Sign in

SteveD3 (Steve Ragan)

@steved3.io
6.5K followers 1.2K following 204 posts

Father. Grandpa. Geek. Hacker. Former journalist. Security researcher. CMO @BSidesLV.org Member: Curated Intel

PostsRepliesMedia
SteveD3 (Steve Ragan) @steved3.io · 27/06/2026
@WSIIAOfficial has come up with something cool for this year, while raising money for a good cause. There's a new badge celebrating the 10th year. Limited to 100.
wsiiax.myshopify.com
Whose Slide Is It Anyway? 10 Year Anniversary Badge
The Year was 2016. The idea was stupid. The creators were stupider. And yet, 10 years later, that stupid idea has been run by those stupid people for an entire decade. The LoreThe Whose Slide gong has been a thing since our inception at DEF CON 25. The brain child of our late brother Aaron "Bind" Kremin, we thought it'
031
Reposted by SteveD3 (Steve Ragan)
BSides Las Vegas @bsideslv.org · 02/04/2026
The CFP is now open, PAL9000 didn't want to be a small shell script. callforpapers.bsides...
BSidesLV Logo on a computer terminal with the following text exchange:

OK, Open the CFP portal PAL9000
PAL9000: I'm sorry, Daemon, I can't do that
PAL, open the CFP portal, or I'm going to replace you with a small shell script.
PAL9000: Affirmative, Daemon; I read you.  Opening the CFP portal now.
01111
Reposted by SteveD3 (Steve Ragan)
BSides Las Vegas @bsideslv.org · 04/03/2026
Things are spinning up. First All Hands call happening tonight. Expect additional details soon, including room blocks, CFP, and more. Save the dates: August 3rd, 4th, and 5th, 2026
0102
SteveD3 (Steve Ragan) @steved3.io · 30/12/2025
Egypt?
021
SteveD3 (Steve Ragan) @steved3.io · 29/11/2025
FTR, it was a great show. The whole cast was awesome. The lounge was really cool too. It was themed to look like the Slytherin common room. I wish all shows on Broadway had something like this.
030
Reposted by SteveD3 (Steve Ragan)
Hedge @angiemckeown.bsky.social · 28/08/2025
It's 2025 and I am still emailing files to myself, and I still have three laptops, and three security logins, and three yubikeys, because identity segregation and security is still a complex mess, and I am tired
0115
Reposted by SteveD3 (Steve Ragan)
Zack Whittaker @zackwhittaker.com · 27/08/2025
I wrote some mid-week words for my newsletter (and now blog!) ~this week in security~ on Google today sounding the alarm over a new "widespread" wave of Salesforce data thefts targeting customers of Salesloft Drift. Excited to share this with premium tier subscribers. ❤️
this.weekinsecurity.com
Salesforce instances targeted in new 'widespread' wave of data thefts
Salesloft confirmed a security incident affecting customers who integrate its Drift product with Salesforce. It's the latest wave of data thefts targeting Salesforce's instances.
0199
SteveD3 (Steve Ragan) @steved3.io · 19/08/2025
I'm amused. Just finished moving 11k archives (~20GB). Went to do another backup. rsync -avzP --delete The script did what it was asked to do... now I get to move all 11k archives a second time b/c of --delete. Lesson? You can't copy and paste your way out of everything.
190
SteveD3 (Steve Ragan) @steved3.io · 07/08/2025
Lol. None. At capacity means I can't get in either. Plus, I would trade out for a participant if I were inside. The party is for them really.
010
SteveD3 (Steve Ragan) @steved3.io · 07/08/2025
*about them Posting from my phone is hard.
141
SteveD3 (Steve Ragan) @steved3.io · 10/06/2025
Got tickets to go see Tom Felton in Harry Potter and the Cursed Child at the Lyric Theatre in November. Should be a fun little pre-holiday trip.
010
Reposted by SteveD3 (Steve Ragan)
Jason Perlow @jperlow.bsky.social · 23/05/2025
072
Reposted by SteveD3 (Steve Ragan)
Sean Gallagher @thepacketrat.net · 17/05/2025
Dear New York Times: Delete your account. The New York Times Really Asked Ms. Rachel If She’s Paid By Hamas - defector.com/the-new-york...
defector.com
The New York Times Really Asked Ms. Rachel If She's Paid By Hamas | Defector
The house style of the New York Times is severely outdated. Depending on the topic, the newspaper’s purportedly impartial tone instead reads as smug, self-amused, and deeply lazy. The results are disa...
2195
SteveD3 (Steve Ragan) @steved3.io · 16/05/2025
Obfuscated JavaScript in Phishing Kits technicaloutcast.com...
technicaloutcast.com
Obfuscated JavaScript in Phishing Kits
While sorting phishing kits this morning, I discovered a clever use of JavaScript to hide an infostealer.
061
Reposted by SteveD3 (Steve Ragan)
DEF CON @defcon.bsky.social · 13/05/2025
DEF CON legal update: Truth is a complete defense against defamation. The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice. You can read the judgment here storage.courtlistener.com/recap/gov.us... . Stay tuned for a more detailed report. #defcon #legalupdate
Screen cap from the final page of the summary judgement document
829284
SteveD3 (Steve Ragan) @steved3.io · 27/04/2025
The moving walkway is coming to an end. Please watch your step. #RSAC
010
SteveD3 (Steve Ragan) @steved3.io · 21/04/2025
Not mine, seen this in another part of the web. Caption was Chuck GPT lol
Joke image showing Chat GPT asking Chuck Norris if it can ask him a question.
030
Reposted by SteveD3 (Steve Ragan)
Josh Bressers @josh.bressers.name · 11/04/2025
I've had a bunch of people ask me why I wasn't at #VulnCon, so I wrote a blog post about it TL;DR - I don't think VulnCon should exist Follow me for more security hot takes opensourcesecurity.io/2025/04-why-...
opensourcesecurity.io
Why I didn't go to VulnCon
VulnCon 2025 is over. I didn’t go. A bunch of people have asked me why, and rather than keep my answer to a small group, I thought it would make sense to write something public about it all. The TL;DR...
012
SteveD3 (Steve Ragan) @steved3.io · 02/04/2025
ChatGPT is generating some dark phishing images.
AI generated image to represent phishing.
090
SteveD3 (Steve Ragan) @steved3.io · 27/03/2025
meme... tide bottles for hands... he would help but his hands are ... ... tide
0121
SteveD3 (Steve Ragan) @steved3.io · 27/03/2025
Pretty much me all the time these days.
A text-driven meme. When ur about to make a bad situation worse by injecting some ill-timed humor.
0111
SteveD3 (Steve Ragan) @steved3.io · 27/03/2025
I got blocked by someone for posting this. Guess they don't like Star Wars. Oh well, can't please everyone.
030
SteveD3 (Steve Ragan) @steved3.io · 27/03/2025
When I posted this, I forgot to add. While I laughed and was amused (still am, it's a funny image), my first thought was... how did it turn it on? Ole Chuck be a strong force user to maintain this.
020
SteveD3 (Steve Ragan) @steved3.io · 26/03/2025
Check Norris as a Jedi, holding the saber upside down.
183
SteveD3 (Steve Ragan) @steved3.io · 25/03/2025
When you get invited to the NatSec group chat....
1184
SteveD3 (Steve Ragan) @steved3.io · 25/03/2025
Text Messages: (a) you up? (b) we're bombing Yemen tomorrow.
0141
SteveD3 (Steve Ragan) @steved3.io · 23/03/2025
Lol The reporters who were invited to witness the planning behind a serious of anti-piracy raids reported the exact date and times the raids were to happen. torrentfreak.com/sec...
The big football match between Paris Saint-Germain and Marseille should've been extremely difficult to pirate in France on Sunday. With rare direct assistance from French telecoms regulator Arcom, DAZN promised to "pull out all the stops" to block pirate sites. Journalists invited in to witness planning for the "secret commando raids" openly reported the exact times they were scheduled for.
140
SteveD3 (Steve Ragan) @steved3.io · 22/03/2025
had em all my life, zyrtec once a day. you can get it at costco in two packs.
030
SteveD3 (Steve Ragan) @steved3.io · 20/03/2025
Right?!
000
SteveD3 (Steve Ragan) @steved3.io · 19/03/2025
My milk man is better than your milk man....
A notice that the dozen eggs found with this week's milk delivery were free.
140
Reposted by SteveD3 (Steve Ragan)
Bishop Fox @bishopfox.bsky.social · 12/03/2025
🚨 The 2025 Ultimate Red Team Tool Showdown is here! 🚨 We’re putting the top offensive security tools head-to-head, but only ONE will take the crown. And it’s all up to YOU! Check out the full bracket & cast your votes: bishopfox.com/redteam-tool...
002
SteveD3 (Steve Ragan) @steved3.io · 05/03/2025
Toll phishing attacks spike technicaloutcast.com...
technicaloutcast.com
Toll phishing attacks spike
The number of phishing attacks related to toll payments has spiked.
030
SteveD3 (Steve Ragan) @steved3.io · 23/02/2025
It wasn't, I was looking for what you'd written and lost the link so responded here to have it lol
210
SteveD3 (Steve Ragan) @steved3.io · 22/02/2025
@zackwhittaker.bsky.social @lorenzofb.bsky.social You two see this? www.courtlistener.com/docket/68094... 700+ pages of transcripts and reports.
courtlistener.com
Hadnagy v. Moss, 2:23-cv-01932 - CourtListener.com
Docket for Hadnagy v. Moss, 2:23-cv-01932 — Brought to you by Free Law Project, a non-profit dedicated to creating high quality open legal information.
140
SteveD3 (Steve Ragan) @steved3.io · 22/02/2025
You should see the updated documents on the case. It goes beyond CoC stuff. www.courtlistener.com/docket/68094...
courtlistener.com
Hadnagy v. Moss, 2:23-cv-01932 - CourtListener.com
Docket for Hadnagy v. Moss, 2:23-cv-01932 — Brought to you by Free Law Project, a non-profit dedicated to creating high quality open legal information.
120
SteveD3 (Steve Ragan) @steved3.io · 10/02/2025
I'm just glad you're still happy doing research and harassing phishing operators :-p
030
SteveD3 (Steve Ragan) @steved3.io · 14/01/2025
Umm. No thanks Hoosier Lotto, there are laws against me playing first-person shooters IRL.
email image from state lotto promoting a chance to "play your favorite game. IRL"
030
SteveD3 (Steve Ragan) @steved3.io · 28/12/2024
In four days, we will be in the Black Ops 2 timeline.
020
SteveD3 (Steve Ragan) @steved3.io · 27/12/2024
Blob phishing Office and DocuSign users technicaloutcast.com...
technicaloutcast.com
Blob phishing Office and DocuSign users
A phishing email had me curious, so I decided to run the attack down
061
Reposted by SteveD3 (Steve Ragan)
Abebe Tinari @tinari.bsky.social · 22/12/2024
2 years ago I responded to a Tweet from @shankmods.bsky.social It turned into an unforgettable adventure Shank is a great storyteller, and the video he made chronicling the whole ordeal is truly something special Even if you have no interest in CRTs, it’s worth a watch! youtu.be/JfZxOuc9Qwk?...
youtu.be
What Happened to the World's Largest Tube TV?
YouTube video by Shank Mods
1421576458
Reposted by SteveD3 (Steve Ragan)
Jeremy Kirk @jkirk.bsky.social · 20/12/2024
It isn’t an offensive capability. We’re in the chats. As you rightly point out, we can't access chats we don’t have access to. We’re focused on financially-motivated cybercrime, ransomware, credential theft, fraud. This intel is purely defensive, helping orgs reset accounts, start IR, etc. #infosec
021
SteveD3 (Steve Ragan) @steved3.io · 19/12/2024
Not sure who is playing around, but I don't use my Proton Mail account for things like this. #credentialstuffing
An image from Keeper Security stating that: "A request has been received to login to Keeper with a new device, but a Keeper account with this email does not exist."
131
SteveD3 (Steve Ragan) @steved3.io · 18/12/2024
BTW: Here is a gift link to the article, because I pay for my subscription to the Washington Post in order to support reporters like @faizsays.bsky.social and Trisha Thadani. I won't just screenshot the headline pre-paywall and call it content. wapo.st/3ZYklLx
020
SteveD3 (Steve Ragan) @steved3.io · 18/12/2024
A journalist, who took @faizsays.bsky.social and Trisha Thadani's work and didn't credit them (engagement farming), then complains when someone else uses a similar screenshot and comes up with the same basic conclusion. Some days, this site amuses me to no end.
an image of Judd Legum complaining: "It is poor form to steal someone else's Bluesky posts, down to copying my screenshot, without any credit" 

after he failed to credit the authors of the Washington Post article he is claiming someone stole the screenshot of.
080
Reposted by SteveD3 (Steve Ragan)
Craig Jenkins @craigsj.bsky.social · 17/12/2024
neither one of you credited anyone who Put in the Work of writing and reporting the article. bylines cropped and links nowhere to be found but you need *your* name mentioned?
412245190
SteveD3 (Steve Ragan) @steved3.io · 14/12/2024
;-) np
000
SteveD3 (Steve Ragan) @steved3.io · 14/12/2024
Maybe it's time for a road trip? www.fuddruckers.com/locations
fuddruckers.com
Get Your Fudds On | Fuddruckers®
Fuddruckers®, Making the world happy, one great burger at a time!
110
Reposted by SteveD3 (Steve Ragan)
Joseph Cox @josephcox.bsky.social · 09/12/2024
New: Texas’ governor has served 404 Media with a subpoena for info about an internal Google database we were leaked. This is a serious threat to press freedom and we are fighting it legally. We object. www.404media.co/404-media-ob...
404media.co
404 Media Objects to Texas Attorney General Ken Paxton's Subpoena to Access Our Reporting
404 Media's reporting on an internal Google privacy violation database has been subpoenaed by the State of Texas. We are fighting it.
29963321
SteveD3 (Steve Ragan) @steved3.io · 29/11/2024
Richards wrote about it for Rolling Stone: www.rollingstone.com/music/music-...
rollingstone.com
Keith Richards on His Hero Chuck Berry: 'The Granddaddy of Us All'
Keith Richards discusses Chuck Berry's enormous influence on the Rolling Stones – and rock in general – and recalls the time Berry punched him.
020