RE: @campuscodi@mastodon.social
That's right folks, it is now easier to buy a firearm than to load open source software on your phone in America.
Remote
Chester Wisniewski 🇨🇦
@chetwisniewski@securitycafe.ca
mastodon 4.7.3+glitchDirector, Global Field CISO at Sophos, frequent speaker and press go to. Said opinions are mine, not the company.
Co-host of the Security Take(s) Two (@securitytaketwo@securitycafe.ca) podcast.
1610 Followers
967 Following
46 Posts
Joined November 06, 2022
I just saw someone with a ChatGPT for Dummies book at SFO Airport. I'm not sure how to react.
Replying to
@venya@musicians.today like this image I made for a blog about pen testing in 2017?
Replying to
@mattblaze@federate.social I would argue that there is a lot more than that different today. We are used to the lack of accountability and enshitification to the point where we expect failure and cheating.
Being called before Congress before Citizens United meant being held to account, a dip in stock prices, and the potential to be fired for the executives having failed to meet our collective needs and expectations.
No more. We've been conditioned to not just accept corruption and failure, but expect it.
Telstra in Australia had a major outage due to negligence in maintaining NTP services causing a major outage. It appears they are being held to account by both the government and the public.
We don't have to accept this as fait accompli.
I was in the US this week and someone asked if I had watched Strange Brew. As a 50 year old Canadian I was momentarily deeply offended.
I think they meant well, but those hosers can just take off, eh?
(FYi spell check keeps changing hosers to horses)
RE: https://tldr.nettime.org/@remixtures/117057007569945254
I can't decide if this is parody or a very remarkable set of coincidences.
RE: https://mastodon.online/@mastodonmigration/117004246546493753
I can't remember the last time I was this inspired by an American politician, and I am lucky to vote in Michigan to be able to support him. If he is bullshitting me, I would genuinely be surprised.
Simon Fraser University, in beautiful Burnaby, British Columbia, Canada is looking for an Information Security Analyst. More info: https://tre.tbe.taleo.net/tre01/ats/careers/v2/viewRequisition?org=SIMOFRAS&cws=37&rid=7100
#FediHire
Replying to on securitycafe.ca
The problem was never really getting enough spam, it was getting enough *ham*. Usually privacy dictates that you can't train on real data... Unless the courts published it :)
My patio honeysuckle was in full bloom this weekend. I expected them to be fragrant, but they aren't for me, they're for the bees and other buzzy critters.
Replying to
@fullywoolly@mastodon.social @venya@musicians.today No, it was a gel pen, nice try hombre.
Oops! I seem to have run out of room on my list of reasons not to visit or spend any money in Oklahoma.
Oklahoma is NOT OK.
RE: https://techpolicy.social/@joebeone/116926768886588948
I rarely see a good take on the "vulnpocalypse", let alone from someone inside of the AI industry itself (Joshua Saxe excepted), but this one is valid and likely the best take I have seen in awhile. I highly suggest you give it a read.
#InfoSec #Vulnpocalypse
Quoting
You can't bug fix your way out of the vulnpocalypse · Alex Gaynor https://alexgaynor.net/2026/jul/15/you-cant-bugfix-your-way-out-of-the-vulnpocalypse/
Open quoted postReplying to
@box464 You had me at garlic. And Dalek. And bread.
Replying to
Which raises a lot of questions about this story, come to think of it. None of these employees nor customers consented to their data being used in this way. The courts did not forcibly make it public, as they had in Enron. This seems... bad?
This is how you do it. ID requirements put the burden on me and force me to submit to data breaches of sensitive information. Force the social media companies to make their product safe for everyone, not ban children.
Replying to
@PeterLG@theblower.au this makes no sense and will protect no one. I'm just going to be angry the next day when I either gain access to what I need or proceed to shoot myself in the foot, but angrily.
Replying to
@tomw @campuscodi I've been following Android malware and scams as a researcher since its inception and this is rarely a vector. There is far more danger in actual Play Store apps than through side loading by accident/trickery. Last big wave I can recall were fake Fortnight and Pokemon Go apps when they were not available on official markets (one of which is due to Google's own policies).
DONE! 2 talks submitted for BSides Edmonton 2026. Have an interesting talk idea? Submit yours here: https://sessionize.com/bsides-edmonton-2026/
RE: @timcappalli@infosec.exchange
I would really hate to see passkeys lose momentum because of short-sighted implementations that cause users to dislike and lose trust in secure authentication. Listen to tim. Tim has a good point. #passkeys #infosec
Replying to
@mayintoronto@beige.party We are so pleased you chose to join us. Welcome to Beautiful British Columbia
Replying to
@molly0xfff How do you make the neat spiraled edges?
Doing #graffiti the Canadian way
I was briefly on CTV News discussing swatting attacks this weekend: https://www.ctvnews.ca/toronto/local/halton/article/elderly-ontario-couple-targeted-in-swatting-attack-caught-on-camera/
Replying to
@golgaloth Is groan out loud a thing?
Replying to
@GossiTheDog@cyberplace.social This doesn't seem like something the US would do considering they defunded CVE...
I live about 400 meters from BC Place where we will be hosting 7 games of the upcoming FIFA World Cup tournament. The inconveniences are beginning to pile up, but I have to say it is always a delight to see the RCMP mounted patrols patrolling the streets in my neighbourhood.
Replying to
@molly0xfff@hachyderm.io If anyone knows fraud it's Justin Sun.
Replying to
@campuscodi cPanel has authentication!? Next you will suggest phpBB does as well. #snark
Replying to
@charette@mstdn.ca I had this happen to me last year (West coast makes this more probelmatic). I also like the "Would you like to hold or have us call you back" option. It walks you through 17 steps to confirm your phone number and SIM and at the end goes "This system is unavailable" and puts you on hold anyway.
If my experience with Citizenship and Immigration Canada is any indicator, you can choose French and almost always get a person, who almost always will work with you in English.
Replying to
@inherentlee Love these, especially the back. That is what I've wanted on mine forever.
Replying to
Replying to
@chad@mstdn.ca The only logical way to store carbon in the ground is as oil and coal. Cheap, easy solution. Don't drill it out or mine it and it is 100% efficient.
Replying to
Replying to
@mattblaze@federate.social Seems to be potentially impacting flights today https://live.acarsdrama.com/@acarsdrama/115923604129965410
Replying to
@fedicon@techhub.social Is there an actual schedule somewhere? I live nearby, but may need to come and go...
Replying to
@Nonya_Bidniss@infosec.exchange Yes, shouldn't be a problem. I have even accessed a BitLocker protected Windows drive from Linux.
Replying to
@franksting@theblower.au and Dave Thomas (not the hamburger guy)
Replying to
@franksting@theblower.au For non-Canadians who didn't grow up watching SCTV: https://en.wikipedia.org/wiki/Bob_and_Doug_McKenzie
Replying to
Replying to
@sil@mastodon.social curse you!
Replying to
@fsmontenegro@infosec.exchange Hope to see you there :)