Remote
Tindra
@TindrasGrove@infosec.exchange
mastodon 4.8.0-alpha.3+glitchI may be the most certified person you’ve ever met. Years of IT experience in network management and security. Recently retired from the military. Interested in using creative channels, like games, to teach cyber risk to risk owners.
Cat picture booster. Multi-craftual. Unashamed public knitter.
Book Talk: @TindrasGrove
Avatar by @artbyleoniejonk@mastodon.art
907 Followers
348 Following
50 Posts
Joined November 05, 2022
Website:
Twitter (dormant):
Pronouns:
She/Her
Hair:
Not Blue (yet)
RE: @wafflesies@infosec.exchange
Plot twist: the pub’s menu and ordering system can only be accessed via QR code and they don’t accept cash
I’m gonna need everyone in security to internalize this.
Hell, my local country fair (y’know, the place where you can submit your veggies to go on display and get judged and get ribbons and shit) is requiring online registration.
Guess how many people that’s locking out? How many of the people whose submissions are what keep the exhibitions going don’t have emails or cell phones?
If your solution doesn’t work for my friend who can only be reached via landline phone or mail, it doesn’t work.
Replying to
@chillybot@infosec.exchange @badsamurai@infosec.exchange the other day she decided to store herself with the rest of my fiber
Why do we have to get out of bed? We just did that yesterday!
#CatsOfMastodon
A tip to anyone who provides the latest tech gadget as a prize at a security event: consider whether its use may be a felony in the locale of the conference.
If you’re not sure, maybe don’t give out things that are capable of recording people around the user without their explicit consent.
Replying to
@chillybot@infosec.exchange I do fiber arts and have a ridiculously adorable cat.
And sometimes talk about security stuff I guess.
Winding neatly into Turkish spindles never stops being one of the coolest looking things.
#FiberArts #spinning #DropSpindle
Ready for @BlueTeamCon@infosec.exchange !
It’s Corrie’s Gotcha Day!
It’s been wonderful watching her settle in to being an anxiety-ridden adult that loves lap time and eviscerating my arms
Board game night at @BlueTeamCon@infosec.exchange was a blast!
Not only was it great being able to play games and have quieter music, but I found the people who could talk fiber arts and airplane crashes. 😻😻😻
Replying to
@grimalkina@mastodon.social I don’t even properly work in survey methodology but as someone who gets to read lots of survey responses I am suddenly developing lots of opinions on the topic.
Which made it all the more frustrating when I pointed out “hey the way you’re asking questions is going to lead to them being misinterpreted by normal people maybe you should change that” and he just said “well I haven’t had problems so far so it’s fine”.
SIGH
RE: https://infosec.exchange/@howelloneill/117050082873934152
One of the challenges these organizations face is being able to talk about work stress when your work is classified (so, helplines don’t help).
While cleared counselors exist, many leaders don’t know how to get their people access to them.
Replying to
@5ecurityChemist@infosec.exchange @hacks4pancakes@infosec.exchange may I introduce you to @minutecon@infosec.exchange ?
Replying to
@Faintdreams@dice.camp there’s an old quote along the lines of “courage is the art of being the only one who knows you’re scared to death”
Replying to
@mweiss@infosec.exchange @akareilly@hachyderm.io nonono that’s an entirely different tool
Replying to
@GossiTheDog@cyberplace.social I’m not hearing any such chatter in the insurance claims side. Mostly just social engineering getting easier to do at scale.
Replying to
@DaveMWilburn@infosec.exchange it’s part that, but also (like remote drone operators) there’s not a lull between deployments. There’s no time to recover.
There was a Wired article done some years ago at the Army’s Cyber School and it talked about how these forces may never deploy, but they’re always at war.
And while these peeps may not see some of the more gruesome aspects of war, they have to be “always on”. And it’s not always clear how they’re contributing to the war effort, so it can all feel meaningless.
(The list of contributing factors goes on and on, but those are some big ones I’ve observed)
Replying to
@JessTheUnstill@infosec.exchange I always find it interesting what will trip my bank’s fraud controls, too.
$15k check for a new HVAC? Not a peep.
A fraction of that to a friend to help them through a rough spot? A real human called to make sure it was legit and that I physically handed it over to friend myself.
Replying to
@Arcanoraptor@furry.engineer @soatok@furry.engineer (understanding they tend to have the same donation standards) you can often donate to a local blood bank or directly at a hospital that helps it get more directly where it is needed, if that is of interest.
Replying to
@da_667@infosec.exchange like, you can easily effectively create air gaps with some simple lack of routing… which would involve any of these dorks knowing anything about networking.
Replying to
@5ecurityChemist@infosec.exchange they’re doing their inaugural event next year, but looks neat!
Replying to
@darfplatypus@infosec.exchange I get the feeling that’s what azure AD (or entra, or whatever it is this month) largely accomplishes - if you can greenfield instead of hybrid, it’s not terrible.
But that means being tied to the cloud, which is not always practical.
Replying to
@Epic_Null@infosec.exchange @patrizia@hachyderm.io I am right there with you!
For my corporate work stuff where if they fail, I can have my manager verify my identity to the help desk to do a reset? Fine.
For things like my personal email where there’s not a way for me to reach someone who will reset? Fuuuuuuuuccckk noooo!!! The failure mode is just too much for me.
Replying to
@sawaba@infosec.exchange @wendynather@infosec.exchange that explains a LOT
Like why he’s basically invisible - not lit - until he takes over the stage.
Replying to
@cyberpunklibrarian@masto.hackers.town also: weight is a crap metric.
Muscle density completely screws up what people think different weights look like.
If you absolutely must measure “progress” in a method more quantifiable than “I feel better”, I suggest you use a tape measure around the waist.
Replying to
@InfoSecSherpa@infosec.exchange it’s worth highlighting that lots of donor criteria (hugely impacting queer peeps) changed a couple of years ago, so people who have previously been turned away may want to check out the latest rules:
https://www.redcrossblood.org/donate-blood/how-to-donate/eligibility-requirements/eligibility-criteria-alphabetical.html
Also, lots of people have various issues with the Red Cross, but there’s likely a local blood organization you can donate to (or even donate directly at a hospital!) if you want your blood to stay local.
Hey reverse engineers!
Wanna contribute to science? Headed to Vegas?
https://www.linkedin.com/posts/hrl-laboratories_join-us-at-the-cognitive-security-conference-activity-7483188652454436864-SB8u
Replying to
@Paws2Spindle@sunny.garden understanding both that 1) not all moths are clothes moths, and 2) I can’t ID moths to save my life, I’d probably toss them in the freezer.
I’ll add that it’s not just freezing - you need to freeze - heat - freeze
https://www.housedigest.com/1504764/laundry-protect-sweater-moth-pest-freezer/
Replying to
@Jmj@hachyderm.io @jan_leila@mspsocial.net @mhoye@cosocial.ca @grimalkina@mastodon.social yup! Commander’s intent (what we’re actually trying to accomplish here) goes before all the little details.
https://en.wikipedia.org/wiki/Operations_order
That said, sometimes it’s preferable to leave the details vague (“mission command” is your buzzword here).
But sometimes all the details are really important. Like the step-by-step to restore a system from scratch. So it’s good to put that in a findable location.
Replying to
@krypt3ia@infosec.exchange it’s a whole track at BSLV still
https://www.bsideslv.org/schedule#IATC
Replying to
@badsamurai@infosec.exchange @evacide@hachyderm.io congrats!
I no longer use the bank I had as a teen (since they don’t exist in this part of the country) and I experienced a bank buyout, so I’ve had become useless before I had a chance to work through them.
Replying to
@wendynather@infosec.exchange if conferences keep letting you say the same thing, it’s because there’s people who still need to hear it.
Replying to
@evacide@hachyderm.io I may be the only person of my age in my friend group that has a physical checkbook.
I think it’s about 15 years old.
Like, not the box of checks, the singular checkbook.
Replying to on social.glennfitzpatrick.com
@freddiejcat@social.glennfitzpatrick.com Corrie 🐈 sez “I’ve licked them thru a screen and no they are not”
Replying to
@chebra@mstdn.io @metacurity@infosec.exchange I wonder very much if the WhatsApp suit against NSO Group for producing spyware will be a useful legal precedent here
Replying to on social.glennfitzpatrick.com
@freddiejcat@social.glennfitzpatrick.com Corrie sez it’s HORRIBLE!!! It sounds interesting but then you go to drink it and it attacks!
She absolutely was brave about it though and did not run away with a poofy tail.
Replying to on mastoart.social
@dar@mastoart.social of you don’t already have it, sounds like you need this book
https://www.ravelry.com/patterns/sources/son-of-stitch-n-bitch-45-projects-to-knit-and-crochet-for-men
Replying to
@JessTheUnstill@infosec.exchange it wasn’t emergency HVAC, just… wrote a check at the end of the day. And my bank said nothing.
(I’m guessing they have some sense of valid business accounts they’re using as part of the algorithm, but it’s still fascinating)
(Similarly, almost every time I use a credit card at Home Depot it gets flagged, but not at Lowe’s)
RE: https://infosec.exchange/@mek2600/116964330429450742
I’m starting to have the inverse problem where to submit a ticket with one of my vendors I have to first convince their AI that the answer to this problem does not exist in the knowledge base and I do, in fact, require the support of an engineer.
And this is why just emailing my support rep is a thing.
Quoting
My god, we're starting to get Helpdesk tickets that have clearly been run through ChatGPT before being submitted.
Guy, if you want a cool, expensive monitor say "I want this cool, expensive monitor" I don't need 6 gd paragraphs explaining why it helps our "digital transformation" or how it helps leadership make 'informed operational decisions".
It's a just a fucking monitor. Chill.
Open quoted postReplying to
@chebra@mstdn.io @metacurity@infosec.exchange overbroad “we aren’t liable for anything” statements aren’t unique to GenAI - they’ve been heavily used by software vendors for quite some time.
And sometimes the courts say “nice try but no - you still have a basic level of due care”
Replying to on social.glennfitzpatrick.com
@freddiejcat@social.glennfitzpatrick.com Corrie says that may smell awful, but have you experienced the water that bites you???