Just came in the mail. I know what I'm doing tonight!
Remote
Insubordinant
@scottymace@infosec.exchange
mastodon 4.8.0-alpha.3+glitch58 Followers
158 Following
38 Posts
Joined November 15, 2022
Infosec:
Linux
3d printing:
Prusa
Gadgets:
ESP32
RetroArcades:
Batocera
Jeep:
Wrangler Xe
I Have No Pillow and I Must Scream
#SweetDreamsABookOrPlay
#HashtagGames
Tim Tam Bandits
#CookiesAMovieOrPlay#HashTagGames
Pepperidge Farm
"Some snacks are more equal than others"
#CookiesAMovieOrPlay#HashTagGames
RE: https://infosec.exchange/@drwhax/116998821708411357
This guy!
Quoting
Excellent trolling of a city council in Arizona: https://www.404media.co/casa-grande-arizona-flock-city-council/
Open quoted postReplying to
@hacks4pancakes@infosec.exchange Well, there's a difference between "conservative" and a cult. I'm confident you know that, and I'm not trying to be a reply guy. The situation is that the "conservatives" that can't make compromises, and are absolutists, aren't conservatives at all! They are ideological cultists, and represent the worst of humanity.
As climate change forced migration increases, and wealth inequality increases, (connected!) these people will amp up their rhetoric to convert more to their cult.
It's the same with "I'm a CAPITALIST!", yet champion monopolies. No, they aren't, they're greedy cultists.
Sorry for the screed, but I think we're kinda fucked.
Replying to
@JessTheUnstill@infosec.exchange Agreed. It begs the question: Why are they doing it? On the surface it's annoying at best. Under the surface, is it data mining, polluting the environment to make it harder for competitors to get talent, plain incompetence, or something more sinister?
Replying to
RE: https://infosec.exchange/@fifonetworks/116848192798513192
@fifonetworks@infosec.exchange The certification industry is a racket. Folks I've worked with that touted their certs were not good at their jobs, to a person. Not one. Had a guy, (CCNE I think) who thought that because a competitor put their WiFi AP's near our business to steal our customers, that we could put up our own with their SSID, and overpower the radio. A lawsuit ensued and we lost. I busted the same guy "hacking" the CIO's Lotus Notes by stealing the CIO's id file and he sent a reply to an email to me under that account. Another person, an MCSE, put all the users in the domain admin group. The reason? It decreased the number of requests regarding permissions issues and software installs. All these certs prove is that you can take a test.
Quoting
“OSCP+ has a ~30% pass rate.”
In that case, the exam is shit, and the official approved study materials are shit.
Background for those not in cybersecurity: OSCP is Offensive Security Certified Professional, a penetration testing exam by OffSec. Someone on LinkedIn, who sells OSCP training, provided that 30% statistic. I don’t know if it’s accurate, but a quick check on Reddit makes it seem likely. I asked OffSec for their pass rate, and they declined, saying they don’t publish that information. If it is around 30%, there’s a big problem at OffSec.
For comparison, CompTIA, another IT and cybersecurity certification company, looks for a first-time pass rate of about 70%. The rationale goes like this: If the pass rate is too high, it means the exam is too easy. On the other hand, if the pass rate is too low, it may indicate poor courseware or a poorly written exam.
When I was teaching the CompTIA courses at a local community college, I used to submit exam inaccuracies for A+, Network+, and Security+ to CompTIA. Some of them resulted in changes, some didn’t. The exam questions that drove me the most crazy were the questions that were vague or ambiguous – not definitively incorrect. And those were the ones they rejected my recommendations on. My guess was they were trying to keep that first-time pass rate from getting too high, and the vague questions were intentionally vague.
Leaving CompTIA, and back to OffSec: I just looked at their website. The current price for the OSCP+ Standalone Exam is $1,699, and includes 2 exam attempts in a 90-day period.
With a 30% first-time pass rate, that means a fair number of applicants are buying a second package. Maybe it’s all about the money.
#cybersecurity
Open quoted postCan we have a nationwide strike in solidarity? https://tech.lgbt/@melioristicmarie/115890311091189222
#nationalstrikeaction#abolishICE4Good#indictJonathanRoss
Replying to
@billyjoebowers@mastodon.online It's the no thinking part. Sometimes (most times) impossible with a brain that won't STFU. I agree, that's where all the pain and inaction is.
RE: @stacey_campbell@aus.social
Fuck everything about this. The regime needs to be ended. Would have been awesome if all the folks around helped them get in. Not arm chair quarterbacking, but I'm just sad they had to leave.
Rendezvous with Ricotta
#CheesyRelationshipBooks
#HashtagGames
The Goudafather
#CheesyRelationshipBooks
#HashtagGames
Replying to
@coleens_ So true. And the irony is we never/rarely form together as a group, for the very fact we are misfits and loners. The Universe is The Joker.
For an early St. Patrick's day meal for D&D session tomorrow (Sun the 15th) I'm building corned beef and cabbage, colcannon, and fish-n-chips.
#irish
#Stpatricksday
#dnd
#nerdlife
RE: @RueNahcMohr@infosec.exchange
Asking for a friend: Where do you sit on this thing? ;-P
Replying to
@JustRosy@universeodon.com @luigirenna@infosec.exchange Cat people!!! My lil' Daffodil approves. She's a ginger sweetheart that loves belly rubs. (And not a claw trap...)
Hot take on supply chain attacks: STOP USING THE SUPPLY CHAIN!
I propose that any software important enough to operate your company should be written entirely in house. Fuck all those random libraries and processes. If you ABSOLUTELY have to use an external bit of code, then explain to the security team and product managers why it can't be written in-house.
But this is a pipe dream. iT TaKEs ToO LoNG! will be the cry from the counters of the beans. LINE MUST GO UP!!! they'll cry.
Replying to
@davidbombal@infosec.exchange "id" will give you more info, and it's slightly less typing.
Oof...
https://www.newsweek.com/pentagon-photo-shows-ai-agent-being-asked-to-help-create-a-war-12258627
"A Pentagon social media post promoting the military's growing use of artificial intelligence (AI) has drawn attention after a photograph appeared to show an AI agent being asked to help "create a war."
The image was included in an X post by the Department of War Chief Technology Office highlighting a recent deployment of its GenAI Task Force at Joint Base Pearl Harbor-Hickam in Hawaii. According to the post, the team built more than 20 custom AI agents for sailors and helped automate tasks including operational reporting and briefing preparation."
RE: https://infosec.exchange/@gary_alderson/117000185608540218
Can we get a Jimothy version?
RE: @TheConversationUS@newsie.social
This problem is a DIRECT result of lax anti-trust enforcement. I've been chastised by several bosses for advocating for heterogeneous environments, and not relying on one specific cloud service, or OS. Farmers learned this long ago. This applies to society as well in that diversity makes us strong. We are soo screwed.
The Propofol of Zenda
#SweetDreamsABookOrPlay
#HashtagGames
Who Moved My Cheese?
#CheesyRelationshipBooks
#HashtagGames
#noeffort
Replying to
@gary_alderson Oh, I feel ya. I've been jobless for over a year, and pray to the elder gods I don't need major health care. If it happens, likely I'll use the dine & dash model.
RE: https://federate.social/@jik/117000315322915056
David Hogg for party chair. Ken Martin is the Prime Feckless Coward.
Quoting
@karlbode.com Yes, exactly this. People aren't giving the Democrats money because the national leaders of the party have proven themselves to be useless, feckless cowards.
If they want people to support the party, they need to put forward party leaders whom the people actually want to support.
Open quoted postReplying to
@RaffKarva@sunny.garden @pluralistic@mamot.fr How about a decent Linux reader? Any thoughts?
RE: @JessTheUnstill@infosec.exchange
Key takeaway for me: "Just leave us alone..." How people cannot let others live their lives as they see fit just boggles the mind. Rights are NOT a zero sum game. Let people be happy. Edit: And celebrate their happiness!
The I.T. Scapegoat
RE: @gary_alderson@infosec.exchange
Imagine if we had Universal Health Care. The freedom we'd gain just from that ONE SIMPLE THING! We could pursue the things that interest us. The possibilities for an otherwise cubicle rat to actually pursue inventing the next clean energy device, or a cure for bone cancer are endless.
JFC can these people just leave folks alone? WHY IS THIS EVEN AN ISSUE? It affects none of these fucks in the slightest. Rights are NOT a zero sum game! Fuckin' American Taliban.
RE: https://infosec.exchange/@paco/117000194071369473
This is fucked up, beyond fucked up. Gun laws? Naw man, let's do pepper spraying drones. We are so doomed.
Quoting
Drones pepper spraying children in 3… 2… 1…
https://www.theguardian.com/education/2026/jul/28/school-shootings-pepper-spray-drones
Open quoted postRendezvous With Roofies
#SweetDreamsABookOrPlay
#HashtagGames
Gruyere and Brie in Las Vegas
#CheesyRelationshipBooks
#HashtagGames