Sass, David

@sassdawe@infosec.exchange
336 Followers
362 Following
4.4K Posts

Black Lives Matter

Dreamer | Speaker | Legend | SRE | MCT | Shadow Architect

He/him/his/Skills

VB better than PowerShell

Have we met?

GitHubhttps://github.com/sassdawe
Bloghttps://kolislab.com
Sessionizehttps://sessionize.com/david-sass/
Linkshttps://davidsass.io
We're thrilled to announce that the 10th anniversary edition will be in Wiesbaden, Germany, from 1–4 June 2026. 🎟️ Early Bird tickets (€1750) include 3 nights at Dorint Pallas (from Monday to Thursday) More info: psconf.eu #PSConfEU #PowerShell #IT #Germany #Automation
Master secure #PowerShell scripting with Friedrich Weinmann. Gain insights into best practices for script security, including Azure Key Vault and PowerShell's Secret Management module. #PSConfEU

Secure Code Design Practices -...
Secure Code Design Practices - Friedrich Weinmann - PSConfEU 2024

YouTube
I wrote a short #PowerShell script to check if a modules needs to be updating or not last year, and this week I wrote another one for #PSConfEU for the same purpose.
And today I realized I wrote the exact same thing twice - down to the last letter. I guess this means my original idea can't be improved - not by me at least. :D
Picard management tip: Take your leisure time seriously. A relaxed captain is a sane captain.

Obsidian 1.9.3 (early access) is now available for desktop and mobile, with more improvements to Bases:

- New Cards view lets you display files in a grid layout
- "New item" button creates a file that matches filters of the current view
- Sort menu lets you easily sort items

Hey all y'all need to stop using "guys" in mixed company.

- My trans girlfriend is not a guy.
- My cis girlfriend is not a guy.
- I'm not a guy (or a girl, but that's not relevant here).

Misgendering is misgenderingβ€”even if "everyone's doing it".

Patriarchy shouldn't be the default.

#FuckThePatriarchy #Feminist #LGBTQ+ #Rant

Ask a developer to estimate a 2-day task, he'll tell you it'll take 2 weeks.

Ask him to estimate a 6-month project, he'll say "Yeah, I can probably knock that out in a weekend." 🀣

PostMortem: Assumed DOJ Montana Leak of Phone Dumps

Type of leak

Highly confidential information on a public SMB share without authentication

Threats from the leak

I see the following threats:

  • Integrity and Confidentiality of investigations into serious crimes compromised
  • Privacy of U.S. citizens compromised (very likely to contain most intimate data)
  • Providing 3rd parties hostile to the U.S. with blackmail material

1/4

Analysis

This is not a complete failure analysis. This are only my observations. A full detailed analysis is most likely to be even more shocking.

Failures:

  • The PC with that kind information should never have been "internet facing" (architecture mistake)
  • The informations do not belong on any file share (organisational mistake)
  • Shares should never allow unauthenticated access (configuration mistake)
  • The information should never have been stored unencrypted (lack of data security)
  • Incoming SMB traffic should never be allowed to such a network (firewall policy mistake).
  • Any such network should include a monitoring of the external attack surface that could easily identify such a leak (lack of posture management, lack of attack surface management).
  • It was out of scope for our involvement, but is very likely that the systems could have been used to compromise any attached network
  • SUMMARY: A complete and utter failure of IT-Security on the technical and organisational level for that lab

Impact

It can be safely assumed (due to duration and easiness to discover) that all data on those shares is now in the hands of inttelligence services with non-friendly attitude towards the United States of America (e.g. Russia, China)

3/4

We are almost there folks hang in there

2020 β–“β–“β–“β–“β–“β–“β–“β–“β–“β–“β–“β–“β–“β–‘ 547%

Γ—

Hey all y'all need to stop using "guys" in mixed company.

- My trans girlfriend is not a guy.
- My cis girlfriend is not a guy.
- I'm not a guy (or a girl, but that's not relevant here).

Misgendering is misgenderingβ€”even if "everyone's doing it".

Patriarchy shouldn't be the default.

#FuckThePatriarchy #Feminist #LGBTQ+ #Rant

@alice This. So much this. πŸ’―
@alice I personally really like "folks" as an alternative. Lots of good options!
@xgranade @alice Mmm, folx/folks is my preferred one these days, though my circle of friends has always seen "guys" as all-inclusive, both in user and usee(? πŸ€”) senses.

@anyia @xgranade

> my circle of friends has always seen "guys" as all-inclusive

That's just the lifetime of patriarchal oppression talking.

@alice @anyia @xgranade

Frankly I have been wondering about that, since some time. English is "only" my second language. I originally thought "guys" would be gendered, but then I saw it used as ungendered all over the place and came to doubt my initial understanding. And saying/writing "guys and girls" seemed somehow even worse.

Now, I am grateful to Alice for resolving this question for me, AND I am very grateful to @xgranade for bringing up the alternative of "folks". I had been looking for one, but inspiration did not come.

@glitzersachen

I don't use "guys" for mixed groups myself, but here's what I've observed: when used in the vocative ("what would you like to drink, guys?") it's sometimes applied to mixed groups. In all other contexts that I can think of, "guys" is gendered. So the same cis het man who addresses a mixed group as "guys" will not say "I sleep with guys". That difference in usage is what makes the term confusing for non-native speakers.

As I say, I don't use the word that way, and I'd recommend against it. It's always sounded a bit off to me.

@alice @anyia @xgranade

@CppGuy the only reason it isn't considered gendered by some folx is because being a man is the assumed default. You'll notice that >90% of the "well actually"s in this thread are from men, while most of the "omg 'guys' has annoyed me for ages" crowd are not male-identifying.

@glitzersachen @anyia @xgranade

@alice @CppGuy @anyia @xgranade

> while most of the "omg 'guys' has annoyed me for ages" crowd are not male-identifying.

You added a "most" which makes this into a rather soft statement. How could that ever be falsified.

Then I am not sure what you assume about me ;-).

BTW: My native language doesn't allow a neutral personal pronoun that is not constructed artificially. Which is a big turn-off for selling such an addition in the wider populace.

I have been envious of the English "they/them" as an gender / plural indeterminate way to refer to some actor ever since I rediscovered that (a bit to the chagrin of my colleagues, and I even had essays on that topic to refer to. Resistance was futile).

@glitzersachen @alice @anyia @xgranade What you probably weren't aware of as a non-native speaker is that this is a regional variation. Where I grew up, "guy" is rarely marked for gender. "Are you guys going to the girls-only activity?" is a common thing for folks to say, and "She's a great guy." is completely unremarkable except in a context of a lot of words that are marked for gender. "Guys and girls" sounds vaguely ungrammatical and makes people wonder why you're talking like the TV.
@glitzersachen @alice @anyia @xgranade But the sociocultural reality is my hometown is a dying economic wasteland abandoned by both political parties, and in the places where people have the most money and influence, "guy" is generally marked for gender (although still not as exclusively as the prescriptivists claim.)

@glitzersachen @alice @anyia @xgranade It's the social hierarchy that says that the rich people use the word "guy" correctly while the people I grew up with are wrong. If my hometown had movie studios and stock markets and the coasts were desolate then only small minded backwards people would say that girls aren't guys.

That said, I don't personally use the word "guy" that often and am very mindful that when people use that word in certain ways it bothers some of my coworkers. I'm not a jerk.

@BernieDoesIt
Oh this is reminding me of some of the casual lore in "Metal from Heaven" where there were separate dialects for upper and lower classes. And there was a truth tense that was only in the dialect for the upper classes which made it so semantically the lower classes would always be seen as "half-liars"

This is just a tangent because I like noting small but significant linguistic patterns like this.
@glitzersachen @alice @anyia @xgranade

@h3mmy @BernieDoesIt @alice @anyia @xgranade

This is indeed they way dialects and accents work in this world, too. Only without a truth tense. But lower class accents are seen automatically as shifty, less educated and (therefore) more predatory, more subjective and less beholden to objectivity.

Interesting rabbit hole to go down, actually...

@BernieDoesIt @alice @anyia @xgranade

Not sure i can follow you there as far as causation is concerned, but then I am conversing mostly with non-native speakers and ex-patriates (and the latter are very rarely from the US).

@glitzersachen @alice @anyia @xgranade It's just the same story as everywhere. The privileged people speak "correctly" and the disadvantaged people speak "incorrectly" and your ability to learn how to speak like the privileged people significantly affects your economic prospects.

@BernieDoesIt @alice @anyia @xgranade

Yeeees. But this is now not about economic aspects. If it's about anything, we're talking about participation in society, about visibility. The end goal would be that the default is neutral and if e.g. gender doesn't play a role in a story, at the end you as a reader might not know if the protagonist is "male", "female", "no-binary" and so on. It just doesn't matter, so why should the author bring it up.

I genuinely like Ann Leckie's SF novels, where the default pronoun is she and the protagonista every know and them mentions that her own language actually doesn't have gendered pronouns (so the she, supposedly is a translation artifact, a choice when translating to English).

Economic prospects, IMHO, in a sane society are sub-ordinate to participation. Only capitalistic, money-oriented societies think this needs to be regulated by money (e.g. participation should be proprotional to allocation of money, so we need economic equality -- I'd agree we need economic equality, but that is IMHO orthogonal to participation/visibility/normality).

@glitzersachen I've been an enthusiastic fan of gender-inclusive language since elementary school, back when you could get made fun of for saying a lot of constructs that are more or less the default at this point. I'm also nonbinary. I don't think those two facts are unrelated.

@glitzersachen Even the most fastidious inclusive language users in my hometown use the word "guy" to refer to a girl for exactly the same reason most English speakers use "goose" to refer to a large waterfowl even if it they know it's a gander.

I've lived in a different place where using "guy" to refer to a girl will get you looked at like you have three heads and the plural usually is only used for groups of boys.

@glitzersachen The US altolect is somewhere in the middle, disallowing "guy" to refer to a girl and being a bit squeamish about using "guys" to refer to a group of girls.

If the dialect I grew up with was the altolect, would we be having this conversation? Maybe, but I doubt it. English has a lot of words that are marked for gender only when used contrastively, and no one really complains about any of the other ones.

@glitzersachen If a dialect where "guy" means male pretty exclusively was the altolect, we wouldn't have this discussion either because everyone would learn in school that using "guys" for anything other than an all-male group is a "common mistake."

@glitzersachen The only reason this is an issue is because the altolect is kind of wishy-washy, and the altolect is the altolect because the most privileged people tend to speak it. That means the discussion has classist and regionalist underpinnings even if people don't realize or want to acknowledge it.

None of this is an endorsement of calling anyone anything they don't want to be called, of course.

@BernieDoesIt

> the discussion has classist and regionalist underpinnings even if people don't realize or want to acknowledge it.

I think we are done with this discussion now. This kind of accusator meta-argument on whether it's legit / morally OK to have a discussion on this topic is a communicative deal breaker.

@glitzersachen If that was your takeaway then we've had a serious misunderstanding. I'm sorry, that's probably my fault.

So I want to be very clear on two points: I absolutely think it's legitimate and a moral thing and a good thing to be having a discussion on this topic, and furthermore I agree with the OP! I agree in my case, in your case, and generally.

@BernieDoesIt

But people don't learn informal language at school. Neither how it's right nor how it's wrong. In my eyes your argument fails traction (regardless of whether you are factually right, which I, you might have noticed, doubt).

Furthermore the question is not "is the a dialect / usage where it doesn't imply gender" but, at least for me "is there a usage where it implies gender", since then, not wanting to be misunderstood, I'd not use it, expect if I'd mean a decidedly[1] male group.

[1] Not an accidentally male group, but male per definition and self understanding. So not a group of engineers, that by accident is male, but perhaps the "guys" at a bachelor party.

@BernieDoesIt @alice @anyia @xgranade

> Where I grew up, "guy" is rarely marked for gender. "Are you guys going to the girls-only activity?" is a common thing for folks to say

Yes. This kind of things threw me off, originally. You see, I read a lot.

Since I am usually acting in a less local context (Fedi, the company, the internet in general, formerly my studies --- hell, locally hardly anybody speaks English here, even those who don't speak German), I prefer to practice a usage that is on average least offensive. At the danger of coming over less folksy ;-). I am not the folksy type anyway, and @xgranade has shown a great way to introduce folksy when I need it (literally ...)

Another, now that I think about it, way to address a group informally (but more formal then "folks", would be "you all"). I call this the exaggerated plural ;-) --- as opposed to "you". Like in "Would you all like to go into the lunch break now or should we start the next lesson and interrupt at 12:00".

@glitzersachen @alice @anyia @xgranade There's never any reason you have to say "guy" in American English. It's an informal word, so it's generally avoided in formal text. That doesn't happen to words that are hard to avoid.

Sadly, it's pretty much impossible to find a plural "you" in American English that fits well for everyone. "You all" is a good choice, in that it's not something that will grab anyone's attention, but beware it has the meaning of including all listeners, not just some.

@BernieDoesIt

> There's never any reason to say "guy"

Personally, I am in favour of people working with guy wires to communicate aplenty, for safety's sake! πŸ™ƒ

@glitzersachen @alice @xgranade

@anyia @glitzersachen @alice @xgranade I've heard people say "guide wire" instead. This is not an endorsement of either term. πŸ˜‰

@BernieDoesIt we don't need to find *a* perfect replacement for "guys" (we already have vibrators πŸ’πŸΌβ€β™€οΈ), we just need to move away from *those* gendered terms that erase non-male participation in society.

@glitzersachen @anyia @xgranade

@alice @BernieDoesIt @glitzersachen @anyia @xgranade as a sex shop employee, I would like to point out we also have air pulse toys. 😜
@bluewitchgwen Suggesting air pulse toys are a replacement for guys is making implications about oral sex skills that I'm not sure most straight men can live up to.  
@alice @BernieDoesIt @glitzersachen @anyia @xgranade

@SymTrkl idk, I tend to upgrade when I replace something that's worn out πŸ€·πŸΌβ€β™€οΈ

@bluewitchgwen @BernieDoesIt @glitzersachen @anyia @xgranade

@SymTrkl @bluewitchgwen @alice @BernieDoesIt @glitzersachen @anyia @xgranade I dunno, "hey you guys" rolls off the tongue a lot easier than "hey you air pulse toys."

πŸ˜†

@courtcan Ah, but "yo motherfuckers" is even easier and much more fun.  
@bluewitchgwen @alice @BernieDoesIt @glitzersachen @anyia @xgranade

@SymTrkl hey now! Not all fuckers are fuckers of mothers, so we should drop the modifier noun and just go with "yo fuckers" to be more inclusive. Unless you're only addressing the fuckers who fuck mothers, in which case, carry on.

@courtcan @bluewitchgwen @BernieDoesIt @glitzersachen @anyia @xgranade

@alice As a mother and the fucker of a mother, I have no problem sharing the term with fucjers of all types.
@courtcan @bluewitchgwen @BernieDoesIt @glitzersachen @anyia @xgranade
@SymTrkl @alice @bluewitchgwen @BernieDoesIt @glitzersachen @anyia @xgranade I guess...I am a fatherfucker? Notably, the father in question is not mine own. πŸ˜†