Elektrine lite

← Feed

Justin Schuh

jschuh@infosec.exchange

<p>Stay-at-home dad. Expect a mix of infosec (plus privacy and safety), 3D printing, and some US politics. You&#39;re probably following me because of my old job.</p>

Posts

  • Post #2171023

    The Difference Between How Trump, Biden, Pence, and Clinton Mishandled Classified Information I should first state where I’m coming from (because #IANAL). I served in the US intelligence community from 1996-2004, first as an enlisted Marine, and then as a federal employee at NSA and later CIA. I worked on watchfloors and did ops, but most of that career was spent managing and/or securing classified systems. I was trained at the Fort Washington¹ facility in qualifying SCIFs², had my classified c...

  • Post #1763661

    @_dm Agreed on the first part. This is the predictable outcome of civil disobedience. And while I have my own thoughts on the effectiveness of their approach, I regardless respect their conviction to do it. Regarding Nimbus, it just looks like a generic cloud services contract with the Israeli government. And there&amp;#39;s no world in which the Israeli military lets anything remotely operational sit on cloud services—it&amp;#39;s just too much of an opsec risk. But governments are complex in...

  • Post #1763660

    @_dm Don&amp;#39;t want to belabour the point on the protest itself. I&amp;#39;ll just say that I agree they were very successful at getting press coverage, but I doubt they get any substantive change from it, and it&amp;#39;s unclear to me what they were even trying to accomplish. Resurrecting my ~20yr old government contracting memories: 1. I can&amp;#39;t say anything is impossible, but I just cannot square IDF opsec/classification with allowing any of that sort of activity on a cloud provi...

  • Post #1763659

    @_dm It seems like we&amp;#39;re both at a similar place on this. No easy answers. And no good way to influence the parties with real agency in the conflict. Honestly though, it&amp;#39;s refreshing to be in a conversation where I&amp;#39;m not getting labelled either &amp;quot;genocidal&amp;quot; or &amp;quot;antisemitic,&amp;quot; just because I&amp;#39;m not comfortable with any of the grossly oversimplified positions. Thanks for that.

  • Post #1763657

    Anyone familiar with truv.com for employment verification? All I know so far is that it bootstraps off an HTTP URL with a massive unique identifier (of course you get a cert error if you try to force HTTPS). That just takes you to a landing page, which requires installing an app to do literally anything. Seems kinda concerning that a one-time event like employment verification would require installing an app. And then there&amp;#39;s the obvious question of why they have an app at all, since yo...

  • Post #1763656

    I just determined that plus addressing on email forwards broke with the transition from Google Domains to Squarespace (i.e. forwarding foo@bar.com to myfoobar@gmail.com used to also forward foo+tag@bar.com to myfoobar+tag@gmail.com). This means I&amp;#39;m now missing a bunch of emails, because as a general rule I would create a custom plus address with a relevant tag anytime I registered an email. So now I&amp;#39;m wondering if anyone has thoughts on a way to get this working in Squarespace....

  • Post #1763655

    @_dm Yeah, looking for more of a drop-in replacement in a single service.

  • Post #1763654

    @fugueish I have thoughts... that I&amp;#39;m going to keep to myself.

  • Post #1763653

    @fugueish Indeed.

  • Post #1763652

    Neighbor just called asking for help because their Gmail account was hijacked and now they&amp;#39;re locked out (and the hijacker chained off that to other accounts). I&amp;#39;m heading over in a bit to help. This is the will be my first experience with the process from the consumer perspective.