Doing a million little things is as exhausting as one big thing, but somehow less rewarding.

Cybersecurity practitioners often underestimate the importance of compatibility and usability.

Any tips out there for a basic cloud smtp server for an owncloud instance? We don’t have team email or anything. Mail gun? AWS? Something else? Just user sign up and notification emails, but we don’t want them to bounce due to a sketchy spam server. (Doesn’t have to be free)

RT The HOPE Matrix will be continuing! It will become hosted by the Matrix mother ship, rather than self-hosted by 2600, for the after-HOPE discussions.

This will allow some continuity of the great community that was HOPE 2020!

Keep hearing mastodon notification sounds in the #HOPE talk and it took me like three times to grok that it's coming from the video^^

Computers can't solve fake news but it can help humans work on the problem. A new article by my colleagues Bill Adair and Mark Stencel

"voting software should always be fre-"

Voting software should not exist. Software should not be involved in casting ballots. Period. No such thing should exist. It's not possible to do it right in theory, it sure as shit will never happen in practice.

Paper. Ballots. Paper. Ballots. Paper. Ballots. If you don't understand and insist on using anything electronic, it better fucking have a paper backup copy that cannot be disabled.

Electronic voting is stupid, man. It's universally stupid.

Just in case you are as confused as I am about all of the various Amazon Web Services

Amazon Web Services

To everyone following this the best option I found (at first, wait a second) was GNU Mailman. It had everything you’d want but in typical GNU fashion was basically impossible to get set up on a server in less than the long weekend.

So after sinking three days into poorly documented docker-compose files I just ended up going with Took 10 minutes, the free tier is great and it allows private boards.

Show thread

Developer Pro Tip:

When you copy code from stackoverflow, make sure it's from the answer, not the question.

Anyone have any good mailing list alternatives to Google Groups? Looking to start a new collaboration but I don’t want to require a Google account. Preferably that I don’t have to host myself (but it can be arranged if necessary).


2 weeks into our awareness month campaign, and it’s going swimmingly!! Here’s all of our infographics thus far, to help you get yourself and your friends and lovers secure!!


Deployed 82nd Airborne unit told to use these encrypted messaging apps on government cell phones

“Unfortunately, those apps are more secure than texting in the clear, which is more or less the alternative. Granted, if a hostile party has access to the handset, that encryption isn’t particularly helpful.”

Anyone happen to be unloading a ticket to Shmoocon in DC at the end of the month? Turns out I’ll be in town and would love to join in.

Remember, anyone at who's having problems with being overwhelemed, you can always dip out and see "Cats" to remind you it can always get much, much weirder.

Turns out opting out of @JFKairport
's new super creepy (and definitely not secure face scanning boarding means you board even earlier because the counter doesn't want to deal. (Also, it takes exactly the same amount of time to scan your pass as your face)

Show more
Infosec Exchange

A Mastodon instance for info/cyber security-minded people.