Does that traffic to commercial public cloud services and web-based applications seem legitimate to you? Bad actors are abusing the shit out of cloud services: Google Docs, Google Forms, Discord, and others, concealing their badness in TLS and the reputation of big cloud brands. This post is an ongoing notebook on both found abuses of […]
Read More Gogol it (some gogolesque notes on legitimate cloud service abuse)On this eve of the 20th anniversary of that day we will be beaten over the head about how we should never forget it tomorrow, and about how it changed America, I feel it is important to point out that 9/11 did not actually change America- it just destroyed the illusion of what America was […]
Read More АмерикаJust to clarify all the things, here are what you should take away from the REvil Kaseya exploit: Kaseya was working on a patch for a properly disclosed vulnerability and doing everything right until someone else found out there was a vulnerability and then it was all over. We don’t have proof the exploit was […]
Read More You say Kah-say-ah, I say Kuy-see-ya, let’s call the whole thing offIf you live at all, you have traumas and losses and scars. Some you get over, some you grow from, and some can haunt you for the rest of your life or pop up unexpectedly when you hear a name or a sound or a phrase, or when you see something that reminds you of […]
Read More The things we carry
