Jerry Bell @jerry@infosec.exchange

https://www.zdnet.com/article/you-have-around-20-minutes-to-contain-a-russian-apt-attack/

Apple sued because two-factor authentication... oh, I give up.

https://www.grahamcluley.com/apple-sued-two-factor-authentication/

Well, it finally happened to me: My very own creepy Facebook moment.

But I don't even use Facebook.

https://www.brainonfire.net/blog/2019/02/17/my-own-creepy-facebook-surveillance-moment/

TL;DR: Facebook account I opened 8.5 years ago and never used receives "recommendation", out of the blue, to check out a small store I only just learned existed and started patronizing.

(That account: No phone number, no friends, no profile info, sort-of-fake name, dedicated email address. Me: No smartphone, didn't pay by credit card.)

Episode 50 – Tabletop D&D with Tim De Block, Ed Rojas, Daniel Ebbutt, and Kyle Andrus

It's that time again!  Yes, another Tabletop D&D episode is upon us!  This time I asked Timothy de Block from the Exploring Information Security podcast to join me, along with a few interesting characters.  Let's just say this particular episode is not for the faint of heart, and w

https://purplesquadsec.com/podcast/episode-50-tabletop-dd-with-tim-de-block-ed-rojas-daniel-ebbutt-and-kyle-andrus/

InfoSec Guy, looking for Security Champs to connect :)

runc container breakout PoC

https://github.com/feexd/pocs/blob/master/CVE-2019-5736/exploit.c

(via Frank Denis on birdsite)

Calling all #Fediverse admins of instances in the #EU. The #CopyrightDirective is coming, we need to show the MEPs how massively the EU Internets will be affected.

We are preparing a list of all EU-based #Pleroma, #Mastodon, #GNUSocial, #Peertube, #Funkwhale, and any other instances.

Please *contact me*. All I need is the domain name, which EU Member State it's located in, and the rough topic of the instance. Approximate user count welcome, but not necessary.

Please help. This is important.

It does not matter if your instance is small. It does not matter if your instance is not run for profit.

You *will* be affected by the #CopyrightDirective.

Your instance being on this list will help us make that point.

#Fediverse

So I was listening to Defensive Security Podcast today, and they were talking about the problem of Enterprise wanting to MitM traffic, which can be problematic sometimes.

Isn't the root cause that end-users have access to the corporate network in the first place. Shouldn't users be outside, and always assumed to be compromised?

Or let users access the Internet via secured VM's (a bit like what Qubes does).

Speaking which, I didn't realise that infosec.exchange was managed by @jerry

Brief look at #logs - SNARE, BSD, LEEF https://medium.com/@hannahsuarez/brief-look-at-logs-snare-vs-bsd-vs-leef-9bc9ce7e2672