Notices by The Psychotic Network Ferret (nuintari@infosec.exchange)

@silverwizard If 1/100th of Infosec was actually effective, ransomware would be a solved problem.

I swear to god, actual security is blocked by most infosec professionals.

Dealing with infosec costs most companies more than they ever stand to lose in an actual incident.

Outliers exist, but even then, I firmly believe that deploying sanity in lieu of more IDS/IPS/Wankerware would pay mad dividends.

In short: Stop wasting your money on security wank, and hire two extra peeps who can handle basic patching and attention to detail.

I've always considered myself a hacker.

I've attended a literal fuckton of hacker conventions. Hell, I've helped run a few. Even spoke at a few.

A small problem I noticed recently.

Infosec people think they are the only hackers.

I noticed this first when, at a hacker con, explaining what I do to some person, I was met with, "Wait, you are in Ops? Why are you at a hacker con?"

BECAUSE HACKER HAS NEVER MEANT INFOSEC WORKER! BECAUSE I AM LITERALLY OLDER THAN THE HAIR ON YOUR BALLS! BECAUSE I WAS TAKING APART COMPUTERS YOU'VE ONLY READ ABOUT WHILE YOUR POTENTUALLY SMARTER BROTHER RAN DOWN YOUR MOTHER'S ASSCRACK!

Not even recently, I noticed this in the late 2000s, and it became an ever more constant refrain over the years.

Hacker used to mean anyone who tinkered. Anyone who broke stuff, fixed stuff, or just found a whack ass way to use stuff. Hackers sought understanding above all else. This often meant we were into security, but not always.

We used to be a community of builders, shapers, makers, and dreamers.

The "infosec" community? It's a bunch of pretentious, self righteous, asshats who believe their word exists above all others. It's a "community" of assholes who are desparate to prove they are the best.

I'm fucking tired of it. I've been running carrier grade networks for 25 years now, and I am convinced that the best information security comes from basic IT competence, and has almost nothing to do with any infosec oriented initiative.

@quinn @mattblaze Mob hits wipe the gun down and drop it on the scene.

They know the truth, having the murder weapon with no other evidence gives the police very little, dropping the weapon at the scene gives them no direction in which to canvas.

If you move the weapon, it increases the likelihood that can place you between the murder scene when they follow up and canvas, and where the weapon was dropped. Cameras are everywhere, as are people who will talk.

And of course, holding the weapon is the worst.

Not that I've thought about this a lot.

No, wait, that isn't it.

No one fucking knows HOW to recognize quality work anymore, let alone how to actually do it.

I swear to fucking god, no one gives a shit about doing quality work anymore.

@mekkaokereke @Lightfighter @SwiftOnSecurity There is a field of soybeans across from my house, it has some random stalks of corn that seeded from last year's harvest. We have corn in our not corn crops.

@jima @silverwizard Yeah, I guess I need to rework the rule, but 2014 was basically your last fracking chance to take it seriously before you would be forced into mad dash catch up mode.

@silverwizard And now everyone believes it's all fine, because everything "still works."

But it all still works because self hosting at your home is quickly becoming a thing of the past, CGNAT is growing.

@silverwizard Well, ARIN basically ran out of IPv4s in 2015, so 2014 was your last year to take it seriously before criticality was achieved.

nuintari's rules of networking 0x47:

It is 2024, you needed to be thinking about IPv6 ten years ago. If you still don't want to think about IPv6, it is time for a career change.

When your brand new job is giving you nausea, vertigo, diarrhea, and night terrors, it isn't something you can just fix.

I walked away this morning. For my own health, both mental and physical. My boss tried to convince me to stay, but understood that it was a terrible fit in the end.

Feeling lousy, and defeated, but the walls are no longer closing in around me. I am starting to feel a little better.

I'm going to take some time for myself. I'm not against something falling in my lap, but I won't be actively looking for a new job for a few weeks.

nuintari's rules of networking 0x09:

Cloud managed network products are a fundamentally terrible idea.

@silverwizard @jima also yes

I recently learned that #OpenBSD cron lets you specify a random time interval like this:

15~45 12 * * * /foo/bar/baz

Execute /foo/bar/baz at sometime between 12:15 and 12:45.

I cannot be alone when I say that #FreeBSD needs this feature.

God, I haven't picked up C in so long, can I just pay someone to do this?

@silverwizard I'm still on the clock....

hey MSP.... if you want me to fix shit for you, you can't revoke my ITGlue credentials until my last day.

nuintari's rules of networking 0x07:

DNS is not hard. If you are always blaming DNS, the problem is probably you, your design, and/or your hostmaster.

@undead

/me smacks forehead

of course! how I could forget this one? The command I literally use constantly in my $dayJorb?

@albonycal @undead telnet didn't support tunneling.

SSH tunneling is my superpower, and absolutely essential to my work.

Comparing telnet to SSH is like comparing chess to tic tac toe.

yes, they are both games.

@silverwizard ohhhhhh, I get what you are saying now.