Robert Graham 𝕏
@ErrataRob
Followers
66,439
Following
1,838
Media
7,590
Statuses
153,820
Created (BlackICE,IPS,sidejacking,masscan). Doing (blog,code,cyber-rights,Internet-scanning). @erratarob @infosec .exchange
.
Joined July 2008
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Israel
• 2810312 Tweets
#Eurovision2024
• 1275692 Tweets
España
• 293820 Tweets
Ireland
• 204657 Tweets
Switzerland
• 144598 Tweets
Flamengo
• 114435 Tweets
Portugal
• 110220 Tweets
Corinthians
• 105568 Tweets
Luka
• 93503 Tweets
Nemo
• 83284 Tweets
#ESC2024
• 74804 Tweets
Italia
• 73125 Tweets
#ESCita
• 72694 Tweets
Slimane
• 72182 Tweets
Irlanda
• 68366 Tweets
Suiza
• 58460 Tweets
Lorran
• 49749 Tweets
Los 12
• 45495 Tweets
Ucrania
• 42517 Tweets
Francia
• 42491 Tweets
Skenes
• 39963 Tweets
Croatia
• 39921 Tweets
Ισραηλ
• 36625 Tweets
Loreen
• 35486 Tweets
Kyrie
• 31259 Tweets
Mavs
• 30054 Tweets
Estonia
• 27444 Tweets
Finland
• 27345 Tweets
Austria
• 27315 Tweets
ABBA
• 25490 Tweets
Dort
• 23604 Tweets
Armenia
• 23091 Tweets
Olly
• 21534 Tweets
#UFCStLouis
• 19803 Tweets
Lively
• 16547 Tweets
Breath of Life
• 16184 Tweets
Baby Lasagna
• 15815 Tweets
Traverso
• 12814 Tweets
Amazonas
• 10125 Tweets
I left my MacBook on the plane and it was stolen. I’ve tracked it down to a flea market on south Atlanta. But while I know it’s in the building I don’t know where
1K
4K
117K
I'm going back there this morning at 11am and bringing Bluetooth location utilities with me. I give it a 70% chance of locating the MacBook.
282
169
22K
Inflight wifi didn't work so of course I had to debug it. It appears the problem is lack of DHCP lease. The WiFi was using 8 hour leases, which was time enough for many planeloads of passengers to embark/disembark.
A quick ARP scan at the time showed there were 55 devices on the…
385
1K
18K
Your regular reminder that once a big newsworthy event happens, you'll start seeing reports of similar incidents that have been happening all the time, just without being reported.
BREAKING: A NY tugboat captain has reported to
@gCaptain
“container ship APL QINGDAO lost power while transiting New York harbor. They had 3 escort tugs but 3 more were needed to bring her under control. They regained power & were brought to anchor near the verrazano bridge”
551
2K
6K
38
2K
16K
You can't live debate crazy, they will always win.
Live debate is just performance art. Somebody will make some new claim nobody has heard of before, and it'll be impossible to refute without having the time to go research what they just said. "Samuelsson's study from late 2021…
2K
2K
16K
@_ColeMurray
How can I can for bluetooth signal strength? The MacBook has bluetooth enabled, my phone is talking to the bluetooth, but there's no strength meter.
17
21
6K
1/n OK, let me explain what's going on with the Facebook right now.
First, let's talk "routing". The Internet is a mesh of routers that forward packets. Packets go from source through a series of routers until they reach their destination.
155
2K
6K
I asked AI to draw a picture of a levitating super conductor and it gave me this
139
675
6K
The US Naval laboratories have just announced that they've been able to fully replicate the LK-99 results. They've released this image of a sample floating above a magnet proving the Meissner effect.
95
227
4K
For example, to prove my point, I opened the podcast () and skipped forward to a random location, around 37 minutes into the thing (I can't bear to watch all 3 hours and debunk point by point).
At this point, he's talking about a "Lazarus Report" that said…
187
349
3K
1/ In case you were wondering: Apple's replacement for Intel processors turns out to work really, really well. Some otherwise skeptical techies are calling it "black magic". It runs Intel code extraordinarily well.
35
908
3K
Cybersecurity expert here: no.
The stories of teenage hacking are sensationalized.
As far as we can tell, he didn't hack into the company using a FireTV stick. He accessed the company using his phone.
Specifically, he connected his phone to the TV and its bluetooth keyboard,…
46
321
2K
This simple tweet that I thought 10 people might notice has gone viral with 26 million views and counting. The consequence is that the Atlanta PD contacts me to file an official police report. That's kinda cool of them.
7
25
2K
@FastFoodDiet1
The flight attendant was unclear. On the way, back I'll ask if that button resets everyone.
11
5
2K
Yea, I've got 3 hours to kill here in this airport lounge waiting for the next leg of my flight, so let's discuss the "OSI Model". There's no such thing. What they taught you is a lie, and they knew it was a lie, and they didn't care, because they are jerks.
101
816
2K
I applied for "Community Notes" access 6months ago and was finally accepted today. I can therefore see the proposed community notes on Elon's posts like this.
There are three proposed notes. Two point to high quality sources debunking the notion that your tax dollars are paying…
Bet you didn’t know that this administration is flying hundreds of thousands of illegals into America using your tax dollars …
16K
56K
167K
115
665
2K
1/n
If you are wondering if there will be anybody at Mike Lindell's cybersymposium who can confirm or refute his "packet captures", well, there's going to be me. I'm a well-known expert on packet captures, and somewhat knowledgeable about election systems.
114
471
2K
Note that "Wireshark" only captures non-promiscuous packets and broadcasts, things going in/out of my own machine, not anybody's private traffic.
You have enable monitor mode to see everything, and even then, that''s tough with MIMO.
8
23
2K
I hate you Twitters. After ragging on RFKjr yesterday in a tweet that went viral, people claim "but his book is well researched and reasonable".
It's not.
I just bought the book, starting reading the introduction, and immediately come across a stumbling block. The highlight…
105
256
2K
79/
Final verdict of this "cyber expert":
Number of "packet captures" or "cyber pcaps" seen = 0
Amount of "Absolute Proof" seen = 0
Amount of any evidence seen = 0
76
470
2K
@vanturd
It's stolen if somebody takes something that doesn't belong to them. That it's currently misplaced doesn't mean somebody can take it.
It's not "lost" -- you can take any Apple product to the nearest store and have it reunited with its owner.
20
12
2K
Old Unix: everything is a file
New Unix: everything is a file system
30
398
2K
I forget to mention the subtext. The Vice article in question also contains written debunking of some of RFK's claims, and links to other written debunking of other claims.
The premise here is that RFK/Rogan are refusing a written response, and are demanding instead a live…
37
105
2K
It's RFK who refuses to debate.
Hotez linked to the Vice article thoroughly debunking RFK:
Rogan's/RFK's response isn't to write back, countering those things. His response is to demand a live debate.
And the live debate will contain just as many…
135
151
2K
Update: I’m pretty sure I know the exact location, what can I legally do? The police said there’s nothing they can do. Any suggestions?
216
30
2K
@DontEvenBlink42
@missykender
It was stolen and is now at a flea market far from the airport. How will lost&found or unclaimed-luggage help?
11
0
2K
Ransomware is just a pentest engagement where you negotiate scope and payment afterwards instead of before.
29
395
2K
April "Fools Day" started from the Catholic tradition of breaking out into dance every April 1, a practice they still observe. Pope Francis demonstrated his moves this morning to reporters.
22
150
1K
Sometimes it's easy to believe we haven't made progress in cybersecurity. We have. For example, this used to be a warning in Internet Explorer:
23
482
1K
The following tweet is false. EVERY engineer in the real world makes a tradeoff between safety and cost. It's part of risk planning for any large project.
Lives are valued between about $2 million and $10 million. If it costs $20 million to reduce the number of lives lost in a…
I help with the Order of the Engineer ceremony most semesters for our graduating seniors, and this is quite literally one of the things they take an oath to never ever do 🫠
72
68
887
122
76
1K
This is wrong. You shouldn't know more about IPv6. But in case you wanted to know more, I thought I'd write up a quick thread.
Okay infosec peeps: Name one area of your field you're ashamed you don't know more about. I'll go first: IPv6.
271
81
1K
31
286
1K
A quick FAQ:
Q: What actually was FTX? and why did it collapse?
A: A scam. because it was a scam.
28
240
1K
All I'm saying is, that when there's a pcap fight, don't bring a pillow.
35
144
1K
@SoxyBill
I called them and met them at the location. They said there's nothing they can do.
29
7
1K
It was a bit confusing for the poor guy contacting me, because he's told just to call this number with no context, without any idea why he's calling me. I don't know why precisely he's calling, and neither does he.
2
5
1K
WHAT THE EFFING F!!! I don't understand anything about networks.
As you know, Google shook the beehive that is infosec by providing a .zip domain. The community has exploded in outrage over the fact that this makes a lot of phishing-style attacks easier.
This excellent post…
38
210
1K
Statistically, your safe deposit box is more likely to be robbed by the FBI than bank robbers.
Not because they charged you of a crime.
Not because they suspected you of a crime.
They just come and take it.
And don't give it back.
9
264
988
@VarminWay
RFK is the coward, refusing to write up a response to the written debunking of his statements.
He wants a forum where he can instead lie and mispresent things as much as he did on the Joe Rogan podcast.
39
9
952
I was an early 1980s Internet hacker. Let me explain why "Bugtraq" is probably the most important achievement in the world of cybersecurity.
After 9,933 days (27y, 2m, 10d), the Bugtraq mail list has finally reached its end and is being shut down.
18
114
288
13
365
955
If you send out a phishing email to test your employees, and 500 fail, it probably means something is wrong with your organization, not with the employees.
19
102
940
The "Wordle" webpage runs completely on the client-side in JavaScript. You can just hit F12 and read the source and see all the correct answers.
Thanks to
@ryanaraine
I'm now looking at the word list from which Wordle derives its word of the day. It's the list
@wordlinator
used to produce its spoilers. I'm guessing you all don't want me to post it, right?
14
8
62
131
261
929
So as I blogged before, the emails contained DKIM information, which the original reporters could and should have verified. So I eventually got a copy of the email and run DKIM verification on it. It passed:
We obtained a copy Hunter Biden's alleged laptop from
@RudyGiuliani
.
The email was independently verified by cybersecurity expert
@ErrataRob
, who used a cryptographic signature in the email's header to verify its authenticity with Google's servers.
265
1K
3K
39
251
755
So I wrote up a blogpost explaining how secret dots printers put on documents outed NSA leaker Reality Winner.
36
882
871
@Devon_Eriksen_
There is no "the Japanese". Different Japanese think differently. Just because Al Jazeera interviews an anti-American historian doesn't mean the rest of the Japanese feel that way.
If you actually go to Japan and see their Hiroshima museum, you'll find they describe many of the…
37
27
909
But the lesson here is that I should've called them and filed a police report (I suppose by dialing 311) first thing. He asked why I didn't file a police report, and my answer was that I didn't really understand what I should do.
10
6
901
Everyone in tech should watch this gut wrenching video because at some point this may be you. You should understand how business works going in so that you understand the process for when they push you out.
The underlying cause RIGHT NOW is likely the same problem that all tech…
I love that she recorded this. I love that people get to see what these giant corporations are like.
From the human perspective, how could she ever improve with this feedback? I would be furious in her position. I've had to fire and lay off people, and I hope I did better.
1K
1K
12K
58
195
888
I don't want a system that blocks incoming spam calls. I want a system that shunts them to an AI running on AWS that interacts with them and wastes their time.
32
167
857
Fact-check: no.
Hamas was the largest victor in the 2006 election with 44% of the vote, so not a "majority" back then. There hasn't been a vote since. The median age in Gaza is 18, meaning nearly half the population wasn't even born then. Moreover, half the population back then…
Fact check: the majority of Palestinian people in Gaza elected Hamas, which ran on a kill-all-the-Jews platform; and it remains widely popular in Gaza.
1K
426
2K
26
248
886
So in "Stark Trek: Discovery", they have the Vulcan debug some code. Apparently, Starfleet still runs on Windows.
88
535
850
You think your Thanksgiving is bad, my sister and her husband are arguing about best way to structure an SQL table/queries. So in order to bring harmony, I interrupted and suggested NoSQL/MongoDB instead.
38
189
863
1/ So what is a "reverse engineering" tool like Ghidra? Well, I'm going to describe it in a few tweets, with screen shots.
26
389
871
So let's discuss SSL encryption algorithms for the moment. If you are using Chrome, you've got a choice between AES, Triple-DES, and ChaCha20. This pic shows the list that Chrome sends to web servers saying which algorithms it'll support.
18
372
854
I gave a made-up name to Uber when I signed up. I think the most important security precaution is to lie to computers compulsively.
BREAKING: Hackers stole the personal data of 57 million customers and drivers from Uber
20
450
196
39
384
837
I’ve exhausted all my options getting my laptop from the Mart. If anybody can get evidence it’s there - like a picture of the serial number, I’ll give a reward if I get it back. I have the (almost certain) store, it just can’t be me (I’ve already been there)
77
29
869
🧵"Twitter 2.0" is trending.
I'm a foremost expert on this and let me tell you what you should do: quit, take the 3 month severance with your friends, and build the 2.0 version yourself. Musk will give up and buy your company in a couple years.
31
217
818
33/ This is incredibly frustrating. Lindell invited "cyber experts" and "fact checkers" to come and confirm the "packet captures" -- and has yet to provide us any packet captures and it's 4pm already.
#ReleaseThePacketCaptures
68
141
809
@d_feldman
If I had a chance to rewire my house, I'd also put 240v in a lot more places. But there's a plug for this, so that you get hot-hot instead of hot-neutral, depending upon how you plug in.
11
4
827
Lindell: "It was valid data from the 2020 election and nobody who came out of those [cyberexpert breakout rooms] can say anything different".
I was in the room. I say something different. None of it was valid 2020 election data.
23
122
811
49/ he called me a coward claiming I ran away — I’ve been sitting here in front the entire time waiting for him to call me onstage to discuss the packet captures
58
80
789
From
@dildog
:
Click 'Tweet' in the web ui
F12 Remove 'disable' on the tweet button
Click it, and go to 'network', right click on the request and copy as cURL
Then, add &weighted_character_count=true as a param to the end of the url
Then, resubmit the tweet with curl.
17
510
777
In any event, status as of 7pm: laptop's last known location was still at a (probable) location at the Metro Mart USA, but now the laptop is either completely off or its battery is dead, I'm getting no further updates on its location.
12
6
795
Fact-check:
Bill Gates owns 0.03% of farmland.
Blackrock owns 0.001% of single family houses.
Bill Gates is buying up the majority of American farmland and BlackRock is buying the majority of single family houses but I'm supposed to believe the biggest threat to us is Elon Musk buying Twitter?
5K
41K
193K
33
108
770
🧵People keep citing this as truth. It's false.
When you break a window, glass gets on both sides.
46
117
762
8/ If you stop announcing the location of your prefix, well, then routers on the Internet stop forwarding packets to your network. They forget about you, and packets sent to you go nowhere.
Don't do that.
7
95
755
22/ It's easy to point fingers and laugh, but in truth, problems at this scale are huge, and answers only obvious in hindsight.
37
48
735
56a/ All day Mike Lindell has been on stage saying the cyber experts are happily working on packet captures.
We are not. We haven't been given the packet captures we were promised.
22
187
713
@yhdistyminen
You don't understand, Japan is just reacting to American aggression in the Pacific!!
11
5
709
@Andr3jH
Obviously, if the plane flaps its wings hard enough, it can take off. That's what the "flaps" are for. People are so stupid that can't answer this.
3
5
712
43/ Come on, Mike, you challenged me to come on stage to debate why you haven't released the packet-captures you promised. Let's do this thing! I'm around all three days! I'm ready any time, just have one of your people DM me!
I'll go back to the breakout room now.
25
73
682
While Bitcoin spawned a zillion copycats, only two are interesting: the smart-contracts of Ethereum, and the anonymity of ZCash.
50
293
678
Bullshit. There's no evidence 3 million toothbrushes performed a DDoS.
What the f*** is wrong with you people???? There are no details, like who is the target of the DDoS? what was the brand of toothbrushes? how are they connected to the Internet (hint: they aren't, they are…
63
100
721
1/ No, the iPhone 13 will not talk to satellites.
Instead, the iPhone will (according to rumors) now support another radio band for 4G/5G that was previously assigned to satellite service but which now can be used for terrestrial service.
22
153
693
I don’t think you understand how this works. Whether the idea or timeline are reasonable isn’t important.
You get $100 million from VCs. You then build a marketing/sales organization. You go to every trade show with a big booth. You have splashy adds in relevant locations. Your…
40
77
721
Lindell's describing how Joshua Merritt looked at the data and in 2 minutes said "that's not a pcap". Lindell questioned how Joshua could know, because Lindell's spent 4 months validating it.
Uh, yea, it only takes 2 minutes to confirm it's not a pcap. And it wasn't.
34
84
681
51/ To be clear: he gave us experts NOTHING today, except random garbage that wastes our time (e.g. a CSV needlessly encoded as RTF needlessly encoded as hex).
38
122
660
Why there is a phishing problem explained in one message.
15
97
685
20/ You can imagine right now that employees are no applying sledge hammers to concrete walls to make a hole so they can get into the server rooms to fix the BGP problem, because their badges don't work.
25
83
669
21/ In theory, fixing this BGP problem should be a quick fix. But when your entire infrastructure is interdependent on itself, then there's a lot of impediments to fixing the core problem.
15
81
657
This is my MacBook login screen, to defend against compelled password disclosure
21
232
668
Hi. Liberty Safe owner and cyber expert here. I thought I'd answer your questions. (A picture of my safe is below, one of their higher-end 'Lincoln' models, though a couple decades old).
Liberty Safe makes safes, not locks. They buy their locks from third parties, like SecuRam…
59
98
682
19/ But here's the FUN part: it's not just Facebook's DNS that's failed, but their internal network as well. Reports are that employees are locked out of their own buildings.
16
102
651
"Starlink" has been trending for the last couple days because the FCC canceled $800-million it was going to give to Musk/SpaceX/Starlink for "rural broadband". I thought I'd write up some notes.
Here's the three things you need to know:
- Starlink is not as good as wired…
85
107
656