**varx** · Oct 21, 2019, 19:44

varx

varx @varx@infosec.exchange

2.26K Toots

157 Following

229 Followers

pronouns: he/they

alts: https://cybre.space/@varx (varx at i.write.codethat.sucks is dead)

languages: 📖 en, es; ✍️ en, ~es

that cavern thing I'm always nattering about: https://gitlab.com/timmc/cavern

Boston-area meat construct ␥ I just do what the plants tell me ␥ I'd rather be pentesting^Wsleeping^Wundermining the client-server paradigm

Joined Oct 2017

157 Following 229 Followers

Toots Toots and replies Media

varx boosted

**R10T** @R10T@infosec.exchange · Oct 21, 2019, 19:44

Oct 21, 2019, 19:44

R10T @R10T@infosec.exchange

What are the best methods to protect against phishing?

We are currently dealing with a lot spear phishing attacks and I sum up methods to shrink the risk. Would appreciate any help and will gladly share my results in the end.

#phishing #infosec

**varx** · Oct 21, 2019, 22:45

varx boosted

**Graham Cluley** @gcluley@infosec.exchange · Oct 21, 2019, 22:45

Oct 21, 2019, 22:45

Graham Cluley @gcluley@infosec.exchange

Action Fraud? Inaction Fraud.

In recent months serious questions have been raised about whether victims of cybercrime are getting the support they deserve from the UK’s national fraud reporting centre.

https://www.grahamcluley.com/action-fraud-inaction-fraud/

847964f1e04e21a4.jpeg?1571697933

**varx** · Oct 18, 2019, 23:01

varx boosted

**🎃 Max’s Spooky Toots 🎃** @maxj@mastodon.mit.edu · Oct 18, 2019, 23:01

Oct 18, 2019, 23:01

🎃 Max’s Spooky Toots 🎃 @maxj@mastodon.mit.edu

Signal should use exchanging safety numbers via QR code as an opportunity to perform an additional, out-of-band key exchange. This new key could be mixed in with every symmetric key used in the subsequent conversation, potentially giving you post-quantum security.

**varx** @varx@infosec.exchange · Oct 18, 2019, 02:03

**varx** @varx@infosec.exchange · Oct 18, 2019, 02:03

Oct 18, 2019, 02:03

varx @varx@infosec.exchange

PSA: Yahoo Groups is being stripped down to purely a mailing list, dumping their archives.

(Despite being capable of sending out lots of email, they haven't actually *notified* anyone that way.)

Word on the street is that Groups.io is a pretty reasonable place to migrate to, although I've personally only poked around there and not actually tried it out for realsies.

**varx** · Oct 18, 2019, 00:41

varx boosted

**The Wireless Witch of the West** @diodelass@cybre.space · Oct 18, 2019, 00:41

Oct 18, 2019, 00:41

The Wireless Witch of the West @diodelass@cybre.space

None Security with left Wi-Fi

**varx** · Oct 16, 2019, 04:50

varx boosted

**Electronic Frontier Foundation** @eff@mastodon.social · Oct 16, 2019, 04:50

Oct 16, 2019, 04:50

Electronic Frontier Foundation @eff@mastodon.social

Congratulations to the people of Berkeley, CA. You showed up, you wrote in, and your City Council heard you.

Berkeley’s City Council has voted unanimously to ban government use of face surveillance.

**varx** · Oct 14, 2019, 21:10

varx boosted

**DJ Sundog - from the spook-lab** @djsundog@toot-lab.reclaim.technology · Oct 14, 2019, 21:10

Oct 14, 2019, 21:10

DJ Sundog - from the spook-lab @djsundog@toot-lab.reclaim.technology

proposing new javascript event handlers

**varx** @varx@infosec.exchange · Oct 13, 2019, 23:10

**varx** @varx@infosec.exchange · Oct 13, 2019, 23:10

Oct 13, 2019, 23:10

varx @varx@infosec.exchange

How cool would it be to have a transactional filesystem? Or, at least, a way to mark parts of it as transactionally protected?

(Has anyone done this?)

**varx** @varx@infosec.exchange · Oct 13, 2019, 23:09

**varx** @varx@infosec.exchange · Oct 13, 2019, 23:09

Oct 13, 2019, 23:09

varx @varx@infosec.exchange

This article on files hits home for me as I write my first serious desktop application.

I'm trying to keep as much as possible of the user's data in the form of individual, human-readable and editable files. But I keep running into the same problem: Filesystems are not transactional.

I'm keeping the most important things as individual files so they can be easily read without any special-purpose software, but everything else is going into a (sqlite) database for this very reason.

**varx** @varx@infosec.exchange · Oct 13, 2019, 23:05

**varx** @varx@infosec.exchange · Oct 13, 2019, 23:05

Oct 13, 2019, 23:05

varx @varx@infosec.exchange

"Computer Files Are Going Extinct" https://onezero.medium.com/the-death-of-the-computer-file-doc-43cb028c0506

A remembrance of the file, in a time when files are obscured, discouraged, or replaced by streams, UI abstractions, or database rows.

Many great quotes.

**varx** · Oct 12, 2019, 20:16

varx boosted

**elomatreb** @elomatreb@social.elomatreb.eu · Oct 12, 2019, 20:16

Oct 12, 2019, 20:16

elomatreb @elomatreb@social.elomatreb.eu

@djsundog The key words "🤔", "

", "

", and "

" in this document are to be interpreted as described in RFC 2119.

**varx** · Oct 10, 2019, 21:20

varx boosted

**The Wireless Witch of the West** @diodelass@cybre.space · Oct 10, 2019, 21:20

Oct 10, 2019, 21:20

The Wireless Witch of the West @diodelass@cybre.space

We trust you have received the usual lecture from your local System Administrator.

**varx** · Oct 10, 2019, 14:21

varx boosted

**They call me Rick 😎** @rick_777@cybre.space · Oct 10, 2019, 14:21

Oct 10, 2019, 14:21

They call me Rick 😎 @rick_777@cybre.space

Genie: You have ONE WISH.

Me: Alright, I have one, but it's very detailed.
Genie: As long as it is only one wish, you're allowed to spend as much time as you want detailing it.

Me: Alright, here we go. *Grabs notebook and takes a deep breath* The key words MUST, MUST NOT, REQUIRED, SHALL, SHALL NOT, SHOULD, SHOULD NOT, RECOMMENDED, MAY, and OPTIONAL are to be interpreted as described in [RFC2119].

Genie: Wait, is that...?

Me: *Flips notebook* Chapter 1. Preamble.

**varx** @varx@infosec.exchange · Oct 10, 2019, 13:40

**varx** @varx@infosec.exchange · Oct 10, 2019, 13:40

Oct 10, 2019, 13:40

varx @varx@infosec.exchange

The Internet of Future Electronic Waste

**varx** · Oct 10, 2019, 06:50

varx boosted

**Wladimir Palant** @WPalant@infosec.exchange · Oct 10, 2019, 06:50

Oct 10, 2019, 06:50

Wladimir Palant @WPalant@infosec.exchange

Speaking of criminals trying to trick you into disclosing your online banking credentials on the phone: compare this script to the legit one outlined above.

https://twitter.com/DigitalLawyer/status/1181348689756864513