Keyboard-Cowboy & Samurai. Head of IT Infra & Services. c3noc. Interested in DDoS & Security. You wanna meet the real me now? @dercraig@infosec.exchange
Joined December 2012
- Tweets 638
- Following 661
- Followers 169
- Likes 2,018
dercraig - @dercraig@infosec.exchange retweeted
If you need one book about DDoS, this is it:
"DDoS: Understanding Real-Life Attacks and Mitigation Strategies" by @DerCraig- one of the most comprehensive resources we’ve seen on the topic in the past decade.
Grab your copy: eu1.hubs.ly/H0kYzj_0
A new book on DDoS attacks and mitigation is available here:
buchshop.bod.de/ddos-underst… or on Amazon: amazon.de/DDoS-Understanding… #ddos - ebook also available in a few weeks! :)
I just published: "Testing GitHub DDoS Tools #12: palahsu/DDoS-Ripper" link.medium.com/Vdgf18ukIOb #ddos #tool
Interesting piece by The Hacker's Choice.
THC exposes Pavel Durov for LYING. Discloses undocumented FSB-style data exfiltration API in TELEGRAM. Don't #FreePavel - keep him locked up.
blog.thc.org/keep-pavel-duro…
VERY interesting talk! #DDoS
This tweet is unavailable
Did ya'll know that TCP syncookies support TCP SACK and WScale since 2008? It's often incorrectly mentioned that they prevent using them and degrade TCP severely. Not true! git.kernel.org/pub/scm/linux… #ddos #linux
dercraig - @dercraig@infosec.exchange retweeted
I'm impressed with the Qualys security research team. Not only because they are clearly talented and have an impressive portfolio of high-impact findings - but because in an era of vanity domains and logos for bugs, they're keeping the 1990s research aesthetics alive.
Watch this: media.ccc.de/v/camp2023-5702… #ddos
If you haven't seen it yet, there is a new dashboard on @Cloudflare Radar with some stats on attacks: radar.cloudflare.com/securit…
dercraig - @dercraig@infosec.exchange retweeted
Are you also tired from teams stealing flags or organizers stealing 0days from organizers in CTFs?
Then you should play CCCamp CTF 2023, organized by ALLES!!
The original, without monitoring!
We still haven't implemented any :)
More info coming soon!
dercraig - @dercraig@infosec.exchange retweeted
You can’t make this shit up.
Sophos sales: if the ransomware’d hospital had use Sophos it wouldn’t have happened.
Hospital CIO: well we *do* use Sophos.
dercraig - @dercraig@infosec.exchange retweeted
I wish people would invest their time in something more productive than rewording other's research.
Original: portswigger.net/web-security…
Reword by @cobalt_io: web.archive.org/web/20230117…
dercraig - @dercraig@infosec.exchange retweeted
Minneapolis public schools says it is facing technical issues following an encryption event (meme #2)
dercraig - @dercraig@infosec.exchange retweeted
Rebranding Linode as “Akamai Connected Cloud” is just replacing words with dumber words until and unless @Akamai replaces @linode’s API with a surly hungover 22-year-old named Jason making changes via ServiceNow helpdesk tickets.
This tweet is unavailable
dercraig - @dercraig@infosec.exchange retweeted
I asked ChatGPT to write a diss track against Blue Teamer 😭 :
Verse 1
You're a CERT analyst, trying to defend
But your tactics are just pretend
You sit behind a screen all day
But you can't handle the hack when it comes your way
1/6
