Mastodawn

Myth 🫶Dec 23, 2022

Sarah Jamie Lewis Dec 23, 2022

If you use Obsidian, and especially if you use the new Canvas feature, you should update to the latest 1.1.9 release.

Last night I reported several security and privacy issues that have now been fixed.

See https://forum.obsidian.md/t/multiple-security-privacy-issues-in-canvas-malicious-website-can-access-internal-obsidian-uri/50400 for details.

Props to the Obsidian developers for the fast turnaround.

Multiple Security/Privacy Issues in Canvas (Malicious Website can access internal Obsidian URI)

Hi, In summary: a website card that loads a malicious website into a Canvas view can corrupt arbitrary vault documents, leak some privacy information, and spawn new internal URI calls and some external processes. Details: The new canvas feature allows remote websites to trigger internal obsidian URIs like open/new/search etc. both directly and through the x-success parameter. These URIs can be triggered by the website calling a meta refresh directive i.e<meta http-equiv="refresh" content="0;UR...

Obsidian Forum

Myth 🫶Dec 21, 2022

Myth 🫶Nov 5, 2022

Anytime someone announces they're "giving everyone 2 minutes back" at the end of a pointless meeting, it should trigger a vote with all participants to ban them from scheduling further meetings for a month

Myth 🫶Dec 14, 2022

Don't forget the "Availability" side of the CIA triad, leverage that argument to improve the lives of your engineers. Working them long hours leads to mistakes and turnover, **which is a security issue**.

Security concerns get more attention and traction as a risk than human concerns, and we can use that to help humans.

Myth 🫶Dec 7, 2022

DROP\ TABLE Hacker of Earthsea Dec 7, 2022

#meme #infosec #shitposting

Myth 🫶Dec 5, 2022

Chloé Messdaghi Dec 5, 2022

I'm featured in David Bombal's latest video. Check it out to ace your next job interview, negotiate more money, learn top tips for job success in 2023, and how to protect yourself when reporting vulnerabilities. https://youtu.be/oz7NFc-qm7E

2023 Cybersecurity job advice: Ace your job interview and earn more.

YouTube

Myth 🫶Dec 5, 2022

Something about me being on a conference call triggers my dog to "reject" her breakfast

Myth 🫶Dec 2, 2022

Admin Assistants and Receptionists run the company and nobody realize it, doing everything you can to make them happy is truly the key to professional success. Bring them donuts and fix their issues like they have a C in their title

Myth 🫶Dec 2, 2022

Go out of your way to get recognitions and 'props' on file for your high performers; they can be used as leverage when it's time to argue for merit increases for them

Myth 🫶Nov 27, 2022

Has anyone else fallen down the personal knowledge management #PKM rabbit hole and actually found the end, or does this just keep going until I have a mental breakdown

Myth 🫶Nov 27, 2022

#WednesdayAddams would make a great security engineer