Security Writer :verified: :donor:

https://infosec.exchange/@SecurityWriter

Security Architect. Technical Auditor. Speaker.  Author: Humanising Security  I specialise in organisational and operational security. I help people do better.  “The rising tide raises all ships” ~ Ancient proverb  Donor: Infosec.exchange :donor:  #Infosec #CISSP #TOGAF #SABSA #COBIT #CITP #MBCS #Iaas #Cybersecurity #SIGINT #OSINT #SecOps #OpSec #Blueteam #Philosophy #ADHD #Privacy #DRM #MediaPreservation #History #Geopolitics  GNU Terry Pratchett

GitHub: https://github.com/securitywriter
Threads: https://www.threads.net/@securitywriter
Locale/Language: 🇬🇧🇯🇵🇮🇪🇪🇺

Public Key

npub177hsd77wcrn3tehzcvf96xnjaqw6ntszvu3r9drrwfxazp7u997qzdy7uc

NIP-05 Address

securitywriter_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqs00tcxl08vpec4um3vxyjarfews8df4cpxwg3jk33hynw3qlwzjlqprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyvhwumn8ghj7un9d3shjtnddakk7um5wgh8q6twdvhs5mf5kn

Publishing to

relay.momostr.pink

Author Public Key

npub177hsd77wcrn3tehzcvf96xnjaqw6ntszvu3r9drrwfxazp7u997qzdy7uc

Show more details

Published at

2024-09-21T08:32:03Z

Kind type

0 Metadata

Event JSON

{ "id": "76435e7add2a65a93e883dcdb26b5209701a1563abda77278773afa526e4dd32", "pubkey": "f7af06fbcec0e715e6e2c3125d1a72e81da9ae02672232b463724dd107dc297c", "created_at": 1726907523, "kind": 0, "tags": [ [ "emoji", "donor", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/183/594/original/61a35b247fc91e55.png" ], [ "emoji", "verified", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/162/424/original/be4326fe58d3b038.png" ], [ "t", "infosec" ], [ "t", "privacy" ], [ "t", "history" ], [ "t", "cybersecurity" ], [ "t", "adhd" ], [ "t", "philosophy" ], [ "t", "drm" ], [ "t", "blueteam" ], [ "t", "osint" ], [ "t", "opsec" ], [ "t", "sigint" ], [ "t", "geopolitics" ], [ "t", "iaas" ], [ "t", "cissp" ], [ "t", "secops" ], [ "t", "togaf" ], [ "t", "cobit" ], [ "t", "SABSA" ], [ "t", "MediaPreservation" ], [ "t", "citp" ], [ "t", "mbcs" ], [ "proxy", "https://infosec.exchange/users/SecurityWriter", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/SecurityWriter", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"Security Writer :verified: :donor:\",\"about\":\"Security Architect. Technical Auditor. Speaker.\u2028\u2029Author: Humanising Security\u2028\u2029I specialise in organisational and operational security. I help people do better.\u2028\u2029“The rising tide raises all ships” ~ Ancient proverb\u2028\u2029Donor: Infosec.exchange :donor:\u2028\u2029#Infosec #CISSP #TOGAF #SABSA #COBIT #CITP #MBCS #Iaas #Cybersecurity #SIGINT #OSINT #SecOps #OpSec #Blueteam #Philosophy #ADHD #Privacy #DRM #MediaPreservation #History #Geopolitics\u2028\u2029GNU Terry Pratchett\\n\\nGitHub: https://github.com/securitywriter\\nThreads: https://www.threads.net/@securitywriter\\nLocale/Language: 🇬🇧🇯🇵🇮🇪🇪🇺\\n\",\"website\":\"https://infosec.exchange/@SecurityWriter\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/324/035/336/557/464/original/b444ae2fe160b724.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/324/035/336/557/464/original/f961435b13e8c2d2.png\",\"nip05\":\"securitywriter_at_infosec.exchange@momostr.pink\"}", "sig": "b0d7bbd179802027a36ebb9028dce322e07d85cc2e99ec70c6dd8eae3c85f47fff1db389c4a5b1c1e22f9211dfcd78c1ec5b4d77fe724ec87ffe34fd13c3da74" }

Last Notes

2024-09-22 22:33:22

I’m transitioning my news feeds back to pure RSS and it’s going great so far.
What are some good security feeds you recommend, that are actual news and not opinion pieces etc?

2024-09-20 22:04:01

- reply

Yeah, I’m just surprised it happened so soon, given how much of a bag of spanners Intune, Autopilot, Autopatch et al are.

2024-09-20 20:57:11

- reply

I can not explain to those of you not in the enterprise space how much of an unfathomable nightmare things will be once WSUS is dead.
I completely foresee orgs doubling or tripling down on keeping their legacy estate now.
WSUS was one of the only reliable components we had left.

2024-09-20 20:54:26

Jesus suffering fuck.
Microsoft: “What we thought we’d do is try to make all of the worst decisions possible in as short a space of time as we could manage. And this, this might be the pièce de résistance.”
https://www.bleepingcomputer.com/news/microsoft/microsoft-officially-deprecates-windows-server-update-services-wsus/

2024-09-20 06:56:28

Happy Friday!
*Klaxons sound*
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/168/572/600/741/867/original/c8329b4f4f149bb1.png

2024-09-20 06:30:58

Autistic moment.
Can someone explain the #actuallyAutistic and #actuallyADHD hashtags?
I’ve seen them a lot (appears to come with the territory) but never quite understood why ‘actually’ is in there.
I’ve never had to tell anyone I’m ’actually autistic’ or ‘actually ADHD’. Or are people claiming to be AuDHD and are not??
Which seem equally strange.

2024-09-16 07:11:38

- reply

I’ve been on a plane a lot in the last few weeks and it’s me and East Asians masking. Nobody else.
I had a woman sat next to me giving me side eye like I’m the infected one while blowing wads of snot out of her nose for 4 hours.
Getting my flu jab tomorrow, but I need to look into private COVID jabs.
Care to link to your mask? I’m using disposable N95s which have been very good to date.

2024-09-16 06:57:20

Of course I feel bad for the 100 or so people (that I know of/yet) whom contracted COVID on the conference circuit the last few weeks, but I was also the only one to wear a mask, which means you don’t give a shit about my health or conditions.
It’s not normal for a September conferences to be punctuated every other second by coughs and sneezes. And I’m not exaggerating here.
And some of you were obviously already very ill prior to attending, so fuck you, too.

2024-09-15 13:28:36

- reply

Last time I was in Switzerland, I couldn’t believe how cheap trains were compared to England, unless that’s changed in the last 12 months - which is of course possible.
Not a “well if you book well in advance at an off-peak time, it’s cheaper” kind of way, but a “I need a train NOW, so I’ll go get one”.
The UK has a real problem with rail pricing and some dilbert will always stick their oar in to tell us it’s not that bad, you just need to prepare 3 months in advance, book through an obscure operator, for a train at 11pm on a Wednesday, with a railcard, and are ok with 2 bus transfers and an overnight hotel. Because that’s not how any transit should work.
(Not accusing you of that, just venting)

2024-09-15 07:40:10

Call me radical but I’m totally ok with the idea of a 100% tax rate.
Should I or my business profit so much that money becomes trivial, I’d expect the state the step in and make better use of it. In fact, it should be considered a national security risk that those entities hold so much collateral.
And for those that are hard-of-thinking, the majority of that profit ordinarily goes towards paying their executives too much, further exploiting developing countries to increase margins and destroy competition, and lobbying politicians for all kinds of deregulation and to further erode worker’s rights and make more money.
None of which is in your interests.

2024-09-07 08:17:40

I’ve just spent £280 on a return ticket to London.
No I should not have to book in advance for a better price.
And there’s 50% chance it’ll be delayed.
I can buy a week’s pass for Japan’s entire rail network, or Denmark, or Germany, or just about anywhere in the world for that money.
UK rail is fucked. And it’s why I drive everywhere.

2024-09-06 10:52:30

You’re on mute.

2024-09-06 06:29:23

- reply

On Wednesday, next Wednesday, a week on Wednesday, in two Wednesday’s time, three Wednesday’s on, or any other temporal variant, and including regional dialects are all totally alien concepts to it. And god forbid you discuss more than one timescale or event in one email.
What I do fear is that for those that do heavily invest, they’ll be required by the likes of Microsoft to begin to speak in ways that Copilot can parse and ‘understand’. Which in larger organisations will shape the way that they communicate with others, and it’ll spread. In the same way that American corporate speak, or Agile terminology has infected the rest of the world.
Our interactions, the things that make us most human, will be modified for the sake of corporate benefit over the coming years.

2024-09-06 06:29:23

- reply

Language is a wonderful thing. It deeply saddens me that this isn’t some fringe theory, but an inevitability.
Context and nuance is going to be erased wholesale from captured information… which will also be filled to the brim with inaccuracies.
#aiisgoinggreat #ai #thisweekincopilot

2024-09-06 06:29:22

I’ve had a week of Microsoft Copilot integration testing across this organisation. Most features being assessed from user productivity to Azure admin.
And let me tell you, I’m coining it now, we’re going to be left with years of ‘Accuracy Debt’ when we see more organisations adopt it.
My very favourite example of just how fundamental these problems are were with user email synopsis and meeting time suggestions.

2024-09-04 16:15:40

So 10 minutes into android device ownership and it’s bricked itself. Going well!
All signed in and let it download updates and do some config. The device restarted.
It’s now got a 7 digit pin which I’ve not specified yet (as not been asked to input one yet).
But it let me sign in with a Google account, and the device appears in my Google account to attempt remote reset…
However following the reset it’s put itself in flight mode, so can’t pick up the erase command.
Recovery mode doesn’t seem to exist on this specific model (Samsung Tab A9+) as no guides online appear to work.
Dire times.

2024-09-04 07:09:45

A periodic reminder to reboot your phone for the sake of security.
Do it now. Go on… 😊

2024-09-03 07:00:35

So. I’ve just ordered an Android tablet (don’t look so shocked). I’ve gone with the Samsung A9+ with 8GB RAM. It seemed to be the best on the market at a low price. ~£239
The price is important, because if I wanted a good tablet, I’d use my iPad. But my iPad cost 2k, and my MacBook cost even more. If I wanted a cheap iPad, I’d just buy and iPad, which start at 349.
I wanted something for travelling that I could watch TV on and not worry about if it got stolen or damaged. No ‘personal’ use as such. But also be able to do the things my iOS devices can’t. The more hacky, maker, tinkerer things that I shouldn’t be doing on my secure devices.

2024-09-03 07:00:35

- reply

Now, Android peeps. I need some advice on clearing out crap like services and telemetry and all the Samsung bloat.
Are there tools I can sideload for this? Or any good resources?
Input welcome! It’s a bit of an alien world for me because Android just isn’t deployed in enterprise circles for obvious reasons. But I’m happy to learn!

2024-08-30 07:44:54

It’s Friday! Turn that Eurobeat up and give a few less fucks, commit all changes and push to prod, and set that Out of Office.
Where we’re going we don’t need testing.
#RadioZeroTrust
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/049/847/370/677/654/original/d1b7f4dda5892706.mp4

2024-08-29 13:40:16

If 40-60% of all DNS queries are unnecessary or used for harvesting data, and 98% of emails are unsolicited, marketing, or spam, and there’s 80000 new malicious websites every week, and the average number of requests per page is around 150, up to a size of 100MB for fonts alone, with cookie data shared with up to 1500 ‘partners’, not to mention how much resource is wasted server side with ‘AI’… surely there’s an argument on energy savings alone for greater controls over these things?
I have a 10Gbps pipe direct to less than a metre away from me, I have a PC with 15GB/s disk bandwidth, 24 cores, and 256GB RAM. It is RAPID. But if you have a jolly on the general internet everything turns to sludge.
I have no idea how the internet has actually gotten slower since the T1 days. Edit… well I know, as per above.
What I don’t know is how we let it happen.

2024-08-29 07:02:36

Before we get to anything substantive or indicative of my quality of work, like, subscribe, hit the bell icon, and follow this affiliate link.

2024-08-27 22:15:38

New tech idea. 3.5 inch haptic sata ‘drive’ to make mechanical drive sounds, clicks, and drones of varying types.
All configurable.
2.5 inch and M.2 sizes for laptops and Pi projects.

2024-08-24 13:48:26

There’s been a general decline in the quality of accounts on mastodon.social over the last few months. I have my alt over there and as it follows fewer accounts I get far more spam, disinformation, abuse, right wing spew, porn, and other nonsense. It’s a lot like vanilla X accounts.
But there’s been a large uptick in those sorts of accounts/posts in the last week.
If you create a new account over there, you’ll see what I mean.
Now some of this might be the admins fault on the moderation front, but I do feel like they’re being targeted as they’re the largest instance. Possibly a concerted effort?

2024-08-23 11:14:07

I’ve reached the age I get a bit excited about a cup of tea.

2024-08-22 08:20:18

A really important initiative if you’re an EU citizen and want to improve consumer rights for digital products, and stop your purchases being taken from you or disabled:
https://eci.ec.europa.eu/045/public/#/screen/home
I don’t often ask that you boost things, but please do.
#Videogames #MediaPreservation #Gaming #EU #Europe #consumerrights #gamescom2024 #gamescom

2023-10-10 09:20:32

My cat is great at catching spiders. There are however a few caveats:
1. Spiders must be sufficiently enormous to be fun. Somewhere between “Oh lawd he coming” and Shelob.
2. Spider catching only happens at night, and only in the bedroom.
3. Cat will make a few chirping noises to alert us that a spider is being hunted.
4. All spiders must be delivered as gifts onto the chest or face of one of us.
5. Note I only said great at ‘catching’. Delivered spiders are very much alive and very fucking irate about the current state of affairs.