threatactor.club

Google has now migrated maps.google.com to www.google.com/maps thus if you grant Geoloc permission in your browser, every G-service on www.google.com can track your location.

https://garrit.xyz/posts/2022-11-24-smart-move-google

Hey folks in #Berlin & #infosec

I'll be speaking at BSides Berlin THIS Saturday. Consider joining us: the tickets are crazy cheap at 15€ and the people are nice (at least those that I bring along).

More at https://bsides.berlin/

Oh, and I'll be talking about HTML Sanitizers again.

habe ein Ticket für die #BSidesBerlin übrig #cbase einfach melden

stopped visiting the bird site 2 days ago and so far, no regrets.

powerful datavis can be simple and non-graphical.

here's a project of mine from a good while ago: "autocomplete" for passwords, based on all passwords extracted from the "collection leaks".

https://passwords.yetzt.me/

One of the more difficult challenges of hunting for bugs in CI/CD environments is working out if code execution is a feature or a bug 😑​

So I've unfollowed everyone on the bird space and removed all DMs. I was mainly following #infosec and #hacker folk with a smattering of #homelab #solar and #space related accounts, which I am slowly finding here. Leaving my bird followers in place so if they migrate here they can use one of the automated processes that finds who they are following there, and potentially find me. Feels good.

Ever wondered why VGA cables have screws to affix it to a PC?

Hey #InfoSec, are people still rolling out osquery for things? I’ve seen a couple of projects for deploying it at/on kubernininis, but nothing has really convinced me they’re super well matched? #OSQuery #HashTags

Hot Take: we should stop putting those "for educational purposes only" disclaimers on offensive security software. They are not legally binding and probably provide no real protection. Plus every OSS license already has a no-liability clause. Continuing to put those disclaimer on software has the same energy as those "confidential email, do not distribute" disclaimers people put on their outgoing emails; which are also not legally binding because reading a disclaimer is not the same as signing a legal document.

we pwned @tailscale ❤️
ft. @jamie
https://emily.id.au/tailscale

#Tailscale

Mastodon in a week has gone from “I can read all posts in 15 minutes” to “i can’t keep up”. Well done.

the Berkeley Packet Filter (BPF) is a subsystem of many Unix operating systems wherein all packets are sent to a server in Berkeley, California, which has the firewall rules on it.

Ooooohkay, who are the fun and irreverent people you're following here? Bonus points for sweary and witty.

I need some levity among the intellectualism in my feed.

“Boost my toot” sounds weirdly sexual.

"Charlatans in InfoSec - from Kim to Jonathan" by @secresDoge@twitter.com at @BSidesVienna@twitter.com starts in a couple of minutes.
I'll be live tweeting/tooting it in this thread! 🧵

"Charlatans in InfoSec - from Kim to Jonathan" by @secresDoge@twitter.com at @BSidesVienna@twitter.com starts in a couple of minutes.
I'll be live tweeting/tooting it in this thread! 🧵

SHITPOSTING

is an anagram of

TOP INSIGHTS

hot take: you should be suspicious about anyone who unironically boasts about being on the forbes 30 under 30 list.

1. it's actually like 600 under 30 and they know it
2. it's largely meaningless cuz (at least back in the day) all you had to do was be friends with someone who worked at Forbes to make the list in some of the categories that Forbes didn't know much about
3. if you actually try to get on the list, you probably value self-promotion/networking more than you should

i am on the list for completely dumb reasons and i hope people stop taking it seriously.