Replying to
@foone@digipres.club
@foone@digipres.club php5?! Php8 eosl? oof… I think I left php-town at php3. Never thought ‘if _, yer old’ memes would come at me via php mentions.
Remote
D2
@InkomTech@infosec.exchange
Huh, I’d swear I filled this in…
Hacking, risk analysis (incl TPRM), ancient microcomputers.
0
Followers
0
Following
50
Posts
Joined February 03, 2023
Posts
Replying to
@catsalad@infosec.exchange
@catsalad@infosec.exchange that me, lookin’ at the edge of the bed and getting up to start my Monday.
Replying to
@ben@mastodon.bentasker.co.uk
An entirely-unimportant tangent:
Was John Dvorak born in ‘46 or ‘52.
Seeing conflicting info, with age 80 in the news but 74 on Wikipedia and other sources.
Replying to
@gary_alderson@infosec.exchange
@gary_alderson@infosec.exchange um, Flammable?
please share how you’re able to ignite paper with a 0-15 watt electric soldering iron.
Replying to
@rmi@cloudisland.nz
@rmi@cloudisland.nz @glyph@mastodon.social mine? Device is iOS, and so far I seem to need to wake up, stare at my phone to unlock it, and then it’ll play the alarm. Ironic, eh?
Replying to
@glyph@mastodon.social
@glyph@mastodon.social typo? “Access while _locked_ but only…”? Interesting use case.
I’d also like my morning-alarm-equivalent shortcut to play a playlist or url at a given time, with prior consent given. Once, daily, at a given time, whatever: let me preapprove a shortcut.
Happy 50th birthday to the Zilog #Z80 CPU, which swiftly became preferred to 8080, got put into #s-100 hobbyist computers, was the core for a few generations of #TRS80 personal computers, CP/M boxes (is #CPM how we tag that?) and so many others.
https://www.tomshardware.com/tech-industry/zilog-z80-turns-50-as-open-source-replacement-heads-for-drop-in-dip40-silicon
Also, a pox on autocorrect for wanting Zilog to be zoloft. Ew.
Replying to
@north@xn--8r9a.com
@north@xn--8r9a.com imma play Murphy’s law angle and travel far far from my nice bottle of bubbly intended for TDIFH. Let me loudly proclaim I SHALL BE VERY PUT OUT IF MY PLAN GOES AWRY. Like, ‘drown my feelings in a huuuuge mimosa Sunday’ levels of put-outtedness. #alwaysBetOnMurphy
Replying to
@0xabad1dea@infosec.exchange
@0xabad1dea@infosec.exchange ok, I checked some other sec folks, and someone at an impacted college’s IT management. No one seeing or hearing of incidents where canvas’s ransomware pivot to per-user attacks.
Replying to
@0xabad1dea@infosec.exchange
@0xabad1dea@infosec.exchange
‘M sure others have linked / suggested ideas. I’d add
Work from a step away (an uninfected computer and accounts).
Maintain lists. Username and pwd, and any notes of things done on the impacted accounts which help reestablish owner is proper owner.
Search for stolen account support on the accounts.
Don’t delete accounts, apps, or wipe the primary devices for these things. They may be essential in recovering control.
Brainstorm a passphrase family for recovery. Can be as simple as Word2Word-ab, where ab are letters or a short word that come to mind for that site. This is so no two sites or accounts share a pwd, while keeping recovery focused on getting back in.
Alt: (Better but more hassle/work , install bitwarden on cousin’s phone and the recovery laptop, and do unique passphrases for every account).
Start on the critical accounts: anything with financial risk, an email used for password resets. Check/Delete any settings that forward email, make sure contact info is correct and in your control.
As for financial: Definitely check password and try to recover control, up to and including meatspace moves like driving to the bank or calling them. At first hint of corruption/loss of access, do these tasks NOYD!!!!
… at some point, the smell of ‘EVERYTHING’ may fade to ‘oh, it’s just these few things’. Calm a bit, but still march thru changing all the passwords, checking contact info.
I’m sure there’s more. Been thru it and it’s a fucking mess.
Replying to
@0xabad1dea@infosec.exchange
@0xabad1dea@infosec.exchange no, the account theft *starts* with a faked theft notification.
Replying to
@0xabad1dea@infosec.exchange
@0xabad1dea@infosec.exchange first, is there a chance cousin was scammed by a faked ‘you’ve been compromised’ message?
Worst tangles I’ve seen folks get into (in the last year or two) have been losing their social media account(s). Worse, the fraudsters parlay lockouts done by platforms into really scaring folks.
Replying to
@parsingphase@m.phase.org
@parsingphase@m.phase.org @HighlandLawyer@mastodon.social @cstross@wandering.shop
C’mon folks. An example is (forgive the deep callout) staring right at you, already-been-done as any been-done has ever alreadied:
Replying to
@cwebber@social.coop
@cwebber@social.coop can we assign proportional responsibility? Paragraph 2 gets where I’m thinking: the tools are partially responsible. A bit. Where we’re sprinting right now feels an awful lot like boardroom hysteria dominating, but LLM or ML or map-reduce yield a core usefulness. We automate and ‘move on/up’ because it resembles societal growth: comfort with higher complexity, division of roles, specialization, etc.
Replying to
@stevendotjs@hachyderm.io
@stevendotjs@hachyderm.io I don’t fear dioxin nor microplastics, but I ain’t eating anything cooked over that blaze.
Replying to
@stevendotjs@hachyderm.io
@stevendotjs@hachyderm.io kudos. so very on point.
Having ridden out the implosion of the dot-com crash, I’m staring at all this buildout and wondering what this time smells like. Capital spend crushed a few big names. Example: Lucent went to a nickel on the dollar.
Replying to
@tante@tldr.nettime.org
Replying to
@mcc@mastodon.social
@mcc@mastodon.social reminds me of TVTropes. Also, are we just a tether /ladder away from Miyazaki’s Castle In The Sky qualifying?
Replying to
@daisy@cloudisland.nz
@daisy — oh, hell no.
I was thinking in terms of the rage I felt when someone committed and stomped over a bug I spent *hours* tracking down & testing and fixing. I think if I fix it, commit, and some viber + AI commits an entirely-new codebase (as prompt-written source is prone to be) needing that repeated, they’ll be dead in the desert by dawn.
Replying to
@tchambers@indieweb.social
@tchambers
This truly is so cool.
Science: ‘we think we can trick antibodies into attacking cancer cells’
Antivaxers:
Alt:
World: WhY DoNt We HaVe CaNcEr vACcInEs?
Science: well, there’s one for HPV, and we’re making progress for some others using mRNA like the Covid jab
Antivaxers:
Science-minded: uh… whatever, loonies.
Replying to
@VeroniqueB99@mastodon.social
@VeroniqueB99@mastodon.social ¯\_(ツ)_/¯ there are worse ways to go.
Replying to
@InkomTech@infosec.exchange
@Netraven @brian_greenberg shit…
Kid5: “we 3d printed a zipgun /arduino-based flyer that uses drone parts. And here’s the faraday cage for stealing them.”
Replying to
@Netraven@hear-me.social
@Netraven @brian_greenberg
Sheriff: “but it’s encrypted; kids can’t take control”
Kid1: “imma crack open the gas cartridge”
Kid2: “how well do they fly with paint on the lens and clipped props/wires?”
Kid3: “let’s open one outside of principal’s home A/C unit.”
Kid4: “any cool parts we can sell for beer money?”
… meanwhile, 99% of drones sit unused, eventually the batts decay. At best, it still becomes a hazmat disposal cost.
Replying to
@shadowwwind@fosstodon.org
@shadowwwind
Cool, but adhd has another flavor of desires which resonate. One of which is: don’t make me do x a thousand times. I’d rather die.
@fesshole
Replying to
@InkomTech@infosec.exchange
@david_chisnall@infosec.exchange searching, a couple quick estimates are $70/ton, vs 7 times that for trucking. Crates need standardized, automate measuring mass / density, and zoom… then do it again for passengers.
Replying to
@david_chisnall@infosec.exchange
@david_chisnall decades ago, was flabbergasted to learn my first coding job’s employer (a grain co) usually got $30/ton rates for rail shipping across 5 states. Trucking was 6-8 times that, and the inefficiencies of small-lot (not full rail car) really soar from there.
… tell me we couldn’t engineer a way to let folks hook into this: little bins in boxes in pallets in railcars. Matrushka, and a dollar plops something weighty like a pile of books or preserves or etc anywhere across the country.
Replying to
@davidgerard@circumstances.run
@davidgerard@circumstances.run when this (media digitization / archiving) comes up on retro computer boards, folks often ask where app is, then suggest a nearby hobbyist already equipped & experienced to help.
Replying to
@cas@social.treehouse.systems
@cas@social.treehouse.systems you sprinted to an objectionable synthesis. Jurisdictionally, disregard distant places with unreasonable laws. Challenge on basis of undefined defendant when an amalgam of FOSS code with countless contributors across countless jurisdictions LACKS a function. Demand judicial clarification on the premise. Seek contradictory mandates in sympathetic jurisdictions. Raise the challenge, dammit.
Condescension implies false sense of a high ground. I’m saying we’ve spent decades on these issues; don’t undo that by sprinting to a concession.
Replying to
@itsfoss@mastodon.social
@itsfoss@mastodon.social good for them but it’s end goal = sysops are stuck with sysd. Fork harder; devise something sane.
Replying to
@nixCraft@mastodon.social
@nixCraft@mastodon.social systemd author Poettering decided to ridicule opposition to this earlier today. “Lost the plot” is how I’d characterize his analogies. https://mastodon.social/@pid_eins/116259741293391896
Replying to
@pid_eins@mastodon.social
@pid_eins@mastodon.social Bruh. Reconsider this thread. It’s an outburst of hyperbole. It misrepresents privacy advocacy, and tbh is not clever.
Replying to
@InkomTech@infosec.exchange
@freya@social.highenergymagic.net @cas@social.treehouse.systems fuck, the worst part of getting old is encountering Adults that are passionate about internet ethics but are too young for Risks and cypherpunk listserv/ digests to have infused their thinking.
(Edited to add @jane@smolhaj.social, whose comments hint they really really need a deep dive into cultures that discuss WhatMightGoWrong. )
Replying to
@freya@social.highenergymagic.net
@freya@social.highenergymagic.net @cas@social.treehouse.systems *THIS
“Is it really so bad that oven makers enlarge their ovens to 40 pounds? There ARE other uses beyond cooking children, after all.”
Don’t look for Modest Proposals of tech shifts that enable Swift shifts into being abused. ‘Why not add the DOB field’ plus ‘might as well use it’ is a dystopic result from an innocent pair.
Replying to
@mistersql@mastodon.social
@mistersql @norootcause wait, are the other two people computer-literate? Once it was owners and a coder (trust me, run the other direction if approached thusly). Once it was a sales / clerical and two nerds; that was a pretty kickass gig
Replying to
@norootcause@hachyderm.io
@norootcause
3a: actual willingness/ inclination to validate code or check-ins.
Replying to
@i0null@infosec.exchange
(Squints hard at @i0null@infosec.exchange’s rhyme, trying to make it “UDP blah blah Packets Drop etc”. )
Replying to
@mullvadnet@mastodon.online
@mullvadnet (feeling like a pop-trivia idiot - even though I started at the top witg mention of Ashton Kutcher, the ‘and then?’ you kept saying didn’t until this last note. 10 out of 10.)
Grim, being supportive and respectful of Kutcher’s effort against human trafficking, but ‘oh, hell no’ at the intrusion and implausibility of this proposal.
Replying to
@martin@libera.site
@martin
Not that you’re predictable, but let me just offer your next whattaboutism:
“Israel negates or denies the atrocities it committed, claiming that many of the expelled Palestinians left willingly or that their expulsion was necessary and unavoidable.” https://en.wikipedia.org/wiki/Nakba
Replying to
@martin@libera.site
@martin a minute ago you said I needed to study history, now you’re pretending that Israel formed without controversy or impact. Fuuuuuuck that’s some chutzpah.
Replying to
@InkomTech@infosec.exchange
@martin personally, I like the thought-experiment of ‘what if we gave them southern Utah?’ Already nicknamed Zion. Locals are fanbois who call themselves The Chosen. Some ecological similarities. A desert, albeit colder. Would have pissed off some locals. Better proximity to colleges, industry, cities. ¯\_(ツ)_/¯ And at least it was really-truly OURS.
What we’ve done to Palestinians was reprehensible.
Replying to
@martin@libera.site
@martin yes. Read again; I didn’t say they weren’t. But _israel_, by degrees in ‘17, ‘48, ‘67, was a Jewish state plopped on top of a multicultural region, with non-Jews’ rights and ownership violated. Regardless of anti-Israel counterattacks and intifada, those kind of rhyme with Dr Manhattan’s musing.
Replying to
@jef@mastodon.social
@jef@mastodon.social feels like one could do dates tied to Brit colonialist declarations that reestablished Israel right over the top of indigenous/ resident people, the six day war, etc.
Replying to
@jwcph@helvede.net
Replying to
@dylanwre@scicomm.xyz
ZOMG. Nailed it.
I nominate @dylanwre@scicomm.xyz as scribe / historian of the Reign of @evacide@hachyderm.io
Replying to
@mattblaze@federate.social
@mattblaze@federate.social @wendynather@infosec.exchange @evacide@hachyderm.io can I add ‘weird outlet / charging choices’?