Nathan Arthur (OLD ACCOUNT)

@narthur
21 Followers
240 Following
2.7K Posts
Account moved to @narthur (https://hachyderm.io/@narthur)
PronounsHe/him
Websitehttps://www.rainskit.com/
GitHubhttps://github.com/truist
LocationCleveland, Ohio, USA
Nathan Arthur (OLD ACCOUNT)Jan 20

I'm about to start the process of moving this account to hachyderm.io (specifically https://hachyderm.io/@narthur).

I'm following the steps at https://fedi.tips/transferring-your-mastodon-account-to-another-server/) so my followers should just come along for the ride.

I'll post again on the other side!

Thanks to @FediTips for writing https://fedi.tips/its-a-really-bad-idea-to-join-a-big-server/ which convinced me to do this. (And thanks for the instructions!)

Nathan Arthur (@[email protected])

0 Posts, 0 Following, 0 Followers · Thinks about systems. Works with people on software (security) products. Raises adults (from children) thoughtfully. Would like to be making things, especially furniture or structures, but is instead fixing his house. Travels and learns new things (bridge, motorcycle, scuba, skiing) with whatever time is left. Tries to not post or boost negative stuff.

Hachyderm.io
Nathan Arthur (OLD ACCOUNT)Jan 20
That's just awesome - I changed my email address on my #Verizon account and they sent the "warning, your email address has been changed" to the *new* address.
Nathan Arthur (OLD ACCOUNT)Jan 18

I really enjoyed Étoile (on Prime). Excellent characters, excellent acting, excellent dancing, and a good bit of fun. The story was a touch too blunt, but still - I’m eager for another season.

https://watch.amazon.com/detail?gti=amzn1.dv.gti.5122fbd4-377b-4e74-9184-47688dd9c4f7&territory=US&ref_=share_ios_season&r=web

Watch Étoile - Season 1 | Prime Video

In an ambitious gambit to save their storied institutions, two world-renowned ballet companies in New York City and Paris swap their most talented stars. From the Executive Producers of The Marvelous Mrs. Maisel comes a bold new series celebrating the beauty, humor, and unpredictability of a life devoted to the arts, both on stage and off.

Nathan Arthur (OLD ACCOUNT)Jan 17
OOTSDec 27

The "Bluetooth Headphone Jacking" talk at #39c3 was awesome, too. They reversed a popular SOC that powers Bluetooth earbuds and headphones.

They found that (even without being paired to the headphone), they could dump flash and RAM from the device. Then they dumped a bunch of info from the device - e.g. the #Bluetooth address and "master" encryption keys used for the communication with paired devices (e.g. a #phone).

Then they impersonated the headphone from their laptop and connected to the phone (pretending to be the headphone).
The headphone (or the laptop impersonating the phone) has permissions to do some things on the phone, e.g. accept calls, increase/decrease volume, etc.

Then they started recovering access a #WhatsApp account via some account recovery mechanisms. That required some one-time security key which would normally be delivered via SMS, but that could be delivered via phone call as a fallback option, too. Since the phone thought it was connected to the Bluetooth headphone, phone call audio would go to the laptop via Bluetooth.

As the cherry on top, they escalated into the victim's #Amazon account.

Scary shit. #YouCannotBeParanoidEnough #security

Show threadNathan Arthur (OLD ACCOUNT)Jan 17

@hannukle huh - I hadn't even heard of it. This is a small team that really is "agile" in all the best ways, so I've been hoping to find a tool that really supports that.

We use Monday now, for everything in the business. But it sucks for dev. Fibery looks more like a Monday-replacement that would probably work much better than Monday for dev.

But wow, I see a lot to like at https://fibery.com/software-development - I will check it out.

Thank you!

Fibery for Software Development Teams

Collaborate on backlogs, sprints, releases, and development wiki — all in one place. Replace most of your stack with a single tool.

Fibery
Nathan Arthur (OLD ACCOUNT)Jan 17
Show threadJohn SchragJan 17
@narthur And if your theory is correct — that your use of Jira results in its death — you will become a folk hero!
Show threadNathan Arthur (OLD ACCOUNT)Jan 17
@jvschrag hm... a flaw in this plan. I "killed" Pivotal Tracker and Scrum Mate. (And maybe one other? My memory is blurry.) But I didn't kill TFS / Azure DevOps. So I'm not sure I can be counted on to kill Jira.
Show threadNathan Arthur (OLD ACCOUNT)Jan 17
@jvschrag oh that's just the best! Now I have to do it! With great power comes great responsibility, I guess! 🤣
Show threadNathan Arthur (OLD ACCOUNT)Jan 17
Or they have passkey support but various workflows still use text messages to confirm authentication!
Nathan Arthur (OLD ACCOUNT)Jan 17
As I go through updating hundreds of accounts to "+ addresses" (instead of Qmail's "- addresses") I'm struck by how many sites still don't have 2FA at all, let alone passkey support. Or their 2FA is hard-coded to use text messages. Even sites for money management!