Dev Dua
@dev0x01
Infrastructure Engineer @ThinkstCanary. @[email protected] on Mastodon
ID: 1032115339
https://devdua.github.io/ 24-12-2012 06:55:01
618 Tweet
259 Followers
762 Following
One of the reasons Thinkst Canary is so effective, is because it’s entry-vector-agnostic. Attackers phished a user & are now in ur infra? Attackers spent years building credibility to commit to an OSS project u use? They still have objectives on ur infra & then u discover em.
Our Leighton Dawson just pushed out a brand new Canarytoken. 1) Visit canarytokens.org; 2) Create a fake app¹; 3) Download it to your home-screen; 4) Get an alert when anyone else opens it! Read more about it at blog.thinkst.com/2024/08/introd… __ ¹ Still completely free
We have (almost) the whole Thinkst Canary team together in Cape Town this week.. Yesterday was padel.. Today.. a crash course in welding!
Academic work on honeypots and deception are often kinda disappointing, but this paper by Debi Ashenden and Reeves is worth the skim (especially since it confirms lots of our Thinkst Canary takes 😉) tl;dr : Canaries work, Use ‘em. — ¹ scholarspace.manoa.hawaii.edu/server/api/cor…
When we first built Thinkst Canary we were proud that it took less than 4 minutes to be useful when bought. Now it takes less than two... Catching attackers is the game the whole family can play...