Sign in

Joshua Wright

@joswr1ght.bsky.social
299 followers 159 following 34 posts

Professional hacker, accidental educator. Rhode Island is not an island.

PostsRepliesMedia
Joshua Wright @joswr1ght.bsky.social · 16/03/2025
That’s me! 🙌
031
Joshua Wright @joswr1ght.bsky.social · 08/02/2025
On Thursday I presented at Way West Hackin’ Fest in Denver to a group of friends, colleagues, and my son! I appreciate this community of people who come together to learn, to be supportive, and to have fun! (Slides and hopefully video shared soon.) Thank you #wwhf!
071
Joshua Wright @joswr1ght.bsky.social · 01/02/2025
I have a friend who became blind in her 50s almost overnight. Helping her with using computers has helped me understand the need for better accessibility in a way that I never understood before. We can all do better in making technology more accessible. Please do. bees.substack.com/p/making-hac...
bees.substack.com
Making Hacking Accessible
The guide on how to make hacking accessible
030
Joshua Wright @joswr1ght.bsky.social · 28/01/2025
This video from Dave Plummer really helped me understand the implications and methods behind DeepSeek. Worth a listen! youtu.be/r3TpcHebtxM?...
youtu.be
Deepseek R1 Explained by a Retired Microsoft Engineer
YouTube video by Dave's Garage
142
Joshua Wright @joswr1ght.bsky.social · 10/01/2025
Today I realized I’m the person people at work turn to when they have Git questions or problems. Me. How did we fall so far? 😬
130
Joshua Wright @joswr1ght.bsky.social · 02/01/2025
Happy birthday to the unusual number of my cybersecurity friends who all have January 1st birthdays on Facebook! 🧐🧐🧐
081
Reposted by Joshua Wright
CraHan @crahan.n00.be · 28/12/2024
Ghostty 1.0 is now available and it's amazing. ghostty.org #terminal #macos #linux
ghostty.org
Ghostty
Ghostty is a fast, feature-rich, and cross-platform terminal emulator that uses platform-native UI and GPU acceleration.
111
Joshua Wright @joswr1ght.bsky.social · 14/12/2024
TIL about github.com/iknowjason/e..., a useful utility to assist in figuring out “what cloud provider/region is this entity deployed in?” $ ./edge -single 140.179.144.130 … [INF] Matched IP [140.179.144.130] to Cloud Service [API_GATEWAY] and Region [cn-north-1]
github.com
GitHub - iknowjason/edge: Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean.
Recon tool for cloud provider attribution. Supports AWS, Azure, Google, Cloudflare, and Digital Ocean. - iknowjason/edge
020
Reposted by Joshua Wright
Phil Hagen @philhagen.com · 10/12/2024
Important for parents/anyone guiding/mentoring kids-especially middle/high school: make sure they know ChatGPT etc are mostly WRONG and should never be used as sole sources!! It’s an important lesson because the (VC-fueled) tech media fawns over the lie engines as if they’re the second coming.
153
Joshua Wright @joswr1ght.bsky.social · 04/12/2024
Man near bear in forest with text “If you meet a bear in the forest, just ask him to review your pull request so he pretends he didn't notice you and goes away”
000
Joshua Wright @joswr1ght.bsky.social · 03/12/2024
Here, here. --break-system-packages is unnecessarily foolish.
010
Joshua Wright @joswr1ght.bsky.social · 03/12/2024
"Our job is to make it safe, not to tell [users] not to click on things on the *thing clicking machine that we gave them*" @metlstorm.risky.biz I'm planning on repeating this quote quietly to myself at least once a week for the rest of my days. www.youtube.com/watch?v=Rxye...
youtube.com
Risky Business Weekly (771): Palo Alto's firewall 0days are very, very stupid
YouTube video by Risky Business Media
041
Joshua Wright @joswr1ght.bsky.social · 02/12/2024
AI has taught me many things. First and foremost is that I hate bulleted lists. #ai
040
Joshua Wright @joswr1ght.bsky.social · 30/11/2024
Article by Bogdan Calin on using local LLMs to improve endpoint/file discovery. I'm not sure how practical this is for pen testers, but optimizing requests to avoid WAFs is real. www.invicti.com/blog/securit...
invicti.com
Brainstorm Tool Release: Optimizing Web Fuzzing With Local LLMs
Brainstorm is a new, smarter web fuzzing tool that combines local LLM models and ffuf to optimize directory and file discovery
120
Reposted by Joshua Wright
Alex Tijerina @iamalextijerina.bsky.social · 29/11/2024
If you haven't checked out @404media.co, I'd like to suggest that you do so at your earliest opportunity. There is some incredible writing happening there... www.404media.co
404media.co
404 Media
404 Media is a new independent media company founded by technology journalists Jason Koebler, Emanuel Maiberg, Samantha Cole, and Joseph Cox.
26715
Joshua Wright @joswr1ght.bsky.social · 23/11/2024
I tell all my students that Julia Evans @b0rk.jvns.ca is a treasure. Check out the Big Zine sale for some wonderful guides on all sorts of useful IT topics!
010
Reposted by Joshua Wright
𝖼𝗋𝗄Ⓥ @crk5.bsky.social · 22/11/2024
Happy 37th anniversary of the Max Headroom Incident, to those who celebrate.
10255381575
Joshua Wright @joswr1ght.bsky.social · 22/11/2024
This Wired article on Russian threat actors exploiting WiFi to gain access to a nearby target is 🧑‍🍳🤌💋. www.wired.com/story/russia... Years ago I visited the NSA Cryptological Museum, and the docent told me about an old motel across the street from the base, owned by Russian expats. 🧐🧐🧐 Old = New
wired.com
Russian Spies Jumped From One Network to Another Via Wi-Fi in an Unprecedented Hack
In a first, Russia's APT28 hacking group appears to have remotely breached the Wi-Fi of an espionage target by hijacking a laptop in another building across the street.
053
Joshua Wright @joswr1ght.bsky.social · 22/11/2024
I'm working on content as a RSA keynote panel hopeful. Any thoughts on what's worrying about SaaS security? I have a few ideas here.
Screenshot of slide with overlapping, squiggly lines conveying complexity. Three bullets:

Poor security responsibility definition
Insufficient logging resources
Limited forensic investigative access
200