11364
• Articles: @officercia • Blog: officercia.mirror.xyz • X: x.com/officer_cia
Dear friends, you can order an OpSec audit from me for you and your team/project.
I can conduct a series of trainings with you and your team, develop project-specific OpSec guidelines and answer all your questions.
This is about my personalized services. I do not do it on behalf of the company. Thank you! 🙏
Price is negotiated separately, depends on occupancy and number of days. You can count on 3-5 thousand dollars for everything (provided that there will not be any particularly costly cases).
• Can you share more information on the services included specifically?
• Mainly from potential dangers that may be encountered in Web3. Mainly OpSec, in particular, wallet security, social networks, multisig. In other words, everything that fits under OpSec including also workplace setup and basic security guideline including physical security. These includes lectures for team, personal consultations, creation of project-specific guidelines. Typical duration - 1-2 weeks, depends on complexity.
DM: @farm42
#opsec #security
A few hours ago wallets tied to crypto influencer JRNY saw ~$4M worth of crypto assets suspiciously transferred and sold indicating a potential private key compromise. - @investigations
• https://x.com/officer_cia/status/1860002063335457212?s=46
#hack #security
officercia.mirror.xyz/p1ieZdxQWH4yHCNOXNPHyT8So1cY0X_wMGKwdmavi7s
Читать полностью…
officercia.mirror.xyz/x91hTIDFrAL0lgqICRgWU7fLouuCMgvopQ9ZRvRXCLg
Читать полностью…
Awesome On-Chain Investigations HandBook 2.0
• https://officercia.mirror.xyz/pz1wGZmA06MHrl5HdKgSretf1Uw5H5e2YzeEBf3Tihs
#web3 #analysis
Spotted an amazing story by @BTCparser1 check this out fam:
• x.com/officer_cia/status/1858442198955524335
• t.me/BTCparser1/15659
#bitcoin #offtopic
OpSec risks are now one of the major problems.
4 key tips:
• Use multisig, with timelock and guardians;
• Setup onchain monitoring and practice incident response;
• Hire careful and be ready for spear phishing;
• Use separate laptops.
- x.com/_iphelix/status/1855855006219690233
#security #web3
The first video of our bug bounties series is up 🫡
- what is a bug bounty
- steps to get started as a beginner in bug bounties
- essential tools and resources to help you succeed
Here’s the full video: https://youtu.be/XGi4eZDejpY?si=WkDKB4Vo45HBdivw
#audit #bugbounty #web3
Handy scripts for glide.r.xyz ⬇️
• https://github.com/ustas-eth/daily-glider/blob/main/articles/handy-scripts/README.md
#audit #web3
Please support me and my work by donating to any address from the list below or minting one of my mirror articles!
You can also order an OpSec audit or lecture from me!
Thank you 🙏
#offtopic
For those who don't already know... Telegram can show commercials on my channel to users who don't have a Premium subscription nonetheless I won't (and cannot) receive any money from these ads.
FYI
#offtopic
Yet another awesome repo: https://github.com/tpiliposian/awesome-web3sec-blogs-and-podcasts
#audit #web3
This will come as a shock to many, but I once worked in a factory as a regular turner. Those were good times...
I once thought I wanted to build rockets and satellites, but life and fate decided that I would be a CT blogger in Web3! 😅
#offtopic
North Korean hacker group BlueNoroff is targeting crypto firms with a new malware that attacks MacOS. Once a user downloads and opens a decoy PDF, the malware is downloaded as a separate file on the MacOS desktop in the background to remotely access the victim's computer to steal private keys. — link
Читать полностью…
V2023: x.com/web3privacy/status/1742236340077338634
#privacy #opsec
Dear friends, I need your support very much! The best thing is to support me directly by donating to any address from the list below (Ethereum, Bitcoin, Tron & Solana)!0xB25C5E8fA1E53eEb9bE3421C59F6A66B786ED77A - Ethereum;17Ydx9m7vrhnx4XjZPuGPMqrhw3sDviNTU - Bitcoin;TYWJoRenGB9JFD2QsdPSdrJtaT6CDoFQBN - Tron;BLyXANAw7ciS2Abd8SsN1Rc8J4QZZiJdBzkoyqEuvPAB - Solana.
You can also support me by minting one of my Mirror articles NFTs or just DM me for a clean address!
Thank you very much!
Ready to elevate your Web3 bug bounty game? In this video, we’re diving into the Top 5 Tools for Web3 Security Researchers that every hacker and developer should know ⬇️
• https://youtu.be/zS9e8uIq_go?si=ZupuI6Y2pIZz1go-
• https://x.com/officer_cia/status/1859994004265554393?s=46
#audit #web3 #security
I'm not going to leave X... but if you're more comfortable, here's my bluesky account.
• https://bsky.app/profile/officercia.bsky.social
Anime and furry fans, subscribe to me! 😅
#offtopic #bluesky
GM fam! Please like my reply (I want Elon to reply lol): x.com/officer_cia/status/1859217874512125973
#offtopic #rocket
My own article about Patoshi/Satoshi can be found here:
Link: officercia.mirror.xyz/ojiGstsxl2GKOsmWBGoqaNbWUIN6J8PzSXJXXDfCE0A
#bitcoin #offtopic
Please like & share!
• x.com/officer_cia/status/1858246187645649138?12
#defi #web3
So, this is the moment of the year for us as the red guild, we have done a lot of work in these past weeks, in order to get to this moment, and I'm going to show you all what have we been up to.
But first, if you're in devcon, go by our booth, S103, next to OpenZeppelin's, where we have some interactive experiences. And you should book 4pm Wednesday 13th (Classroom B), "Don't get rekt4" a threat detection workshop (extended from what you've seen at DSS), which includes a hands on practice.
A SEAL security frameworks talk the 14th 4.10 PM (Stage 2).
And then, we have https://card.theredguild.org/ where you can generate your own password cards, get one printed at our booth along with some stickers. We have a devsecops field guide for our workshop called DevSecOops https://devsecoops.theredguild.org/.
Interactive stuff we got for you two fun things to play with, first a ctf, from our rektgames, https://therektgames.com/, where you can register and play now (already 80 registered) at https://ctf.therektgames.com/, and also a phishing dojo where we put your awareness skills to test by quizzing you in 15 real case scenarios at https://phishing.therektgames.com/.
Any feedback is welcome! And we hope you like this :), we've worked so hard with @tnch !
Spotted a cool service 👀
• https://insiderthreatmatrix.org/
#opsec #security
Spotted a cool article!
• www.osintteam.com/easily-find-osint-tools
Thank you for mentioning my work!
#osint
Bitcoin: The Ultimate OpSec Collection
• https://officercia.mirror.xyz/axuVGnWQ0qglIDyk8KWL2mGYvSut94Vr1BWQIEPW_yw
#opsec #security #privacy
I have collected in the thread actual ways to protect your SIM card and phone number, as well as different options available on the market: x.com/officer_cia/status/1855292702570516595?1
#opsec #security #privacy
Thank you for mentioning my public letter 🫡
• /channel/Shualpha/626
#security #opsec #privacy
Defence tactics, a thread ⬇️
• https://x.com/officer_cia/status/1855071920859009134
#security #opsec
Sad day for privacy advocates and crypto, and a big win for the warrantless surveillance state and wholly unaccountable chain analytics firms (with their psuedo-scientific "forensics")
https://cointelegraph.com/news/bad-blockchain-forensics-convict-roman-sterlingov
a Study on Data Privacy in DeFi Protocols. https://arxiv.org/abs/2211.16082 @web3privacy1
Читать полностью…