Tootfinder

#infosec #cisa #oopsie

‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub
Passwords were stored as plain text in a public GitHub repository.

"Root Cause:
A dog named Kubernetes ate a YubiKey."
This a fun read.
"The legitimate maintainer has won €2.3 million in the EuroMillions and is researching goat farming in Portugal."
#infosec #incident

Incident Report: CVE-2024-YIKES
A series of unfortunate events.

No, really, creating a login role account so multiple people can have access to support a system is very bad.
— How I make developers look at me incredulously.
#InfoSec #Sysadminnery

Before submitting one or more talks to @… 2026, I wrote a blog post based on my 2024 presentation: Bring Back RSS for Operational Security.
#rss #infosec

Bring Back RSS for Operational Security
Personal webpage of Alexandre Dulaunoy - from information security to open source and art

Every time I update my United credentials I get irritated by their #infosec incompetence.
The security questions require you to pick answers only from a dropdown menu. It barely even qualifies as checkbox security.
What other incompetence is hiding behind the scenes?

What wakes better in the morning than an ice cold shower or freshly brewed coffee ☕ / mate 🧉 ?
2390 unread messages in the inbox, all sent by someone called "Cron Daemon" 👹
#infosec #sysadmin

#infosec

#infosec #ai #sre

I’ve had 3 requests from *different* supposed market survey entities who each claim to be working on behalf of an #InfoSec vendor seeking customer feedback.
They all got an explicit “FUCK OFF” response from me, and had their mail sent through our spam-learning gadgetry.
I’m not naming the vendor intentionally. Many people may recognize them as a spin-off from a very damaged brand. But …

Have you ever tried to dictate someone a private IPv4 address in French 🇫🇷 ?
I'm now pretty certain that whoever said "Let's use 192.168... subnets for this" did that to annoy - or as a gigantic prank. And I salute you for it.
Hundred four twenty twelve, hundred sixty eight...
#infosec #sysadmin

I’ve said it before and I will likely say it again:
If you value your secrets, you don’t use a 3rd-party "cloud" password manager.
Go ahead, keep doing it, but understand that you will be subject to other people's failures. Which WILL occur.
#InfoSec @…

Project Glasswing: what Mythos showed us
#cloudflare

Mikko Hyppönen is going after drones.
#InfoSec #Finland #drone #Ukraine

After fighting malware for decades, this cybersecurity veteran is now hacking drones | TechCrunch
Mikko Hyppönen is one of the most recognizable faces of the cybersecurity industry. After fighting computer viruses, worms, and malware, for more than 35 years, he tells TechCrunch why he is now working on systems to stop killer drones.

Looks like the problem is fixed and .de-Domains are coming back
#DNSSEC #denic #infosec #DNS