Mauve 👁💜 @mauve@mastodon.mauve.moe

Mini Blue Team Diaries Story - Pride Month Special Edition:

You might be wondering, how could their possibly be an incident response story linked to pride month? Well, buckle up, because its a good one.

So, this happened a number of years ago, when it first became common for companies to update their logos on their social media pages to show support for Pride month.

Leadership had noticed that the company had not updated the logo, like so many others had, and as such, made a request to marketing to do so. It was late on a Thursday, and the person responsible for social media was about to leave for vacation - literally that evening, but the graphic designer jumped on the request, and by the end of the day, the modified logo was up.

Late that night, the Security On-call pager goes off, and I respond. "What's up?"

"Do you have access to our social media profiles by chance?" came the worried voice at the end of the line.

"Erm, yeah sure, I can get it, but why? What's up?"

Access to our social platforms was managed via SSO to a management tool, and since I had SSO admin access, I could just assign it to myself in the event of an incident.

"We need to change the logo back on Twitter - there is a problem with the pride one, but [social media manager] is on vacation."

"Mmmm. Ok." I was wondering, what on earth was wrong with the logo. "When you say, there is a problem with the logo, how so?"

"Erm. Apparently they did the wrong colors or something, and people are kicking off about it on social media."

Still confused I dutifully fired up the computer, and browsed to the Twitter page of the company.

It was immediately obvious to me, a nerd, what they'd done. In their quest to produce a pride logo, rather than base the logo on the pride flag, as one normally would, they somehow managed to take the rainbow colors from the old Apple logo and use them as the basis for the pride logo instead. Quite rightly this was being ridiculed by the masses.

I was able to revert the logo for them until the social media manager was able to fix it properly the next day, but in a further, even more hilarious turn of events, a post with the Apple pride logo had done the rounds in the company Slack and one employee had dutifully captured the image and turned it into an emoji for everyone to use - and many had already adopted said emoji into their usernames on Slack.

So yeah, proof, I think that you never know what is going to be on the end of the phone when the on-call strikes.

Want more stories like this? Check out: infosecdiaries.com/ and Happy Pride Month!

#infosec #DFIR #BlueTeam