My slightly tweaked version of dnssnarf, by @linuxgeek247 : http://is.gd/1jsEC Timestamps, more record data, and both queries and responses
posts from 2009 / 06
-
-
Ratio of budget and FTE’s dedicated to availability monitoring NOC, physical security monitoring SOC, and NSMing CSIRT? Ideal? Actual?
-
.@danphilpott but don’t you want solutions, that fit your needs? Look how happy these stock-photo-business-people are with them! Contact us!
-
.@danphilpott but don’t you want solutions, that fit your needs? Look how happy these stock-photo-business-people are with them! Contact us!
-
Our DUKW tour of Baltimore yesterday was captained by Captain Crunch. http://is.gd/1i3SI
-
@MissMktr @AmyWoo Thanks for hosting the #ducks tour, @vurtyou and I had a blast!
-
Ditto, w/ @vurtyou, cabbing cause we’re lazy > @censey: Otw to woody’s #duckboat09 w/ @saraensey.
-
Ditto, w/ @vurtyou, cabbing cause we’re lazy > @censey: Otw to woody’s #duckboat09 w/ @saraensey.
-
At the Baltimore Women’s Classic 5K to support @vurtyou from Little Havanah. She runs faster, longer when I’m drinking Mohitos.
-
CONTAINS QUININE.
-
CONTAINS QUININE.
-
Reminds me of http://is.gd/1euJ2 >@danphilpott Domain name made from WIN! from @steponequit: http://raptor-jes.us
-
@aplura 10-wk FOSS proj in Balt. 3-5yrs exp. Research wiki/calendar/collab software and provide results/guidance to client. DM @aplura
-
What people seem to think, in this economy, when security shows up in suits to take systems for IR: http://is.gd/1eK0x Mind your messaging!
-
Reminds me of http://is.gd/1euJ2 >@danphilpott Domain name made from WIN! from @steponequit: http://raptor-jes.us
-
>@aplura 10-wk FOSS proj in Balt. 3-5yrs exp. Research wiki/calendar/collab software and provide results/guidance to client. DM @aplura
-
@censey any time that happens, rent a car, boom!, I mean, a 7 or 8 hour drive, you’re a mile high! It’s one of those things, you know?
-
Max’s has 9 Hitachino beers on tap for pint night, all 7.0% or higher abv, nice take-home half-pint glassware
-
@shmausen @commonwombat So @vurtyou just talked to BGE: The estimated time to restore of services is ‘by 10PM’.
-
Heading home for a pint of home brew with @philip_daigle before CharmSec, then Max’s for a pint night glass ~6:30, then CharmSec at Slainte
-
Excellent semiotic homophone: http://is.gd/1cadJ
Unrelated: I’m looking for a trap set to goof with.
-
.@vurtyou I promise not to blast you into space…until such time as I deem it necessary.
-
Isn’t it a daisy? >@bjg i’m reading this piece of pure art: http://is.gd/1b0nC a flame avant la lettre, but beautiful
-
I am Zeldar. I’m from planet Beldar. My leader is Zeldar. And we shop at Wal-mart. http://is.gd/1b8tf
-
Isn’t it a daisy? >@bjg i’m reading this piece of pure art: http://is.gd/1b0nC a flame avant la lettre, but beautiful
-
Spirit’s “Fresh Garbage” (1968) is a cover of Tay Zonday’s “Chocolate Rain” (2007). It’s a fact.
-
I have seen the fnords in this configuration file.
-
♫ One of these fines is not like the others http://is.gd/1anKH vs. http://is.gd/1anPw Can you tell which…By the time I finish this song? ♫
-
Look, a Unix system monitoring tool! Will the configuration file use mindfuck, lolcode, perl, or a delimited and whitespace-sensitive 4GL?
-
@bjg there is great money in it, many of those tools are OTS and all C&C is over egress-ACL-likely ports. #thistweetneedsmoreacronyms
-
.@linuxgeek247 happy to have ya. @philip_daigle promises to have the new blinkenlights sign too.
-
\m/. > @VRT_Sourcefire #vrtrecommended http://c8y0r.tk
-
Evil Foundry Ligatures™: rn -> m, cl-> d, vv -> w, ww -> a clarinet, oo -> orthodontic band, tr -> a tied-off bloody stump
-
Holy crap, very sad. > @cnnbrk: Metro spokeswoman confirms at least two fatalities in DC Metro train collision http://bit.ly/dctrain
-
\m/. > @VRT_Sourcefire #vrtrecommended http://c8y0r.tk
-
Evil Foundry Ligatures™: rn -> m, cl-> d, vv -> w, ww -> a clarinet, oo -> orthodontic band, tr -> a tied-off bloody stump
-
Gnostic quizes, ineffective cause support, fans of stuff, flash memes: It was the year when they finally immanentized the Eschaton.
-
What he said, only with proper caps and no french spacing >@electricfork Sushi in Owings Mills with @grantstavely. Anyone else nearby?
-
Francis, G: “I’ve got some zero days in the table-top exercise I’m working up for you guys, and some tomorrows too, man.” Yikes! Mommy!
-
Hey, I found out why there’s a Local Settings directory in Application Data, and an Application Data directory in Local Settings. It’s becau
-
Cheeva Investigates… The Case of The Missing Records. Solid Steel. 90s-heavy, excellent Friday music. http://is.gd/16sha (mp3 top right)
-
What he said, only with proper caps and no french spacing >@electricfork Sushi in Owings Mills with @grantstavely. Anyone else nearby?
-
I wish we hadn’t blasted all the telephone sanitizers off world on B-Ark, my keyboard and mouse are filthy.
-
Strange that until now I’ve never handled and incident on a machine logging DD/MM/YYYY. Newb.
-
@censey a bunch of us are heading to Luna Del Sea for drinks, how is parking over by metro?
-
Heading back to the city and in the mood for a beer. Any takers?
-
@linuxgeek247 I get back to the city around 8:30, probably too late?
-
Wow, I feel like an eight year old. I HATE MATH WAAAAAAAAAHHHHHHH!!! tempter-tantrum
-
@ssoper tried that, it doesn’t work. I am pleased to note that nothing I’ve written since then contained the word. http://is.gd/15nC6
-
@attritionorg any kids could have done that, if you are going to knock the BSA, try the theism, homophobia, or sculpture http://is.gd/14GDF
-
@censey @oneeyedcarmen @linuxgeek247 Changed plans: I’m going to defcon, making travel arrangements now. Hotel preference? Never been to LV.
-
I’ll be in class. >@marcusjcarey I’m scheduled to do a talk at SANSFire Thurs 6:00PM - How to Build a Hyper-Local Security Community
-
@vurtyou really? organic hangover patches? I have a shark repellant to sell you. Buy now and get these magnetic anti-elephant bracelets!
-
I’ll be in class. >@marcusjcarey I’m scheduled to do a talk at SANSFire Thurs 6:00PM - How to Build a Hyper-Local Security Community
-
.@linuxgeek247 whoa! I’ll test this AM. I have some ideas for what to keep of the response using a DOM parser - regex may be too trusting?
-
Unfortunate url shortener breach @cligs. http://bit.ly/AS6Yp Why disclose the source IP? Also, ironic: http://is.gd/13obQ
-
The Dukes of Stratosphear were better at Syd Barrett than both Syd Barret and Roger Waters combined.
-
.@mubix I use a Mac mini + Plex + Plex’s Hulu app over VGA to a 42" plasma, love it. (holy crap)
-
The Dukes of Stratosphear were better at Syd Barrett than both Syd Barret and Roger Waters combined.
-
.@mubix I use a Mac mini + Plex + Plex’s Hulu app over VGA to a 42" plasma, love it. (holy crap)
-
.@mubix I use a Mac mini + Plex + plex’s Hulu app over VGA to a 24" plasma, love it.
-
.@mubix I’m use a Mac mini + Plex + plex’s Hulu app over VGA to a 24" plasma, love it.
-
.@electricfork & @will_torres are drafting procedures around Scytale and toilet paper for out-of-band IR messaging. http://is.gd/12FQh Help.
-
Didn’t make it the Hilton to put up fliers at SANSFire, relying on twitter and word-of-mouth already seems sufficient for @CharmSec
-
Expecting a lot of 8:15ish SANSFire folks at @CharmSec after the evening talk. The rest of us will be at Pickles around 7PM tonight.
-
Two-❤️’d Batch! Pale OG: > 1.12! 7lbs of DME in a 5 gallon batch. This is going to be a big beer if it survives. Very foamy w/ all the sugar
-
Two-<3’d Batch! Pale OG: > 1.12! 7lbs of DME in a 5 gallon batch. This is going to be a big beer if it survives. Very foamy w/ all the sugar
-
Brewing a Bell’s Two-hearted clone this afternoon: http://is.gd/10OEM It’s Centennial hops all the way down! http://is.gd/10OCx
-
|
Ceci n’est pas une pipe -
Silly Putty sticks to Silly Putty really well. Better even than it sticks to the rings of a slinky. #insightfriday
-
$VENDOR on antivirus exclusion: …failing to do so will result in very poor performance ultimately leading to your disgust for the product.
-
So @philip_daigle returns to cube land and says, “Wow, I just tried to use my badge against the light switch to exit the bathroom”. Dude.
-
Mission after pho lunch: Create a scapy daemon (or at least script) to log all iframes from a stream.
-
@MissMktr: Good morning Twitter! Nice evening with @AmyWoo, @SpaceManAndy, @jjthomas, @grantstavely and @vurtyou at @bad_decisions
-
Man, the parking lot at work always smells like burned rubber and clutch when I get to work in the morning. What’s that all about?
-
> @MissMktr: Good morning Twitter! Nice evening with @AmyWoo, @SpaceManAndy, @jjthomas, @grantstavely and @vurtyou at @bad_decisions
-
Search ‘is.gd’, 1st hit: marketing, 2nd: marketing, 3rd:, opportunistic ‘hey is.gd is down, check out our marketing’. http://tr.im/o0L2
-
is.gd’s server seems to be gone gone. Anyone else have a route past 81.29.89.108 or know of other affected sites?
-
♫ It’s getting better all the time / (It can’t get no worse) ♫
-
♫ It’s getting better all the time / (It can’t get no worse) ♫
-
@ak1010: RT @johullrich: are you sick of shortened URLs? I wrote a URL lengthening service to easily craft 140 char URLs http://tr.im/nR5Q
-
If unsubscribe links were 72pt, bold, and at the top of marketing e-mail, it would probably slow me down by at least a half second.
-
> @ak1010: RT @johullrich: are you sick of shortened URLs? I wrote a URL lengthening service to easily craft 140 char URLs http://tr.im/nR5Q
-
The Beatles Rock Band cinematic intro is excellent http://is.gd/TUOM (@electricfork: note inclusion of Day Tripper http://is.gd/TUUC)
-
@censey holy crap that pizza looks amazing, where are you? (as I heat up a Tony’s for a school-night late meal)
-
The Beatles Rock Band cinematic intro is excellent http://is.gd/TUOM (@electricfork: note inclusion of Day Tripper http://is.gd/TUUC)
-
@shmausen @commonwombat – 1-800-567-6789 Verizon residential high speed internet support.
-
Begged question answer: I just got lawn seats to see Stone Temple Pilots at Merriweather, 7/19. http://is.gd/S7IN
-
Surely there are music business excusses for the failure that is Ticketmaster arbitrary fee transparency? Lie to me better you bastards!
-
XL newish craigslist clothes dryer installed, old shrieking box of fire-breathing doom in the alley for pickup. SCREEE! EEEIK! RYIEECK! #%@!
-
Yes http://twtvite.com/o8rk9m #twtvite #ducks
-
I’m game. > @electricfork: Back in ballmoar. sushi lunch today at Edo Mae in Owings Mills, spread the word.
-
Neat presentation from @chriseng > @ak1010: Crypto for Pen testers a MUST watch -http://bit.ly/ream9
-
Dear application team: Plz leave honeypot work to me, & pretend /your/ stuff is in production and shouldn’t have Everyone granted All perms.
-
Yes http://twtvite.com/o8rk9m #twtvite #ducks
-
Argh, $52 parking ticket for being too close (questionably) to a fire hydrant.
-
I’m game. > @electricfork: Back in ballmoar. sushi lunch today at Edo Mae in Owings Mills, spread the word.
-
Neat presentation from @chriseng > @ak1010: Crypto for Pen testers a MUST watch -http://bit.ly/ream9
-
Driving home from #dojosec on 4 ounces of Big Red… This is bat country!
-
Driving home from #dojosec on 4 ounces of Big Red… This is bat country!
-
The shortened url straw men of doom
-
Class got out early! Off to #dojosec after all.
-
@oneeyedcarmen f5 f5 f5 f5
-
@alexhutton thanks!
-
.@dionthegod @quine assuming you aren’t talking about returning door-to-door Jehovah’s Witnesses, Good luck on that ‘good news’ thing.
-
@alexhutton switching costs masked as failed opportunities - http://is.gd/O5T6 - love that the unsubscribe link still works.
-
DestroyTwitter on a mac w/ a synergy provided white mac keyboard hosted on a windows PC == confusion whether ‘command’ is actually esc. ugh
-
Should I go to the Gartner Information Security Summit in DC this summer on the ‘sponsor ticket’ (keynote and sponsor floor only)? IANACSO
-
Had to see how I stacked up to Ryan.
-
Should I go to the Gartner Information Security Summit in DC this summer on the ‘sponsor ticket’ (keynote and sponsor floor only)? IANACSO
-
@CharliePapazian: http://tr.im/njsB GreatAmBeerFest Ticket update: Thursday18% sold;Friday:20% sold;Sat.Afternoon:42% sold;Sat.Night:14%
-
@ssoper: This AP writer sneaked in a great ‘Big Lebowski’ quote in this otherwise boring article http://is.gd/N8Pn
-
Starting with Kid A onward, Radiohead has just been a Battletoads soundtrack cover band, Thom sings the vocals the NES coulnd’t reproduce.
-
> @CharliePapazian: http://tr.im/njsB GreatAmBeerFest Ticket update: Thursday18% sold;Friday:20% sold;Sat.Afternoon:42% sold;Sat.Night:14%
-
> @ssoper: This AP writer sneaked in a great ‘Big Lebowski’ quote in this otherwise boring article http://is.gd/N8Pn
-
Finally started McCarthy’s Blood Meridian (http://is.gd/MKtK). I want to write an incident post mortem in this style.
-
Finally started McCarthy’s Blood Meridian (http://is.gd/MKtK). I want to write an incident post mortem in this style.
-
Missing tonights Bacon & Beer Happy Hour at @bad_decisions, and Thursday’s @dojosec because of my damned night class. $#!^&#!!
-
Does anyone know the brain.conf option to turn off sloppy focus? This thing seems to just do whatever the heck it wants.
-
@marcusjcarey any introduction that begins with an honorific that doesn’t concern life, death, rank, or responsibility is silly.
-
@marcusjcarey any introduction that begins with an honorific or that doesn’t have power over life, death, rank, or responsibility is silly.
-
Outlook Zen behavior: 1. Select multiple messages to act upon 2. Receive a new message in the same folder. 3: Outlook undoes the selection.