@ketumbra@infosec.exchange

· 2mo ago

RE: https://infosec.exchange/@wdormann/117011629918025521 Since Wiz found chaosDb in 2021 it's been obvious that cosmos is a disaster. Sadly, the same lack of defense in depth appears to be still prevalent.

Quoting

Will Dormann

@wdormann@infosec.exchange

Wiz found a master key that could access every database in Azure's Cosmos DB. #cosmosescape Whoops. https://nitter.net/yuvalavra/status/2082864672294736324

Open quoted post

infosec.exchange

Will Dormann: "Wiz found a master key that could access **every*…" - Infosec Exchange

1

0

Ketumbra @ketumbra@infosec.exchange

· 5mo ago

Replying to

@xconde @GossiTheDog as long as they also check for abuse of the exploit and Inform you about it. Which would be handy to have a cve number attached to the report. So, they should still fix and then notify but can't just say "cloud is not affected" if they mean, "cloud is no longer vulnerable"

3

0

Ketumbra @ketumbra@infosec.exchange

· 3mo ago

Replying to

@GossiTheDog@cyberplace.social bumblebee does something similar https://github.com/perplexityai/bumblebee

github.com

1

0

1

0

Ketumbra @ketumbra@infosec.exchange

· 8mo ago

Replying to

@GossiTheDog surely they're following you now ;)

1

0

Ketumbra @ketumbra@infosec.exchange

· 6mo ago

Replying to

@ocdtrekkie seems like good timing - https://proton.me/business/blog/proton-workspace

Proton

Introducing a business productivity suite that puts your privacy first | Proton

Enable team productivity while keeping data private and secure with Proton Workspace. Privacy‑first collaboration tools for modern businesses.

0

Ketumbra @ketumbra@infosec.exchange

· 5mo ago

Replying to

@sovtechfund are you already in w3c @bagder ?

0

1

0

Ketumbra @ketumbra@infosec.exchange

· 4mo ago

anyone watching the #icehockey ? How did #Czechia and #denmark play in almost identical kits yesterday? Impossible to watch. 😆
##iihfworlds

infosec.exchange

Infosec Exchange

0

1

0

Ketumbra @ketumbra@infosec.exchange

· 5mo ago

If they ever let anyone register the .xom TLD, I will be screwed.
#typosquatting

infosec.exchange

Infosec Exchange

0

2

0

Ketumbra @ketumbra@infosec.exchange

· 2w ago

RE: @therecord_media@mastodon.social

Are we sure it wasn't in the Gulf of Ontario?

mastodon.social

0

Ketumbra @ketumbra@infosec.exchange

· 3w ago

RE: @avandeursen@mastodon.acm.org

I wonder if this will finally affect #swisscom 's cloud strategy...
@ant0inet@infosec.exchange @droe@infosec.exchange

mastodon.acm.org

0

Ketumbra @ketumbra@infosec.exchange

· 3w ago

https://www.politico.eu/article/france-slows-eu-trade-deals-over-language-concerns/
Can I suggest the deals are instead written in a neutral formal language like LEAN or something?
Isn't instant translation a solved problem anyway?? I get you'd want a skilled human to check an automated translation but surely that doesn't take months?

#eu #tradeagreements

politico.eu

0

Ketumbra @ketumbra@infosec.exchange

· 3w ago

Has anyone found a UK/EU sovereign MDM solution? (preferably with 1st class Linux support)
Put your hand down #Ivanti, I naturally meant a *secure* MDM...
#mdm #eusovereignty @sovtechfund@mastodon.social

infosec.exchange

0

1

0

Ketumbra @ketumbra@infosec.exchange

· 1mo ago

Man who rates benches on Instagram finally finds his 10/10 https://www.bbc.com/news/articles/cp8x9lz0zp2o
@Edent@mastodon.social are #openbenches and this guy mutually aware of each other already? ;)

bbc.com

0

Ketumbra @ketumbra@infosec.exchange

· 2mo ago

Replying to

@cR0w@infosec.exchange Would you rather tell your customers the service is down because an official MS patch went wrong, or their data is public because you failed to apply an available security fix and got hacked? But yes, it would be nice if we weren't all beta testers for MS. Perhaps they will need to do a better job of separating the critical security fixes from the lesser 'quality improvements'.

0

Ketumbra @ketumbra@infosec.exchange

· 4mo ago

Replying to

@dangoodin@infosec.exchange I see this got a lot of answers, but why wouldn't you just use your phone? If you're worried about battery just bring a powerbank. Is there something specific you want like wired headphones? Nostalgia? I had the first MP3 playing phone in 2000 and never looked back.

0

Ketumbra @ketumbra@infosec.exchange

· 2w ago

Replying to

@wdormann@infosec.exchange I think they're supposed to be in a cinema, not a car? But when you have the actual poster right there and doubtless trailer available as well, why do you need an image of anything else??

0

Ketumbra @ketumbra@infosec.exchange

· 3w ago

Replying to on mastodon.social

@anon_opin@mastodon.social and only if Spain will win

0

Ketumbra @ketumbra@infosec.exchange

· 3mo ago

Replying to

@fj@mastodon.social why is everyone suddenly calling Balogun's team USMNT? We're not waiting for EMNT V MXMNT... #fifa2026

0

1

0

Ketumbra @ketumbra@infosec.exchange

· 16mo ago

Replying to

@implementcontrols@mastodon.social Get an agile electricity plan and schedule your backups for the cheap hours - could bring down costs quite a bit - average is only 17p ATM and middle of night potentially -6p :) https://agileprices.co.uk/

agileprices.co.uk

0

Ketumbra @ketumbra@infosec.exchange

· 5mo ago

Replying to

@zackwhittaker@mastodon.social but which repo? Is it arch btw? ;)

0

Ketumbra @ketumbra@infosec.exchange

· 6mo ago

Replying to

@krejgo@mojos.eco @randahl@mastodon.social you know Russia is much bigger than the USA right?

0

2

0