Tindra

@TindrasGrove@infosec.exchange
696 Followers
338 Following
11.1K Posts

I may be the most certified person you’ve ever met. Years of IT experience in network management and security. Recently retired from the military. Interested in using creative channels, like games, to teach cyber risk to risk owners.

Cat picture booster. Multi-craftual. Unashamed public knitter.

Book Talk: @TindrasGrove

Avatar by @artbyleoniejonk

Websitehttps://www.tindrasgrove.com
BookWyrmhttps://bookrastinating.com/user/TindrasGrove
Twitter (dormant)https://twitter.com/TindrasGrove
PronounsShe/Her
HairNot Blue (yet)
Nothing quite like eight ornery Aussies in the audience chorusing “that’s a comment what’s the question mate” under their breaths at a talk. It’s giving me life 🤩😅🤣✨
Been working on some monochrome #pride gear and this came to me out of nowhere. Thoughts?

I'm going to reiterate my positions on End-to-End Encryption since they seem to have been ignored or overlooked:

  • Plaintext is better than security theater.
  • Weak encryption is better than plaintext.
  • The difference between weak encryption and security theater is how the product is marketed to end users.

    Security theater is bullshit like, "This tech is private because our datacenters are in Switzerland," or, "We can recover your private keys, silently, whenever we want."

    Security theater gives people the illusion of security, while they're actually vulnerable. This is the worst outcome.

    Regardless of how flawed your approach is, as long as you're humble about it, it's better than not trying anything to begin with (just shoveling plaintext).

    But the moment you let an ounce of arrogance or pride infect your marketing copy? The moment you're not just underdelivering on privacy, but also overselling on it?

    That is when you cause harm.

    I guess I was doing a pretty good job of sitting out in the yard and writing, because I just noticed a spider was starting to build a web between me and my laptop. (I'm not sure if this is something to be proud of or horrified by, for a great many reasons...)

    sitting here tailing logs from apache...

    1000% success rate, if you are a bot, you don't ask for favicon.ico

    Can we use favicon "port knocking?"

    If you ask for / and dont ask for favicon, then yhou are a bot and passed over fail2ban

    I need to make this a thing.

    Because someday, somebody's going to come to you and say, I'm from Apple, I'm from Amazon, I'm from Project Zero and you need to drop everything because your project is the new heartbleed or Log4j or who knows what and the world is falling over and if that psychological offramp isn't there, if you haven't laid out clearly what PROVIDED AS-IS means and how you're going to act about it ahead of time, saying "I'll be at my kid's recital" or "I'm on vacation" or just "no" is extremely difficult.
    But here's the thing: you may have heard the line that disability is the one underrepresented minority group you can be suddenly forced to join against your will, and it's extremely true. But if mental health is just health, if moral injury is just injury, then you ultimately need to think about building these accessibility aids - creating this social permission to say no - not just for other people but eventually, on the bad day, for yourself.
    Because I thought about it (spurred by a Discord thread), here's Prince absolutely blowing the doors off "While My Guitar Gently Weeps", because every once in a while one just needs to hear it.
    https://www.youtube.com/watch?v=6SFNW5F8K9Y
    Prince, Tom Petty, Steve Winwood, Jeff Lynne, more - "While My Guitar Gently Weeps" | 2004 Induction

    Prince, Tom Petty, Steve Winwood, Jeff Lynne and others perform "While My Guitar Gently Weeps" at the 2004 Hall of Fame Inductions. http://rockhall.com/⁍ Buy...

    YouTube
    Looks like today's theme is
    ×
    @skeletor in my inspirational skeletor era

    @skeletor This actually makes a lot more sense than leafing. How do you leaf? I can't leaf.

    😁

    @skeletor That was a joke. I know they mean "leave."
    @skeletor because I don't live 700 years?
    @skeletor Trees do compete with other trees.
    Meet Pando, The Largest Living Organism on Earth

    In the heart of Utah, nestled within the Fishlake National Forest, there exists an awe-inspiring natural wonder known to the world as Pando

    Wild Planet Explorer
    @skeletor I will probably forget, but right now I want to re-boost this every day.
    I don't like how people intentionally misinterpret this to pedantically disagree.
    "like a tree" not "actually become an actual tree".
    Also the tree part seems the setup for the important part.

    I posit people struggle with being a good person and will jump to excuse to not
    face it.

    I also assume that if I don't like it, there's a good chance I am guilty of that or
    similar behaviour, but just can't see it.
    @skeletor even trees race grow high in a Forrest then block out the sunlight to smaller ones while growing wider.
    Allelopathy In Plants: What Plants Suppress Other Plants

    Plant allelopathy is all around us; yet, many people have never even heard of this interesting phenomenon. Allelopathy can have an adverse effect in the garden, though, and this article will explain why.

    Gardening Know How
    @skeletor Beech trees drip poison to inhibit the growth of other plants...

    @skeletor

    When my stepdad died in 1995, one of our family friends planted a small tree in his honor in our front yard.

    I got to watch that tree grow over the next four years while I was there, and as I (slowly) healed.

    I still think about that tree every now and then. We sold that house in the 2000s, and the tree got removed at some point, according to street view.

    Still, it was a nice gesture.

    @jarbus