November 10, 2022
the dick's sporting goods yeti cooler spam is actually tight as hell from a spam standpoint
Nov 8, 2022
-
Mastodon support can’t come soon enough. Adding content manually is error prone and awful. Anyway, subscribe.
-
I heard of someone naming their kid Kelvin, insisting that it's pronounced Calvin, and at first I was like "ha, unintentional win", but then realised that everyone at school is going to give them the nickname "absolute unit".
Nov 8, 2022
-
But they were, all of them, deceived, for another Check Mark was made. In the land of Mordor, in the fires of Mount Doom, a master Check Mark was forged in secret to control all others. And into this Check Mark he poured his cruelty, his malice and his will to dominate all life.
Nov 9, 2022
-
Wow I can’t believe people are sharing a copy of my article out from behind the paywall like this, that’s terrible.
https://archive.ph/2022.11.08-115944/https://www.washingtonpost.com/technology/2022/11/08/trustcor-internet-addresses-government-connections/ Nov 9, 2022
-
Phil Pascoe, Monica Pascoe, Scott Tubbs and Quadrant Magnetics LLC are charged with wire fraud, violations of the Arms Export Control Act, and smuggling of goods for their roles in an illegal scheme to send export-controlled defense-related technical 1/n justice.gov/opa/pr/three-a…
Nov 9, 2022
-
@hdm This isn't new. Witness this email thread from 2010 https://groups.google.com/g/mozilla.dev.security.policy/c/cs6BpzdxCCg TL;DR: we had the same concerns back then as now, and getting into the root CA store is still way easier than it should be. Just wait till you realize people can buy a small existing CA if they really want in... There's no controls regarding change of controlling ownership really.
kurtseifried (he/him): "@[email protected] This isn't new. Witness thi…" - Mastodon.social
@[email protected] This isn't new. Witness this email thread from 2010 https://groups.google.com/g/mozilla.dev.security.policy/c/cs6BpzdxCCg TL;DR: we had the same concerns back then as now, and getting into the root CA store is still way easier than it should be. Just wait till you realize people can buy a small existing CA if they really want in... There's no controls regarding change of controlling ownership really.
>
@[email protected] @hdm Define no controls? One of the big pushes I did was on explaining the risks that lead to things like Section 8 of Mozilla’s Root Store Policy - https://www.mozilla.org/en-US/about/governance/policies/security-group/certs/policy/#8-ca-operational-changes
Things are vastly different now than the were 10 years ago. I definitely agree that root programs are massively underfunded and understaffed, relative to the risk and benefit. Although Mozilla and Microsoft have both recently greatly backslid in quality and thoroughness, due to losing some great staff in that area, it’s still nowhere near as easy as it was when it was a perfunctory rubber stamp for most of the 2000-2010 period.
Recall that StartCom was distrusted, in part, for failing to disclose an ownership change. Issue R in https://wiki.mozilla.org/CA/WoSign_Issues
I think the biggest loss has been more recently folks assuming it all just magically works. Mozilla, for their part, have always been clear that they rely on community involvement and expertise to help evaluate these requests. While it’s true there’s a lot less participation these days, potentially due to the quality decline in Moz’s thoroughness causing folks to get disillusioned, it’s absolutely something that more folks can and should contribute to.
https://infosec.exchange/@sleevi/109317970219806072-
Keeping my tradition of painting octopuses on the bottoms of tables in hotel rooms alive 😀
jam: "Keeping my tradition of painting octopuses on the…" - Mastodon.ART
Attached: 1 image Keeping my tradition of painting octopuses on the bottoms of tables in hotel rooms alive 😀
-
guess what happens if 20 accounts exploit this system in a way that further alienated publishers and advertisers that Twitter needs just for Blue to break even? that’s right, $160 for free. they’re practically printing money at this point
Nov 9, 2022
-
Microsoft Issues Patches to Fix 6 Active 0-Day Windows Vulnerabilities
#CyberSecurity https://www.hackread.com/microsoft-patches-fix-active-0-day-flaws/
M Dell: "Microsoft Issues Patches to Fix 6 Active 0-Day Wi…" - Mastodon.social
Microsoft Issues Patches to Fix 6 Active 0-Day Windows Vulnerabilities #CyberSecurity https://www.hackread.com/microsoft-patches-fix-active-0-day-flaws/
-
AN OPEN SOURCE LAWYER’S VIEW ON THE COPILOT CLASS ACTION LAWSUIT
In short — it’s bad, and weird, and bad. The worst outcome from this is a situation where output from a model is copyrightable, meaning that any AI produced content would be copyrighted.
An Open Source Lawyer’s View on the Copilot Class Action Lawsuit – Law Offices of Kate Downing
Seems like the other shoe finally dropped and a formal complaint has been filed with the Northern District of California regarding Copilot and Codex. The complaint is fascinating because the one th…
-
mattchis :verified: :donor:: "#linux #windows #hacking #hacker #funnymemes #fun…" - Infosec Exchange
Attached: 1 image #linux #windows #hacking #hacker #funnymemes #funny #infosec
-
The Great Crypto-Cop Brain Drain
The Great Crypto-Cop Brain Drain | WIRED
Hunting down crypto criminals is a dying art as law enforcement officers jump in-house.
-
Research by Safeguard Defender found China has at least 110 Overseas police “service stations” that are a part of a global manhunt to “persuade” targets to return voluntarily. Chinese agents are threatening people in 5 continents.
Nov 10, 2022
China has 110 Overseas police “service stations” in global manhunt to “persuade” targets to return voluntarily
An earlier report from January 2022 from Safeguard Defenders found three types of “legalized kidnapping”
-
Very important slide from @webmink at #osxp2022 “open source has succeeded because it allows developers to (re)use software from others without having to talk to those others” that is to say, without the need to negotiate first.
Nov 9, 2022
-
New French defence strategy says officially that cyber DETERRENCE DOES NOT WORK? “… application of a deterrent approach in cyberspace that would force any attacker to restrain himself against France is illusory” sgdsn.gouv.fr/uploads/2022/1…
Nov 10, 2022
A bit more here:
Lukasz Olejnik: "New French defence strategy says officially that …" - Mastodon.social
Attached: 1 image New French defence strategy says officially that cyber DETERRENCE DOES NOT WORK? “… no way to envisage a cyber shield that would thwart any cyber-attack on France, but strengthening its level of cyber security is essential to prepare the country for more threats. Similarly, the application of a deterrent approach in cyberspace that would force any attacker to restrain himself against France is illusory” http://www.sgdsn.gouv.fr/uploads/2022/11/national-strategic-review-interm...
-
A predictable disaster over at Twitter.
ELON MUSK: "Twitter needs to become by far the most accurate source of information about the world. That’s our mission." Well, with Twitter's new "Verified" badge system, let me just say to @elonmusk, "Sir, Mission Accomplished!" 🏆
Nov 9, 2022
OK, I'm starting a thread of paid bluecheck accounts that impersonate actual verified bluecheck accounts. May as well start with the account pretending to be Twitter itself to get access to crypto wallets.
Nov 9, 2022
-
Opsec guide for OSINT CTFs -
Nov 7, 2022
OPSEC For OSINT CTFs
CTFs (Capture The Flags) are a great way to enhance your skills. Whether it’s information security or Open Source Intelligence based CTFs, at the end of the day, they improve your problem solving abilities, and also, they are fun! I started this tradition of making Twitter threads during TraceLabs’s…
-
-
For a while now I've been working on a photo book of LAN parties documenting the phenomenon and culture. You can preorder it now! vol.co/product/LAN-pa…
Nov 9, 2022
-
Tesla's stock price how now fallen 46% since Elon Musk's bid to buy Twitter became public on April 14. This has reduced Tesla's market value by almost half a trillion dollars. (For comparison, the S&P's fallen about 15% during the same time.)
Nov 9, 2022
-
Add a comment: