Notices by Ron Bowes (iagox86@infosec.exchange)

Hey friendiverse! My husband is currently looking for work - he's very good at Linux, cloud, AWS, and networking stuff. He's got an extensive home lab and manages all of our services. Seattle or remote.

But he's bad at networking so I'm trying to leverage my network on his behalf.

Cheers! #getfedihired

@Viss @hrbrmstr

I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation

Also

The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for.

And

Misunderstanding and misuse of AI in the workplace is rampant. In many of the rooms I now find myself in, expertise has been asked to look the other way: to deliver faster, produce more, integrate the tools more deeply, get out of the way of the colleagues who are “getting things done”

These are all painfully familiar to read these days

@hrbrmstr Too real

I love that "so what AI bullshit is your company trying to do?" is increasingly becoming the first conversation topic when hanging out with other tech friends

@mjg59 I wonder how hard it'd be to build a device that detected their mac addresses and spams them, so as you walk down the street the cameras turn off?

They probably buffer anyways, but it feels very heist movie at least!

Visiting family in Canada, realizing the US has become even more of a laughing stock / enemy than I realized. So much anti-US sentiment here. It's nuts how much goodwill is just simply gone.

@malwaretech @charlvdwalt SSL is super important and all, but that statement is awfully FUD-y. The odds of somebody actually doing that are vanishingly small, but you make it sound like their site can be replaced by anyone any time

There's nothing more cringe than posting a bunch of vague crap before an embargo is lifted. Please, just don't.

Either release the info or shut up until you can talk details. Posting, hyping, dropping hints, stuff like that helps nobody.

#cybersecurity #vulnerability

@ryanc 384 bits, hahaha

@ryanc A corollary is, I dislike it when libraries remove that kind of functionality because, as a security researcher, sometimes I need to test with a 512 bit key.

But yes, lock it behind whatever opt-in you want!

@ryanc Thank you! Every time a security awareness training class talks about how to choose a secure and memorable password, I die a little. It's missing the point. Humans can't remember more than like 3-4 passwords, so we shouldn't. Teach users how to use a password manager!!

@georgetakei The Seattle Gaymers Discord has been having fun with this (credit to Mogis for this one)

@Archivist @ct_bergstrom @liztai In Washington, they mail you a ballot, you vote, sign it, mail back, and they verify your signature

@thomasfuchs even a roast ends with "in conclusion".. love AI!

If you're posting #infosec #research #cve stuff, it'd be REALLY helpful to enable search!

https://mstdn.social/@feditips/111104292329970824