Viewing profile — mephux

Link to the disclosures then.. prove it. Anyone can say this.. i found an RCE in netBSD using gemma e2b

We all know this is propaganda to get a gov bailout or to slow down competition with regulations right? If this was an issue companies that did red team engagements would have been…

https://www.the-odin.com/whole-genome-sequencing-30x/ If you want it quick and cheap(er) - 599.00

You just add it to the repo itself. Really not a lot of work. You're a dev... automate it.

Indeed! Whats also great about osquery is the security related tables available. I.e process_memeory_map, crontab, passwd_changes, shell_history etc. A lot of the stuff osquery get…

1. Security is a huge one. One of the saved queries is checking for processes running that don't have the original binary still on disk. etc. Being able to query stuff like that on…

Yea, I looked at them. EnvDB has plans to extend past just using osquery. Work could be done to connect deeper or use libosquery directly. I chose to wrap it and plan to build a pl…

As an American that lived in Russia most of my life. It's not total BS but some of the points you mentioned contribute. 1. No one will help you - true. My group of friends would al…

True, we need a better way to control it. The wrong companies are becoming authorities for the wrong reasons. We at least need more transparency on the verification process. I woul…

DANE is an interesting concept for sure. Not 100% viable in the short-term but going forward we need to start thinking of a better solution. It would still be cert based and just a…

Pretty good idea.

Reselling ATM (we put this together fairly quickly). We designed our backend architecture to be fairly agnostic though in case we want to switch providers or deploy it in house.

Good call - We will get some documentation added asap. We are all security experts and user data has been a huge focus for us since day one. We currently spin up a private collecti…

More detailed information can be found on the snorby blog - http://blog.snorby.org/

Yea, agree with the above comments. This can all be done with Nessus (for free). What do you mean by `deep dive`? Are you reselling Burp? What do you plan to offer on the network s…