Tootfinder

"Alright, what kind of GUI do you want for your new SCADA system?"
"I want it look like Hollywood designed it for a disaster movie."
"What?"
"Also, don't add any security and put it directly on the internet."
"Wha...
#infosec

Any #PortlandME fedi people involved with #DNS, #BGP, #infosec, or

"Root Cause:
A dog named Kubernetes ate a YubiKey."
This a fun read.
"The legitimate maintainer has won €2.3 million in the EuroMillions and is researching goat farming in Portugal."
#infosec #incident

Incident Report: CVE-2024-YIKES
A series of unfortunate events.

#infosec #cisa #oopsie

‘The Worst Leak That I’ve Witnessed’: U.S. Cybersecurity Agency Leaves Its Digital Keys Out in Public on GitHub
Passwords were stored as plain text in a public GitHub repository.

Project Glasswing: what Mythos showed us
#cloudflare

⚠️ If your web apps are built on top of #NodeJS , be sure to upgrade your NodeJS instances this next Monday 27 #infosec

No, really, creating a login role account so multiple people can have access to support a system is very bad.
— How I make developers look at me incredulously.
#InfoSec #Sysadminnery

Arthur C. Clarke: "Any sufficiently advanced technology is indistinguishable from magic."
Me: "Therefore, any sufficiently complicated technical problem is indistinguishable from a curse."
#infosec #sysadmin

#infosec #ai #sre

any #cybersecurity people interested in getting into a webserver in order to rescue a dying website?
boosts appreciated :P
#cybersec #infosec

any #cybersecurity people interested in getting into a webserver in order to rescue a dying website?
boosts appreciated :P
#cybersec #infosec

RE: https://ioc.exchange/@percepticon/116925102016933601
Note the hygiene recommendations at the end of that article. Quite basic. Quite simple. PLEASE PLEASE PLEASE just follow them. You all know that you should.

I’ve had 3 requests from *different* supposed market survey entities who each claim to be working on behalf of an #InfoSec vendor seeking customer feedback.
They all got an explicit “FUCK OFF” response from me, and had their mail sent through our spam-learning gadgetry.
I’m not naming the vendor intentionally. Many people may recognize them as a spin-off from a very damaged brand. But …

I’ve said it before and I will likely say it again:
If you value your secrets, you don’t use a 3rd-party "cloud" password manager.
Go ahead, keep doing it, but understand that you will be subject to other people's failures. Which WILL occur.
#InfoSec @…

Looks like the problem is fixed and .de-Domains are coming back
#DNSSEC #denic #infosec #DNS