Replying to
@catsalad@infosec.exchange @alice@lgbtqia.space Really, I've started to think that open-carry of battery-powered angle grinders should be normalized.
Remote
Tim Lavoie
@tim_lavoie@cosocial.ca
mastodon 4.6.4Working in infosec, from my island paradise.
Fascinated by how tech is (ab)used in real life, and how it might help, or hinder our lives.
Love messing with programming languages, photography, getting outside.
254 Followers
569 Following
44 Posts
Joined April 16, 2023
Replying to
@Viss I'm feeling like we should just get Usenet back on track, so we can come up with newsgroups named alt.snoopy-malware.die.die.die
Replying to
@Yuvalne@433.world @fullywoolly@mastodon.social @rayckeith@techhub.social Here's an Arxiv link for the paper: https://arxiv.org/abs/2512.10100
Replying to
@fullywoolly@mastodon.social @dheepsinque@susanklopfertruth.com
Yeah, they're snooping on other signals as well.
As for timing, one would think Flock would move quicker if given a very short timeline, like, "you can take them down if you're faster than our guy with a bucket truck and his angle grinder."
Replying to
@petrillic@hachyderm.io @timbray@cosocial.ca That's certainly my concern. I'm in security, so mostly watching this from the sidelines, as I listen to execs essentially pushing for "vibe-code to prod".
It can only become worse when making changes to programs, since it won't be incremental change. Instead, it'll be, "no, do the thing, but not like that." The old fluff will be thrown away, and so the new version will be whatever it is, possibly completely different from last time. How do you review that?
Replying to
@LukefromDC @Viss By the way, I just reinstalled #librewolf, and a number of about:config items with "telemetry" in the name are set to "true".
Replying to
@Viss@mastodon.social @cR0w@infosec.exchange @catsalad@infosec.exchange
Reminds me of how we stopped buying the fake "crab" make from pollock, after one of our dogs refused to eat some. This is a dog that would actively seek out literal crap to snack on.
Don't know why, but if *she* won't eat it, neither should we.
Replying to
@wachoperro @LukefromDC @Viss Yeah thanks, I wondered if that might be the case. Figured it takes zero effort to tick all the boxes anyway, at least quicker than finding out what the separate options do.
Replying to
@LukefromDC @Viss Yeah, that's pretty much what I see Vivaldi doing for Chrome / Chromium as well.
Replying to
@mcc@mastodon.social OK, the Beaverton is satire, but so spot-on that you have to look twice. There's comedy gold in thar!
Replying to
@rk@mastodon.well.com If my wife told me to start running, I'd be looking for new insurance paperwork. Not that she doesn't want to "prolong my suffering" (hah!), but she already likes to remind me that I find ways to get into mischief without adding to the likelihood.
Replying to
@suricata@infosec.exchange Will this be recorded? I won't be around for it, but would like to check out when back from vacation.
Replying to
@nosrednayduj Oh, I don’t know if they’re related! Scotch broom was introduced in the west coast for sure; loves disturbed soil, so roadways get a ton of it, and nothing eats it either really.
Replying to
@Viss True, and I really love the temporary containers option on Firefox, which along with keeping uBo would be the main drivers to switch back. It's feeling like a harder sell all the time though.
Replying to
@smithkm @SmudgeTheInsultCat Pick a fave? If they really matter, they're probably ranked already.
Replying to
@paige@masto.canadiancivil.com OK, but now rank how people see their neighbouring countries' citizens!
Replying to
@munificent@mastodon.social These are great! Is there a pattern somewhere? I suspect my daughter would be all over this. (Adult, but all about critters and environment, and crafts)
Replying to
@kazkspr@mastodon.social @kims@mas.to That assumes you're logged in, and thus correlating all your info for them.
Replying to
@HardlyWorgen@mstdn.party @Viss@mastodon.social @cR0w@infosec.exchange
Lots of the issues that crop up would be helped greatly by treating bots as you would any other process. Appropriately limited permissions, user IDs. Even better would be the security capability approach, where they're not charging all around, pretending to be you.
Replying to
@darryl@toot.community What I do wish I had was some of my university assignment code. Mostly Amiga (running AMAXX Mac emulator) in weird floppy format, later Linux when I got some freebie 386 hardware and my old Amiga monitor had died.
Replying to
@darryl@toot.community Oh damn! It seems like at the very least, you do need to transfer your old code. There's probably some emulator for when you feel the need to revisit it.
I'm a bit surprised to hear you were writing TRS-80 BASIC in high school, since I was (and it was the stone age then), and I have some years on you.
Replying to
@munificent@mastodon.social Get a Canadian friend to send some Hawkins cheezies, for serious crunch.
Replying to
Replying to
@KronoGarrett@meow.social @WeShall@universeodon.com @resuna@ohai.social “Built _with_ a dodgy mobile app that only had to work well enough to hoodwink VC investors” is already common enough. How much expensive crap already fails suddenly when those companies get bored, and shut off the critical server the dodgy app needs to function?
Replying to
@GatekeepKen@mastodon.social @ElleGray@mstdn.social And his family! Or was there some sort of sex-less procreation? I think I'd have remembered that bit from long-ago catechism.
Replying to
@ShadowJonathan@tech.lgbt This year's Tiktok "Cinnamon challenge" was going very poorly.
Replying to
@tezoatlipoca@mas.to @violetmadder@kolektiva.social @petrillic@hachyderm.io @timbray@cosocial.ca
Well, you found an issue, and raised it! The approach we tend to take is that the security team identifies risks, and it's up to the business to decide from there. At least our process puts an executive sign-off in the way with risk assessments. I suspect though that the vibe-code stuff is going to change too fast for us to test it at scale, and it won't get those resulting risk assessments.
Replying to
@freediverx@mastodon.social @boojum@hachyderm.io @skinnylatte@hachyderm.io It's all about the threat model, except most of their customers probably don't have one (yet).
Replying to
@polkphebe @mhoye
Good talk! My first thought regarding "north bay python" was that it sounded remarkably niche for a small town, specifically this one in Ontario, Canada.
https://en.wikipedia.org/wiki/North_Bay,_Ontario
Replying to
@evan@cosocial.ca @mpjgregoire@cosocial.ca @timbray@cosocial.ca That is already taken to be suspicious, but I’m sure a naked Trump from that South Park episode as your Lock Screen would go over well
Replying to
@johannab Good to know! I'm not sure I'd be starting with anything named Skittles, but spicy/sweet can go together well. (Thinking some Korean sauces, and dark chocolate habanero brownies are glorious.)
Replying to
@nosrednayduj Anyone else rather triggered by large amounts of the same yellow as Scotch broom? It's that time of year where I do battle with my own plague of the invasive, introduced-by-humans yellow stuff.
(In the right context, e.g. not every damn roadway ditch, it's all quite pretty though.)
Replying to
@amd@social.amd.im @aral@mastodon.ar.al Too bad the enforcement took the form of tickets, rather than electronically-controlled moving bollards.
Replying to
@badlogic@mastodon.gamedev.place It's been almost a year since. Any changes since this was published?
Replying to
@cdarwin@c.im - I'm curious about the point of your post.
Pretty sure @dee@grafana.social knows full well what fail2ban is, and does.
Replying to
@darryl@toot.community Hey Darryl! While not in the market (nor vicinity), I was wondering what you've been doing with this old beastie all this time?