47 Followers
21 Following
320 Posts

Infosec thoughts, links, experiences, rants, chats

(Not my cat.)

I need to give an official name to something we are all talking about right now: Security drift.

Security drift is when software continues to work, but slowly becomes less secure over time, without anyone intentionally making it that way.
1/2

This is difficult to capture beautifully for obvious reasons.
Sideways approaches
mean trouble for someone. Dog?
The cat attacks now.
Does anyone have any experience hosting their own RSS service for themselves and their friends/family? Device sync of feed state is important and I'd like to stop paying for it. I'm looking at FreshRSS and Tiny Tiny so far.

This new internet where services are fully https://www.wired.com/story/tiktok-platforms-cory-doctorow/ shittified as part of accepted business plan is a self-inflicted and unfortunate use of technological output, social contract, and creative and emotional energy.

Maybe we can start betting pools on what's next to go? Reddit looks pretty likely from the API fee direction.

I'm updating myself (after some time away) on the whole "TikTok is a massive national security threat" line. Does anyone have any clear-eyed analysis they'd like to share, please?

So far, I can see that it's bad because it collects data, but for the Chinese rather than "Not the Chinese, probably" like most of the rest of the internet.

Does anyone mess around in the Geminispace?

Policies are WHY you should be doing something.

Standards are WHAT you should be doing.

Procedures are HOW you should be doing something.

#infosec #cybersecurity #grc

"F" Farming, and not "Ph" (ph)(f)arming.
Is the natural progression out of the security profession to pick up farming? It seems like more than a few people have gone that way in some form.