Z retweeted
Best spell check suggestion of the day. (This is a synonym for lingonberries, evidently.) – at Arlington, VA
Z retweeted
I'm increasingly thinking that every functioning system has two forms: The abstraction that outsiders are led to believe, and the reality that insiders actually and carefully operate.
You don't incrementally learn a system. You eventually unlearn its necessary lies.
$ perl batch-disable.pl < /etc/shadow > /etc/shadow on my ISP’s auth server.
What should’ve happened: users who hadn’t paid were disabled.
What did happen: the file got zeroed out and I had to call for help... and tape backups. Worked there for two more years.
This quoted post is unavailable.
Gonna miss working with Q-branchers @ESP_09 @AJ7o2 and @VanillaGranilla , but it’s the right call. Stay safe & see y’all in 2021.
We didn't want to make this announcement, but things being how they are, it just makes sense. BSides Las Vegas 2020 is officially canceled.
More details are available here: bsideslv.org/covid19/
Z retweeted
14/ Now homebound for 1 mth. Like all, I miss lots: hugging kids, visiting parents, &, yes, golf. In 1940, Richmond Golf Club in England faced a different threat, & enacted Temporary Rules. Reminder that we’ve been thru tough times before & we’ll get through this.
Stay safe….
Z retweeted
Best bug bounty report ever?
"With great pleasure we would like to report that we have discovered a GraqhQL endpoint that discloses internal beer consumption at your offices."
hackerone.com/reports/419883
Almost retweeted because, if it’s in my feed, he’s got to be talking about the seminal NCSC Rainbow Series on computer security standards. Yes, I’m an Orange Booker! But no, his post is about British politics. Now I’m not sure why I’m retweeting it at all.
This Post is from an account that no longer exists. Learn more
Z retweeted
אמר רבי אילעאי בשלשה דברים אדם ניכר: בכוסו ובכיסו ובכעסו
Rabbi Elai said: In three matters a person’s true character is ascertained: in his cup, (his behavior when he drinks); in his pocket, (his conduct in his financial dealings); and in his anger.
(Talmud Eruvin 65b)
ALT Screen shot of the text, from Bavli Eruvin 65a.
Challenge Accepted
Happy Better Pi Day!
(22/7 - π)/π = 0.0004
(3.14 - π)/π = -0.0005
22/7 is closer to π than 3.14. Making today an even better day for pie.
#betterpiday
At @SummerC0n : “who here has given up on antivirus?” (About 40% of hands go up.) Sounds right! On to @0xAlexei ‘s talk about Windows Defender.
Security: Independent actors with sensible assumptions, but still a broken system: “This sounds like an assumption was made by Chrome that all U2F is HID, whereas Yubico made an assumption that USB will never be accessible by web pages directly” wired.com/story/chrome-yubik…
Tradeoffs on opening up your SIEM to external users: savings and growth from reuse, but politics and risk if done poorly. Worth doing - but only if you also have good training, governance and access control.
Good vs bad actors: quick slide math = ~500 identifiable public scanners vs. 500k popped boxes. (Almost 300k in @TelefonicaBr alone - what’s up with that?)