Allison Nixon

Chief Research Officer @ Unit 221B
best way to get ahold of me is through contact form on our website

my other urls:
https://www.linkedin.com/in/allison-nixon-81822124/
https://bsky.app/profile/nixonnixoff.bsky.social
don't bother contacting me on twitter

Last Notes

2025-04-11 05:22:36 UTC

- reply

they are gonna take away your security clearance!

2025-02-17 20:55:37 UTC

The SEC Twitter account hacker was a cybersecurity major in college, and also wants to let people know that the hack was actually his victims' fault.
https://x.com/vxunderground/status/1891220194980204705

2025-01-28 19:57:04 UTC

- reply

im not holding my breath that the us government can dole out funds to the correct people (who almost by definition suck at commercialization) before getting swarmed by financial vultures. For someone without pre existing, pre financial motive, social connections, i think it would be nearly impossible to identify and reward the correct people. And even the well connected people will miss a lot of worthy people too.
That said this problem, as you know, dominates my thinking right now and im going to try some things this year. I truly believe these unfunded researchers are money left on the table because the people with funding are ignorant.

2024-12-31 04:06:40 UTC

>IQ levels when you are a cybercriminal that tries to extort the president, but you are government property and Krebs is calling your mom :(
The story:
https://krebsonsecurity.com/2024/12/u-s-army-soldier-arrested-in-att-verizon-extortions/
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/745/287/886/029/816/original/a615fdd8b499167d.png

2024-12-08 02:39:38 UTC

Who wants to be next?
(Waifu arrest footage released by WSJ)
https://www.wsj.com/tech/cybersecurity/hacking-brian-krebs-snowflake-waifu-49b87fce?st=sLkaJz&reflink=desktopwebshare_permalink
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/614/873/129/854/614/original/9baca013715cc149.mp4

2024-12-01 17:14:22 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/578/689/118/322/439/original/92219c7651645a08.jpg

2024-11-29 08:34:08 UTC

Who wants to be next?
https://www.therecord.com/news/waterloo-region/accused-kitchener-hacker-unmasked-after-threatening-woman-online/article_3501ea8b-1514-5524-8de6-f52e92c3e103.html

2024-11-19 03:16:29 UTC

- reply

authenticating yourself is not the same as tracking usage. systems can be built in a way to make that hard. it's alarming to think how much critical personal data and finances are stored on accounts where the platform doesn't store enough points of identification to positively identify the owner. i deal with so much ATO and massive privacy violation because of that precise issue.

2024-11-18 08:03:37 UTC

- reply

but people are already forced to provide their government documents for online banking. And the document formats are so outdated that they are easily faked, because the anti counterfeitting holograms dont carry over a grainy webcam well. Do we have to just accept the tyranny of fraud gangs just because we hate gov so much

2024-11-08 01:10:49 UTC

- reply

this is one way the fraud problem can become self solving. Haha