287 Followers
301 Following
640 Posts

mostly use this account for infosec or tech discussions

i like writing scripts, building stuff, breaking stuff

ask me about my latest hobby

bad at social media

Bloghttps://keefer.io
i love that we went from "zero trust" as a fundamental buzzword to "trust autonomous nondeterministic agents everywhere in your stack"

@wowsuchcyber - Absolutely!

So here is a thread on a general how-to: https://infosec.exchange/@tinker/116171867757917404

And here is a thread of the first one we did with lessons learned: https://infosec.exchange/@tinker/115515106175684621

Check through the various hashtags like #installparty and #linuxinstallpary for other folks doing similar things!

RE: https://mastodon.social/@Viss/116240791835934578

they loved it.
im doing this format from now on for every tabletop i ever do.

telling them halfway through "oh no, this is real. go look at your logs. go look at your telemetry. its there"

their eyes get to be the size of dinner plates.

completely different story when you make them get out of the chair and go do stuff in meatspace.

fucking awesome, 500/10. would tabletop again.

@codinghorror there have been stretches where I listen to an album once a day, but only for a few months.

I used to listen to Mingus’s Black Saint and the Sinner Lady every morning.

Holy crap this story knocked me over. It is everything I'm feeling about the machines right now.

https://sightlessscribbles.com/the-colonization-of-confidence/

The Colonization of Confidence., Sightless Scribbles

A fabulously gay blind author.

Orcutt Shelley Miller s/t https://orcuttshelleymiller.bandcamp.com/album/orcutt-shelley-miller - new project of Sonic Youth's drummer, seems good, avant-rock instrumentals.

Too Free - Feel 4 U https://toofree.bandcamp.com/track/feel-4-u-single-mix - I loved this DC electro-pop band, and I'm sad they seem to have broken up. This 2022 single is the last morsel I hadn't already enjoyed

#bandcampFriday

Orcutt Shelley Miller, by Orcutt Shelley Miller

5 track album

Orcutt Shelley Miller

@b0rk any time you have a different origin for a backend.

Eg api.example.com vs www.example.com

Example Domain

Good news: You seized millions of $$$ worth of cryptocurrency from bad guys!

Bad news: You put a photo of the crypto wallet's seed phrase in your press release...🤦

Read more in my article on the Bitdefender blog: https://www.bitdefender.com/en-us/blog/hotforsecurity/they-seized-4-8m-in-crypto-then-gave-the-master-key-to-the-internet

They seized $4.8m in crypto... then gave the master key to the internet

South Korea's National Tax Service (NTS) has found itself in the middle of a deeply embarrassing — and costly — blunder after accidentally handing thieves the master key to a seized cryptocurrency wallet.

Hot for Security

I am always amazed by the expert mode of the SQLite CLI.

You type .expert
Then you paste your SQL query.
And #sqlite tells you which indexes you should create to speed up your query.

No AI, no complex program to install. No expensive database architect to pay for. It's just clever programming.

To my knowledge this is the only database in the world to have this feature.

https://sqlite.org/cli.html#index_recommendations_sqlite_expert_
https://sqlite.org/src/dir?ci=trunk&name=ext/expert

Command Line Shell For SQLite