Chris Partridge

CloudSec manager at that online-bookstore-slash-server-rental company, adjunct professor at RIT, janitor for r/cybersecurity, and sporadic FOSS contributor. Cat person. Generally cheerful ^_^

Always trying to learn new things, and I'd rather be corrected than be correct. I try to be correct the first time anyway though!

How can I help?

(posts searchable via tootfinder)

Public Key

npub10tp0c70xh8376takmzug50le7exeg4zss556mrftd68rmty3x4as0q8dv4

NIP-05 Address

tweedge@cybersecurity-theater.mostr.pub

Profile Code

nprofile1qqs84shu08ntncld97md3wy28lulvnv523gg22dd354kar3a4jgn27cpzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgqgkwaehxw309aex2mrp0yh8qunfd4skctnwv46q6y20yc

Publishing to

relay.nostr.band

relay.primal.net

Author Public Key

npub10tp0c70xh8376takmzug50le7exeg4zss556mrftd68rmty3x4as0q8dv4

Show more details

Last Notes

2025-04-16 14:46:08

Does anyone have an IEEE DataPort subscription through your work or institution and would be open to sharing some files?
I'd love to get https://ieee-dataport.org/documents/cloud-telescope-internet-background-radiation-may-2023 + https://ieee-dataport.org/documents/cloud-telescope-internet-background-radiation-october-2023-february-2024 and put them on Academic Torrents (the August '23 dataset is already there! https://academictorrents.com/details/478e651ee303f794e4ff9b458a225578d694d097)

2025-03-02 18:03:33

- reply

@nprofile…uk9d Hmmm, Backblaze B2 may have no minimum? I also think Tigris has no minimum but not sure. Paying for 1TB to store 18GB is definitely not worthwhile and a lot seem to have a 1TB floor - looks like even IDrive E2 does now...

2025-03-02 06:12:51

- reply

@nprofile…uk9d Actually FWIW I tried Tigris today and I loved it, but it's not what I'm looking for, too expensive for my usecase - might be a good fit for you if you wanted all-in-one object storage plus caching plus public sites (on their subdomains)? Just a touch pricey for a small-write-heavy workload I have! https://www.tigrisdata.com/

2025-03-01 16:04:23

- reply

@nprofile…uk9d Hmmm - Wasabi might fit the bill as they allow exposing your bucket publicly via HTTP(S), but they have a 1 TB/mo minimum charge which might be needlessly expensive for what you're looking for. Typically I use IDrive E2 (despite the cost increase they still rock, I just need to move some colder storage off them) or Backblaze fronted with BunnyCDN, also so I can use custom domains etc.

2025-02-15 16:23:36

Welp, IDrive E2 - the S3 provider I use the most - just increased prices from $3-4/TB/mo to $5/TB/mo.
$3/mo for committed use hot storage was awesome (and was the majority of my spend with them last year), but since that's over I'll be spending the weekend moving a shitload of data that doesn't *really* need it around to colder storage options.

2025-01-19 20:24:14

Hey, remember to sleep. I threw myself at a problem for two hours last weekend when tired and failed and gave up. I've been paying down my sleep debt this weekend (slept 21h in the past two days, after sleeping only a handful of hours per night this week). Solved the same problem in 35 minutes because my refreshed brain figured out a better way to solve it.

2025-01-01 17:51:25

Hiya infosecverse think tank - I'm curious about how much the translate.goog domain is used legitimately vs illegitimately. Anyone got lists of URLs being accessed by large sets of regular people/businesses/etc? I'd love to extract translate.goog URLs and then analyze them to see how many either a. are currently or b. were likely phishing pages. All leads welcome!

2024-04-01 03:06:23

Deleted buckets are showing up in my IDrive E2 account, including the file tree of all objects at the time that the bucket was deleted. When you attempt to download something, it fails. The buckets cannot be deleted and appear to be contributing to my storage quota (?)
No, I have no concerns about their system integrity right now, what would possibly compel you to ask? 🙃
Any folks using them for your object storage, be aware ...

2024-03-09 22:55:09

Does anyone have tips & tricks for "poisoning the well" and making sure data brokers regurgitate a fake phone number when someone tries to buy my info?
I'm running the numbers on my fake phone number and it's not getting called/texted enough for me to continue spending money on it, especially now that I have to pay fees for some additional anti-spam compliance paperwork.
I've had the fake number on my website, LinkedIn, and Twitter for years - and it's caught some spam, but not much :/

2024-02-22 21:09:27

- reply

@npub1aka…zzz2 No idea! It makes a lot of comment replies and deletes a lot of posts. It's not really "making Reddit what it is today" and sits at a lofty ~200 karma... I really don't know why it got an invite.

2024-02-22 21:05:54

- reply

@npub1aka…zzz2 I was invited, and separately, my moderation bot u/alara_zero was also invited. No idea what Reddit's criteria are.

2024-02-18 20:15:11

I can't quit Reddit, where else am I going to learn what vibrator I need to buy to get a free infostealer sample? https://www.reddit.com/r/Malware/comments/1asn02v/malware_from_a_vibrator/

2024-02-16 19:34:38

Security team does not use an eye, spy, shield, sword, or lock in their logo challenge 2024 (impossible)

2024-02-10 18:24:11

A friend sent this to me and y'all might enjoy
https://files.cybersecurity.theater/media_attachments/files/111/908/576/499/883/474/original/55d68b10910668e0.png

2023-11-15 18:21:53

- reply

@npub1vcl…k6t3 Don't care. Also my resume is 2pgs. The only time I would care is if someone had 1pg of content stretched suuuper thin to 2pg - 1pg for students is a good rule, for professionals IMHO it's not.

2023-10-30 03:19:11

So we got a cat a little while back - Lorelei - and she has beanception 🥺 #catsofmastodon
https://files.cybersecurity.theater/media_attachments/files/111/321/800/728/529/639/original/62850d2b5cffdd99.jpeg

2023-10-21 06:25:21

- reply

@npub17lg…9uux Going to add a little bit of conspiracy here - someone tried to post this link in r/cybersecurity. It was removed as spam by Reddit, and that post *cannot be approved* - it keeps resetting to 'removed' without further explanation. The account that posted it is in good standing, the subreddit is in good standing, and we are always able to approve posts even if Reddit's filter misbehaves... Could social media sites be compelled to squash this as part of lawful interception?
https://files.cybersecurity.theater/media_attachments/files/111/271/573/620/791/567/original/174e6071ff4e3c64.mp4

2023-10-07 04:25:43

Is it general knowledge in the #InfoSec community that publisher #Packt solicits fraudulent reviews to boost their products?
Usually they're better at feigning that they want "unbiased" reviews in exchange for free products, but not today. https://web.archive.org/web/20231007040533/https%3A%2F%2Fold.reddit.com%2Fr%2Fcybersecurity%2Fcomments%2F171tzby%2Fbook_reviewing_opportunity%2F
This isn't a one-off either - extensive history from other "DevRel Marketing Executives" on Reddit include guerrilla marketing from u/Namita_Packt & soliciting reviews from u/Ankur_Packt + u/Royreddituser3 + u/kunal_packtpub + etc.

2023-09-02 21:24:57

Find of the day - someone dropped an AtlasVPN #0day on Reddit. The AtlasVPN daemon on Linux runs an HTTP server to accept CLI commands, it binds to 127.0.0.1:8076 by default.
What's hilarious is that it accepts commands without ANY authentication - so if you open a malicious webpage, that webpage can fire a POST to 127.0.0.1:8076/connection/stop and instantly disconnect your VPN.
Utter garbage.
Source: https://www.reddit.com/r/cybersecurity/comments/167f16e/atlasvpn_linux_client_103_remote_disconnect/
Proof below - used AtlasVPN's latest Linux client, version 1.0.3.
https://files.cybersecurity.theater/media_attachments/files/110/997/645/673/129/634/original/233e70179e3c9f90.mp4

2023-08-14 04:26:56

I tell ya hwat, I don't think most of the #InfoSec field is ready for a Safety-II mindset. Just look at how differently the human factor is considered in Safety-I and Safety-II ... that certainly rings a bell with all the user-blaming I've seen :/
Maybe someday.
https://files.cybersecurity.theater/media_attachments/files/110/886/029/531/315/172/original/b2e308009bb207ad.png

2023-04-23 22:18:18

For a handful of reasons, I now have more #[0] devices than I know what to do with. Already have primary/backup/remote backup keys. For various reasons I would be uncomfortable giving them away. Are there any fun projects that a Yubikey could be useful for?
Maybe slot it into a server at home and touch to open SSH for a fixed period? Touch-on-boot to unlock disk encryption? Anyone built something cool here before? Looking for "interesting hobby project" more than "security excellence" :)