1.4K Followers
30 Following
17 Posts
infosec engineer | all things gaming | void hunter | will shitpost | i like to lift weights & play piano | los angeleno currently in the twin cities

Wow, we're already into the second week of the 28-Day #GetHiredChallenge! Day 8 is all about common skills, Technical and Non-Technical that one may find useful in a #Cyersecurity career.

#Infosec #GetFediHired

https://www.youtube.com/watch?v=3Hw4MR0EUBw

Episode 8: Common Skills in Cybersecurity

YouTube

Your periodic reminder that just because a URL is saved at archive.org doesn't mean it's going to stay there.

Last year, I wrote a series about proxy services marketed to cybercriminals, and that relied heavily on Archive.org links to document various connections. After my story ran, the person that those links concerned asked Archive to remove those links from their database, which they did. The person in question came back and said hey, what you said in your story is wrong because there's no supporting evidence and you must remove this. Archive.org confirmed they removed all of the pages at the request of the domain holder, and that was that.

If you stumble upon a page that is in archive.org and you want to make sure there is a record that won't be deleted at some point, consider saving the page to archive.today/archive.ph

Alternatively, of course, you could save the page locally, using something like Firefox's built-in full page screenshot (right click on page). Better yet, save the Archive.org pages you want locally.

this morning im grateful for good coworkers

I see a lot of pundit speculation and debate that goes something like, “well, only the hackers and cybersecurity people are moving to Mastodon - and everyone else is just going to stay on #Twitter “, but the thing the folks saying this do not understand is that we are a canary.

We watched Twitter get rid of qualified #cybersecurity people who we personally knew. We understand the implications of privacy teams and lawyers being fired has on our data. We hollered about the way the new blue check system would be abused days before billions were lost by a couple companies. We understood the implications of rapid and haphazard terminations. The bottom line is:

1) We know our login data, DMs, and private posts really aren’t secure at all anymore due to lost competent staff and disgruntled employees,

and

2) Twitter probably won’t just shut down this month or next month, but it’s going to start having some serious and unpredictable financial and technical problems due to the people who were let go as well as Elon’s apparent instability and lack of checks.

So, we migrated. Other communities don’t necessarily have this inside baseball, and they understandably just feel like Twitter is too big to fail. We will see if stuff that happens over the coming weeks pushes more folks here, or to other social media sites. Depends a lot on our outreach and what we do with this community.

I have any empty outlook inbox for the first time in my security career  
Lots of folks asking me “can’t the admin see your DMs on Mastodon?” Yes. Use this site like every single thing you do or say is public, which isn’t much more different than how you should use other non encrypted platforms where engineers/admin employees working on the platform can see your personal messages. Treat all communication here like it’s on a public forum, then take it to encrypted comms for private conversations.
@deliverance every email I send to someone should be reported as phishing
im not pointing any fingers but you know your security awareness training in workday gonna be interesting when its created by someone in hr
@mattchis Im not thats the issue :)