3 ms·
It looks like he kept his keys on a server that he knew was compromised since November. Not great opsec, to put it lightly. https://twitter.com/pic/orig/media%
by britneybitch 4y ago
It looks like he kept his keys on a server that he knew was compromised since November. Not great opsec, to put it lightly.
https://twitter.com/pic/orig/media%2FFlakyMWWAAIUDPl.png https://twitter.com/pic/orig/media%2FFlakyMWWAAIUDPl.png
- nibbleshifter 4y agoIt was compromised more than once. He kept claiming it must be physical access, but the information he shared about the attacks points more to an IPMI, BMC, iLO or iDRAC type interface being unsecured. He also didn't use FDE on the server which made the attacks possible...
- freeqaz 4y agoThat link 404s. Got a backup?
- britneybitch 4y agohttps://bird.trom.tf/pic/orig/media%2FFlakyMWWAAIUDPl.png https://bird.trom.tf/pic/orig/media%2FFlakyMWWAAIUDPl.png https://nitter.fly.dev/pic/orig/media%2FFlakyMWWAAIUDPl.png https://nitter.fly.dev/pic/orig/media%2FFlakyMWWAAIUDPl.png https://i.imgur.com/tvudOcO.png https://i.imgur.com/tvudOcO.png
- gruez 4y agoAFAIK he explicitly denies this: https://twitter.com/LukeDashjr/status/1609683917644120067 https://twitter.com/LukeDashjr/status/1609683917644120067
- pmarreck 4y ago"britneybitch" below has screenshots that seem to indicate he admitted it when he figured out he got compromised in November