Scott Mortimer @ScottMortimer@infosec.exchange

OWASP Cheat Sheet Series

https://cheatsheetseries.owasp.org/

~Open Source Security Tool of the Day~

#osstotd

Unfurl takes a URL and expands ("unfurls") it into a directed graph, extracting every bit of information from the URL and exposing the obscured.

https://github.com/obsidianforensics/unfurl

Keybase now allows users to block spammers and unwanted followers.

However, they don't just stop there.

"As a bonus, their profile pic will get covered in Poo."

Now THAT'S added value, folks.

https://keybase.io/blog/dealing-with-spam

Nothing more annoying than smarmy iPhone fanboyz slagging on Android. Apple needs to market iSmarm (tm) and sell it in their overpriced boutiques.

Is anyone still using keybase to communicate? I am trying to find out if it is still worth pursuing as a comms platform.

Open Reference Architecture for Security and Privacy

https://security-and-privacy-reference-architecture.readthedocs.io/en/latest/

Fox News Is Now a Threat to National Security

The network’s furthering of lies from foreign adversaries and flagrant disregard for the truth have gotten downright dangerous.

https://www.wired.com/story/fox-news-is-now-a-threat-to-national-security/

Lately I am having a lot of crashes with #fedilab. Anyone having similar problems?

Don't use super cheap VPS providers.

https://www.zdnet.com/article/20-vps-providers-to-shut-down-on-monday-giving-customers-two-days-to-save-their-data/

That being said, having trusted endpoints is a huge area of modern IT that is poorly dealt with at the moment. It's just a whole lot more than this buzz-wordy, vendor-driven article even begins to deal with.

Marketing propaganda vs. Reality.

Even if you secure a communication channel by trusting users and devices and roles, it's still a...

Virtual. Private. Network.

I hate semantic shenanigans

https://www.networkworld.com/article/3487720/the-vpn-is-dying-long-live-zero-trust.html

CrackQ: Efficient password cracking for pentesters and red teamers

CrackQ employs automation to make password cracking a faster and more efficient undertaking for pentesters and red teamers.

https://www.helpnetsecurity.com/2019/12/04/password-cracking-pentesters/

Why is it that the only person I see with a Ring doorbell camera is that sad skinny guy on TV who chases away a couple of actors who look like thieves from some crappy "Home Alone" sequel?

Android Ups the Mobile Security Ante with Default TLS Encryption

More than 90 percent of Android apps running on the latest OS encrypt their traffic by default.

https://threatpost.com/android-mobile-security-tls-encryption/150760/

~Open Source Security Tool of the Day~

#osstotd

nginx_waf - WAF written in lua for NGINX http server

https://github.com/diego-treitos/nginx_waf

The AWS Incident Response Guide

https://d1.awsstatic.com/whitepapers/aws_security_incident_response.pdf?utm_source=Unsupervised+Learning+Subscribers&utm_campaign=e0ab2b9f11-EMAIL_CAMPAIGN_10_6_2019_8_57_COPY_01&utm_medium=email&utm_term=0_49fdb7d723-e0ab2b9f11-495716161&mc_cid=e0ab2b9f11&mc_eid=0e7d497022