Sure times are bleak. But being friendly with the baristas (on a first name basis at this point) resulted in not just a personalized shout out on my drink but a free cheese danish that someone else drove off without getting. A bright spot during dark days.

And yes the other teas? Well I have a total of 10 meetings today, need to get prepped.

#infosec #tea #HackerLife

Curious, what "example name" do you use in documentation? I mean besides something boring like "John Smith" or "Jane Doe". My current fave is "Alison Chains".

#infosec #HackerLife

You know that nerd thing where there's a joke amongst techies and one of them buys the domain for the joke? Imagine simply keeping that domain and actually using it for something. Behold!

https://www.markloveless.net/blog/2026/04/24/the-tale-of-handjob-alley

#FunFriday #infosec #HackerLife #humor

The Tale of Handjob Alley β€” Mark Loveless

You have a running joke with friends and you’re a nerd, so you buy a domain involving the joke. Hilarious. But what if you decide to actually use it for something halfway useful?

Mark Loveless

πŸ’‘ Security isn’t a collective fear - it’s a shared competence βœ…

🎯 π——π—œπ—šπ—œπ—§π—”π—Ÿ π—₯π—œπ—¦π—žπ—¦, 𝗧𝗛π—₯π—˜π—”π—§ π— π—’π——π—˜π—Ÿπ—¦, 𝗔𝗑𝗗 π—˜π— π—£π—”π—§π—›π—¬: 𝗧π—₯π—”π—œπ—‘π—œπ—‘π—šπ—¦ 𝗧𝗛𝗔𝗧 π—˜π— π—£π—’π—ͺπ—˜π—₯ - Łukasz KrΓ³l ✨πŸ”₯

Digital and cyber risks don’t always fit into standard risk assessment models. They use different language, involve complex causes, and depend on interlinked systems.

In this talk, Łukasz KrΓ³l shares how to make digital security feel real, relatable and doable, even for non-technical audiences. He’ll show how to compare digital risks to physical, financial, and legal threats using simple analogies, how to break down the myth of omnipresent surveillance, and how to use storytelling to make threat modelling feel less abstract.

With real examples he’ll prove that empathy, clarity, and simple frameworks can turn fear into action.

Łukasz Król https://pretalx.com/bsidesluxembourg-2026/speaker/NLVVCF/ is a digital security trainer at the ICRC Global Cyber Hub in Luxembourg. He has a background in politics, technology, and international relations. He is particularly interested in digital security pedagogies, selecting secure and sustainable digital tools, and effectively supporting at-risk groups and individuals.

πŸ“… Conference Dates: 6–8 May 2026 | 09:00–18:00
πŸ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
🎟️ Tickets: https://2026.bsides.lu/tickets/
πŸ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #DigitalSecurity #RiskAssessment #CyberTraining #OSINT #HackerLife #SecurityEducation

A few minutes ago on the live feed for #artemis I watched the astronaut with the tablet on his lap unlock it with a password of 3939. Hope they change it before the next flight.

#nasa #space #HackerLife #infosec

πŸ•΅οΈβ€β™‚οΈ Trust can break Anonymity βœ…πŸ”

🎯 π—£π—›π—œπ—‘π——π—œπ—‘π—š 𝗔 π—£π—›π—œπ—¦π—›π—˜π—₯: 𝗗𝗒𝗑’𝗧 π—Ÿπ—˜π—§ π—₯π—˜π—£ π—šπ—˜π—§ 𝗬𝗒𝗨 π—₯π—˜π—žπ—§ - π—˜π—Ÿπ—Ÿπ—œπ—’π—§ 𝗣𝗔π—₯𝗦𝗒𝗑𝗦 ✨πŸ”₯

The β€œas-a-service model” has become ubiquitous across the cybercrime ecosystem. Previously dominated by tight-knit, exclusive groups, cybercrime is now a distributed international marketplace of service providers and consumers. As a result, it is more resilient than ever, with the gaps left by law enforcement takedowns quickly filled by the next opportunistic teenager.

However, to operate effectively in this anonymous distributed economy, threat actors need to build a reputation to gain trust. Does this give us an opportunity?

In this presentation, Elliot Parsons discusses the importance of trust in the cybercrime ecosystem and walks through a real-world investigation involving a prominent phishing-as-a-service (PhaaS) provider. The case study illustrates that trust and OpSec do not mix, exposing threat actors to identification.

Elliot Parsons https://www.linkedin.com/in/elliot-parsons-4ba72140 is a cyber threat intelligence consultant at AmeXio. He is from New Zealand with a background in Financial Services, Technology Services and Government organisations. His expertise is in threat intelligence, threat hunting, reverse engineering, malware analysis, and incident response.

πŸ“… Conference Dates: 6–8 May 2026 | 09:00–18:00
πŸ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
🎟️ Tickets: https://2026.bsides.lu/tickets/
πŸ“… Schedule: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #Phishing #CyberCrime #OSINT #ThreatIntelligence #PhaaS #HackerLife

Here is another BSides Luxembourg 2026 announcement!

πŸ’» π—¦π—˜π—–π—¨π—₯π—œπ—§π—¬ π—œπ— π—£π—₯π—˜π—¦π—¦ π—žπ—”π—₯π—”π—’π—žπ—˜πŸŽ―πŸ”₯✨ - Kirils Solovjovs ( @k )

Think you can bluff your way through a security talk with zero prep? Now is your chance! At Security Impress Karaoke, you'll be handed a totally random, security-themed slide deck you’ve never seen before and have just 3 minutes to present it like a pro. This is all about having fun, thinking fast, and impressing the crowd with your creativity and/or chaos. Come take the podium and let’s see what you’ve got!

Kirils Solovjovs is Latvia’s top white-hat hacker and IT policy activist with 10+ years in offensive security and command-line mastery.

πŸ“… Conference Dates: 6–8 May 2026 | 09:00–18:00
πŸ“ 14, Porte de France, Esch-sur-Alzette, Luxembourg
🎟️ Tickets: https://2026.bsides.lu/tickets/
πŸ“… Schedule Link: https://pretalx.com/bsidesluxembourg-2026/schedule/

#BSidesLuxembourg #SecurityKaraoke #CyberHumor #PublicSpeaking #HackerLife

That time when we gather around the table…
…and fix the printer, reset the router, and explain 2FA.
Happy Friends & Family Tech Support Day to all who celebrate!
May your Wi-Fi be strong and your patience stronger.
#CkC #TechSupportDay #infosec #hackerlife #thanksgiving

Okay I know I could simply repair the keyboard with the intermittent keyboard problem impacting a couple of keys by taking apart my HP Dev One and cleaning/fixing/replacing things which will fix the problem, but am I doing that?

Of course not. Instead I'm of course thinking about just upgrading the laptop and I am trying to use this scenario as an excuse to try and justify a new fancy laptop purchase.

#infosec #HackerLife #hacker #firstworldproblems

If you run Sendmail for a domain and are under regular attack by APT actors, then boy oh boy I have a fun blog post for you! What? Just me?

Ah well, you might find it interesting nonetheless as it is a monitoring problem I needed solving, and managed to actually meet my own needs.

https://www.markloveless.net/blog/2025/11/13/apt-and-sendmail-monitoring

#infosec #security #HackerLife #apt

APT and Sendmail Monitoring β€” Mark Loveless

Instead of simply discarding incoming phishing emails from APT actors, I decided to make sure it was loud and clear in mail logs that I discarded them - with attribution.

Mark Loveless