Notices by serious business :donor: :heart_cyber: (ceresbzns@infosec.exchange)

@silverpill 4.5 TB! $150/mo+ in hosting costs!

even if it was possible to host the entire stack, no one is going to pay $2k a year just to host their own microblog, wtf

Degoogle update:

* I've started using Kagi as a paid alternative to DuckDuckGo / SearXNG and I'm really quite pleased.

Feels strange to pay for search but the results are consistently high quality.

Happy to support a business model built around providing a service to paying users over one that surveils me to provide a service to advertisers.

* Transition to Proton for email is nearly complete. Here's how I did it:

0) create proton account and poke around
1) aggressively unsubscribe from any emails I didn't actually care about (as they come in)
2) make a list of the top accounts that were most important to migrate (eg bank, newsletters I actually read, etc)
3) work the list
4) set up folder/tag filters for proton (it doesn't have a magic inbox auto-sort for important emails feature like gmail, so I had to put in some logic myself to make sure important stuff doesn't get buried under my like 300 newsletter subscriptions)
5) occasionally check gmail for accounts I missed
6) enjoy

#email #google #degoogle #proton #kagi #search #privacy #duckduckgo

@clarity @kissane any chance it was recorded?

Freezing my credit with the big 3 agencies. (USian)

Experian was creepy but functional.

Equifax worked.

TransUnion is complete fucking clown shoes.

They should all be destroyed.

#credit #surveillance #finance #infosec #usa

a fedi hacker meetup called Rootin' 'n Tootin'

#cybersecurity #infosec #fediverse #shitpost

Hey FOSS fam, I need your expert opinions:

I'd like to stand up a chat server for a small 1-day con that I'm organizing, but I don't want to use Slack or Discord or any of the other freemium corpo services. What can I run instead?

Must haves:
* FOSS (obv)
* can run on a relatively inexpensive VPS (e.g., Hetzner or Digital Ocean)
* reasonably performant (up to 50 concurrent users)
* web GUI for users who don't want to download an app
* chat room
* allows basic moderation functionality (eg ban)
* reasonably secure

Nice to haves:
* end to end encryption
* ease of setup / administration
* invite-only channels (in addition to public room)
* direct messaging

From my research so far, my understanding is that I can basically choose between #matrix or #xmpp. (Maybe #IRC ??)

Of the two, XMPP looks like it's more performant (I see constantly see people complain about Matrix being slow) at the expense of encryption by default. Still, I'm not sure which implementation of XMPP server would suit our needs best.

What do you think? What would you suggest?

Boosts welcome!

#foss #chat #privacy #infosec #linux #debian #ubuntu #bsides #cybersecurity #selfhost

@silverpill
This is extremely cool.

Is there much activity on the onion side of the fediverse?

Hey folx, realized I still owe an #introduction. So (mario voice) here we go:

My handle means "serious business." I'm always hopeful. I'm rarely optimistic.

What I'm working on:
* Studying #cybersecurity as someone without a computer science background
* Self-hosting more of the tools I use, particularly as a means of -
* Opting out of surveillance capitalism tech platforms (you know the ones)

I'm a big fan of these things and you can expect me to toot about them:
* solidarity, mutual aid, organized labor, cooperative economics, and community defense
* #privacy and privacy self-defense tools like Signal, Tor, Cwtch, and GPG / PGP
* #FOSS, especially the more accessible #linux distros like Debian
* #solarpunk and #lunarpunk as incongruent and complementary ideals

Here's some things that are a meaningful part of my life, that you probably won't see me toot about: parenting, weightlifting, software product management, firearms, PC gaming, LARP, business, finance, positive nihilism, MApoli, CambMA

Here's what I think I can offer you:
* I've worked for all different kinds of organizations, ranging from big tech, little tech, governments, to DAOs
* for better or for worse, I know a lot about #cryptocurrency, particularly #ethereum, #bitcoin, and #monero
* I've been a software product manager for a while now, which means I help teams ship software that does what users need - mostly through prioritization, facilitation, and communication
If there's anything in my background that would be useful to you, please reach out. I'm happy to share.

One last thing - a message to fascists, TERFs, dominionists, abusers, and every other variety of petty authoritarian desperate for an excuse to control others: fuck you, y'all gonna lose

@joshbressers

What happens in 2038?