nandezzz

@nandezzz@infosec.exchange
6 Followers
96 Following
64 Posts
Distressed Tech and Resilience Engineering / Data and Cloud / UK / ex-Germany / ex-Switzerland / EUrophile / Drummer / Foodie and Drinkie / Vizsla Dad

25 years helping businesses recover from failed/failing Data and Analytics endeavours. Now helping SMEs to become resilient to contemporary cyber-pummelling.

Brian Krebs said Mastodon was the place for Security talk, so here I am.

Drop into any conversation online about securing your cryptocurrency and you will find a great number of people who clearly need help and an almost equal number of people who talk down their noses at people who don't have a clue (and who in their minds maybe even deserve to get robbed).

The truth is, securing your cryptocurrency against theft is not a simple matter, requires a fair bit of preparation and foreknowledge. and is remarkably easy to fuck up, with unseen, massive consequences either immediately or down the road.

My theory is that anyone who has been in the cryptocurrency space for any length of time has been through one or more experiences where they lost some or all of their coin to some scam, rug-pull, phishing scheme or outright physical theft. That's a really expensive way to learn about security, but it has its adherents.

Here's the core truth about owning a lot of cryptocurrency wealth; it makes YOU the bank. The minute anyone knows or suspects you have sizeable amounts of crypto holdings, you become a walking target for phishers, sim-swatters, kidnappers and extortionists, or worse. And ultimately, what gets stolen stays that way, and it is rare that victims ever seen their stolen coin again.

Hey Everybody,

The end of summer is fast approaching, and that means teacher are preparing to get back to school.

Now, if you have a K-12 teacher in your life, you already likely know that this time of year is busy with acquiring new classroom resources, setup, and cleanup before the littles come back, and conferences happen.

Last year, my wife requested that I post her wishlist on here to see if others were interested in contributing supplies for her classroom.

We received a ton of resources, are we're very grateful. I'll be requesting your help again this year.

Here is the list:

https://www.amazon.com/hz/wishlist/ls/15VJ5NDYNE4WG

You've done this once already, why are you doing it again?

If don't have a teacher in your life, you may not know that most schools do not provide supplies for teachers, or the children. That responsibility typically falls on the parents, and if the parents don't follow through, the teachers have to provide for the students. Most of the supplies required for a classroom aren't renewable and need to be re-acquired on a yearly basis.

Imagine if you will, taking a job as a dev, sysadmin, or security analyst, and having to supply your own tools, your own computer, operating system, software, network connectivity, your own printer, printer ink, cables, chair, desk, pencils, pens, notepads, desktop phone (if you don't have a cell), etc.

That's what it's like being a K-12 teacher. Additionally, my wife works in a title 1 school. If you have no idea what that is, Title 1 schools serve primarily poor and impoverished families and communities.

You work in tech, why aren't you covering it?

Ah, you may not see it or believe it, but we both contribute to the classroom on a regular basis for arts and crafts projects, additional snacks, additional pens, pencils, crayons, markers, colored pencils, glue sticks, printer paper, ink, a home laminator, and laminator sheets, etc. I'm definitely involved, and that won't ever change.

Some of you may note that there are snacks/food in the list I provided, and that's not an error. Many of these children, if they don't receive school lunches or breakfast, they don't get fed. and given the current political climate in which the administration is doing its level best to supplant resources from every walk of life to just throw them at the rich, free food for children is on the chopping block.

As a general reminder, to date, I've written approximately 2.5 textbooks. The digital editions are always on available on leanpub (https://leanpub.com/u/da_667), and for the past several years, they have always been "pay what you want", even if you can't pay for them at all. I believe in sharing knowledge, that it wants to be free, so even if you can't pay, I still want you to have it. You also know that I'm a prolific blogger on www.totes-legit-notmalware.site, and also on community.emergingthreats.net, sharing in my knowledge very often. I don't ask for anything in return, and that will never change.

I'm also not blind, and I can plainly see that everyone that doesn't fit "the agenda" or who isn't a billionaire is suffering in this year of our lord, 2025. So, I get it if you don't want to donate, or you can't donate. That's fine. I would deeply appreciate you re-tooting this message, so that it gets to more eyes, if that isn't too much trouble.

Thank you very much for your time and your eyes on this.

How and Why to Ditch GitHub

How much of your code do you feel like entrusting to Microsoft? How about American data centers? Here's an easy way to jump ship and maintain operations.

Listen, it’s very simple: In Britain we use the metric system, except for beer and milk, which come in pints. But not plant milk — that comes in litres.

Oh, and distances are in miles. But only if they’re too far to walk — if you can walk it it’s in metres. If you’re driving then your fuel efficiency is in miles-per-gallon, but petrol is sold in litres.

Oh, and your height is in feet and inches. If you don’t care much about your weight it’s in stone (but not pounds — no-one can remember how many pounds are in a stone and it’s hard to read the little tick marks on analogue scales). If you do care about your weight then your digital scales tell you it in kilograms.

Oh, and if there’s a heatwave then tabloids will forecast a “100°F scorcher”. But if it’s cold then it’s an “arctic blast” with “widespread temperatures below 0°C”.

I hope this clears things up.

Now we are talking so much about vibe coding, on the other hand too many of us vibe cooked through out the life.

I keep getting really annoyed by this tiny bit of missing skirting board. It’s less than a metre, so not worth buying a whole length of skirting board about. But it looked well ugly.

So I fixed it with Lego.

I had a dream last night that i was late for a performance of gounod’s faust at the opéra garnier in paris, which makes me think there was some kind of mixup and a guy from 100 years ago just had a dream about sabrina carpenter
New month, new motivation from our calendar at home.

Great reporting from @greynoise around understanding trends and active exploitation activity spikes

https://www.greynoise.io/blog/greynoise-uncovers-early-warning-signals-emerging-vulnerabilities

I made a typeface, it's called Flexflex 🔠

I've been working on this project on-and-off for many months. Very happy to finally release it!

Flexflex is a typeface that responds to spatial requirements rather than imposing them. Built on a modular system, each letter can fit inside any given rectangular container and transforms continuously if its ratio changes. In theory, it's infinitely flexible.

For more information and interactive demos, see the website: https://ronikaufman.github.io/flexflex