Profile picture
Elliot Alderson
@fs0c131y
, 3 tweets, 1 min read Read on Twitter
Many students asked my academic background by DMs and what is the best to do to work in #infosec. I will answer here:

1) I have a Master's Degree in Telecoms and Networks Engineering from @INP_ENSEEIHT.

2) There is not only one way to work in infosec, create your own!
In France the diploma is very important, this is stupid. Being a hacker is about the mindset, the curiosity, you as a person. Not a piece of paper.
Last but not least, I'm the last person you should ask advice. My life is crazy as hell for the last 2 years. I'm incredibly lucky. I planned nothing. I'm trying to bring my contribution to this world as I can. The only thing I can say is: Learn. Share. Help. Repeat.
Missing some Tweet in this thread?
You can try to force a refresh.

Like this thread? Get email updates or save it to PDF!

Subscribe to Elliot Alderson
Profile picture

Get real-time email alerts when new unrolls are available from this author!

This content may be removed anytime!

Twitter may remove this content at anytime, convert it as a PDF, save and print for later use!

Try unrolling a thread yourself!

how to unroll video

1) Follow Thread Reader App on Twitter so you can easily mention us!

2) Go to a Twitter thread (series of Tweets by the same owner) and mention us with a keyword "unroll" @threadreaderapp unroll

You can practice here first or read more on our help page!

Related hashtags

#infosec

More from @fs0c131y see all

Profile picture
Elliot Alderson
@fs0c131y
Thanks to the @ScrapyProject spider I made, everybody is now able to get the latest @TheBitfi sources: github.com/fs0c131y/Bitfi…
The latest version of the @TheBitfi sources is available on @Github. This repo will be automatically updated every day. github.com/fs0c131y/Bitfi…
I love facts. For the moment there is, intentionally?, no versioning. We will version their code and see what happens.

cc @KhesinDaniel @cybergibbons
Read 4 tweets
Profile picture
Elliot Alderson
@fs0c131y
Hi @TheBitfi,

I would like to analyse the source code of your Android app and your firmware, is it possible for you to send me the source code?

Regards,
cc @KhesinDaniel
if needed my email address is fs0c131y[at]protonmail[.]com
Read 3 tweets
Profile picture
Elliot Alderson
@fs0c131y
Yesterday, @CheckPointSW published this excellent report about a new malware called "Agent Smith". When I read it something hit me, @WhatsApp is vulnerable to the 2 years old Janus vulnerability! This is huge, WHAT ARE YOU DOING AT WHATSAPP? 1/n research.checkpoint.com/agent-smith-a-…
The Janus vulnerability is a super cool vulnerability found by @Guardsquare. It gives the possibility to the attacker to modify an APK and keep the original signature. You can consider that as the Holy Graal 2/n guardsquare.com/en/blog/new-an…
Two conditions for this attack to be successful:
- The victim's Android version should be between 5.1.1 and 8.0
- Vulnerable application has been signed with APK signature scheme v1

3/n
Read 11 tweets

Related threads

Profile picture
Eric JN Ellason
@SlickRockWeb
Okay there's a serious flaw in the monetization calculations by Symantec. I really doubt these rogue IRA employees were making bank off of Shorte link shorteners. Most definitely did not make $1 million dollars from these #infosec #disinfo symantec.com/blogs/threat-i…
Stick with me as I walk through this. The IRA account @CathyTo47590555 first retweeted a Sh(.)st (Shorte) link on 10/27/15, this accnt had 8685 followers, twice the Symantec example. But most of the Shorte activity started in 05/2016
The example Symantec used had 4,123 followers and sent out 16,914 tweets that generated about 8362 retweets. So not particularly huge engagement and roughly every 2 tweets generated one retweet. #infosec #disinfo symantec.com/blogs/threat-i…
Read 10 tweets
Profile picture
Eric JN Ellason
@SlickRockWeb
Finally we are able to analyze the most common URL use from a subset of #Hamilton68 accounts. Many many thanks to @Saill for all the scripting work on this. We now have a ton of additional data that can be analyzed. #infosec #opsec #osint
This is the top 25 URLs used by the #Hamilton68 subset of accnts focused on Russian Geopolitics. The most recent 3000 tweets from each of 125 accts were analyzed. 375000 tweets total. Fairly expected results & shows the prominence of Youtube & Facebook use. #infosec #opsec #osint
Further down the list in top 35-56 range revealed more interesting sites being used by these accnts. Ria(.)ru is a fairly new Russian media site housed at the same location as the Russian IRA troll farm. Stalkerzone is well known disinfo site #infosec #opsec #osint #hamilton68
Read 5 tweets
Profile picture
Ryan
@LioneI10i_
Vicente del Bosque: “Messi is the best in history”
Ray Hudson: “But the GOAT is wearing the number 10 in my book”
Denís Suárez:”Lionel Messi is the best player in the world.”
Read 101 tweets
Profile picture
David
@Geodirectit
Here is the Holy Grail Options Strategy @katariyaPran and @itjegan have been looking for. Take it with a pinch of salt & sugar.
Once ConAir flight found 100s of snake on the flight. A man came forward & said he has exp. to catch snake but its too risky on flight. He will charge $10000 per snake. All agreed. He soon caught all & was rewarded. Yr later someone asked how, he disclosed they were not poisonous
Morale of the story is while Gurus may say Naked puts are always poisonous, there may be many that are not. Backtest and keep openmind. May be that’s where the money is if not nag mani.
Read 18 tweets
Profile picture
John Papa
@John_Papa
Choosing the Right JavaScript Framework

Thanks for joining me @pluralsight to talk about javascript frameworks. We had 150+ awesome questions, so I'll try to answer the ones I couldn't get to online right here in a tweet stream

Watch the video -->
pluralsight.com/resource-cente…
Q. Do arrow functions really make dealing with JavaScript's "this" keywords easier?

A. Yes! When using arrow functions, the scope of "this" is effectively passed in from the outer scope. See here in this REPL

1/n
Q. Where does Polymer fit in? Is it considered a framework like the others?

A. @Polymer is an excellent way to create web components, which are ideal for creating sets of interactivity that can be shared in web apps.

2/n
Read 60 tweets
Profile picture
Amanda Berlin
@InfoSystir
#infosecstaples = Time for a new hashtag to help out our #infosec students. Asked some remedial questions that anyone going into a tech field should know and was surprised they hadn't been taught these things in school.
I know my own college degree didn't prepare me at all for the work that I would be doing after I graduated, but I thought maybe it had gotten a little bit better at this point. I guess not. They seem to be failing the participants still.
One of the main reasons @synackpse & I wrote the Defensive Security Handbook was to put staple information all down into one place as well as we could, but it doesn't even come close to covering everything someone may need to know, that's what universities should be trying to do.
Read 11 tweets

Trending hashtags

#request #Twitterstorians #infographics #Hamilton68 #IndivisibleTimes #AltGovDaily #infosec #work #LateAntiqueStorians #Messi #ECR #osint #ncpol #tweetorial #NC09 #EoE #PRLE #EGID #GOAT #ITsecurity #IoT #nowwhat #edu #WHPDaily #GDPR
Follow Us on Twitter!

Did Thread Reader help you today?

Support us! We are indie developers!

This site is made by just three indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3.00/month or $30.00/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!