Sign in

Bobert Hepker

@boberthepker.bsky.social
18 followers 19 following 29 posts

(He/Him) Husband, father, pentester, born in a meteor crater, old console collector, enjoyer of empty mountain roads. #Knoxville #KnoxvilleTN #HomeAssistant #FlipperZero #RetroGaming #OSCP #Pentest #RedTeam #Pi #ESP32 #ESP8266 #Marauder #NRF24

PostsRepliesMedia
Reposted by Bobert Hepker
David Gilbert @davidgilbert.bsky.social · 19/08/2026
Incredible scoop from @dmehro.bsky.social and @dell.bsky.social who were able to recreate Flock's new AI-powered tool that lets police officers ID drivers and track vehicles—capabilities the company has repeatedly said it doesn't allow. www.wired.com/story/flock-...
wired.com
Flock Has a Powerful New AI Tool for Police. We Got Its Code
Flock’s surveillance cameras have already sparked outrage. WIRED reconstructed its next-generation AI system, already in use by some police, to confirm it goes much further than tracking license plate...
014376
Bobert Hepker @boberthepker.bsky.social · 17/08/2026
Might try to get back on this thing.
static.klipy.com
Cat Waving with Pixel Emoji Meme
ALT: Cat Waving with Pixel Emoji Meme
000
Reposted by Bobert Hepker
Adrian Sanabria @sawaba.bsky.social · 11/08/2026
My thoughts on 1Password’s first research publication from their brand new Off-by-1 Labs! www.defendersinitiative.com/p/reviewing-...
defendersinitiative.com
Reviewing initial research on using AI for vulnerability remediation
TL;DR: don't use AI to create patches
001
Reposted by Bobert Hepker
TrustedSec @trustedsec.com · 09/12/2025
What if you could confirm password reuse without cracking a single password? In this blog, Austin Coontz shows how hash shucking leverages NTLM hashes to identify reuse across Kerbereros, NTLM, and cached credentials, and how to defend against it. trustedsec.com/blog/holy-sh... Link preview
trustedsec.com
Holy Shuck! Weaponizing NTLM Hashes as a Wordlist
031
Reposted by Bobert Hepker
BSides Knoxville @bsidesknoxville.bsky.social · 26/10/2025
Calling all Sponsors! Halloween is this Friday, give the board a scare 😂 BSides Knoxville 2026 Prospectus buff.ly/jJYtKjZ #BSK2026 #callforsponsors
011
Reposted by Bobert Hepker
Adrian Sanabria @sawaba.bsky.social · 14/10/2025
This Korean data center fire keeps getting more and more tragic. Here’s what I know, to catch you up. 1. Back in 2017, S.Korea built “G Drive” for government officials to store all their files (no relation to Google drive, the ‘G’ stands for Government)
101
Reposted by Bobert Hepker
Robert Reich @rbreich.bsky.social · 10/10/2025
Our nation's federal employees are more than just numbers on a spreadsheet. They make sure we have clean water. They protect us from financial fraud. They provide healthcare to our communities. They make our government actually work for people. Do not forget this.
299123373991
Reposted by Bobert Hepker
Adrian Sanabria @sawaba.bsky.social · 20/09/2025
Remember that time Oracle forgot to include access control for virtual disks, and you could mount any disk image belonging to any other Oracle Cloud customer if you knew the disk id? This thing Microsoft did is worse dirkjanm.io/obtaining-gl...
dirkjanm.io
One Token to rule them all - obtaining Global Admin in every Entra ID tenant via Actor tokens
While preparing for my Black Hat and DEF CON talks in July of this year, I found the most impactful Entra ID vulnerability that I will probably ever find. One that could have allowed me to compromise ...
055
Reposted by Bobert Hepker
Katie Drummond @katie-drummond.bsky.social · 22/09/2025
Here it is: The @wired.com Politics Issue is now live, with more stories rolling out all week. We're so proud of this one. Behold this cover; truly a work of art. And we're treating it that way: Starting today, you can find it on murals, billboards, and posters across in five U.S. cities.
28880201
Reposted by Bobert Hepker
Andy Greenberg @agreenberg.bsky.social · 23/09/2025
The Secret Service isn't claiming it foiled any plot targeting the UN General Assembly. Just that a big collection of SIMs (probably used for fraud) could have *potentially* disrupted NYC cell service. The SIMs were in a *35 MILE* radius of the UN. These headlines are all pretty egregiously wrong:
1135395
Reposted by Bobert Hepker
TProphet @tprophet.org · 23/09/2025
1/ Hi, I'm TProphet. I write the Telecom Informer for @2600.com. A lot of people have been asking me about www.nbcnews.com/politics/nat... given that I'm somewhat knowledgeable in the area. Here's my take: I'm kind of astonished that this is public, and it isn't normal that it would ever be.
nbcnews.com
Secret Service agents dismantle network that could shut down New York cellphone system
Agents discovered electronic devices in five locations in and around the city that could be used to disable cellphone towers. The system could also be used for criminal activities.
10363178
Reposted by Bobert Hepker
BSides Knoxville @bsidesknoxville.bsky.social · 09/05/2025
Make sure to enjoy a donut on 10-SEC tomorrow morning! #BSK2025
021
Reposted by Bobert Hepker
BSides Knoxville @bsidesknoxville.bsky.social · 03/05/2025
From Guardian to Threat: The Double Life of Security Tools with Stephen Hilt will be live at 3PM! Find Stephen on social media: www.linkedin.com/in/stephen-h... & x.com/sjhilt Add this talk to your schedule: bsidesknoxville2025.sched.com/event/1yuas/... #BSK2025
011
Reposted by Bobert Hepker
TrustedSec @trustedsec.com · 02/05/2025
Principal Security Consultant Adam Compton will be speaking at BSides Knoxville, May 9 at 2:00PM. Make sure you catch his talk "An Old Hillbilly's Guide to BASH for Pentests: Automating, Logging, and Covering Your Butt" if you'll be there! bsidesknoxville2025.sched.com/event/1yuaX/...
031
Reposted by Bobert Hepker
Andy Greenberg @agreenberg.bsky.social · 29/04/2025
Flaws in Apple's AirPlay protocol for streaming media to speakers, TVs, and set-top boxes have left millions of these devices vulnerable to being hijacked by any hacker on the same Wifi network. Many of these devices never receive patches. www.wired.com/story/airbor...
wired.com
Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi
Researchers reveal a collection of bugs known as AirBorne that would allow any hacker on the same Wi-Fi network as a third-party AirPlay-enabled device to surreptitiously run their own code on it.
47034
Reposted by Bobert Hepker
BSides Knoxville @bsidesknoxville.bsky.social · 30/04/2025
It's not too late to purchase your ticket! We only have NINE more days! Here's the link if you need it ----> www.eventbrite.com/e/bsides-kno... 👀 #BSK2025
002
Bobert Hepker @boberthepker.bsky.social · 18/03/2025
New Pebble watch being announced tomorrow at noon EDT. store.repebble.com/countdown
store.repebble.com
It's the final countdown
It's the final countdown
000
Bobert Hepker @boberthepker.bsky.social · 22/02/2025
It will be interesting to see if this ends up having any impacts on copyright law and torrenting. www.tomshardware.com/tech-industr...
tomshardware.com
Meta defends using pirated material, claims it's legal if you don't seed content
Configuration settings were modified "so that the smallest amount of seeding possible could occur".
000
Reposted by Bobert Hepker
Andy Greenberg @agreenberg.bsky.social · 19/02/2025
Russia-linked hackers have been phishing Ukrainian military with Signal QR codes that look like group invites but instead add a linked device that eavesdrops on messages. Update Signal now to get its fix for a tactic that’s likely to spread beyond Ukraine. www.wired.com/story/russia...
wired.com
A Signal Update Fends Off a Phishing Technique Used in Russian Espionage
Google warns that hackers tied to Russia are tricking Ukrainian soldiers with fake QR codes for Signal group invites that let spies steal their messages. Signal has pushed out new safeguards.
3346229
Reposted by Bobert Hepker
Senator Bernie Sanders @sanders.senate.gov · 14/02/2025
Public education is the backbone of American democracy. In the richest country in the history of the world, we cannot abandon our teachers and our public schools.
33193501651
Bobert Hepker @boberthepker.bsky.social · 12/02/2025
My son #hacked his first video game console tonight using #Linux and #Python. #Proud
010
Reposted by Bobert Hepker
Technology Connections @techconnectify.bsky.social · 09/02/2025
So, when people produce stories about EVs which are specifically about where and how people charge them, not mentioning home charging is I think a terrible omission. Specifically because if more people understood how that works, there'd be more pressure to solve at-home charging for apartments etc.
21483
Reposted by Bobert Hepker
Jessica Lyons @jessicalyons.bsky.social · 04/02/2025
When asked about the feasibility of abusing this sort of abandoned internet infrastructure, watchTowr CEO Benjamin Harris told me it would be "terrifyingly simple" to pull off.
theregister.com
Reused AWS S3 buckets a weak link in supply chain security
When cloud customers don't clean up after themselves, part 97
0167
Reposted by Bobert Hepker
Bluesky @bsky.app · 05/02/2025
And if you don't follow football and you just hope everybody has a good time on Sunday... you can just like this post. 🤗
112390846
Bobert Hepker @boberthepker.bsky.social · 04/02/2025
Fluffy gray cat holding his head in his paw.
010
Reposted by Bobert Hepker
Larry Pfeiffer @larrypfeifferdc.bsky.social · 02/02/2025
They covered up with brown paper the photos of Women in American Cryptology—members of the Hall of Honor like Elisabeth Friedman and Ann Caracristi—and People of Color in Cryptologic History honorees—like Wash Wong and Ralph Adams. All in response to President Trump’s anti-diversity order. /2
12222136
Reposted by Bobert Hepker
Peter Sagal @petersagal.bsky.social · 30/01/2025
I missed this entirely: The FAA Administrator criticized Space X’s safety record and threatened fines. Musk demanded he resign. He did. On January 20th. www.thedailybeast.com/faa-chief-mi...
thedailybeast.com
FAA Chief Quit on Jan. 20 After Elon Musk Told Him to Resign
Michael Whitaker had only been in the role for a year but the SpaceX chief accused him of “harassment.”
1005234118921
Reposted by Bobert Hepker
Andy Greenberg @agreenberg.bsky.social · 23/01/2025
Security flaws in a Subaru web portal let hackers unlock, start ignition or access a year of detailed location history for millions of cars. The flaws are now patched. But they revealed powerful tracking abilities that Subaru employees can still access. www.wired.com/story/subaru...
wired.com
Subaru Security Flaws Exposed Its System for Tracking Millions of Cars
Now-fixed web bugs allowed hackers to remotely unlock and start millions of Subarus. More disturbingly, they could also access at least a year of cars’ location histories—and Subaru employees still ca...
10256115
Bobert Hepker @boberthepker.bsky.social · 20/01/2025
hackaday.com/2025/01/19/b...
hackaday.com
Bambu Connect’s Authentication X.509 Certificate And Private Key Extracted
Hot on the heels of Bambu Lab’s announcement that it would be locking down all network access to its X1-series 3D printers with new firmware, the X.509 certificate and private key from the Ba…
000
Reposted by Bobert Hepker
fernacen @fernacen.vulpi.net · 12/01/2025
Home Assistant is a helluva drug 😩
2234
Reposted by Bobert Hepker
Adrian Sanabria @sawaba.bsky.social · 17/12/2024
Post quantum crypto hype is out of control. Which means I needed to bang out a rant, of course. www.linkedin.com/pulse/3-reas...
linkedin.com
3 Reasons Why the Post Quantum Crypto Migration Will Be a Snoozefest
First, some background: we're pretty sure that quantum computers will eventually be able to crack certain types of encryption. This has led to a post-quantum cryptography (PQC) migration to replace th...
011
Reposted by Bobert Hepker
Stephen Hilt @sjhilt.hilt.zip · 19/12/2024
Cybercriminals are hijacking home internet connections to build massive residential proxy networks, disguising their shady activities as legitimate traffic. This growing threat exploits your trust, tech, and bandwidth for profit. Learn more: www.wired.com/story/reside...
wired.com
This VPN Lets Anyone Use Your Internet Connection. What Could Go Wrong?
A free VPN app called Big Mama is selling access to people’s home internet networks. Kids are using it to cheat in a VR game while researchers warn of bigger security risks.
022
Bobert Hepker @boberthepker.bsky.social · 17/12/2024
www.wired.com/story/digita...
wired.com
Hackers Can Jailbreak Digital License Plates to Make Others Pay Their Tolls and Tickets
Digital license plates sold by Reviver, already legal to buy in some states and drive with nationwide, can be hacked by their owners to evade traffic regulations or even law enforcement surveillance.
000
Bobert Hepker @boberthepker.bsky.social · 13/12/2024
asfasfasdfasfdasdfasfasfasfsadffffffffffffffffffffasdfsfsafsfdwfgasdgbdfbgdsgasdgdsbdb #test www.defense.gov/News/News-St...
defense.gov
test
asfdasfasdfasdf
000
Reposted by Bobert Hepker
Ciaran Martin @ciaranm.bsky.social · 12/12/2024
I don’t normally get worked up about the naming threat actors thing. But the Volt & Salt Typhoon is a disaster as it’s so hard for non-specialists to tell them apart: - Salt is Snowden style espionage by China against US - Volt is a direct 🇨🇳 military threat to degrade western infrastructure 1/2
712938
Bobert Hepker @boberthepker.bsky.social · 09/12/2024
Tesla implements much-needed Supercharger price reduction as network hits all-time-high electrek.co/2024/12/09/t...
electrek.co
Tesla implements much-needed Supercharger price reduction as network hits all-time-high
Tesla is implementing a much-needed price reduction across its Supercharger network as it hits a new usage all-time high. Despite...
100
Reposted by Bobert Hepker
Jake Williams @malwarejake.bsky.social · 07/12/2024
One day I'm going to meet the person who decided the port option in ssh is -p and in scp it's -P. They will not enjoy this meeting...
1015410
Reposted by Bobert Hepker
Patrick Chovanec @prchovanec.bsky.social · 06/12/2024
The fact that Disney bought Star Wars and bought the Muppets and haven’t done a Muppets Star Wars is a crime.
702269522702
Bobert Hepker @boberthepker.bsky.social · 05/12/2024
@sawaba.bsky.social Still tracking companies destroyed by cyber-attacks? www.bleepingcomputer.com/news/securit...
bleepingcomputer.com
Vodka maker Stoli files for bankruptcy in US after ransomware attack
Stoli Group's U.S. companies have filed for bankruptcy following an August ransomware attack and Russian authorities seizing the company's remaining distilleries in the country.
110
Bobert Hepker @boberthepker.bsky.social · 05/12/2024
Every year, I feel like half of these are wrong. I barely listened to NIN this year, and I definitely listened to more Sylosis than Darkest Hour. #Spotify #Wrapped
000
Bobert Hepker @boberthepker.bsky.social · 30/11/2024
This place might actually end up being the most successful alt-Twitter. Still rootin' for Mastodon, but I'll give this a go after someone compared Mastodon to a Linux Desktop. Accurate.
000