Jump to content

farmersnotfighting

New Members
  • Posts

    36
  • Joined

  • Last visited

Everything posted by farmersnotfighting

  1. https://www.therams.com/news/jared-verse-braden-fiske-jordan-whittington-selected-to-2024-pfwa-all-rookie-team Made the all rookie team.
  2. https://www.therams.com/video/jordan-whittington-43-yard-kick-return-seahawks-week-18 https://www.therams.com/video/jimmy-garoppolo-50-yard-connection-jordan-whittington-seahawks absolutely cooked the DB on the out and up to get wide open. that's solid ass route running and why he has the top separation stats.
  3. Dude has a career game and he's still talking about Texas in in post game interview. https://www.therams.com/video/locker-room-interviews-tyler-higbee-jordan-whittington-emmanuel-forbes-jr-react-week-18-loss-seahawks
  4. dog. https://theramswire.usatoday.com/2024/10/08/rams-jordan-whittington-wide-receiver-starter-2024/
  5. https://www.therams.com/news/jordan-whittington-is-ascending-in-the-rams-wide-receiver-room good article. only bone i have to pick is when he said Jordan was recruited as a 5* RB out of high school. people always get that wrong. he was offered here first as a DB like sophomore year i think, declined, offered again junior year as a WR. accepted. came here and went straight to the WR room. then all those RB injuries happened and he volunteered to switch to RB with RoJo also switching from QB to RB. played freshman year as a RB. got hurt. went back to WR because RoJo wanted to stay as RB and Herman recruited Bijan so they didn't have that RB roster depletion anymore and he planned on being a WR anyway.
  6. lol at everyone who said he didn't get separation. dude is and was always open.
  7. https://www.pff.com/news/nfl-highest-graded-rookies-nfl-week-4 Highest PFF graded rookies through 4 weeks. J Whitt at 13. Also, Sweat at 5.
  8. He should be used to having his touchdowns called back from his state championship game experience. McVay fucked up by not realizing Whittington gets angry about having his TD called back and scores the next play anyway.
  9. Good little feature piece there. Damn. NFL production quality seems light years ahead of college. All the high definition slow-mo shit.
  10. https://atozsports.com/college-football/texas-longhorns-news/salute-to-jordan-whittington-unbreakable-texas-longhorns-now-los-angeles-rams/
  11. Officially made the 53 man team. https://athlonsports.com/college/longhorns-country/rookie-wr-jordan-whittington-makes-la-rams-53-man-roster ...and Stoops got cut. Eat shit ou.
  12. https://ramblinfan.com/posts/2-nfl-experts-love-this-rams-coach-and-player-in-preseason-so-far-01j5t24p49ep
  13. https://www.bleacherreport.com/articles/10132392-nfl-rookie-rankings-top-performers-after-2024-preseason-week-2 Top 10 rookie performers after 2 weeks. Worthy at 9, Whittington at 3. And he's on the list of highest graded rookies drafted on day 3.
  14. Lots of good shots of our boy here. https://www.therams.com/photos/best-rams-gameday-cowboys-preseason-sofi-stadium-stetson-bennett-jordan-whittington#f7d03e96-3f9e-4dc2-a76a-d24e336cf67b 2 pics that tell you he's gonna be a leader there soon:
  15. Mic'ed up. Seems pumped. Glad he's getting a chance to learn from Kupp and Stafford.
  16. Highest PFF grade of any rookie WR last week. Probably should have thrown him the ball a couple of more times.
  17. lol. neither did fireeye/mandiant when they got hacked. neither did RSA. neither did solarwinds. neither did FUCKING MICROSOFT. i'm not saying they're good. i'm saying they're not dog shit like you're suggesting. and again, at every org, security is understaffed, always screaming for changes and being ignored by management. every single company. that's not unique to lastpass. i do this for a living. i have seen a lot of organizations. fortune 10 and small orgs. including other security companies. i can count on one hand the number of orgs i've done engagements for where i never said "what the fuck are you doing here" and none of them were the security companies. you would be horrified to see how shitty some networks are only held up by gum and rubber bands, including major companies. the real world isn't a security+/cissp textbook.
  18. lol i was talking chronologically through the attack. they were fine up until that point. they forced MFA on VPN usage. good for them. that puts them ahead of most orgs and is a huuuuge barrier to an attacker trying to gain initial access. having a low attack surface that's hardened, implementing MFA... forcing an attacker to pwn a dev's home network is very very good. oh and i was wrong about plex. it wasn't a 0day. apparently it was a known vuln. but still. identifying the target developer, finding his home network range, exploiting plex, that's a very time consuming attack. so kudos to the attacker there. the million dollar question still is how did they go from home network access to dev workstation access.
  19. lazy with their monitoring and didn't notice someone walking out with everything. And lazy about separating prod and dev environments. as someone who breaks in to network for a living, i can assure you this is not unique to lastpass lol. as far as i know, lastpass breach was decently done. the dev was running a plex server at home. someone threw a 0day RCE at it from the outside and used that to pivot into his network. i dont think they ever disclosed how the attacker went from network access to actually owning the dev's box. but from there, they waited until he already logged in to the vpn (after he put in his MFA), and rode the connection in that way back to the lastpass network. so far so good. lastpass did everything right and the attack took a lot of resources to carry out. but where they fucked up was the dev having access to the prod data. i'm guessing they did the right thing and had all the data in multiple accounts (separate AWS account for prod, different one for dev, different one for staging). no access to each other. cool. but the dev probably had access to both (or all?) of the accounts, so the attackers could just ride in to the prod account as the developer. again, i haven't seen any details on this part of the breach, but i've seen (and done) this exact thing (well... similar -- SE to get code execution on developer company workstations while they work from home - not attacking personal devices. that's illegal) many times. you absolutely could physically write down a long password on paper for person use at home (as long as you can keep it secure). you are infinitely more likely to get your box randomly hacked than a fucking thief breaking in to your house, finding your password paper, and getting away with it. if they did that shit, you have way more problems to worry about than losing passwords. this is basically a discussion in threat modeling. who is mostly likely to attack you? how will they do it? is writing a password on paper perfect or great? no. is it less likely to be stolen than a file on your computer? yes... or probably. as long as you have a safe place for it that your wife/kids/dog can't get to it or damage it.
×
×
  • Create New...