Some advice:
As much as I support local political and social action (not just now- I’ve been at this a very long time now and am very experienced at it) beware of political actions posted by unknown groups.
Back in the first Trump administration, a number of us found ourselves at actions that were actually run by extremists in both directions.
Do not go to an action if you do not have some idea of who is running it. Do not go if they don't have some local connections you can check out. 1/2
If you work in government and are asked to remove content from websites (as a result of executive orders), please use the HTTP status code 451 instead of 404.
451 is the correct status code to use for these cases, and you'll be doing the rest of the country a service by using it.
Addendum: you should also include a Link header with the link relation "blocked-by" that "Identifies the entity that blocks access to a resource following receipt of a legal demand."
Almost once a week I get a longish email from a reader who is certain they've figured out which online merchant got hacked and stuffed them with phony charges. I always reply that trying to figure out where your card may have been breached is a fool's errand -- basically, that learning the origin of most types of card fraud can be difficult even for the issuing bank to figure out. And that you're way better off just keeping a close eye on your statements. I can't believe this explainer is somehow still relevant almost 10 years later, but some things mercifully don't change that much.
Here's a look at the various forms of card fraud, how they are usually detected, and your chances of finding out.
https://krebsonsecurity.com/2015/01/how-was-your-credit-card-stolen/
I joined Twitter in 2008, making 7,500 posts through the years. I deactivated my X account today.
I greatly curtailed my usage of the platform since November 2023, when my employer @Flipboard pulled back from engagement. And I haven't posted since April but kept it open for work reasons (to monitor news, etc.).
Why today? The U.S. election made clear how many of my fellow Americans live entirely in "alternative facts" ecosystems. I no longer wish to participate in such a platform — so rife with unchecked misinformation and disinformation ... basically an outrage machine where the algorithm rewards lies and conspiracy theories.
If you're still on X, why?
I screenshot my profile for posterity. And here's also Flipboard's 2023 announcement.
#Goodbye #X #Twitter #SocialMedia #Mastodon #MastodonMigration #Misinformation #Facts
Wade's excellent post on LinkedIn reminds me of the not terribly useful new SEC disclosure rules in re cybersecurity incidents. It's all well and good that companies have to issue an SEC filing when they experience a big incident, but in most cases these days that's like getting a birthday card three days late. By that time, everyone knows you've been hacked because your services are all down hard and have been for hours or days.
And yet somehow companies aren't required to file a teensy weensy update when they decide to pay a $22M ransom a few weeks later? Pshaw.
Also, just once it would be nice if we had some requirements that said victims have to help explain how they got owned to others, and maybe even provide some actionable information at some point (when everyone's hair is no longer on fire).
My #cybersecurity educational conference, @pancakescon is this Sunday. It is free and virtual, accessible to almost anyone. The talk format is fun - half educational on infosec, and half about a personal hobby. Spend some of your weekend with us! On top of two tracks of great talks, we also have a Lockpick Village hosted by @LockEx , @Blenster will be hosting a hardware hacking village, and we have a wonderful CTF hosted by the @qcomresearch folks!
To participate, check out https://pancakescon.com, and join our Slack. That's it! That's how you see our streams, ask questions, and win fabulous prizes donated by our sponsors. No strings, just healthy community fun.