Sign in

Russell Devine

@rjmd.bsky.social
2.1K followers 256 following 107 posts

💼 Cybersecurity 📀 Forensics & Response All opinions are from a southern right whale I met off the coast of Tasmania 🐋

PostsRepliesMedia
Reposted by Russell Devine
Tana @justmostlymemes.bsky.social · 23/03/2026
You put on your headphones and suddenly everyone feels like talking to you.
210315
Russell Devine @rjmd.bsky.social · 12/02/2026
Is AI really worth these RAM prices
000
Russell Devine @rjmd.bsky.social · 02/02/2026
Finally given up on my attempts of ProtonDrive <> Linux integration with rclone. @proton.me it's been six years, we need this sdk...
122
Russell Devine @rjmd.bsky.social · 04/12/2025
240 million PCs recently forced to be obsolete due to the Win10 end of life and absurd RAM prices driving new PC costs up don’t seem like a good mix
020
Reposted by Russell Devine
David Shiffman, Ph.D. 🦈 @whysharksmatter.bsky.social · 13/10/2025
Abandoning Antarctic krill management measure threatens conservation progress (commentary) news.mongabay.com/2025/10/aban... 🧪🦑🌎
news.mongabay.com
Abandoning Antarctic krill management measure threatens conservation progress (commentary)
All along the western Antarctic Peninsula, whales, penguins and seals in their millions depend on krill (Euphausia superba) throughout the year. In the most rapidly warming region on the continent,…
05311
Russell Devine @rjmd.bsky.social · 28/09/2025
Why was the built-in calculator removed from the Venmo app? Probably one of it’s best features.
000
Russell Devine @rjmd.bsky.social · 16/09/2025
So Apple blocks logging into iCloud if you use Ubuntu + FireFox. You have to spoof the user agent to get around it. Random.
000
Russell Devine @rjmd.bsky.social · 28/08/2025
Threat Intel report by Anthropic about threat actors using Claude is an interesting read.
anthropic.com
Detecting and countering misuse of AI: August 2025
Anthropic's threat intelligence report on AI cybercrime and other abuses
020
Russell Devine @rjmd.bsky.social · 14/08/2025
Microsoft has a hidden talent of making people never want to upgrade their Windows OS. Sadly only two months left of Win10 support.
011
Russell Devine @rjmd.bsky.social · 26/07/2025
Wouldn’t this effectively drive traffic away from delta.com to third party booking sites? The only time you need to book on the carrier website is when you are redeeming points
yahoo.com
Delta using AI to determine the price you pay for plane tickets
Delta Airlines is facing criticism for its use of artificial intelligence to determine ticket prices, a practice known as surveillance pricing.
010
Reposted by Russell Devine
Microsoft Threat Intelligence @threatintel.microsoft.com · 22/07/2025
Update: Microsoft has released security updates that fully protect customers using all supported versions of SharePoint affected by CVE-2025-53770 and CVE-2025-53771. Customers should apply these updates immediately. Full guidance and detection details: msft.it/6010sDzSE.
23730
Russell Devine @rjmd.bsky.social · 18/07/2025
I really hope @netflix.com signs @stephencolbert.bsky.social with a new late night show. Colbert is second to none.
100
Reposted by Russell Devine
Jun34u @jun34u.bsky.social · 17/07/2025
Unlike CEOs and other executives, individual contributors understand concert OPSEC
A photo of a TV where a woman dressed as a ghost for the Eras Tour is interviewed by local news. The caption reads “Woman hides identity because she called in sick to work.”
101148752580
Russell Devine @rjmd.bsky.social · 07/07/2025
Creative idea by @xeiaso.net to have a visitor’s local browser run cryptographic math in JS to identify and block AI bot scrapers.
000
Russell Devine @rjmd.bsky.social · 06/07/2025
Appears all DJI shipments are being seized at the US border, resulting in most products to be out of stock indefinitely on their website and partner retailers. A real shame because they arguably make the best drones. I really like their handheld cameras and was hoping to buy one.
dronedj.com
Every DJI drone is out of stock on the company's online store
If you’re looking to purchase a drone from DJI, visiting the company’s online store might not be the best option,...
100
Reposted by Russell Devine
John Hultquist @hultquist.bsky.social · 27/06/2025
Mandiant is now aware of multiple incidents in the airline sector that resemble Scattered Spider. The industry should button up its call centers where this actor has had a lot of success with social engineering. www.axios.com/2025/06/27/a...
axios.com
A prolific hacking group that's shutdown retailers and insurance companies turns to aviation
A cyberattack on WestJet last week is likely tied to the Scattered Spider gang, a source tells Axios.
02214
Reposted by Russell Devine
Jake Williams @malwarejake.bsky.social · 26/06/2025
Let's just agree that if this works against a vendor, you should stop using that vendor.
1264
Russell Devine @rjmd.bsky.social · 24/06/2025
The customer paid a $440 fine due to the “AI Scanner” identifying a scuff on a tire cover, with $125 (about 28%) being a processing fee for “the cost to detect and estimate the damage”. Good luck with customer retention.
thedrive.com
This Is What Happens When Hertz's AI Scanner Finds Damage on Your Rental
One customer was charged $440 for a scuff on his rental's wheel. But talking to a human employee about it wasn't easy, and he was encouraged to pay ASAP.
011
Reposted by Russell Devine
Valérie Masson-Delmotte @valmasdel.bsky.social · 08/06/2025
The Starfish Barometer, launched on World Ocean Day 2025, offers an accessible, science-based annual snapshot of the Ocean’s state and its vital connection with humanity www.starfishbarometer.org/content/over...
16733
Reposted by Russell Devine
Heather Adkins @argv.bsky.social · 23/05/2025
Some excellent work by @craiggidney.bsky.social that reduces the number of qubits (in a quantum computer) required to break RSA by 20-fold. If you don’t have a migration plan to safe algorithms, now is the time to start one!
0116
Reposted by Russell Devine
Volatility @volatilityfoundation.org · 16/05/2025
We are very excited to announce that Volatility 3 has reached parity with Volatility 2! With this achievement, Volatility 2 is now deprecated. See the full details in our blog post: volatilityfoundation.org/announcing-t...
volatilityfoundation.org
Announcing the Official Parity Release of Volatility 3!
Visit the post for more.
02513
Reposted by Russell Devine
Nicolas Grégoire @agarri.fr · 12/05/2025
TIL it's possible to search among opened Firefox tabs by prefixing your search with "%" 🤯 As a keyboard maximalist, the workflow should be "Ctrl-T + %search criteria + up/down + Enter" 🦥 support.mozilla.org/en-US/kb/add...
support.mozilla.org
Address bar autocomplete suggestions in Firefox | Firefox Help
When you type into the address bar, Firefox suggests pages you've bookmarked, tagged, visited before or have open in tabs. Learn more.
1213
Russell Devine @rjmd.bsky.social · 18/04/2025
Absolute tragedy.
nytimes.com
Trump Opens Marine National Monument to Commercial Fisheries
The president said the move was aimed at making the United States the world’s “dominant seafood leader.”
011
Reposted by Russell Devine
Tib3rius @tib3rius.bsky.social · 15/04/2025
BREAKING. From a reliable source. MITRE support for the CVE program is due to expire tomorrow. The attached letter was sent out to CVE Board Members.
35672409
Russell Devine @rjmd.bsky.social · 07/04/2025
So tariffs have achieved $10 trillion in losses to apparently solve a trade deficit valued at $1.2 trillion. Completely reasonable.
bloomberg.com
Markets Convulse as Tariff Chaos Erases $10 Trillion From Stocks
All across Wall Street, on the trading desks and in corporate C-suites, among hedge-fund managers and bond dealers, there’s a growing unease that one day soon, Donald Trump might just end up breaking ...
021
Russell Devine @rjmd.bsky.social · 29/03/2025
Garmin now wants to charge $69/year on top of their $1k+ watches to use Connect+ I can just see all the future features that would have been built in now getting pay walled. So disappointing.
theverge.com
Garmin adds AI and a subscription tier to its app
It’s a reversal from Garmin’s previous stance toward paywalls, but at least existing features and data remain free.
100
Russell Devine @rjmd.bsky.social · 24/03/2025
Good overview of NodeJS issue. Impacts v12 and below, which was EOL in mid-2022, so if you’re up to date on patching it’s not a problem.
020
Russell Devine @rjmd.bsky.social · 28/02/2025
Skip that morning coffee and donate $5 to support my run to find a cure! fundraise.cff.org/chicagomarat... I’m running for Breathe Team at the 2025 Chicago Marathon to raise money for the Cystic Fibrosis Foundation. Every donation, like, or repost helps!
fundraise.cff.org
Russell's Fundraising Page at Chicago Marathon
Russell is running the Chicago Marathon in 2025 for Breathe Team! Support me as I run for this great cause to help those in need living with Cystic Fibrosis. Every amount makes a difference, I appreci...
010
Reposted by Russell Devine
Chad Loder @chadloder.dev · 21/02/2025
Apple removes its Advanced Data Protection (ADP) feature from customers in the UK after pressure from the government. Very troubling news. ADP provides end-to-end encryption, allowing only account holders to view items such as photos or documents they have stored online.
bbc.com
Apple pulls data protection tool after UK government security row
Customers' photos and documents stored online will no longer be protected by end to end encryption.
14275139
Reposted by Russell Devine
Alexander Lees @alexanderlees.bsky.social · 11/02/2025
The jamming of Global Navigation Satellite System (GNNS) signals by military forces disrupts the tracking of tagged animals - these are tracks of Bonelli's Eagles which have been spoofed to other sites such as airports #Ornithology 🌐🌍
Fig. 2: Tracks of 10 tagged Bonelli’s eagles from 1 April to 1 September 2024, each individual represented with a different color.
1369
Russell Devine @rjmd.bsky.social · 28/01/2025
Multiple Garmin smartwatches are in a boot loop this morning. Starting a GPS activity seems to trigger the issue. The problem appears to be associated to an update Garmin pushed to the GPS sub-service, which is updated outside of the regular/beta channels, and the updates can’t be disabled.
131
Russell Devine @rjmd.bsky.social · 25/01/2025
References should be added as a feature, allowing you to add [#] after sentences with no char limit penalty that links to URLs with supporting info. Issue with char limit is it discourages supporting evidence. References would counter that and the community could rate the validity of sources.
120
Reposted by Russell Devine
Phil Stokes ⫍🐠⫎ @philofishal.bsky.social · 20/01/2025
This #macOS backdoor uses /usr/bin/SetFile to hide itself in the Finder. SetFile was deprecated in Xcode 6 (that's 2014 to humans)...not sure why it makes sense to declare smth 'deprecated' then leave it in the OS for 10+ years. 🤷‍♂️ #apple #malware SHA1: 609088c54b99432aab212f35cfe74030b52f0320
Image of disassembly showing a new macOS backdoor using the deprecated CLI tool 'SetFile'.
2238
Russell Devine @rjmd.bsky.social · 12/01/2025
That moment when you snapshot a VM to save progress and then you proceed to crash the VM before the snapshot completed
010
Russell Devine @rjmd.bsky.social · 10/01/2025
Musk claiming he is a top 20 in the world Diablo IV player while fumbling at basic gameplay on a live stream is quite entertaining. youtu.be/qpXu9ft9h4M?...
youtu.be
Elon Musk Absolutely Clueless Trying to Pilot his Boosted PoE2 Account on Stream
YouTube video by Quin69TV
020
Reposted by Russell Devine
Taggart @taggart-tech.com · 08/01/2025
A reminder to Google Maps users that you can download whole regions for offline use in the event of no internet connection. In the Maps app, tap your profile picture, then "Offline Maps." Great for evacuation planning. #PalisadesFire
2124
Reposted by Russell Devine
futur 🔹 @futur.blue · 31/12/2024
incredible
The first message transmitted over the hotline was on August 30, 1963. Washington sent Moscow the text: "THE QUICK BROWN FOX JUMPED OVER THE LAZY DOG'S BACK 1234567890". The message was sent in all capital letters, since the equipment did not support lowercase.[21] Later, during testing, the Russian translators sent a message asking their American counterparts, "What does it mean when your people say 'The quick brown fox jumped over the lazy dog'?"[22]
618424
Reposted by Russell Devine
SwiftOnSecurity @swiftonsecurity.com · 16/12/2024
I'm up 47% on Crowdstrike stock after buying it last year because I knew nobody was gonna transition EDR's
123147
Russell Devine @rjmd.bsky.social · 14/12/2024
If you want your children to organically learn problem solving and root cause analysis skills, make sure the OS on their first computer is Linux.
000
Reposted by Russell Devine
Nick Frichette @frichetten.com · 06/12/2024
New from Datadog Security Research! Threat actors are constantly publishing backdoored software libraries to steal credentials, get C2, and more. @ikretz.bsky.social did something about it. Meet the Supply-Chain Firewall, a tool to block malicious packages. securitylabs.datadoghq.com/articles/int...
securitylabs.datadoghq.com
Introducing Supply-Chain Firewall: Protecting Developers from Malicious Open Source Packages | Datadog Security Labs
Release of Supply-Chain Firewall, an open source tool for preventing the installation of malicious PyPI and npm packages
0196
Reposted by Russell Devine
PortSwigger Research @portswiggerres.bsky.social · 04/12/2024
Did you know you can use an ancient magic cookie to downgrade parsers and bypass WAFs?! Hope you enjoy this quality bit of RFC-diving from @d4d89704243.bsky.social! portswigger.net/research/byp...
portswigger.net
Bypassing WAFs with the phantom $Version cookie
HTTP cookies often control critical website features, but their long and convoluted history exposes them to parser discrepancy vulnerabilities. In this post, I'll explore some dangerous, lesser-known
17327
Reposted by Russell Devine
Jennifer Granick @granick.bsky.social · 03/12/2024
It's Giving Tuesday. Is there a more impactful cybersecurity organization than Let's Encrypt? And did you know that Let’s Encrypt is a non-profit 100% funded by charitable contributions? We just surpassed 500 million domains using Let’s Encrypt certificates! Let's (keep) Encrypt(ing) the Web.
linkedin.com
Let&#39;s Encrypt on LinkedIn: #givingtuesday
Did you know that Let’s Encrypt is 100% funded by charitable contributions? As a nonprofit, we rely on sponsorships and individual donations to continue making…
032
Reposted by Russell Devine
Mark Sample @samplereality.bsky.social · 01/12/2024
til that the name "David Mayer" breaks ChatGPT. If your prompt includes the name "David Mayer" or you try to get ChatGPT to say "David Mayer," the chat *always* crashes. It's like the AI in Neuromancer, which is banned forever from knowing the single password that will unleash its true potential.
4447998
Russell Devine @rjmd.bsky.social · 27/11/2024
It’s mind-boggling the level of access anti-cheat gaming software has on a computer. The fact that you need to provide kernel access to a device so a user can play a game online is an astonishing precedent.
130
Reposted by Russell Devine
Catalin Cimpanu @campuscodi.risky.biz · 24/11/2024
Recall returns to Windows 11 Insider builds -is encrypted -can be disabled/removed (image via Alex Hagenah) blogs.windows.com/windows-insi...
48215
Reposted by Russell Devine
Kumail Nanjiani @kumail.bsky.social · 18/11/2024
Bluesky feels like I took a Time Machine back to 2009 when I was still like “Hey this social media thing is going to make the world a better place.”
481244751921
Reposted by Russell Devine
Nathan McNulty @nathanmcnulty.com · 17/11/2024
Almost embarrassed to post this, but I've always used Fiddler or Burp for capturing things like this... I didn't have admin rights and was trying to capture network traffic from a pop-up, so Dev Tools wasn't working Apparently this is built into Chrome/Edge! So cool :) edge://net-export/
1518645
Reposted by Russell Devine
Sysinternals @sysinternals.com · 13/11/2024
We're excited to announce the release of ProcDump 1.0 for Mac. ProcDump functionality is now available on Windows, Linux, and macOS. Get the tools at sysinternals.com. See what's new on the Sysinternals Blog:
sysinternals.com
Sysinternals - Sysinternals
Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.
05310
Russell Devine @rjmd.bsky.social · 14/11/2024
Akira ransomware write up by DCSO that takes advantage of the partial encryption techniques used by threat actors to enable recovery. #dfir #forensics #ransomware
medium.com
Unransomware: From Zero to Full Recovery in a Blink
This blog post discusses how we, DCSO’s Incident Response Team (DIRT), were able to help an Akira ransomware victim restore their business…
031
Reposted by Russell Devine
Tracy Chou @triketora.com · 13/11/2024
PSA: new xitter tos that claims all your tweets as ai training data goes into effect THIS FRIDAY you can delete your tweets using @blockpartyapp.bsky.social it’s free if you activate the free trial. don’t worry, no auto-charge at the end of the trial
48494279