Mastodawn

When I started in security, one of the prevailing attitudes was "The weakest link in the chain will always be the human."

I would like to thank every LLM provider and startup for changing this paradigm by introducing a much weaker link in the chain.

Jeff Codes Mar 10

🌸 Ⓐnarkitty lumi-nhac

Mar 10

support free software projects that have a moral compass. they deserve all the support they can get

Jeff Codes Mar 10

Signal Mar 9

We are aware of recent reports regarding targeted phishing attacks that have resulted in account takeovers of some Signal users, including government officials and journalists. We take this very seriously.

To be clear: Signal’s encryption and infrastructure have not been compromised and remain robust. These attacks were executed via sophisticated phishing campaigns, designed to trick users into sharing information – SMS codes and/or Signal PIN – to gain access to users’ accounts.

Show thread

Jeff Codes Mar 6

Know your #opsec , know your #threatmodel , know what the services you choose can and cannot provide for you, and act accordingly.
Anonymity on the modern internet is not easy for the layperson. Privacy is an easier achievement through choosing a good provider and making a few habit changes. 3/3

Show thread

Jeff Codes Mar 6

#Privacy is not #anonymity . Do not mistake the two as synonyms. One is about information transfer without prying eyes, and one is about not being identified. You can be private and identifiable, anonymous and have public content (think Banksy), and anonymous and private. Two different concepts. 2/3

Jeff Codes Mar 6

RE: https://infosec.exchange/@jeffcodes/116179462280259358

I am reposting as proper thread with replies. I goofed.
#privacy #security #opsec

Jeff Codes Mar 6

I think #banksy is a great example to educate people on #anonymity vs #privacy

Banish is #anonymous in that the public does not know who the are. They are NOT #private in that their art is available to the public and widely known.

They probably have private conversations, information shared between the and only the intended recipients, with a small group of people who may help them remain anonymous. Assuming that’s true, those communications are both private and anonymous to the public.

Achieving both is quite hard.

Jeff Codes Mar 6

If you believe that #tuta #fastmail or #startmail are immune from court orders, you are sorely mistaken. #proton #protonmail giving over payment and/or metadata under a court order is not a violation of their privacy policy, and is required by Swiss law. That also doesn’t mean they failed to still provided privacy. The content that was intended to be private is still encrypted and private as long as the password and #encryption keys remain unknown. 1/3

Jeff Codes Feb 20

The Grand Rapids Police Department (#GRPD ) in West Michigan, USA have executed another person of color. This state sponsored terrorism must stop. The state as funded, supported, and legally defended law enforcement’s continued efforts to beat, harass, and murder citizens. They’ve been doing it pretty much forever. Disproportionally, people of color are at the receiving end of this violence.
At this point, running from law enforcement, especially as a black male, is a survival tactic. It is a fight or flight reaction to generational trauma form the abuse and murder at the hands of police. This makes it less a choice, and more an innate human reaction to danger.
An attack at one citizen, is an attack on all citizens. We are all in danger everyday at the hands of law enforcement. This pattern has to end, and it will take drastic measures to do so.
Get active in your local communities. Run for office. Demand change. Let your voice be heard. Stand up for the basic human right to life.

The man in this video was prone on the ground, being attacked by a dog, after what appears to be an unlawful stop, and shot in the back by two officers within seconds. This is straight up murder.
How is a person suppose to react after generations of attacks at the hands of police, while also being attacked by a police dog, and having commands shouted at them? Confusion and violence seems to be the point… a point leading to murder the state can say was “justified” because “resisting” and causing the officers to “fear for their lives.” That’s also called, bullshit. The system is broken beyond repair. It needs to be broken down and rebuilt.

https://www.woodtv.com/news/grand-rapids/grpd-man-shot-by-officer-has-died/

#USPOL #defundthepolice #gunviolence #racism #generationaltrauma #terrorism #stochasticterrorism

Jeff Codes Feb 20

mhoye Feb 20

Once you realize it’s not “age verification”, but actually “identity verification”, then it’s easy to understand that the real goal is “papers, please” for the entire internet.