Get short, timely messages from David J. Bianco.

Twitter is a rich source of instantly updated information. It's easy to stay updated on an incredibly wide variety of topics. Join today and follow @DavidJBianco.

Get updates via SMS by texting follow DavidJBianco to 40404 in the United States
Codes for other countries

Two-way (sending and receiving) short codes:
Country Code For customers of
Australia
  • 0198089488 Telstra
Canada
  • 21212 (any)
United Kingdom
  • 86444 Vodafone, Orange, 3, O2
Indonesia
  • 89887 AXIS, 3, Telkomsel
Ireland
  • 51210 O2
India
  • 53000 Bharti Airtel, Videocon
Jordan
  • 90903 Zain
New Zealand
  • 8987 Vodafone, Telecom NZ
United States
  • 40404 (any)

DavidJBianco

  1. Writing a blog post for the first time in about 2 years. Man, I'm a little rusty.
  2. @tigercat6795 Seriously. How much work could that have already saved us? I had no idea the technology was already so advanced
  3. goo.gl/jCUwU would be great in security. Auto reporting for incidents/pentests/etc. Great for those who want to do, not document.
  4. RT @Bro_IDS: Announcing Bro Exchange 2012. blog.bro-ids.org/2012/05/announ… <-- I want to go to there.
  5. @jackcr I'm so busted!
  6. ... "just hipster"?? Who are you and what have you done with @Mephux?
  7. @taosecurity wow, kinda makes all our hard work seem irrelevant, huh?
  8. @cuckoosandbox any chance you'd be willing to add support for fake VM teams for this purpose? e.g. Start cuckoo1 & inetsim1 VMs together
  9. InerSim for @cuckoosandbox not as straightforward as I thought. Need 1 per pool VM to capture good reports. VM teams would be ideal.
  10. @DFIR_Janitor @jackcr so far haven't had any issues capture network traffic. I'll keep that in mind though.
  11. @jackcr I assume using tcpdump and not vbox builtin sniffer?
  12. @jackcr Interesting. What kind of vbox issues?
  13. Installed @cuckoosandbox. Works well out of the box. Mystified why there's no built-in hook for an Inetsim VM, though. Looks pretty easy.
  14. @taosecurity I think we found your next book.
  15. @taosecurity @tgjelten @nprnews @morningedition Great story. Sounds like we need a "Jane's Cyber Weapons and Threats" publication.
  16. @dougsteelman unfortunately there are NDAs in place to prevent me from going into more detail. I know how lame that sounds as an argument.
  17. @dougsteelman it depends on the company. Some take it far more seriously than others. Also, it's not cheap. You really gotta want it.
  18. @dougsteelman many rival anything I've seen from gov, though that really isn't too hard.
  19. @dougsteelman most don't want to be outed, but I have been to a number that have advanced detection, response & intel capabilities