iiinova — where your digital self keeps evolving

Ravenholm Tech @ravenholmtech.bsky.social · 16/08/2026

You've probably been focused on how to build your network defensively. (Port security, segmentation, 802.1X etc..) Is it beneficial to know how attacks work? Yes. Is it necessary to be successful at preventing attacks? Nope. Those new toys might teach you new tricks though. Happy hunting.

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 05/08/2026

I had AI create a NIST controls spreadsheet for me. Took me a few days to correct all of the errors. It really didn't save me much time. If I wasn't an expert in my field I wouldn't have known there were problems. So... Yeah I'd be fine if it vanished.

020 2

Ravenholm Tech @ravenholmtech.bsky.social · 20/06/2026

I personally prefer the Dunlop 1mm nylon picks. They can take quite the beating. I've never had one crack or break.

140 4

Ravenholm Tech @ravenholmtech.bsky.social · 04/05/2026

Sweet, just drop that in the mail for me fam.

040 4

Reposted by Ravenholm Tech

cj @cjcoffey.com · 20/02/2026

It's been weighing on me for a bit, so I wrote some thoughts on the whole AI thing. cjcoffey.com/posts/though...

cjcoffey.com

A few thoughts on AI

Pardon me for a moment while I dump the contents of my brain onto this piece of digital paper. I...

021 2

Reposted by Ravenholm Tech

TrustedSec @trustedsec.com · 17/02/2026

If you were expecting a CMMC-style rollout, GSA has other plans. In our latest blog, Director of Advisory Solutions Chris Camejo explains how new CUI requirements can be inserted into GSA contracts immediately and what that means for compliance readiness. Check it out! trustedsec.com/blog/updated...

trustedsec.com

Updated GSA Contractor CUI Protection Requirements

012 2

Ravenholm Tech @ravenholmtech.bsky.social · 03/02/2026

There are certainly some.... takes in here.

000 0

Reposted by Ravenholm Tech

TrustedSec @trustedsec.com · 03/02/2026

Model Context Protocol servers often rely on SSE and WebSockets, which makes manual testing tricky. @hoodoer.bsky.social introduces MCP-ASD, a new Burp Suite extension designed to help testers identify, enumerate, and interact with MCP servers more effectively. trustedsec.com/blog/mcp-in-...

trustedsec.com

MCP in Burp Suite: From Enumeration to Targeted Exploitation

022 2

Reposted by Ravenholm Tech

MinnMax @minnmax.com · 23/01/2026

In solidarity with today's ICE OUT OF MINNESOTA blackout, MinnMax is donating $1 to the Immigrant Law Center of Minnesota for every share of this Bluesky post for the next hour.

2151651120289 20.3K

Ravenholm Tech @ravenholmtech.bsky.social · 16/01/2026

Saw this on reddit. Very relatable.

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 06/12/2025

I just said this in a meeting a few days ago.

010 1

Ravenholm Tech @ravenholmtech.bsky.social · 08/11/2025

Final Fantasy Tactics, Ball X Pit, Once Upon a Katamari, In Sound Mind.

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 03/11/2025

Did they just disrespect the Grand Nagus?

100 1

Reposted by Ravenholm Tech

TrustedSec @trustedsec.com · 02/10/2025

A key cybersecurity information-sharing law has temporarily expired amid broader government funding delays. David Kennedy told The Hill that the lapse eliminates key protections that the exchange of information, which is encouraged by CISA, provides. Read now! thehill.com/homenews/552...

thehill.com

Cyberthreat sharing law expires as government shuts down

A law allowing private companies to share information about cybersecurity threats with the government expired Wednesday after Congress failed to reauthorize the legislation amid a wider shutdown fi…

011 1

Ravenholm Tech @ravenholmtech.bsky.social · 26/09/2025

Yeah, I missed a few chests as well. I intend to 100% the entire pixel collection, but I've been sidetracked with all of the other new Final Fantasy releases. There's another one coming up next week that I'll be grinding out. I did 100% FFI and FFIII though. FFIV is in the works.

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 25/09/2025

FFII was _not good_. The systems in that game seem to have been spun off into the SaGa series. Younger me didn't like FFXIII, I picked it up again to see if old me might have a different opinion. Haven't tried it yet though.

110 1

Ravenholm Tech @ravenholmtech.bsky.social · 30/07/2025

Thanks for hosting the ISC2 meeting @trustedsec.com. Pretty cool to see the Back to the Future collection.

120 2

Ravenholm Tech @ravenholmtech.bsky.social · 28/07/2025

Been working helping people resolve this "little" issue. nvd.nist.gov/vuln/detail/... If you're running on-prem Sharepoint 2016 or 2019 you might want to take care of this quickly.

nvd.nist.gov

NVD - CVE-2025-53770

100 1

Ravenholm Tech @ravenholmtech.bsky.social · 15/07/2025

You know what? I'm glad I saw this, I've been looking for someone to rebind a book for me. I have no idea where to start looking for a service like that. Would you be willing to point me in the right direction? If you want to do it just let me know your rate.

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 03/07/2025

This reminded me of when I was a network engineer. Had 2 chassis switches in VSS. 4 Supervisors. Every now and then it would get a parity error and generate a few thousand alert emails a second. Restarting the offending supervisor fixed it. Cisco support blamed it on cosmic radiation.

media.tenor.com

a black background with green and blue dots and the words " lemat works " at the bottom

ALT: a black background with green and blue dots and the words " lemat works " at the bottom

110 1

Ravenholm Tech @ravenholmtech.bsky.social · 02/07/2025

Built a cool little volume mixer for a family member's PC. It was built using Deej. It was a fun little project. I picked the colors to match their PC case, it was pretty straight forward and easy to produce. github.com/omriharel/deej

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 27/06/2025

Oh man. I've been seeing sooooo many bad takes about plain text credentials in code. Certainly, every software developer/engineer knows that plain text creds in code is bad. I'm sure they all know how to use a secrets vault. Who cares if it's only accessible internally? Just fix it.

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 15/05/2025

Here's my little collection. Arduino based on the left, pico based on the right.

020 2

Ravenholm Tech @ravenholmtech.bsky.social · 15/05/2025

I'd start with a Rasperry Pi Pico or Pico 2 (or any board rocking the RP2040 or RP2350 chip) You can write for it in Python. Which is pretty damn friendly. There's lots of run little projects to get you on your way. For something useful start with a macropad. www.hackster.io/1NextPCB/how...

hackster.io

How to Build a Pico Macro Pad

hey, friends In this instructable, I am going to show you How to Build a Macro Pad using Raspberry pi pico By NextPCB.

130 3

Ravenholm Tech @ravenholmtech.bsky.social · 07/05/2025

I don't know what this is, but I wanna play it.

110 1

Ravenholm Tech @ravenholmtech.bsky.social · 17/04/2025

Relatable. This one is labeled as a USB to TTL, but I use it for UART.

060 6

Ravenholm Tech @ravenholmtech.bsky.social · 21/02/2025

Didn't congress take care of this in 1970? en.wikipedia.org/wiki/Postal_...

en.wikipedia.org

Postal Reorganization Act - Wikipedia

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 06/02/2025

There's always yee olde ATA. There's quite a few of them out there that'll run on POE. Should be simple for people to understand. Bet they are pretty cheap to.

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 17/01/2025

I really like strange hardware designs. This looks really fun.

000 0

Reposted by Ravenholm Tech

Dr Ravi Nayyar @ravirockks.bsky.social · 02/01/2025

1 malicious version each of 2 npm packages for a popular JavaScript bundler were released by an attacker 'who gained unauthorized npm publishing access'. One of the legit npm packages has around 370k downloads/week, the other, 135k/week. socket.dev/blog/rspack-...

socket.dev

Supply Chain Attack on Rspack npm Packages Injects Cryptojac...

A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.

073 7

Ravenholm Tech @ravenholmtech.bsky.social · 25/12/2024

Most of the stories are like this. www.reddit.com/r/FireStickH... I don't think what you linked is the right one, but I saw hundreds of live channels from all over the world. Tons of movies and TV series streaming on demand. I've seen stuff like it before, but never on this scale.

reddit.com

From the FireStickHacks community on Reddit

Explore this post and more from the FireStickHacks community

110 1

Ravenholm Tech @ravenholmtech.bsky.social · 24/12/2024

If someone has any information about how the back end of this works let me know. I'm very curious about this whole community and how all of this works to get more insight into the security concerns surrounding this. I think it'll be a fun project to gather this information.

100 1

Ravenholm Tech @ravenholmtech.bsky.social · 24/12/2024

Everyone using this seems to "know a guy" they pay money to through some payment app. (paypal, zelle, cashapp, etc....) I haven't seen much information about how these middlemen get access to provide this service. There are clearly security concerns around this.

100 1

Ravenholm Tech @ravenholmtech.bsky.social · 24/12/2024

Hello fellow humans. I have a neighbor that informed me about a "thing" on his Amazon Fire Stick. Apparently, it's a service they pay for. ViewTV. Pretty interesting. It's clearly a side loaded app from a third-party source. I can't find any information about how the back end of this works.

100 1

Reposted by Ravenholm Tech

David Buchanan @retr0.id · 19/12/2024

probably don't get your cybersecurity advice from youtube sponsor segments

1347159 471

Ravenholm Tech @ravenholmtech.bsky.social · 17/12/2024

Look, seriously. I don't care if it's "internal only" patch it anyway. Also, why is there a script to disable EDR when you use a certain piece of software?

000 0

Ravenholm Tech @ravenholmtech.bsky.social · 12/12/2024

Can you even imagine months of negotiation to harden a VPN configuration? I can.

000 0

Reposted by Ravenholm Tech

TrustedSec @trustedsec.com · 03/12/2024

In our new #blog, Senior Security Consultant @two06.bsky.social goes over methodology that led him to discovering a deserialization vulnerability in #LINQPad, a .NET scratchpad application commonly used by developers. Read it now! trustedsec.com/blog/discove...

trustedsec.com

Discovering a Deserialization Vulnerability in LINQPad

094 9

Reposted by Ravenholm Tech

Black Hills Information Security @bhinfosecurity.bsky.social · 04/12/2024

Open-Source Tools Forensic Kit - exterro.com/forensic-toolkit Autopsy - autopsy.com Volatility - volatilityfoundation.org Zimmerman - ericzimmerman.github.io/#lindex.md Wireshark - wireshark.org iLEAPP/aLEAPP - github.com/abrignoni/iLEAPP github.com/abrignoni/aLEAPP Klogg - klogg.filimonov.dev

exterro.com

Data Risk Management - Data Discovery & Privacy Platform | Exterro

Exterro's powerful data risk management platform unifies e-discovery, privacy, data governance, digital forensics, and cybersecurity compliance to…

191 9

Ravenholm Tech @ravenholmtech.bsky.social · 04/12/2024

That's why I was still there. There for a while twitter could be used as a pretty good real time threat feed. That stuff started dying off shortly after the ownership changed. Hope to see more infosec people here soon.

020 2

Ravenholm Tech @ravenholmtech.bsky.social · 02/12/2024

Thanks!!! It was quite the ordeal.

000 0