Randy Marchany (@randymarchany) header
Randy Marchany (@randymarchany) profile picture

CISO of VA Tech, musician, SANS Institute Instructor #2. https://teapawt.org/t.co/8cN1b12mVr https://teapawt.org/t.co/5yXVEPsV8t

Virginia, USA
Joined June 2009
Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)Photo by Randy Marchany (@randymarchany)
an interesting blueprint from 1971. We seem to be following it. scholarlycommons.law.wlu.edu…
31
Randy Marchany retweeted
This Australian's reply to Trump's rant about “NATO not being there for America” is perfect. "Mate. You run a country with 600,000 homeless people sleeping on the street tonight. A country where 40% of adults can't cover a $400 emergency without borrowing money. A country where insulin costs more than a car payment and people are rationing it to survive. A country where medical debt is the number 1 cause of bankruptcy. A country where women are dying in hospital car parks because doctors are too scared of abortion laws to treat a miscarriage. You lock up more of your own citizens than any nation on earth. More than China. More than Russia. More than North Korea. The land of the free has 2 million people in cages, and a quarter of them haven't even been convicted of anything. They're just too poor to make bail. Your life expectancy is going backwards. You're the only developed nation where that's happening. Your infant mortality rate is worse than Cuba's. Your kids do active shooter drills between maths and English while you sell the gunmaker's stock to your mates. Your minimum wage hasn't moved in 15 years. You've got teachers working 2 jobs and veterans sleeping under bridges and you just spent a trillion dollars flattening a country that didn't attack you. And you’ve got a convicted felon, adjudicating raping, paedophile protecting, porn star shagging insurrectionist running the biggest dumpster fire war campaign since the Taliban in Afghanistan thanked you very much for losing again. And you're calling Greenland poorly run? Greenland has universal healthcare. Free education. One of the lowest incarceration rates in the world. Nobody goes bankrupt there because they got sick. Nobody dies in a waiting room because their insurance said no. 'NATO wasn't there when we needed them." When exactly was that, champ? September 11? Because NATO invoked Article 5 for the first and only time in history FOR YOU. Soldiers from dozens of countries deployed, fought, bled, and died in Afghanistan FOR YOU. Australia wasn't even in NATO and we still showed up. For 20 years. And you pulled out at 2am without telling anyone and left them to deal with the mess. So maybe before you start calling other countries poorly run, have a look at your own backyard, you spray-tanned aluminium siding salesman. The only thing poorly run in this picture is your f----- mouth." Credit to: Jim Keller
823
9,459
612
30,661
786,688
I'm dead !!!! 😂😂😂😂😂😂
1,066
14,838
1,421
66,120
2,845,809
Randy Marchany retweeted
‘Australia without migrant workers’ Who made this? 👏 Mandatory viewing for any fool who still doesn’t understand the implications of slamming the gates shut.
3,667
5,416
710
26,010
3,627,955
The 2 FBI attack vectors map directly to core, long-standing categories, the OWASP Top 10, SANS Top 10, MITRE CWEs. Today's "advanced" breaches are rarely driven by new exploits, but rather by the same foundational mistakes the industry has failed to fix since the 1990s. 1/n
1
2
104
and A05: Security Misconfiguration (relying on a brittle regex rule instead of hardening the app). MITRE CWE: CWE-20: Improper Input Validation and CWE-177: Improper Handling of URL Encoding. SANS Top 10: failure to sanitize, or filter input traffic entering the perimeter. 5/n
1
59
This has been known: 25+ years. URL encoding bypasses (use %50 instead of P) to trick basic text-matching firewalls became widely known in the late 1990s and early 2000s. Phrack magazine articles and early black-hat advisories from that era frequently detailed how to do that. n/n
88
Randy Marchany retweeted
1/ This spring, while investigating the Trump administration’s efforts to influence the midterm elections, my reporting partner @JenAFifield and I noticed something unprecedented, something very troubling… 🧵👇
11
231
22
702
169,616
Randy Marchany retweeted
′′ Le vélo est la mort lente de la planète ". Un banquier a fait réfléchir les économistes quand il a déclaré : ′′ Un cycliste est une catastrophe pour l'économie du pays : il n'achète pas de voitures et n'emprunte pas d'argent pour l'acheter. Il ne paie pas les polices d'assurance. N'achète pas de carburant, ne paie pas pour la révision et les réparations nécessaires de la voiture. N 'utilise pas de parking payant. Il ne provoque pas d'accidents majeurs. Ne nécessite pas d'autoroutes multiples. Il ne devient pas obèse. Les gens en bonne santé ne sont pas nécessaires ou utiles à l'économie. Ils n'achètent pas de médicaments, ils ne vont pas dans les hôpitaux ou chez les médecins, ils n'ajoutent rien au PIB du pays. Tandis que chaque nouveau magasin McDonald' s crée au moins : 30 emplois, dont 10 cardiologues, 10 dentistes, 10 experts en régime alimentaire et nutritionnistes, ainsi que les personnes qui travaillent dans le magasin lui-même, évidemment ". Choisissez donc avec attention : un vélo ou un Mc Donald ? Ça vaut la peine d'y penser... PS : marcher c'est encore pire car les piétons n'achètent même pas de vélo !
724
4,717
496
13,384
683,771
Michael Reichstein wrote a great summary of the Michigan water plant attacks. It's at secureish.substack.com/p/we-…. Check it out - once again, we were warned and we ignored.
2
142
Wanna know what's sad? Am watching "Live Free or Die Hard" made in 2007. The same vectors the movie hackers used to get in systems still work today in 2026. Sad.....
2
135
A condensed version of my Cybersecurity's Original Sin series is at vtrandy.substack.com/p/cyber….
1
2
501
Randy Marchany retweeted
AI is reshaping cybersecurity and the workforce. Explore free AI literacy resources for educators and learners through the Get CyberSmart collection. getcybersmart.org/for-teache… #GetCyberSmart2026
🤖 Made with AI
1
75
Randy Marchany retweeted
Watch SANS' @HeatherMahalik on the forensics behind the Idaho murders case in a new @Netflix doc on 7/29
1
2
8
3,715