caspa @caspa@infosec.exchange

#MastoAdmins If you're using Nginx and haven't updated your config in a few weeks, you should check out the latest recommended config: https://github.com/tootsuite/documentation/blob/master/Running-Mastodon/Production-guide.md#nginx Lots of new stuff in there!

- Immutable caching (faster reloads)
- HTTP2 (faster everything)
- Default CSP (scores A+ on Mozilla Observatory)
- Gzip compression
- Better SSL settings
- Probably some more stuff I forgot!

If abusing Google search operators is sometimes called "dorking" can abusing Twitter's sometimes be called "twerking" ? 🤔

We're looking for a new Comms Director! 😀 Know anyone who is qualified and wants to help tell the world about Tor? 🤓 Please help us spread the word. 👍

https://www.torproject.org/about/jobs-comm-director.html.en

Dell issues firmware updates for CVE-2017-5689, the Intel AMT #vulnerability. Go push those patches! #infosec 🔐

https://www.theregister.co.uk/2017/05/07/dell_patches_amtvulnerable_systems https://mastodon.jamesmwright.com/media/93hkEfBMRCVdY3hwcQ0

For those of you interested in sending toots from command line. https://github.com/glynnbird/toot

@sten0_SE there was yet another issue why this particular type of phishing technique was so effective: users are primed (especially Android users) to automatically grant any permission to any app regardless of whatever it might request. It's basically as automatic as clicking through an EULA.

#OSINT

Facebook phone number enumeration script 👌

https://github.com/averagesecurityguy/pocs/blob/master/fb_phone_enum.py

@aemarc He was hacking into the mainframe.

"It's not safe to run an internet facing Windows box right now," a hacker who used to work in the US Department of Defense said to Motherboard.

I'm thinking this could be a good time to introduce your friends to #Linux.

I wrote a bit on why over on Reddit: https://www.reddit.com/r/linux/comments/65gnkm/this_could_be_a_good_time_to_talk_to_your_friends/

#ShadowBrokers

Even though #Microsoft has patched most of the #Shadowbrokers exploits, it is going to be years until the patches get pushed to enterprise systems. This is especially true for the older 2003 Servers still running.

Businesses are reluctant to #patch old systems for fear of breaking them or the hosted software.

"If you're a hacker, hack back." : Excellent read from flexidie about their FlexiSpy/Vervata hack : https://pastebin.com/raw/Y1yf8kq0

I wish motivation came as nicely packaged as caffeine

Mastodon
where you will learn French, Japanese and at least three programming languages through osmosis

@tallpanicgrass

99 bugs in the code, 99 bugs in the code! Take one down, patch it out, 126 bugs in the code!
- Ancient Developer Chant

There is an underground #infosec battle going on between tweeting and tooting
https://mastodon.social/media/sIgoC0PF29v_MG9b2DY

Are you a fan of the Red Team Field Manual (RTFM)? Check out the new Blue Team Field Manual (http://a.co/0nEjco2). All that stuff you normally have to go look up? Yeah, it's in there.

Where my tooters at?

n00b question, do I need to follow people or can I just use the federated timeline to show me everyone here? what makes sense?