44 Followers
194 Following
1.1K Posts
Blue Team aficionado, InfoSec purveyor, Wearer of many hats
Githubhttps://github.com/zorg-the-blue
The Boy That Cried Mythos: Verification is Collapsing Trust in Anthropic https://www.flyingpenguin.com/the-boy-that-cried-mythos-verification-is-collapsing-trust-in-anthropic/
I'm not doing #fieldwork in #Greenland this year: but my colleagues are up there now. The sea ice off #Qaanaaq is breaking up extra early again this year - probably related to the ice arch migrating up the Nares
Straits. Will be interesting to see how far the edge migrates in any case - ESA's #Sentinel2 on #Copernicus #EOBrowser is a brilliant way to keep track

#SeaIce

At issue in the Mobley case is whether courts will impute legal responsibility to AI systems for decisions they take on behalf of companies, or whether liability will sit with the companies

https://www.ft.com/content/51b55431-30e8-4eb3-9730-f5e89c24ad56

anyone know of a good VPS for me to set up a MacOS host for like, a day?

I don't have access to mac, nor do I feel like paying to have one in my collection.

Last time I needed a mac, I used mac stadium. They still the best game in town, or should I look elsewhere?

Just one week until @BSidesCharm, and RF Hackers are hard at work preparing to bring you the RF CTF.

Make sure you have your tickets, we can't wait to see everyone in Baltimore!
Tickets and details at https://bsidescharm.org/

#BSidesCharm #rfhackers

BSidesCharm – BSidesCharm is a Baltimore, MD region Security BSides event

I heard about this topic yesterday. What value does this provide to our economy other than continuing to boost share prices and make the rich even richer at a lower tax rate than those of us who actually work and add real value to society?

https://www.barrons.com/articles/bank-stocks-buybacks-bofa-goldman-0edb60c8

Mastodon announced it will add five much-needed features and improvements
thanks to funding from the German government’s Sovereign Tech Agency.

The five deliverables include:

🔸Blocklist synchronisation
To improve moderation and safety, Mastodon servers will be able to subscribe to shared blocklists to block offending servers or suggest servers to block automatically.

🔸Remote media storage
Mastodon will add support for the Fediverse Auxiliary Service Provider (FASP) specification
— a proposed standard for connecting fediverse servers to external service providers
— to enable cost-saving media processing between servers.

🔸Automated content detection
Using FASP, Mastodon will allow server owners to use external or self-hosted tools to scan for and process spam and illegal content automatically.

🔸End-to-end encryption for private messages
Mastodon will work with the Social Web Foundation
— a nonprofit dedicated to growing the fediverse through ActivityPub
— and its E2EE messaging project to implement support for ActivityPub E2EE extensions for private messages.

🔸Documentation improvements
Mastodon will create a new documentation site, provide more detailed installation and upgrade instructions, and make it easier for server owners to have the correct software dependencies.

https://coywolf.com/news/social-media/mastodon-to-get-end-to-end-encryption-and-other-features-thanks-to-sovereign-tech-agency/

Mastodon will get end-to-end encryption for private messages thanks to Sovereign Tech Agency

The Sovereign Tech Agency, commissioned by Germany's Federal Ministry for Economic Affairs and Climate Action, has awarded hundreds of thousands of Euros to Mastodon to address key infrastructure challenges faced within the fediverse ecosystem.

Coywolf

RE: https://infosec.exchange/@zeek/116370414789008887

This blog post is all about thinking "Wait, that exists?!" when using Zeek.

New version of https://check-tls.akamai.io/ now checks H2, H3, and if the key exchange used PQC, in addition to TLS version and IPv6 support. It's a good way to test agents, thumbnailers, search engines, etc. Perhaps for a future version I'll replace the image.

Using https://check-tls.akamai.io/v1/tlsinfo.json will give some more raw data and can be usable for other types of agents.

#IPv6 #PQC #TLS

Check TLS - (SNI=present,https,tls1.3,ipv4,h1,PQC) - searchtokenPDXTXRFLK

Check TLS - (SNI=present,https,tls1.3,ipv4,h1,PQC) - test results with searchtokenPDXTXRFLK from og:description

RE: https://infosec.exchange/@zeek/116336545933492571

Quick tip from the newsletter: Zeek has a built-in script debugger. Check it out:

#Zeek #NetworkSecurity #OpenSource