Notices by Scary Jerry (jerry@infosec.exchange)

We are ready to hand out candy now.

Apollo says “thank you” for all the well wishes.

Captains log: it’s been 4 days since Gabpocalypse. As I look out across the horizon, the burned carcasses of dead memes stretch as far as the eye can see. The smell is terrible. Those unlucky enough to survive have banded into two warring tribes, divided by whether people should block toots they don’t like, it whether instance admins should block other instances based on tolerance for intolerance. In the distance, porn bots can be seen posting nudies like nothing ever happened.

Defensive Security Podcast Episode 236

https://defensivesecurity.org/defensive-security-podcast-episode-236/

Have some pictures of my best friends.

Defensive Security Podcast Episode 232

https://defensivesecurity.org/6611-2/

Merry Christmas, infosec.exchange and the rest of the fediverse. I hope you have a great day!

Has the recent Facebook dumpster fire driven any big crowds to the fediverse?

Defensive Security Podcast Episode 229

https://defensivesecurity.org/defensive-security-podcast-episode-229/

I’ve received a few emails from marketing firms wanting to pay for sponsored toots on infosec.exchange. Obviously, I’m not going to take those offers, but I find it interesting that advertisers are starting to take note of the Fediverse. Fair warning, i guess. #mastoadmins

ok. I've seen enough - I'm going to block the newjack.city instance. If it turns out they are not up to something bad, I'll unblock.

Heard in my house today (post pi-hole): "there is something wrong with google. I can't click on the first entries in the search results"
"you mean the ads?"
"yeah, those"

Almost time to celebrate our country by setting stuff on fire 🔥 🎉🎉🎉

Defensive Security Podcast Episode 221
https://defensivesecurity.org/defensive-security-podcast-episode-221/
#NotPetya
#infosec

Defensive Security Podcast Episode 218
http://defensivesecurity.org/defensive-security-podcast-episode-218/
#OpenSource #wannacry
#infosec

@rysiek @Wolf480pl @Aaron true. Email itself is becoming rapidly less federated. It’s becoming increasingly more painful to run a mail server (I speak from much experience) and it’s all moving to just a few providers (google, MS, etc). Point is, I think we’re moving to that walled garden even with smtp.

@jerry also, isn’t telling people they shouldn’t click on links because it’s too risky not dramatically different than telling people not to send highly sensitive messages via email? Aren’t both an admission of our inability to ensure security? Why is one ok to say and the other heretical?

TIL I’m an infosec nihilist. We go about our days pretending that we can secure our data, yet are unwilling and unable to do what actually needs to be done for that to be so.

Infosec is a bet. I’m betting that I did enough in the right places to be secure, but technology advanced beyond my ability to know whether it really is secure.

https://www.aclu.org/blog/privacy-technology/internet-privacy/encrypted-email-and-security-nihilism

Defensive Security Podcast Episode 216
http://defensivesecurity.org/defensive-security-podcast-episode-216/
#infosec

Defensive Security Podcast Episode 214
http://defensivesecurity.org/defensive-security-podcast-episode-214/
#infosec