EricaZelic
@ericazelic.bsky.social
Security Engineer / IAM Security. Defending against people like me.
Logged on to social media, saw a sick person celebrating people's mistakes and demonstrating their toxicity in the workplace, happy their coworker might be having a hard time. Logging off social media. I don't need to be reminded there are hateful souls in the world today. Try Love, Less Hate.
This time I tried something new: I'm burnt out and defeated. I'm not used to these feeling coming from offsec. So I took a couple days off, instead of quitting.
If nothing else, the last 2 months have allowed American's to see each others' true colors. Ignorance is bliss.
As a public figure, what matters the most is whether or not people like you. Elmo has been given a lesson. It's up to him what he does with it. He can continue a state of denial or he can learn. The choice is his.
Imagine calling yourself the master race and have to resort to erasing the achievements of minorities to make yourself feel better.
Once upon a time, long long ago, people used to go over to each others' houses and just sit and talk.
Has anyone ever had a bad call with a vendor? I had one today. It was my first bad call with a vendor.
www-bleepingcomputer-com.cdn.ampproject.org/v/s/www.blee...
New Windows zero-day exploited by 11 state hacking groups since 2017
At least 11 state-backed hacking groups from North Korea, Iran, Russia, and China have been exploiting a new Windows vulnerability in data theft and cyber espionage zero-day attacks since 2017.
www-bleepingcomputer-com.cdn.ampproject.org
Omg Intune. I swear, managing M365 requires 10 PhD equivalencies.
The price of tuna has increased 700% since the 80s. Invest in tuna 😋 🐟
As many people are aware, there have been ongoing issues with Exchange the past few weeks. The latest *incident* (not advisory) is about NDRs. We have been seeing tons of NDRs but do not match the NDR codes in the Incident. /1
Today I learned the difference between TPMv2 and fTPM. It seems like a lot of devices are using firmware versions of TPM although the specification version lists 2.0 with a subversion.
Dear SharePoint developers. If your SharePoint Online application is more than one year old, your delegated API permissions may no longer follow least privilege. Microsoft now has the sites.selected API permission which is akin to SP on-prem ACS permissions. learn.microsoft.com/en-us/sharep...
Understanding Resource Specific Consent for Microsoft Graph and SharePoint Online
Understanding Resource Specific Consent for Microsoft Graph and SharePoint Online.
learn.microsoft.com
Can someone tell me what this app registration is that I see absolutely everywhere?
Labeling your entire data estate is challenging, especially when you start considering service principal access to data.
This is heart breaking and I wonder how many of our senior are experiencing this right now. Disgusting
post malone ergo propter malone@proptermalone.bsky.social · last yr.DOGE owns every one of these now whether or not it's directly the result of their actions
This was the same guy who resigned after he was found making a bunch of wildly racist remarks. Musk, Vance and Trump all insisted he be brought back into government. And for what? So be could access and share private personal data in violation of the law? This is our new era of merit?
Desired State Configuration (DSC) has been re-engineered and given new life in the just-released v3.0. "DSC is a declarative configuration and orchestration platform that defines a standard way of exposing settings for applications and services." devblogs.microsoft.c...
Announcing Microsoft Desired State Configuration v3.0.0 - PowerShell Team
This post announces the release of Microsoft Desired State Configuration v3.0.0. We discuss the features and benefits of DSC and how it differs from PowerShell DSC.
devblogs.microsoft.com
When you increase tariffs on wine, while it may increase sales of domestic wine, it also increases demand, which increases prices for domestic wine as well. Increased tariffs increases prices for consumers who will have to make sacrifices in purchases, which has net negative effects on the economy.
One of my companies informed me they cancelled a $2m conference in Florida. Why ? They didn’t feel they could pass on the incremental cost of tariffs. So they are cutting expenses. That’s a city that lost a ton of tourism revenue. The cost of tariffs isn’t just the cost of the tariff
When you're good at something, insecure people will hate you. Just remember that's a them problem and not a you problem.
My account was suspended on X lol. No idea why. Maybe because I referred to Elon as Edolf.
There's a lot of people in transition right now, especially in tech related roles. Consider pursuing consulting: You get to see so many different organizations and learn common problems. You interact with the entire tech stack when doing offsec. You have more opportunity and exposure.
