TRIGGERED!

Singing the Blues:
Taking Down an Insider Threat

"I had all of the advantages. I was already inside the network. No one suspected me. But they found my hack, kicked me off the network...

...and physically hunted me down."

Many pentests start from the outside, wanting to see how the perimeter might be breached.

This pentest started from the inside. My client wanted to assume they had already been breached, and, if breached, how far could an attacker go.

Could they stop me once I was inside?

So they snuck me in. Disguised me as a new employee. Gave me a work computer, an ID badge, an account in their system... hell, I even had a cubicle w/my assumed name on it.

The only person who knew who I really was was their CISO. Everyone else thought I was Jeremy in Marketing.

During most of the first morning, I completed onboarding, made introductions, and completed menial tasks.

But I had to act quick. I only had a week onsite. I had to hack their network while not raising suspicion.

So I set about it.

You have to understand... most "Internal Pentests" are straight forward. The hard part is breaching the network, but once you're inside, it's a target rich environment. End of Life computers, default passwords, everyone a Local Administrator...

1/ I am seeing more and more founder secondary in venture rounds (Secondary = founders selling some of their shares before some other shareholders are able). Series B-D. I see both as an investor and through entrepreneur circles.

2/ I like secondary for entrepreneurs. Moderation is key but in a lot of situations I think it helps accelerate the co. Lots of very smart investors disagree. Here are my thoughts.

3/ Magnitude: My basic rule of thumb from what I see is market is 4+ yrs and up to 10% of founder’s equity stake with some $ cap that makes sense given stage etc. (typically <$10m)

4/ The entrepreneurial journey is brutally hard. Giving some financial relief helps remove one piece of pressure. I don’t think that secondary in the magnitude mentioned impacts the drive/persistence of great entrepreneurs.

5/ That secondary means they will be able to just sleep knowing they can pay their kids’ tuition. Secondary will make most founders better at their jobs, thus accelerating the co.

1. #Qanon told us that Saudi Arabia is a central piece of the puzzle in taking out the Deep State...we are watching the Deep State attempt to remove Crown Prince MBS and disrupt Pres Trump's administration's ties with MBS and the "new" Saudi/US coalition. Early in his admin,

2....@Potus sent Jared Kushner (JK) to SA on an undisclosed trip and told King Salman that business as usual was over, and if he wanted Pres Trump's support, Prince Alwaleed would have to be divested of $ and power; Alwaleed is one of top Deep State $ men and was tied to HRC.

3. @Potus knew that before he could begin cleansing the US and the rest of the world of the DS, he would have to cut one of the financial head's off the snake (Alwaleed). After JK met w/ King Salman, Alwaleed was arrested and divested of billions; MBS became leader of SA.

4. SA loves Pres Trump because he's a man of his word; SA could not trust Hussein or Clintons because they use SA for oil and leverage; SA has many factions, but essentially you have the new and upcoming SA that is attempting to modernize through Crown Prince MBS, and then you

5...have the old guard represented by Alwaleed who was one of the Deep State financial heads and loyal to the DS more than SA; SA knew Hussein was financing Iran to hold western world hostage, and SA was caught in middle of Deep State black mail; this is why @Potus was celebrated

It is 2018 and this error message is a mistake from 1974.
This limitation, which is still found in the very latest Windows 10, dates back to BEFORE STAR WARS. This bug is as old as Watergate.

When this was developed, nothing had UPC codes yet because they'd just been invented.
Back when this mistake was made, There was only one Phone Company, because they hadn't been broken up yet. Ted Bundy was still on the loose. Babe Ruth's home run record was about to fall.

When this bug was developed, Wheel of Fortune hadn't yet aired. No one had seen Rocky Horror. Steven Spielberg was still a little-known directory of TV films and one box-office disappointment. SNL hadn't aired yet. The Edmund Fitzgerald was still hauling iron ore.

WHEN THIS STUPID MISFEATURE WAS INVENTED, THE GODFATHER PART II HAD JUST OPENED IN THEATERS.

So, why does this happen? So Unix (which was only 5 years old at this point) had the good idea of "everything is a file" which mean you could do things like write to sockets, pipes, the console, etc with the same commands and instructions.

A thread of images from a Japanese illustrated history of America from 1861.

Here is George Washington (with bow and arrow) pictured alongside the Goddess of America. 1/

Here is Christopher Columbus (seated at center) reporting his discovery of America to Queen Isabella of Spain.

So far, kinda normal, but wait for it.... 2/

Now it's the American Revolution. Here is George Washington defending his wife "Carol" from a British official named "Asura" (same characters as the Buddhist deity). 3/

And here is Washington's "second-in-command" John Adams battling an enormous snake. 4/

Here is Washington and his wife "Carol" meeting an extremely youthful Benjamin Franklin, who has an impressive squat. 5/