Mike Ritland

Yeah. So here's the thing, though. That's the other aspect is there's a lot of very detectable defaults. You have to really know how to use the tool to work around these things. But by design, it's supposed to be detectable if you're doing good security. This is going to light up. It's literally, it announces itself as an OMG cable effectively out of the box, right?

Yeah. So here's the thing, though. That's the other aspect is there's a lot of very detectable defaults. You have to really know how to use the tool to work around these things. But by design, it's supposed to be detectable if you're doing good security. This is going to light up. It's literally, it announces itself as an OMG cable effectively out of the box, right?

Yeah. So here's the thing, though. That's the other aspect is there's a lot of very detectable defaults. You have to really know how to use the tool to work around these things. But by design, it's supposed to be detectable if you're doing good security. This is going to light up. It's literally, it announces itself as an OMG cable effectively out of the box, right?

So hopefully you're at least checking that.

So hopefully you're at least checking that.

So hopefully you're at least checking that.

So here's the thing. Is the people who are that low on the bar of security, I don't need these to get in. I just pick up a phone. I send an email.

So here's the thing. Is the people who are that low on the bar of security, I don't need these to get in. I just pick up a phone. I send an email.

So here's the thing. Is the people who are that low on the bar of security, I don't need these to get in. I just pick up a phone. I send an email.

That's that sweet spot where it's like all, you know, you map out all the desires, the capabilities and the threats and the negative consequences and just thread the needle to get just that sweet spot. And we spend a lot of time thinking about that. But right now, I just point to the last five years of like, look, the results.

That's that sweet spot where it's like all, you know, you map out all the desires, the capabilities and the threats and the negative consequences and just thread the needle to get just that sweet spot. And we spend a lot of time thinking about that. But right now, I just point to the last five years of like, look, the results.

That's that sweet spot where it's like all, you know, you map out all the desires, the capabilities and the threats and the negative consequences and just thread the needle to get just that sweet spot. And we spend a lot of time thinking about that. But right now, I just point to the last five years of like, look, the results.

And that way, you know, I can talk all day about how much intent we put into it. But the results are far better than the intent in terms of convincing somebody. Another thing, so I think I showed you These should actually ship deactivated for multiple reasons, which you can imagine. There's a little, we call it the programmer. It's kind of a firmware tool.

And that way, you know, I can talk all day about how much intent we put into it. But the results are far better than the intent in terms of convincing somebody. Another thing, so I think I showed you These should actually ship deactivated for multiple reasons, which you can imagine. There's a little, we call it the programmer. It's kind of a firmware tool.

And that way, you know, I can talk all day about how much intent we put into it. But the results are far better than the intent in terms of convincing somebody. Another thing, so I think I showed you These should actually ship deactivated for multiple reasons, which you can imagine. There's a little, we call it the programmer. It's kind of a firmware tool.

So you plug this into your computer to activate it, right? This doubles for multiple other things. So if you do like a self-destruct on it, you recover the cable with this if you wanted to. You have to get it back out of the field. But self-destruct, we'll just put it into a neutral cable that's just... Not harmful at all. Really good if you can't pull the thing back out of the field.

So you plug this into your computer to activate it, right? This doubles for multiple other things. So if you do like a self-destruct on it, you recover the cable with this if you wanted to. You have to get it back out of the field. But self-destruct, we'll just put it into a neutral cable that's just... Not harmful at all. Really good if you can't pull the thing back out of the field.

So you plug this into your computer to activate it, right? This doubles for multiple other things. So if you do like a self-destruct on it, you recover the cable with this if you wanted to. You have to get it back out of the field. But self-destruct, we'll just put it into a neutral cable that's just... Not harmful at all. Really good if you can't pull the thing back out of the field.

You want to neutralize all your stuff. However, if you're blue team and you found this, you can also use one of these to dump every bit of firmware that's running on here, which will include payloads and all this stuff. So as long as, you know, it hasn't been self-destructed, you can just dump that and do a full forensics on it. So they get to practice as well. Wow.

You want to neutralize all your stuff. However, if you're blue team and you found this, you can also use one of these to dump every bit of firmware that's running on here, which will include payloads and all this stuff. So as long as, you know, it hasn't been self-destructed, you can just dump that and do a full forensics on it. So they get to practice as well. Wow.