Remote

Reijo Pitkänen

@reijomancer@defcon.social

mastodon 4.7.3

“Once men turned their thinking over to machines in the hope that this would set them free. But that only permitted other men with machines to enslave them.”

- Frank Herbert, Dune (1965)

Him/Hän/Hermano

0 Followers

0 Following

14 Posts

Joined March 18, 2023

Internet:

reijop

Gaming:

reijomancer

FCC:

KI7ZEP

mode:

0750

gid:

wheel

uid:

reijo

Co2PPM@Birth:

330

Reijo Pitkänen @reijomancer@defcon.social

· 5mo ago

Google hid their whole-assed login infra behind a youtube address so you couldn't just deep-six all of youtube.com.

Microsoft just blocked logging me in to Xbox on the Web because 'ms-sso.copilot.microsoft.com' is now handling logins for not-copilot and guess what I have blocked at DNS?

This appears to be the new dark pattern in identity management. Force your login path through a domain that's commonly blocked for (ethical | security | standards) reasons to force your customer's consent.

Yuck.

This is not the fucking world I was promised.

Reijo Pitkänen @reijomancer@defcon.social

· 2mo ago

Replying to

@davidcelis@xoxo.zone Bitwarden too. https://bitwarden.com/blog/how-bitwarden-helps-secure-agentic-ai-access-to-your-credentials/

Bitwarden

How Bitwarden helps secure Agentic AI access to your credentials | Bitwarden

Bitwarden delivers security solutions that empower businesses and individuals with end-to-end encrypted credential access across human, machine, and non-human identities like AI agents.

Reijo Pitkänen @reijomancer@defcon.social

· 6mo ago

Replying to

@evacide I was not prepared for Buffy quotes to become reality.

Reijo Pitkänen @reijomancer@defcon.social

· 6mo ago

Replying to

@danirabbit@mastodon.online ✅ Causes brain damage when used to ingest. ✅ Adds a sweet taste to everything, even shit. ✅ Is the preferred weapon of thugs-of-the-age. ✅ Easy to solder together haphazardly. Yep.

Reijo Pitkänen @reijomancer@defcon.social

· 6mo ago

Replying to

@0xabad1dea Once upon a time, at a small entertainment company that rhymes with 'misery', I was responsible for the operations of the Github Product. It came as a vmdk. No documentation. I was told "Backup" was as simple as snapshotting the VM. It ran gunicorn. There was no tuning, monitoring or built-in telemetry. They refused to give us an extension on licensing when they forgot to cash our check, and shut it off from remote. Every call was with techbros. I cannot stress enough, how happy this makes me.

Reijo Pitkänen @reijomancer@defcon.social

· 6mo ago

Replying to

@parismarx@mastodon.online @ChaosSpectre@corteximplant.com now there would be a useful bot.

Reijo Pitkänen @reijomancer@defcon.social

· 5mo ago

That moment when you consider dropping a blackhole rule in for all google update endpoints.

Seems just as logical now as the full-block I have on windows and apple for the same thing.

I've already taken on the cognitive load of patching on my schedule, according to my needs. Adding another vendor into the mix doesn't really mean shit.

'Never fucking update unless compelled to' should not be a default security posture, but here I am.

(this is not the fucking world I was promised)

Reijo Pitkänen @reijomancer@defcon.social

· 5mo ago

Replying to

@skull@masto.ai One of my absolute favorites to show people in the big dob. <3 seeing it in color.

Reijo Pitkänen @reijomancer@defcon.social

· 6mo ago

Replying to

@evacide@hachyderm.io Does this list: https://github.com/yaelwrites/Big-Ass-Data-Broker-Opt-Out-List mean anything in this context, or is this just suppressing results to the public?

GitHub

GitHub - yaelwrites/Big-Ass-Data-Broker-Opt-Out-List

Contribute to yaelwrites/Big-Ass-Data-Broker-Opt-Out-List development by creating an account on GitHub.

Reijo Pitkänen @reijomancer@defcon.social

· 14mo ago

Replying to

@dbat@mastodon.gamedev.place ? will start a search-backwards, like / is search-forwards, too.

Reijo Pitkänen @reijomancer@defcon.social

· 13mo ago

Replying to

@oatmeal the zipper pull is inside the pants... Now I understand why that part was never found.

Reijo Pitkänen @reijomancer@defcon.social

· 5mo ago

mount in read-only
cache file mode 0000 or attr+immutable

Both could still be systemd's fault somehow.

Either way, i'm out and eagerly awaiting tomorrow's RCA.

Reijo Pitkänen @reijomancer@defcon.social

· 5mo ago

Replying to

@kira_unlimited@defcon.social

Can not recommend, but:

block all of the DNS domains that handle updates for windows, apple, etc.
turn off auto-update everywhere
find anti-nag enterprise policies for the things that can't be silenced about updating (Firefox, Apple OS, Chrome)
practice ridiculous defense-in-depth at the network, host and service level. Service accounts at home, rootless containers, least-privilege networks and admin logins that are not used unless glass is broken.
stay somewhat abreast of your personal network's outbound traffic patterns
become responsible for all the devices in your house, even if you aren't the primary user.
When an applicable security update comes out, unblock everything, patch and lock it down again.

Please note, this causes (-1) points sanity on your system engineer over time, cumulative per year.

Reijo Pitkänen @reijomancer@defcon.social

· 5mo ago

Replying to

@georgetakei@universeodon.com Happy Birthday Uncle George!