Alain O'Dea🇨🇦 @AlainODea@infosec.exchange

Information may want to be free, but coders need to not starve, and not have to work 80 hrs/week, live in a closet in parent's house at age 37.

When we can print pizza out of Universal Constructors for free, ubiquitous self-owning construction mechs build houses and water systems for free, you can get insulin, quadruple bypasses by medbots free, and self-driving cars & self-flying planes freely shuttle you around, then everything can be free. Until then, we need to pay people for their work.

Worse than Equifax: Personal records of 340M people leaked online https://www.hackread.com/worse-than-equifax-personal-data-of-millions-leaked-online/ #infosec

If you know anyone working on an ActivityPub project and they need any advice/feedback/help or want to spread the word, tell them to DM me! I am more than willing to help or spread awareness! #activitypub #fediverse

Kitchen Nightmares but it's about IT infrastructure & security, hosted by some rockstar sysadmin.

"Customer credit cards on the same server as the WordPress blog?! I am shutting this place down. Shut it down. SHUT. IT. DOWN." *trips circuit breaker*

https://twitter.com/marcan42/status/1012435070555074560
(click for full thread, it's hilarious!)

So it looks like Roe v. Wade isn't long for this world.

Friends, I live near a Planned Parenthood in a liberal state and I have a very nice guest bedroom.

If you or someone you know needs help getting an abortion, if they need a place to stay, please talk to me.

A local Scottish LGBT advocacy group has just published a statement I feel is incredibly transphobic (and it's in support of an org that is blatantly, angrily transphobic and has an agenda of getting in the news with anti-trans scare stories).

I've drafted a reply calling them out on this, and I'd like to use my cis queer privilege to give them a bollocking, but I also want to check I'm not stepping out of my lane here. Would any trans* Masto peeps be willing to take a look?

"Deep in your innermost being, you’ve always known you were destined to learn Clojure. Every time you held your keyboard aloft, crying out in anguish over an incomprehensible class hierarchy; every time you lay awake at night, disturbing your loved ones with sobs over a mutation-induced heisenbug; every time a race condition caused you to pull out more of your ever-dwindling hair, some secret part of you has known that there has to be a better way."

Should I take the first step?

an inner conflict: i like tracking technologies, as they use such complicated techniques, and manage data in a really interesting way

but i dislike tracking ideologically. i need the number of a website visitors to know if somebody still needs it, and to get motivation to continue the development. i like data such as country statistics, especially in context of some of my projects. but things like... heatmaps, deep social network sharing tracking, etc just feel wrong

@AlainODea @kaniini There is https://github.com/git-federation/gitpub/ - I think it started after Github/MS news broke. I try to remember to look at it from time to time. Also there are several tickets across various oss Git hosting projects related to this.

Why ActivityPub is the future https://blog.joinmastodon.org/2018/06/why-activitypub-is-the-future/ and How to implement a very basic ActivityPub server https://blog.joinmastodon.org/2018/06/how-to-implement-a-basic-activitypub-server/

I'm trying to learn a bit more haskell by using it for Advent of Code. Would any experienced haskellers please offer critiques of my first bit of code?

https://gitlab.com/datagrok/adventofcode/blob/master/2017/1a.hs

If guaranteed minimum income and universal healthcare were a thing, I think so many of my programmer colleagues would immediately take low-income sabbaticals to write high-quality good-ui users-first free and open source software that it would inspire tedious "how was it possible?!?" medium dot com thinkpieces for years and years

Hardware Messes As An Opportunity
https://infosec.engineering/hardware-messes-as-an-opportunity/

#infosec

Working on adding CSP headers on a website.

We have AddThis and assets being loaded include LinkedIn, Facebook.

So I added these URLs as part of Content-Security-Policy.

Hmm not sure if I need to do this, or if some other rule can be used.

Did you miss the Layer 8: Social Engineering Con?

All Videos:
- So You Wanna Be a Social Engineer?
- Social Engineering Your Way to an Infosec Career
- Social Engineering CTF Winners Panel
- A Proven Methodology for Open-Source Intelligence Gathering and Social Engineering
- Make Vishing Suck Less
- Cultivating a 'Renaissance Approach' for the Social Engineer

#InfoSec #SocEng

https://www.youtube.com/channel/UCynWOUeHAOflEQtJnrZpkNA

Past me didn't document a thing that should have been documented, so present me spent an hour re-figuring everything out and documenting it.

Past me is a jackass. Don't be like past me. Document your things.

The EU seems to be having a “hold my beer” moment in trying to outdo the US in wrecking the internet. As I was reminded many times before, we should not fear because the internet was designed to route around such breakage.

Unverified binaries fetched and executed with Filezilla version, admin reacts defensively https://www.reddit.com/r/sysadmin/comments/8t9dku/unverified_binaries_fetched_and_executed_with/