Lesault @Lesault@infosec.exchange

Germany's new government put in on paper: Everyone has a right to encryption! Now the German government has asked the EU Commission difficult questions on the planned EU surveillance law. Will Germany fight for our right to privacy?
https://tutanota.com/blog/posts/will-germany-fight-for-privacy

Please come join my team!

I have a fully funded Research Associate position available, for 30 months at the University of Glasgow, UK, pay scale £36,382 - £40,927.

Come work with me (https://www.gla.ac.uk/schools/computing/staff/wimvanderbauwhede/) and Jose Cano Reyes (https://www.gla.ac.uk/schools/computing/staff/josecanoreyes/) on Morello-HAT, a project to develop high-level APIs and tooling for #Morello (https://www.arm.com/blogs/blueprint/morello), Arm's novel #CHERI (https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/)-based hardware capability platform which aims to revolutionise security through a novel hardware architecture.

The aim of the Morello-Hat project is to develop hardware capability APIs for use in Rust, Go and Dart so that developers can fully leverage the potential of hardware capabilities to secure their apps.

This position is full time and fixed term to 31st December 2024.

https://www.jobs.ac.uk/job/CQP935/research-associate

macOS screenshot tricks to impress your co-workers

https://sal.dev/macos/macos-screenshotting-tips-and-tricks/

Discussions: https://discu.eu/q/https://sal.dev/macos/macos-screenshotting-tips-and-tricks/

Useful utilities and toys over DNS https://dns.toys | https://lobste.rs/s/baxd5m #networking #web

Leaks of the Conti group’s comms & data indicates they’re interested in firmware-based attacks, which is pretty damn frightening https://thehackernews.com/2022/06/conti-leaks-reveal-ransomware-gangs.html?m=1

Pushed most of my notes into Obsidian. It makes the fewest odd assumptions about Markdown format and file organization. Easier to push into a fancier format later.

Meanwhile, the mobile client has a cool idle game where you watch the graph catch up with sync.

I work at a ccTLD (.IS), and lately we are seeing a *lot* of new accounts immediately registering multiple domains that all had been registered in the past. I suspect we're not the only ccTLD that sees this.

We know of at least two instances of this being used to take over social media accounts that had e-mails in expired domains set as backup e-mail addresses.

This seems to be organized and well-resourced.

Please double-check you don't use e-mails in any expired domains anywhere.

#InfoSec

@RadicalEdward I'm already weird. I only larp as normal.

How to Store an SSH Key on a Yubikey - Xe: https://xeiaso.net/blog/yubikey-ssh-key-storage

One single type of payment terminal (the Verifone H5000), a rather old platform, officially announced End of Life 2018 with some sort of support until 2023, brought down big parts of card payment all over Germany as one of the embedded certificates expired unnoticed on Tuesday.

Not here for a long time, just here for a good time. But also a long time, that’d be good too. I like it here

Centuries before we had American Sign Language (#ASL), Native "Hand Talk" was thriving across North America. Plains Indian Sign Language (#PISL) was used so widely across the Great Plains that it became a universal language for both deaf and hearing people to communicate between tribes. At one point, tens of thousands of indigenous people used PISL for trade, hunting, conflict, storytelling and rituals. It formed the basis for ASL and has largely been lost to history. https://youtu.be/s1-StAlw3aE

Dentist: "Do you floss daily?"
Me: "Do you backup your data daily?"

Hey #Fosstodon, does anyone here know of a beginning developer, in need, that could use a #Linux laptop gratis? I have a Starlabs Laptop IV that I don't use. Please boost for visibility.

Hey nerds is it possible to follow a blogs rss so it shows up on your mastodon feed (including ios apps like toot and metatext)?