Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

Electric Power Geek, Hardhat Hacker, Control System Security Engineer, & .... Opinions are my own. (ಠ_ಠ) c[_] KC3GST infosec.exchange/@mtoecker Avenger's Compound, New Jersey Joined May 2009

Tweets

22K
Followers

3K
Following

1K
Likes

3K

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

3 weeks ago

Now that Al is having his IPO moment, I thought I'd share his picture so you know that he's doing his best.

0 0 0 71 0

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

4 weeks ago

@HackingDave Super disappointed.

1 0 3 1K 0

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

a month ago

@sjmurdoch I did some very speculative research on frame 17 years ago, but looking at the hardware and encoding not the actual data transmitted. youtu.be/Duxr1yRKRoU?si…

1 3 15 6K 16

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

a month ago

Go to sleep go to sleep...

0 0 1 59 0

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

2 months ago

Always turn off electricity at the breaker before doing work on electric systems.

Worst Finance Takes @Lifeinvestmoney

2 months ago

A/c stopped working Local company wanted $982 to repair Asked AI what was wrong Prompted to replace capacitor Bought new capacitor on Amazon for $19 Went to replace capacitor Got electrocuted AI said “it looks like you’re right that’s incorrect” Went to hospital

240 128 3K 181K 76

0 0 1 101 0

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

3 months ago

Anthropic's business is converting compute into value using the fruits of their science, data, and engineering expertise, for *paying* customers... Why join the AI build out race-to-the-bottom to build compute when you can rent it for pennies on the dollar?

Anthropic @AnthropicAI

3 months ago

Our run-rate revenue has surpassed $30 billion, up from $9 billion at the end of 2025, as demand for Claude continues to accelerate. This partnership gives us the compute to keep pace. Read more: anthropic.com/news/google-br…

318 686 8K 6.1M 1K

0 0 0 132 0

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

4 months ago

@TVAnews Beautiful lift, folks.

0 0 0 43 0

View Details

Riley Walz @rtwlz

4 months ago

Payphones are strangely still licensed in California, so I filed a FOIA request and got the full list. Naturally I made a game you can now play:

142 1K 20K 741K 4K

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

5 months ago

Nes 🎨 @feydemon

5 months ago

made a pizza and sliced it like a psychopath because i remembered i have free will and can do whatever i want

2K 18K 347K 5.8M 8K

0 0 1 138 0

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

6 months ago

My bigger question is which videos are in the Downloaded folder. I'd say 1969, RCA, with this one from @veritasium : youtu.be/AF8d72mA41M?si…

LaurieWired @lauriewired

6 months ago

You can send a single smartphone to any point in human history. No instructions. Winner is whoever advances human progress the most. When + where do you send it?

294 27 1K 418K 206

0 0 0 201 0

View Details

LaurieWired @lauriewired

6 months ago

You can send a single smartphone to any point in human history. No instructions. Winner is whoever advances human progress the most. When + where do you send it?

294 27 1K 418K 206

View Details

MG @_MG_

6 months ago

I’m a bit concerned about the non-inquisitive celebration from infosec on this. Where is the “what does keystroke latency even mean?” Without that, you can’t implement it for yourself, nor can you identify weaknesses. ~3yrs I was privately proposing similar options. So, AS SOMEWHAT OF A KEYBOARD EXPERT MYSELF 🤔💅, let’s look… First, this is most likely NOT a direct measure of network latency. This machine was physically located in Arizona. DPRK started off with shipping corp laptops overseas, but the network latency was a dead giveaway. So they started colocating them in the USA and remotely controlling them. First with remote control software, which is easy to identify if the company has security software on the machine. And then with hardware like IP-KVMs. There are sometimes a few tells that an IP-KVM is in use, but a well tuned one will identify exactly like a normal external keyboard/mouse/monitor. Unless… This is where you have to start looking beyond device identity and instead look at input anomalies. Keyboard/mouse input being sent halfway across the world via network packets to an IP-KVM can look… weird. Think bursts of input. This looks very weird with mouse data that is normally smooth. But even keystrokes start to stand out when you have a big enough dataset to compare against. So, of course, you could improve the IP-KVM to smooth out and “humanize” the inputs before relaying them to the host. But… You can also present some real time control surfaces. I don’t want to blow anyone’s defense tradecraft here. So let’s just imagine the employee needs to play a 5sec game of flappybird each day. Or maybe it’s an overt “DPRK Detector” step during login. The visual input has to travel halfway across the globe, then the input has to come all the way back. That’s a massive delay for response to visual stimulus. Certainly anomalous enough to warrant investigation. How do you beat that? Maybe an AI process running on the IP-KVM that plays DPRK Detector for you? The arms race will continue. And it’s mostly because HR and Hiring Managers don’t want to do deeper background checks needed to identify fake/stolen identities. 🤷‍♂️ And for anyone not familiar with these hunts, the detection techniques are NOT definitive proof of wrong doing. They are simply turning a mountainous hay stack into a fistful of hay that a human can quickly sift through to look for other indicators. Note: there are environment-specific detections as well. But I tried to stay in territory that’s applicable to everyone who has this risk in their threat model.

34 123 1K 126K 378

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

7 months ago

We get it, AI is bad at math.

Snehil Saluja @mrsnhl

7 months ago

what a clever ad

268 853 33K 12.8M 6K

0 0 1 300 0

View Details

Mɪᴄʜᴀᴇʟ Tᴏᴇᴄᴋᴇʀ @mtoecker

8 months ago

One of the coolest things about Kurowski's show is seeing her actually sit down with the client on camera with a pen and paper. This isn't about performing, it's about working, and listening.

Magnolia Network @magnolianetwork

3 years ago

Lindsey Kurowski helps a property owner rediscover his passion for his struggling motel in the charming city of Tombstone, Arizona. Watch a new episode of #MotelRescue tonight at 8/7c on #MagnoliaNetwork on TV, @streamonmax, and @discoveryplus.