Paco Hope @paco@infosec.exchange

I've used Confluence and various wikis for documentation. Lately I'm really enjoying using github markdown with gitlab and running a local gollum server on my laptop. Clicking 'save' commits the page to the local repo with my comment as the commit message. Then when I'm online, I can pull and push. It lets me edit wikis offline, which is a big win in my book.

Am I doing this right? #security

My neighbours have both a ring doorbell and some kind of security/surveillance camera that monitors their entrance/foyer. It makes me not want to go to their house.

Another good blog: (https://derflounder.wordpress.com/2019/05/08/creating-managing-and-using-apple-file-system-snapshots-for-startup-drive-backups/)

Holy crap super useful: I have just discovered that #TimeMachine on #macOS is really broken from High Sierra on. It consumes a crap ton of disk with "local snapshots". You can use 'tmutil thinlocalsnapshots' to free up that space. People online are reporting tens and hundreds of gigs of disk space freed up. (https://apple.stackexchange.com/questions/309143/how-to-thin-your-local-time-machine-snapshots-on-macos-high-sierra)

How crap are my RJ45 crimping skills? Here's speedtest.net with a store-bought cable, and with a paco-made cable. The better results are on the store-bought cable.

I bought an OpenWRT-compatible router and put OpenWRT on it. Anybody have preferences/opinions about OpenWRT versus Tomato versus DD-WRT?

I swear I am not making this up. I just got a error message from an internal application that said "package names are case insensitive and must start with a capital letter."

I'm traveling for work next week to a customer office I've never been to. A guy named Stephen sent me this note about my arrival:

“Check in at reception and ask for Hrvoje or myself”.

I’ll probably be asking for Stephen. 😀

You know what I get from European companies that I NEVER get from American companies? Unsolicited email telling me that, since I haven’t done business with them in a while, they’re going to drop me from their mailing lists unless I ask to remain. #GDPR did a lot of good.

So these guys at Greenbone found millions of medical images freely available online. Sounds like they were super careful not to do dubious things (e.g., download images and test uploads). Sounds like DICOM (which I knew as an image format, never as a network protocol) is one of these legacy things that falls over as soon as someone actually looks at it.

https://www.greenbone.net/wp-content/uploads/CyberResilienceReport_EN.pdf

I just got spam at GMail that had "Viagra" in the subject line and actually had an attachment that was named like Viagra&Cialis.html. It was in my spam folder, but I'm suprised it arrived at all.

I see a WiFi that I SO want to mess with....

Ok #security folks, help me out. I’m moving to a new house in the US. I will be replacing the ordinary household deadbolts with a lock that hopefully doesn’t show up in the “easy” pile at your local #lockpick village. What brands/models should I look at for a normal US front door?