Arrakis_Surfer :antiverified:

Tech expert | Developer | Digital Marketing | Infosec | Privacy | Snark
🇺🇲 in 🇸🇪 Neurodivergent ♾️

Opinions are my own...or the AI's

Pronouns
he/him
Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-11-07

@Em0nM4stodon
I'm not putting more than one egg in the Proton basket at any given moment. Security by obscurity is still a tried and true principle. Despite the politics, we are still tumbling toward a post encryption world whether we like it not

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-10-03

I am utterly offended by the term "neurospicy". It is reductive and doesn't benefit anyone except neurotypicals trying gaslight everyone for their bad behavior.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-08-10
Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-07-28

@QasimRashid
Russia is banned this year

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-07-25

What are we feeling about Firefox, the privacy browser? reddit.com/r/firefox/s/Ut3Y01y

Arrakis_Surfer :antiverified: boosted:
2024-07-24

Http needs a status code for grudging acceptance. We have 202 Accepted. We need 222 Tolerated.

For when the client is doing it wrong, but you've decided to be the bigger person and deal with it anyway.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-07-24

@catsalad
The fact that there is some raccoon paradise ranch somewhere is fulfilling. Piles of trash as far as the eye can see, no angry humans containing it in difficult to open receptacles, just bliss and a yearly sheering.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-07-24

@malwaretech
Ignorance, how I long for it. I was unfortunately bequeathed 3 entire brain cells.

Arrakis_Surfer :antiverified: boosted:
2024-07-24

Wild, true story from the security awareness and training company KnowBe4 that details how they inadvertently hired a North Korean hacker who was posing as a Western tech worker.

Kudos to them for publishing this. If it can happen to a security awareness company, it can happen to anyone (full disclosure: they've been an advertiser on my site for ages).

blog.knowbe4.com/how-a-north-k

Security Awareness Training Blog 23 How a North Korean Fake IT Worker Tried to Infiltrate Us

Stu Sjouwerman Tweet Incident Report Summary: Insider Threat Disclaimer: No access was gained or compromised on KnowBe4 systems. TLDR: KnowBe4 needed a software engineer for our internal IT Al team. We L posted the job, received resumes, conducted interviews, performed background checks, verified references, and hired the person. We sent them \ their Mac workstation, and the moment it was received, it immediately started % to load malware. - The EDR software detected it and alerted our InfoSec Security Operations Center. The SOC called the new hire and asked if they could help. That's when it got dodgy fast. We shared the collected data with Mandiant, a leading global cybersecurity expert, and the FBI, to corroborate our initial findings. It turns out this was a fake IT worker from North Korea. The picture you see is an Al deepfake that started out with stock photography (below). 'SUMMARY: This report covers the investigation of Employee ID: XXXX hired as a Principal Software Engineer. On July 15, 2024, a series of suspicious activities were detected on that user account. Based on the SOC teams evaluation of the activities it was found this may have been intentional by the user and suspected he may be an
Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-07-11

@ajroach42
You assume NASA has a budget to hire someone to champion this and didn't just hire some employees' kids to host the videos for free on the social medias.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-07-11

@lcamtuf
If it makes you feel better there are completely absent moderators like myself that avoid all responsibility to moderate at all cost but still somehow have been bestowed mod power, and are sensible people.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-07-04

@jerry Fine if you didnt use their stupid OTP token feature. Manually managed tokens not leaked.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-06-21

@burgerdrome
I'm feeling the 80s computer right now. How nice to just forget ...

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-06-21

I am so thankful that I get to be in my own head. Other people are sometimes exhausting.

Arrakis_Surfer :antiverified: boosted:
Technology ConnectionsTechConnectify@mas.to
2024-06-12

Troubleshooting is a skill. I don't know how exactly it can be taught, but we should absolutely be teaching it.

I have never used a scissor lift in my life prior to this point but I know enough about machines now to realize something is wrong. And with an error code, the machine will tell you what's wrong.

It's up to you to connect these things together - and that's honestly a guiding light in my work.

Arrakis_Surfer :antiverified: boosted:
2024-06-12

Microsoft's Recall should be celebrated as the saviour of SMEs and scourge of CEOs

Small businesses have seldom had the chance to understand how they work. A history of PC use makes it possible Column  A year and a half into the explosion of AI fueled by ChatGPT, the hype and fear of missing out has begun to thin just enough to make out the shape of two starkly different visions for A…
#theregister #IT
go.theregister.com/feed/www.th

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-06-11

@beka_valentine This is intensely fascinating.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-06-11

@JustOneMoreThing People underestimate how much a snake sucks. They have fangs, they are slimy, they harbour diseases easily, they also legitimately hate dark. Spiders are fuzzy, are arguably much smarter than snakes, have only tiny bitey things, generally like to hide unless provoked, are definitely more polite than the snake.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-06-10

@johncarlosbaez
Thank you for staying. Anyone with good ideas on how to reduce the Balkanization but also keep things decentralized? I think Jack Dorsey actually made an interesting point the other day (not minding the X exec sitting next to him).

He said there should be a marketplace for algorithms. It would encourage transparency and then individuals would have agency in how they would want to filter the fire hose. I think that kind of thing could augment the #fediverse enough to respark some mass appeal.

Arrakis_Surfer :antiverified:Arrakis_Surfer@infosec.exchange
2024-06-10

Ugh, fuck Blackwell

Client Info

Server: https://mastodon.social
Version: 2025.07
Repository: https://github.com/cyevgeniy/lmst