biffbiffbiff @biffbiffbiff@infosec.exchange

Best ticket notes I've ever entered.
"Found that a switch located behind the server had been accidentally been unplugged during the discarding of an empty pizza box. Plugged switch back in and moved plug to ups which is less prone to pizza box related downtime."

Worth noting this was only vulnerable if you allowed for user's to change their own password which is off by default.

Patch your webmin http://webmin.com/security.html

Andddddddd I'm uninstalling WhatsApp.. https://www.schneier.com/blog/archives/2019/08/facebook_plans_.html

Fun fact. Friend of a friend owns a bar. Scott Stapp played a show last week. Manager called at last minute and said he required a "full sized wooden cross" in his dressing room and none of me was surprised.

Listen if we're going to elect people in USA based on meme potential...what is a better matchup than Trump vs Marianne Williamson?

I write a lot of documentation/wikis at work. Its fun, but also setting me up for future rage when someone asks me something that I know there is a wiki for... double edge sword.

TLDR;
Use 2fa and you're fine.
https://nakedsecurity.sophos.com/2019/07/30/hackers-target-telegram-accounts-through-voicemail-backdoor/

From birdsite. This is most entertaining thing Papa Roach has done since like 2001-2002

I wrote about this briefly. Require strong password of good length. Only reset if you think is breached. Use unique random passwords everywhere. Call your mom. Brush your teeth.
https://adventuresinit.net/books/guides/page/recurring-password-changes-hurt-security

👏 requiring 👏 users 👏 to 👏 change 👏 passwords 👏 all 👏 the 👏time 👏 hurts 👏 security 👏 please 👏stop 👏 it.

me_irl

When client gets ransomware via open rdp when you have 2x 2 month old tickets where you notified them that is was bad and they needed to let you turn it off.

Followup to toot earlier in the week, I've posted my baseline security audit we do for new client onboardings. Huge thanks to @troyhunt and @MGrafnetter for making this possible and making my job easier.

https://adventuresinit.net/books/guides/page/msp-baseline-security-auditing-for-onboarding-new-clients

COMING OUT OF MY CAGE AND I'VE BEEN DOING JUST FINE

Heigh Ho Heigh Ho
its off to code I go
to fix your sec and find your holes
Heigh Ho

I haven't posted anything on my site in a while and figured it was time. Quick rundown of how to deploy your own VPN service for personal or family/friends use. ENJOY!

https://adventuresinit.net/books/guides/page/roll-your-own-open-vpn-server