Cybersecurity and me

It’s amusing to me that I helped some colleagues get OpenJDK installed. They were trying to do the for all users install and hitting up against the requirement that they don’t have administrator access to install software on their computers. So, I noticed the for me only option and got them to try it.

I wonder how many software vendors are going this route because they know their users are increasingly hitting this limitation.

It sucks for Cybersecurity because the whole point of their approving the administrator requests was so they can screen for malware, ransomware, and other potentially problematic software. It’s just so inconvenient to getting our work done to wait hours for an approval. Plus the uncertainty of getting it. (One person was on day two of getting approval.)

The natural response is already in motion to obtain an inventory of installed software and remove inappropriate installs. So, I wonder what the users will do to end-run this new approach. It’s the normal cycle. Administrators forbid something the users need to get their work done, so they figure out a way to do it anyway.

Anyone put their site behind Cloudflare? It seems like a simple process with just A records. Is the performance and security worth it? I'm looking at the free plan for their CDN/Reverse Proxy/DDoS services.
#fediadmins #administrators #cloudflare #cdn #security #infosec #serveradmins #cybersecurity #instance #misskey #mastodon #pleroma #cloud #architecture #technology #waf #ddos #proxy

Okay, here we go, people, upgrade time! Will be testing over the weekend, writing new instructions, working with Service Desk on new knowledge base article, preparing announcements for my team of Admins TBA Monday!
#NYC #BigLaw #information #services #technology #application #upgrade #migration #server #LMS #NewYorkCity #planned #system #outage #administrators #bug #fix #script #live #test #environment #production #lab

hey #fedi #administrators I had an idea. maybe you can tell me if this is a good idea.
what if you had a mastodon server thats admin page was protected by using an access control listso that user would not only need their user to have permissions, but also would need to have a user on that network? like zero-trust I guess? or of course, based on client IP, etc.
more advanced than the mastodon checks.
#randomthought @infosec @cybersecurity

alright, I will let you guys know again, there are only 4 known accounts, one has not been verified yet (and that's besides this one, of corse) first is @cubic vee continuum. i'll have to get that one verified too.
the second is my infosec space account, which is internal use only! the third is infosec.exchange, labeled as "adisonverlice2".
finally, @ChrisDuffley's instance. btw, if you didn't know, i'm not only a user on his instance, I am an administrator on his instance, so if I see any imposter accounts, I will be able to ban those immediately. if you're on the instance you might see my username come up as "owner"...of course, i'm at school a lot of the time, but since it's the weekend, I can do some mastodon administration. @alexchapman @mods @chloehodges and for your mastodon #administrators pleaseo nly trust the following emails: none of which can be spoofed.
averlicetech@proton.me adisonverlice@blindsoft.net or any @blindsoft.net email

As a brand new professor in 2005, clean-cut, rule-following, accepting of statuses quo, I was groomed for a couple of years by a dean for Future Leadership (i.e., future dean, I guess). Thanks to consciousness raising (?) by some more experienced colleagues, I became involved with faculty (i.e. #labor) rights and very quickly decided I never wanted to be a university administrator.

I've watched administrators at two universities, for 20 years, talk almost compulsively about inclusion, democracy, resistance, "good trouble," etc.--whatever liberal buzz phrases are active any given week--while simultaneously working to reduce or prevent any labor organization having a meaningful say in university governance, subtly (usually) shafting minorities and those with disabilities, making absolutely sure they are not part of anything truly democratic, and of course protecting their careers and salaries. I'm hugely relieved I didn't go down the administrator path I was on for a little while. I don't think I could live with myself.

How do you talk about justice and equity, be righteously horrified by the Trump administration's attacks on minorities and democratic process, etc. while spending your days doing the opposite of all those things?

Most #administrators are not happy, from what I can see. OK, the minority who seem sociopathic and maybe even sadistic are happy, most seem fucking miserable. I just listened to a provost almost burst into tears as she described people no longer greeting her on the street, her kid in school getting cold looks from children of people she has laid off, etc. I almost said "there's an easy fix for that: donate 1/3 of your salary to save just one tenure-track faculty member's job, three staff jobs, or half a dozen adjunct professor jobs; you'll be very popular and you'll still make more than the highest-paid faculty member on campus." I didn't say that because she would never do that and I've already got a target on my back.

It's been amazing to me to see faculty become administrators and lose all diversity of thought, dress, and speech, becoming administrator clones with anti-labor and anti-democracy (in any sphere they inhabit) values, to all outward appearances. The lockstep is glaring when you notice it.

IDK if I have a point right now besides being happy I did not become a dean.

#highered #university #professor

SUNY Fredonia is in financial trouble. #administrators are trying to manage money as well as perceptions of their management. Not everyone is a fan of their approach.

#suny #highered

Attended a #Synology partner event today in #Zagreb!

Thanks to #Synology Germany for inviting me and #TecomTrade for organizing the event.

It was great to talk to some #system #administrators and #engineers, as well as integrators, and their day-to-day experience with #Synology hardware and services.

High Court appoints administrators to oversee $240m repairs at St Lukes Gardens, NZ’s biggest leaky building

And while there appears to be significant support for the move, one unit owner to…
#NewsBeep #News #Headlines #240m #administrators #after #apartment #appointed #appoints #at #auckland #been #biggest #building #complex #cost #countrys #court #delays #described #gardens #have #high #huge #leaky #lukes #NewZealand #NZ #nzs #overruns #oversee #repairs #st #to
https://www.newsbeep.com/19521/

𝗛𝗼𝘄 𝘁𝗼 𝗱𝗶𝘀𝗮𝗯𝗹𝗲 𝗦𝗲𝗹𝗳-𝗦𝗲𝗿𝘃𝗶𝗰𝗲 𝗣𝗮𝘀𝘀𝘄𝗼𝗿𝗱 𝗥𝗲𝘀𝗲𝘁 𝗳𝗼𝗿 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗼𝗿𝘀 𝗶𝗻 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗘𝗻𝘁𝗿𝗮 𝗜𝗗

Self-service password reset can be a useful feature that allows users to access their account in case they forget their password.

On the other hand, it is potentially risky, as a potential attacker may target the self-service password reset feature to gain access to the account. Especially for privileged accounts, this is very risky and therefore I would generally recommend disabling self-service password resets for privileged accounts.

📺 Watch my YouTube video bellow 👇 👇
https://youtu.be/KIlRPx_9XRA

#cswrld #videotutorial #sspr #passwordreset #entraid #administrators

Fellow #mastodon #administrators / #sysadmins

What mods are good for Mastodon, i can splice them in using volume file mounts to skip recompilation, Please let me know what are some recommended changes i should apply.

Already raised the char limit to 2K

Would love some appearance mods

Configuring A New Mastodon Instance

https://video.fedihost.co/w/xx9f4uyHPh2ZfayauiyxGt

@einsweiter@mastodon.social das ist vermutlich primär eine Entscheidung der Admins - frag doch mal erst Deinen Admin, ob er das "Stummschalten" nicht in "Blockierung" umändern will und wenn nein, warum nicht? Vielleicht gibt es ja bei den verschiedenen Admins eine Community, in der so etwas besprochen wird? #Admin #administrators #fedihelp

Working with the great folks at Tremau, we launched the first of our regulatory guidance materials.

This easy-to-read guide to the DSA allows Fediverse #administrators to review their exposure to the #DSA, and offers practical guidance on working toward compliance.

Download the DSA Guide for Decentralised Servers right here: https://about.iftas.org/wp-content/uploads/2024/04/DSA-Guide-Decentralised-Servers.pdf .
https://tremau.com/

For #fediverse / #mastodon #administrators: We had a recent spamrun again from instances with open registration. The following is a list of instances that have been abandoned by their owner.

1. usasa.ky
2. mastodon.sitejp.synology.me
3. social.onlinesession.app
4. tickler.cc

#admins

“There may come a time when we—#students, #faculty, #administrators, #artists, and parents—will have to fight hard for #education, fight hard for uncorrupted #science (not the ideological or racist science); for sound social #history, apolitical anthropology (not strategies of #control); for the #integrity of #art (not its celebrity).

There may indeed come a time when #universities may have to fight for the privilege of #intellectual #freedom.”
~Tony #Morrison

Working with the great folks at Tremau, we launched the first of our regulatory guidance materials.

This easy-to-read guide to the DSA allows Fediverse #administrators to review their exposure to the #DSA, and offers practical guidance on working toward compliance.

Download the DSA Guide for Decentralised Servers right here: https://about.iftas.org/wp-content/uploads/2024/04/DSA-Guide-Decentralised-Servers.pdf .
https://tremau.com/

For #Fediverse #Administrators after the last spam run we learned that the following instances have been abandoned by their owners. Feel free to suspend them if you haven't done so yet.

kitsui.life
transforthe.win
indiegameskey.net
seda.social
cryptodon.lol

There were other instances involved but their administrators replied to me, and have taken action. Closing their instances completely or did the wise thing and removed open registration.

#Mastodon #Misskey

Footage of #Chemeketa #Teachers and #Administrators celebrating another year of abusing students with #UndisclosedGenAi and Maxient Software to silence any dissent:

Our 2024 survey has over 100 responses so far & is open to all Fediverse #administrators, #moderators & #CommunityManagers.

Early data shows a continued needs for help with CSAM, Spam, NCII & core moderation guidance.

If you run or moderate a federated instance take the survey today, all questions are optional, tell us only what you're happy to share: https://jyqxym.clicks.mlsend.com/tf/c/eyJ2Ijoie1wiYVwiOjQ1NDk3NSxcImxcIjoxMzMzODA0NjY5NjMxMjE3NDksXCJyXCI6MTMzMzgwNDY3NDQzMzY5MzAwfSIsInMiOiI5ZjcyZmViOTY2MWY1YjIzIn0
https://jyqxym.clicks.mlsend.com/tf/c/eyJ2Ijoie1wiYVwiOjQ1NDk3NSxcImxcIjoxMzMzODA0NjY5NjMxMjE3NDksXCJyXCI6MTMzMzgwNDY3NDQzMzY5MzAwfSIsInMiOiI5ZjcyZmViOTY2MWY1YjIzIn0