Just before the invasion, #Ukraine made a deal with #Amazon #AWS to create a data warehouse for its government information and infrastructure: tax and property records, bank statements, and the like. Things that an invaded and occupied Ukraine might lose if Russia got their hands on the only copies.

They literally snuck Pelican crates full of SSDs into the country and spirited them back offshore after backing up 10 petabytes of important historic and legal records.

This paragraph, second from the end, really put a fine point on why Amazon did this: They were not beholden to, nor being held hostage by, any Russian operations...because they never had any:

Amazon didn’t have to worry about its relationship with Russia on the Snowball project. It doesn’t have one. “We didn’t have anything to turn off there,” Maxwell said. “We had never invested there. It’s a point of principle.”

Truly an amazing story from the #LATimes.

https://www.latimes.com/business/story/2022-12-15/amazon-ukraine-war-cloud-data

The Macy’s Thanksgiving day parade is dumb.

Pumpkin pie is great. And then it isn’t.

Thanksgiving is a vehicle for nutmeg.

I don’t mind Uncle Larry bringing up politics at dinner because I know more than he does. About everything.

Follow me for my new newsletter “Sarah trashes things you enjoy.”

Evolutionary epidemiologist Rob Wallace hosts "COVID This Week".

Covering the cognitive dissonance the American people are expressing between the Biden administration’s declaration the pandemic is over and the continuing damage COVID-19 is imposing.

https://www.youtube.com/embed/caxHRiPtZLE

I love all of you and I want nothing but the best for each of you, particularly those on infosec.exchange. I understand that Mastodon isn't Twitter, that DMs aren’t end-to-end encrypted, that we are spread across different instances and it can be hard to find your friends, and that an instance can go away at any time, and that translating posts doesn't work correctly, and there is no native giphy support, and that some instances are overwhelmed and super slow, and that you don't think the federated model can scale to a billion users, or that it doesn't support full text search of every post and account, or that we can't comply with the GDPR, or that we don't support quote tweet style functionality, or that we shouldn't collect IP addresses, and many other things.

The fediverse is a work in progress. I've been here for going on 6 years. In that time, it's come a long, long way. That said, Mastodon is not going to appeal to everyone. The decisions I make are not going to appeal to everyone. No one is forcing you to be here. No one is forcing you to disclose your personal secrets into a network of federated servers running by volunteers and hobbyists. NB: this is not Twitter. It has some similar functionality, but it is not Twitter. Parts of it are better, IMO, and parts are not. The security community is generally among the most skilled and competent IT people the world has to offer. Mastodon is open source. Do you see where I'm going?

I set this instance up a long time ago for reasons I don't even remember. I have poured my soul into this thing because I believe in the importance of this community. I have effectively peaked in my career as a CISO and I and my family live well. I am not running this instance for fame, money, a better job, or anything other than wanting to foster a community of people that can learn from each other and make the world a better place. That's it.

As I've said in several recent interviews, I felt particularly obligated to ensure the security community had a good landing spot in the fediverse as everyone was running for the doors in Twitter. We've grown from 180 active users to about 30000 in the span of 3 weeks. I do not expect everyone to stay. Some will set up their own instances. Some will move to one of the other excellent security focused instances. Some will give up and move to on to some other social media. And that is OK. While I am super excited to see the buzz here, I don't have subscriber targets, engagement targets, retention targets, or anything else. The only metric I hold myself to is whether I think this is serving a useful purpose to the community.

I appreciate all of you, regardless of where you land. Infosec.exchange has been here for a long time and will continue to be here for you.