Justin Schuh
jschuh@infosec.exchange
<p>Stay-at-home dad. Expect a mix of infosec (plus privacy and safety), 3D printing, and some US politics. You're probably following me because of my old job.</p>
Posts
-
Post #2171023
The Difference Between How Trump, Biden, Pence, and Clinton Mishandled Classified Information I should first state where I’m coming from (because #IANAL). I served in the US intelligence community from 1996-2004, first as an enlisted Marine, and then as a federal employee at NSA and later CIA. I worked on watchfloors and did ops, but most of that career was spent managing and/or securing classified systems. I was trained at the Fort Washington¹ facility in qualifying SCIFs², had my classified c...
-
Post #1763661
@_dm Agreed on the first part. This is the predictable outcome of civil disobedience. And while I have my own thoughts on the effectiveness of their approach, I regardless respect their conviction to do it. Regarding Nimbus, it just looks like a generic cloud services contract with the Israeli government. And there&#39;s no world in which the Israeli military lets anything remotely operational sit on cloud services—it&#39;s just too much of an opsec risk. But governments are complex in...
-
Post #1763660
@_dm Don&#39;t want to belabour the point on the protest itself. I&#39;ll just say that I agree they were very successful at getting press coverage, but I doubt they get any substantive change from it, and it&#39;s unclear to me what they were even trying to accomplish. Resurrecting my ~20yr old government contracting memories: 1. I can&#39;t say anything is impossible, but I just cannot square IDF opsec/classification with allowing any of that sort of activity on a cloud provi...
-
Post #1763659
@_dm It seems like we&#39;re both at a similar place on this. No easy answers. And no good way to influence the parties with real agency in the conflict. Honestly though, it&#39;s refreshing to be in a conversation where I&#39;m not getting labelled either &quot;genocidal&quot; or &quot;antisemitic,&quot; just because I&#39;m not comfortable with any of the grossly oversimplified positions. Thanks for that.
-
Post #1763657
Anyone familiar with truv.com for employment verification? All I know so far is that it bootstraps off an HTTP URL with a massive unique identifier (of course you get a cert error if you try to force HTTPS). That just takes you to a landing page, which requires installing an app to do literally anything. Seems kinda concerning that a one-time event like employment verification would require installing an app. And then there&#39;s the obvious question of why they have an app at all, since yo...
-
Post #1763656
I just determined that plus addressing on email forwards broke with the transition from Google Domains to Squarespace (i.e. forwarding foo@bar.com to myfoobar@gmail.com used to also forward foo+tag@bar.com to myfoobar+tag@gmail.com). This means I&#39;m now missing a bunch of emails, because as a general rule I would create a custom plus address with a relevant tag anytime I registered an email. So now I&#39;m wondering if anyone has thoughts on a way to get this working in Squarespace....
-
Post #1763655
@_dm Yeah, looking for more of a drop-in replacement in a single service.
-
Post #1763654
@fugueish I have thoughts... that I&#39;m going to keep to myself.
-
Post #1763653
@fugueish Indeed.
-
Post #1763652
Neighbor just called asking for help because their Gmail account was hijacked and now they&#39;re locked out (and the hijacker chained off that to other accounts). I&#39;m heading over in a bit to help. This is the will be my first experience with the process from the consumer perspective.