Drahflow @drahflow@infosec.exchange

"Alten" LCD-Fernseher via Ebay-Kleinanzeigen abgeholt, zum Frickeln. "Wollen Sie auch die Schaltpläne?" o_O

Stellt sich raus, diesem Fernseher lagen wohl im Original italienische Schaltpläne für alle Platinen bei. Es ist mir ein Fest. \o/

I came for the security info, I stayed for the lulz:
https://media.defense.gov/2021/Jul/01/2002753896/-1/-1/1/CSA_GRU_GLOBAL_BRUTE_FORCE_CAMPAIGN_UOO158036-21.PDF

"The russians have a k8s cluster which stuffs creds. They use WinRAR to compress the files they steal." (but with many more words and a lot of official logos)

Today the [ builtin broke in one specific script.

Playing: Apocalyptica, House of Chains

Youtube A"I": Here is a playlist suggestion for "Deep House".

As the de-facto CISO of our small company, I have today received a note that CISA has published a list of "bad practices" to avoid when running critical infrastructure (or other things): https://www.cisa.gov/BadPractices

1. Don't run terribly outdated stuff
2. Change default passwords

"This list is focused and does not include every possible inadvisable cybersecurity practice."

I just realized I used a cat to fix my git command \o/

~/project % git co feature_new-ui
error: pathspec 'feature_new-ui' did not match any file(s) known to git
~/project % ^_^-
Switched to branch 'feature-new-ui'

I'm currently witness to a software design process about which "bazar" would add entirely wrong connotations of money being made and resources being semi-efficiently allocated.

Ahahaha. After ~20 years using a soldering iron, I finally took the time to (remove all the weird looking stuff from the tip and apply flux-solder)^n until the tip was all shiny again. Suddenly, the temperature settings match what the solder maker claims should work and it's actually easy to melt. m(

So, to make the security questionaire happy, I subscribed to various security mailing lists a few days ago.

To summarize: Be afraid, be very afraid! (One spectre bypass in linux, one RCE in Apache.)

rsyslogd has taken 95.7% of the RAM. And that is 60GB. WTF?

Why does std::ranges::set_difference_result not define a (ideally useful) .begin() and .end(), to allow

for(auto &e: set_difference(A, B, buffer))

?