manner .”

XVIII Airborne Corps
@18airbornecorps

1 of 19: TANK YOU FOR YOUR SERVICE

You crazy for this one, #TankTwitter

The Battle of the Bulge was among the largest tank battles in US history.

[If you are here seeking something other than straightforward analysis of a historical event, please look elsewhere]

2 of 19:

After the war, a narrative developed that American tank units (7th, 9th, 10th Armored Divisions, in particular) overcame a German tank superiority in the Battle of the Battle.

[3 of 19] We'd like to put that idea to the test.

We've discussed Kampfgruppe Peiper outmaneuvering our tanks early on with the newest German tank, the 70-ton Tiger II.

The remaining German forces had the Tiger I and Panzers.

[4 of 19]

Lt. Colonel Robert Erlenbusch commanded company A, 31st Tank Battalion in St. Vith during the fighting. After the war, he wrote a paper for III Corps in which he stated that German Panther and Tiger tanks were far superior to the American Sherman and Stuart tanks.

[5 of 19]

American tanks had success in Ardennes only if they hit "lucky shots" according to Erlenbusch. Many historians still reference Erlenbusch's findings.

Jonathan Ware
@ReassessHistory

So how easy was it for British & Canadian soldiers to keep clean and healthy in Normandy?

Couldn't be too hard, right? /1
#WW2 #SWW #History

You're an front line infantryman in a two man covered slit trench. Maybe 100m from the enemy

From dawn to dusk you're hunched underground, making the best of things in a covered trench 6' long, 3' deep and 2 1/2' wide or so.

With your mate crammed in there with you. /2

You know you're under constant observation by enemy observers and marksmen, who scan the ground looking to punish any foolish or unlucky opportunity target.

They may not get you, but their rounds may well kill or maim your friends. /3

Night offers a modicum of respite.

In darkness fresh, hot grub is bought up in large thermos flasks from the cooks in B Echelon. It's good hearty stuff.

The problem is the closer you are to the enemy, the more likely it'll be delayed or obliterated by an errant 155mm shell. /4

You can always tuck into food from your compo crates, which is fine, or 24 hour ration pack... or the famed emergency ration in a sticky spot.

The latter is really nice.

Chocolate laced with amphetamine or high dose of caffeine.

Yum. /5

You May Also Like

Pulp Librarian
@PulpLibrarian

Due to the pandemic you may not have visited your local library in a while. So come with me on a virtual library tour, courtesy of stock photography, to see what we do for a living...

Libraries are of course information resource centres, but in many ways they are so much more. To get the best out of them you need to really know your way around the stacks.

The enquiries desk is normally your first stop in a library, and this is where you will meet The Angry Librarian! Why is she angry? Because you keep asking her stupid questions!

"Are you open?"
"Do you have a toilet?"
"That chair's wobbly!"
"Why isn't it available in audiobook?"
"Someone else is on the computer and that's not fair!"

On and on it goes...

And that's why in the library we insist on silence. It's the only way to stop us swearing at all the idiotic things you ask us. And we've looked up a lot of old swear words: beardsplitter, bescumber, rantallion, smellfungus etc. We're such muckspouts...

Vibhu Vashisth
@VIBHU_Tweet

शमशान में जब महर्षि दधीचि के मांसपिंड का दाह संस्कार हो रहा था तो उनकी पत्नी अपने पति का वियोग सहन नहीं कर पायी और पास में ही स्थित विशाल पीपल वृक्ष के कोटर में अपने तीन वर्ष के बालक को रख के स्वयं चिता पे बैठ कर सती हो गयी ।इस प्रकार ऋषी दधीचि और उनकी पत्नी की मुक्ति हो गयी।

परन्तु पीपल के कोटर में रखा बालक भूख प्यास से तड़पने लगा। जब कुछ नहीं मिला तो वो कोटर में पड़े पीपल के गोदों (फल) को खाकर बड़ा होने लगा। कालान्तर में पीपल के फलों और पत्तों को खाकर बालक का जीवन किसी प्रकार सुरक्षित रहा।

एक दिन देवर्षि नारद वहां से गुजर रहे थे ।नारद ने पीपल के कोटर में बालक को देख कर उसका परिचय मांगा -
नारद बोले - बालक तुम कौन हो?
बालक - यही तो मैं भी जानना चहता हूँ ।
नारद - तुम्हारे जनक कौन हैं?
बालक - यही तो मैं भी जानना चाहता हूँ ।

तब नारद ने आँखें बन्द कर ध्यान लगाया ।

तत्पश्चात आश्चर्यचकित हो कर बालक को बताया कि 'हे बालक! तुम महान दानी महर्षि दधीचि के पुत्र हो । तुम्हारे पिता की अस्थियों का वज्रास्त्र बनाकर ही देवताओं ने असुरों पर विजय पायी थी।तुम्हारे पिता की मृत्यु मात्र 31 वर्ष की वय में ही हो गयी थी'।

बालक - मेरे पिता की अकाल मृत्यु का क्या कारण था?
नारद - तुम्हारे पिता पर शनिदेव की महादशा थी।
बालक - मेरे उपर आयी विपत्ति का कारण क्या था?
नारद - शनिदेव की महादशा।
इतना बताकर देवर्षि नारद ने पीपल के पत्तों और गोदों को खाकर बड़े हुए उस बालक का नाम पिप्पलाद रखा और उसे दीक्षित किया।

Advertisement

Jaya_Upadhyaya
@Jayalko1

SRI BANASHANKARI AMMAN, BANGALORE
#bharatmandir

Located in Southern Bangalore, this is one of the most popular places of worship in Bangalore City.
Devoted to Devi Banashankari, this shrine is visited specially during Rahukala which is believed to be an unfavorable time.

Somanna Shetty, a great devotee of Devi, brought this murti from Badami’s Banshankari Amma Kshetram.
It is said that many years ago, three ladies visited this shrine and requested the pujari to conduct puja for them. Since it was the inauspicious rahu kaal, the pujari refused.

However, upon their insistence, he conducted the puja. When he returned with prasadam, the ladies vanished. This made the people believe that they were none other than the Devi herself. Since then, the people perform poojas here during the Rahukaal.
@GunduHuDuGa

People use lemons as a diya. Lemons are cut from the centre and their pulps are removed, for pouring oil in them.
It is strongly believed that Devi removes all the troubles from the life of her devotees during the Rahukala although it is considered inauspicious for any pooja.

$\u0936\u094d\u0930\u0940\u092e\u093e\u0932\u0940 \u0939\u093f\u0924\u0947\u0936 \u0905\u0935\u0938\u094d\u0925\u0940$

श्रीमाली हितेश अवस्थी...
@HiteshAwasthi89

Statue of Equality (Ramanuja) Muchintal, Hyderabad, Telangana

The Statue of Equality is a monument in India dedicated to the 11th-century Vaishnavaite Sage Bhagavad Ramanuja, commemorating 1000 years since his birth. It was inaugurated by Prime Minister Narendra Modi ji in 2019.

In 2014, Sri Chinna Jeeyar came up with the idea to commemorate the 1000th anniversary of Sri Ramanuja's teachings by building the Statue of Equality. The statue is constructed on an estimated 34 acres in Hyderabad, India.

It consists of a 216 foot tall statue of Ramanuja and is surrounded by 108 Divyadesams (model temples) and includes an educational gallery. The project budget is 1000 crore rupees.The foundation stone for the Statue of Equality was laid by Chinna Jeeyar.

The statue was built by Aerosun Corporation in China before being shipped to India. It is made of panchaloha, a combination of gold, silver, copper, brass and titanium. The statue relies on donations to fund its construction.

The temple is located on the 27,870 square metre second floor with a 120 kg statue of Ramanuja, representing the years he lived, meant for daily worship. The 1,365 square metre third floor including a Vedic digital library and research center.

Robin Berjon
@robinberjon

Recently, the @CNIL issued a decision regarding the GDPR compliance of an unknown French adtech company named "Vectaury". It may seem like small fry, but the decision has potential wide-ranging impacts for Google, the IAB framework, and today's adtech. It's thread time! 👇

It's all in French, but if you're up for it you can read:
• Their blog post (lacks the most interesting details): https://t.co/PHkDcOT1hy
• Their high-level legal decision: https://t.co/hwpiEvjodt
• The full notification: https://t.co/QQB7rfynha

I've read it so you needn't!

Vectaury was collecting geolocation data in order to create profiles (eg. people who often go to this or that type of shop) so as to power ad targeting. They operate through embedded SDKs and ad bidding, making them invisible to users.

The @CNIL notes that profiling based off of geolocation presents particular risks since it reveals people's movements and habits. As risky, the processing requires consent — this will be the heart of their assessment.

Interesting point: they justify the decision in part because of how many people COULD be targeted in this way (rather than how many have — though they note that too). Because it's on a phone, and many have phones, it is considered large-scale processing no matter what.