krash @Krash@infosec.exchange

"We simply have too much critical internet infrastructure maintained by a handful of people in their spare time. And those few people are often not able or incentivized to evaluate what they're creating from a security standpoint.

(...) It's our fault because we know how bad the situation is and we just YOLO through life as if we didn't. The result is that we get to learn about internet-stopping vulnerabilities from the Minecraft community."

I like this quote from Daniel Miessler re. log4shell:

"What's so remarkable about this vulnerability (...) is the root cause at the developer incentives level. Like Heartbleed—the project had very few eyes on it, and all those eyes were volunteers. (...) We should be thinking about is how many other projects are out there that have similar characteristics:
1.The project is maintained by very few people in their spare time
2.If the project had a major issue it would disrupt the entire internet

@stemid I've been wanting to play it, specially since it's been out on stadia. My potato machine can only run ASCII roguelikes natively 🥔

@itsakerhetspodden Bra avsnitt! Angående Kaseya attacken, det sägs (varning för lösa källor...) att dekrypteringsnyckeln gavs ut av USAs underrättelsetjänst för att återställa ransomware attacken. Men, det är sånt man aldrig kan få veta säkert...

@joacim And the public transport system survived... This time.

Question to all cybersec professionals out there: what certificate does hold more weight in your field: ones from ISC(2) or those from CompTIA?

@mc@mastodon.sdf.org @joacim At times like these, we need the likes of Amelia Andersdotter and the pirate party...

Very intresting and exciting read on how bitlocker keys can be sniffed out from TPM, and what that could mean for a corporate that has a laptop stolen:

https://dolosgroup.io/blog/2021/7/9/from-stolen-laptop-to-inside-the-company-network

How I feel about the current sunny conditions right now.

My #pwnagotchi is running on solar power. Nothing can stop it now#&!

@seb interesting! So it's a kind of a sexy RSS reader that mastodon instances can connect to? Look intriguing!

@seb what's a Lemmy instance? A name for a certain version?

@itsakerhetspodden @joacim @trevligmjukvara

Stalking mode: ON! 😊

@itsakerhetspodden ingen stress! Förstår också om ni väljer bort Mastodon. Är ju en ganska liten "nischad" skara här 😊

@itsakerhetspodden ska ni migrera till en annan instans?

@dasyatidprime Awesome! My need is mostly to make sure that I understand some basic concepts for rather simple programs. As for medium and timing, maybe once a week over IMs or email. I'm flexible 😀

@isagalaev it is indeed, never thought I'd get people actually intrested in helping out ☺

I know this is a long shot, but I'm learning #python and looking for guidance from someone to help me get a grip on the basics for my home projects during my parental leave. Intrested? Please let me know in that case and lets get to know eachother!

The infosec handbook has left the fediverse:
https://infosec-handbook.eu/news/2020-12-05-leaving-the-fediverse/

I joined the fediverse thanks to them. Understandable decision, but still - what a loss... 💔