Rafael Ortiz @Senicar@infosec.exchange
- Keybase
- senicar
I like making games, djent, and impractical hardware attacks. My thoughts belong to the marketing team that inspired them.
Joined Apr 2017
It is proven! I am senicar on Keybase: https://keybase.io/senicar/sigchain#cd03394a47575e8174e171354230417a24d07679a4c0b76decc1f543ab960ebf0f
This video does an okay job explaining the state of #NetNeutrality in 2017.
Rafael Ortiz
boosted
The RNC Files: Inside the Largest US Voter Data Leak
If anyone wants to install Ubuntu on an old Mac Pro 1,1:
Use the 14.04 mac+amd64 iso for the installation, you can upgrade to 16.04 later and it works fine.
Install from a DVD, not a USB stick.
rEFInd is your friend.
You will probably need to boot from the live DVD and boot-repair.
It won't play nice with an OS X install on a partitioned drive, but a new hard drive or shared drive with windows works fine.
Disconnect the iSight camera before installing or you'll have no sound. No idea why.
My dad gifted my kid sister an old 1,1 Mac Pro. I asked her what she wanted to run on it, since she's used OS X and Win10 and I'm not sure which she prefers.
"Linux!"
So it begins.
Every time I come across a tech support scam at work I'm so tempted to call and see what they try to get me to do.
Maybe if I call it Security Research I can get paid for it too.
If anyone wants to watch Comey's testimony: http://www.bbc.com/news/live/world-us-canada-40193177
BBC had local time as GMT-0500 for a bit at the beginning of the stream, ha.
Rafael Ortiz
boosted
Did encryption drive the van? No. Did encryption sharpen the sword? No. Did encryption stab 48 people? No. So why is crypto UK gov agenda? ~ hackerfantastic
Rafael Ortiz
boosted
There are many privacy-focused search engines to choose from:
https://www.unbubble.eu/info/terms
https://about.qwant.com/legal/privacy/
https://metager.de/en/datenschutz
https://anonymousengine.com/privacy.php
http://oscobo.co.uk/privacy.php
Rafael Ortiz
boosted
I'm not sure why so many people liked emacs. Pretty sure it started as a practical joke that got way out of hand, and ultimately ended with someone being inspired to create systemd
Rafael Ortiz
boosted
protocol roleplay: HTTP, IRC, SMTP, etc, except both ends -- server and client -- are humans using telnet.
Rafael Ortiz
boosted
How to ruin a date in 4 words
My editor is emacs
Rafael Ortiz
boosted
This website checks if someone has entered an anti-Net Neutrality comment in your name:
Rafael Ortiz
boosted
I'm just going to start appending "fuckyou" every time I'm forced to make a time based password change.
Rafael Ortiz
boosted
This is an example of a revolutionary new document
format called "Plain Text". Some of the features of this format are:
* supported by every editor!
* requires no internet connection!
* editable on any device, from your phone to your TV!
* simple to backup and restore!
* compare documents with "diff"!
* search documents with "grep"!
* can be modified programaticaly using "sed" and "awk"!
* Plain-text supports every version control system out there!
Try plain-text today!
> go to vendor website
> navigate to "solutions" page
> "We drive digital transformation with big data analytics, IoT solutions, machine learning and AI, and distributed cloud technologies."
> Okay, but what do you actually do?
Rafael Ortiz
boosted
There's only so much space in your brain - save it for the "useful" information and reference the rest.
Never memorize anything you can look up in under 2 minutes. This is why I hated history class (idea > date/names) and why I love documentation.
Don't need employer specific, special snowflake crap filling my brain.
Rafael Ortiz
boosted
Someone needs to create an SMTP for the 21st century. Something that forces servers to:
- Refuse to relay a message without end-to-end encryption and a digital signature
- Require unknown senders to solve a cryptographic hash problem per message
- Require a TLS certificate from a CA on both sides of any connection
- Use 8-bit attachments (no Base64)
- Drop HTML in favor of Markdown
- Not support external embedding
Telefonica released a script to restore files WannaCry hasn't finished encrypting yet. It finds the files that have had their names changed but aren't encrypted, reads their headers, and restores the filename. Probably not super useful at this point, but still, neat. Combining this with the tool that pulls the key from memory could save a lot of work.
Not that patching appropriately wouldn't have saved more...
#wannacry #infosec https://github.com/ElevenPaths/Telefonica-WannaCry-FileRestorer
- Keybase
- senicar
I like making games, djent, and impractical hardware attacks. My thoughts belong to the marketing team that inspired them.
Joined Apr 2017
