deltatux :donor:

Welcome to my infosec & sysadmin-focused account! Posting news, memes, fails & thoughts on anything infosec, sysadmin, Linux, and opensource related things!

Interested in all things #Linux, #infosec, #cybersecurity & #sysadmin.

For unrelated thoughts, check out my personal account at @deltatux@mstdn.ca!

#fedi22

Public Key

npub1g8rmsdslpcemhyvnqv624hsc2jm0tfzr2anm674zrksszw3atvzsw9ngjw

NIP-05 Address

deltatux_at_infosec.town@mostr.pub

Profile Code

nprofile1qqsyr3acxc0suvamjxfsxd92mcv9fdh453p4weaa023pmggp8g74kpgpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43qpxtz67

Publishing to

relay.mostr.pub

Author Public Key

npub1g8rmsdslpcemhyvnqv624hsc2jm0tfzr2anm674zrksszw3atvzsw9ngjw

Show more details

Last Notes

2023-09-24 02:45:07

- reply

@npub1daj…rxmk ya I'm pretty surprised at the fact that Canada Post can opt to not comply. Yes they dispute it but it doesn't sound like this case is going to the courts. I would have expected that Privacy Commissioner to lay charged & enforce compliance and if the offending party disagrees, it goes to trial.
As it stands, sounds like the Privacy Act has no teeth.

2023-09-23 02:44:22

The Privacy Commissioner of Canada finds that Canada Post violated the Privacy Act after collecting data from its postal operations, they used it to create marketing mailing lists & then selling that data to third parties without consent.
The Commissioner's report shows that Canada Post collected data on people's names, postal addresses & what kind of online shopping they do.
https://globalnews.ca/news/9977124/canada-post-privacy-law-violation/
#privacy #privacylaw #CanadaPost #Canada

2023-08-22 20:44:06

- reply

@npub14qt…fcj7
Just realized I forgot to link their commit page on my last post, oops lol: https://git.joinfirefish.org/firefish/firefish/-/commits/develop
This is the current changes heading to their latest dev builds. I personally maintain a firefish.social account to test out new features. They seem to be quite responsive in fixing items in bug reports that have been reported to their git repo, which is a great thing!

2023-08-22 20:36:01

- reply

@npub14qt…fcj7
Hopefully they release a second beta release soon, there's been a ton of stuff that was merged since the first beta. I've been following the commits page & it's very interesting to see what has been fixed.
One major thing they still need to work on is fixing the Mastodon API so that it renders posts correctly in Mastodon apps, hopefully we'll see that fix soon...

2023-08-22 20:27:47

- reply

nostr:npub14qthypfz0jw7t2qmeqdd6hq7ql59tyaeegw7qxh2k74qkhwa8eds0afcj7While I can't follow the FediBuzz accounts (yet?), I can still plug the relays into my instance as an admin. Several fediverse tools are written specifically with Mastodon in mind. For instance, bird.makeup used to work very well with Akkoma & Firefish, but some change to their code broke the ability to follow on non-Mastodon instances. Neither Akkoma & Firefish can follow accounts via bird.makeup at the moment. Maybe it's the same issue with Fedi.buzz?I do notice that #Firefish Antennas seem to populate with a few hours worth of posts, then just loop back to recent stuff. Probably a bug that'll get fixed at some point. And also probably for the best -- since I'm trying to cut down on how many posts I read.Yes, this is a known bug, it's supposed to be fixed in the 1.0.4-beta via this patch: https://git.joinfirefish.org/firefish/firefish/-/commit/c0eac56355a0c40ac4d9c0bae82917506e011dc3

2023-08-22 20:18:52

- reply

@npub14qt…fcj7
Consider using the Antennas feature. It lets you customize what to follow, including hashtags. You can have an antenna feed of multiple hashtags.
One thing of note is that antennas create their own feed & doesn't pollute your Home feed. Some may like this, some may not. I find it very useful in deck view.
Another way to import content is to look at the #GetMoarFediverse tool by @npub1k7j…wgtf, a very cool tool for any single user instances to import hashtags from other instances you would like to follow. Check it out here: https://github.com/g3rv4/GetMoarFediverse. I've used this tool on Akkoma before and I think should also work with Firefish.
Hope this helps!

2023-08-21 22:31:25

The Liquor Control Board of Ontario (LCBO), a crown corporation that sells alcohol in the Canadian province of Ontario has been implicated in another data breach.
This time, the breach was through one of its third party service provider, Conversion Digital, a company that manages it's promotional emails.
The data loss included any information used to sign up for their email list. Some of these information may include: name, date of birth, Aeroplan number and postal code.
https://www.thestar.com/business/lcbo-reports-another-data-breach-as-some-customers-personal-information-compromised/article_c9656dd3-9154-5c40-a369-d242ef2984f4.html
#infosec #cybersecurity #LCBO #Aeroplan #Ontario #Canada #databreach

2023-08-20 18:48:32

- reply

@npub1vcl…k6t3
Very sad to hear this awful news. Didn't know her personally but had quite a nice interaction with her during the great #TwitterMigration talking about the absolute growth Hachyderm was experiencing & moving the instance into the DC.
She definitely made a mark on the open source & fediverse community & will be greatly missed.

2023-08-18 18:42:18

- reply

@npub1vcl…k6t3 wait, there's a time where it hasn't been broken?
Though to be fair to them, technically it is in closed beta right now...

2023-08-18 17:51:22

- reply

@npub1vcl…k6t3 Honestly, either Elon Musk really don't understand social media or he hates the idea that people want to not listen to him.
Ever since he bought Twitter, media can't stop talking about him. Heck, him making drastic changes causes everyone to talk about him. Guy loves attention so the idea that one can block others, in his words "doesn't make any sense".

2023-08-18 05:19:25

- reply

@npub1vcy…gzn8 @npub1lrv…tth9
It's kinda interesting how Mastodon has resisted adding full text search when other ActivityPub microblogging implementations like #Akkoma & #Firefish already have these for a while.
I'm currently replying from a Firefish instance and the full text search works pretty well...

2023-08-16 15:19:21

- reply

@npub183n…tahh wait, what was this Madison issue? I know the whole LTT controversy but never heard about another controversy surrounding Madison, what happened there?

2023-08-15 19:11:43

- reply

@npub12lx…jvjy Person was really hugging the edge of the road, could even seen as purposefully knocking out the mailbox... There seems like there's enough room on the road to avoid the mailbox...

2023-08-15 15:30:51

- reply

@npub1ks4…x88p @npub15x4…3p3l
They don't even need to do that, they can just simply choose to deploy an #Akkoma or #Firefish instance that already have those features... You don't need to modify #Mastodon to do something that already exists on the fediverse. If they don't want to deploy their own instance, they can join existing ones running these implementations.
Akkoma & Firefish include quote boosts/quote posts, rich text formatting, full text search and more. Firefish even has the option to import posts from other instances including from Mastodon as well.
Mastodon has the most "market share" but they're definitely not the only #ActivityPub microblogging implementation out there. Others exist and already have features that are missing on Mastodon. Unfortunately because of Mastodon's sheer size, people have equated it to the entire fediverse, similar to how Kleenex is to facial tissues.
I think Big Media is mainly still not sold on the idea of decentralized social networking and they don't believe the audience is there. They seem to have hopped on to Threads pretty fast. I'm interested to see how BBC's experiment on the fediverse plays out, hopefully they have a permanent presence here.

2023-08-15 05:25:25

At DEF CON, security researchers from SafeBreach presented 3 vulnerabilities in the Moovit app that allows attackers to get free rides but also access personal information.
Sidenote: Not going to lie, I thought it was another MOVEIt vulnerability instead of Moovit...
https://therecord.media/moovit-vulnerabilities-allow-free-subway-rides
#infosec #cybersecurity #AppSec #Moovit #SafeBreach #DEFCON

2023-08-15 04:43:35

As much as I'm happy about current events & hopefully justice would be served for such a crime. I'm just completely inundated over the news from Georgia.
Thank goodness word filters exist on #Firefish & #Mastodon. As a #Canadian, it's very much normal to indulge in #US politics (it's unavoidable), but this is just too much with most of my feed on both my #fediverse accounts being about this event.

2023-08-15 04:42:27

As much as I'm happy about current events & hopefully justice would be served for such a crime. I'm just completely inundated over the news from Georgia.
Thank goodness word filters exist on #Firefish & #Mastodon. As a #Canadian, it's very much normal to indulge in #US politics, but this is just too much with most of my feed on both my #fediverse accounts being about this event.

2023-08-15 04:41:00

As much as I'm happy about current events & hopefully justice would be served for such a crime. I'm just completely inundated over the news from Georgia.
Thank goodness word filters exist on #Firefish & #Mastodon. As a Canadian, it's very much normal to indulge in US politics, but this is just too much with most of my feed on both my #fediverse accounts being about this event.

2023-08-15 02:04:36

🤣
Source: @npub1gfd…7gg6 on Facebook.
#systemd #humour #comedy #sysadmin #linux
https://media.infosec.town/media/988ad5eb-8eb3-4141-99c4-a7df90fbbda3.png

2023-08-15 01:09:42

- reply

@npub12hc…f9al I'm surprised that it's not mandatory considering how many vulnerable people there are. In the #Toronto area, hospitals still require people to mask up & staff do enforce it.

2023-08-14 21:28:50

One of Canada's largest medical diagnostics lab providers has reached a proposed class action settlement of C$4.9 million for the hack that it suffered back in 2019. In 2019, cybercriminals broke into LifeLabs' network & stole medical records of 8.6 million Canadians.
In its proposed class action settlement, the company stated that:Any Canadian resident who was a LifeLabs customer on or before Dec. 17, 2019 – the day the company announced it had been the target of a data breach – and whose personal information, including lab results, was accessed could receive a cash payment as part of the proposed settlement.Each claimant in the proposed settlement can receive between $50-150 depending on their claim.
It is important to note that the proposed settlement has not yet been approved by the courts, but affected individuals have "the option of participating in the settlement, staying in the class action and objecting to the settlement, or opting out."
https://www.ctvnews.ca/business/lifelabs-to-pay-out-at-least-4-9-million-in-proposed-class-action-settlement-over-data-breach-1.6514511
Class action settlement site: https://lifelabssettlement.kpmg.ca/
#infosec #cybersecurity #cybercrime #cyberattack #dataleak #ClassAction #Canada #LifeLabs #news

2023-08-14 18:10:19

- reply

@npub1xxe…zxth
Only thing that I keep rotating is my smartphones because of the battery & OS updates. Would love the ability to get replaceable batteries & longer OS updates with the latest specs but that's not likely. Fairphone can be an option but the specs are just mediocre.
For my desktops, I generally design them for 5 years but that's only as my primary. They always find life afterwards as hand me downs or repurposed for something else and they are only truly recycled/e-waste when they hit about 15-20 years.
Hell, my #OPNSense box is running on hardware that's almost 15 years old.
Running #Linux or #FreeBSD really extends the life of old hardware. Drivers tend to still work on ancient hardware. Example, I have a really old NIC card from a company who doesn't make NIC cards anymore, the drivers only work up until Windows XP. I plop it into a FreeBSD box, and it just works. Instead of e-wasting the NIC card, it's now humming along.

2023-08-13 05:22:49

Infosec.town has now achieved its 500th user w00t!
#Firefish #fediverse
https://media.infosec.town/media/862bab5b-8ccd-4545-ad4e-2674f770c16e.png

2023-08-13 05:22:15

Infosec.town has hit its 500th user w00t!
#Firefish #fediverse
https://media.infosec.town/media/862bab5b-8ccd-4545-ad4e-2674f770c16e.png

2023-08-12 16:35:26

- reply

@npub1k9j…gsa2 Oracle Cloud Free Tier gives you 4 ARM-based vCPU, 24GB RAM & 200GB free. However, you need to keep it active or else they will claim the resources back.
https://www.oracle.com/cloud/free/
Alternatively, you can get dirt cheap hosting if you check out LowEndTalk forums.
I've had pretty good experience with GreenCloudVPS. These hosts do oversubscribe but these guys aren't too bad. You're not gonna get Hetzner or DigitalOcean quality but for bargain basement pricing, hard to beat: https://greencloudvps.com/billing/store/budget-kvm-sale. Their 2 vCPU + 4GB RAM option should be enough for something like an #Akkoma install or maybe even a #Firefish install. Not a ton of drive space though so you have to be very careful of how many relays you use.
Hope this helps!

2023-08-12 16:27:23

- reply

@npub12lx…jvjy Ya COVID brain fog is real. Hopefully with lots of rest, it will clear soon, get well soon!

2023-08-12 15:20:33

- reply

@npub1k9j…gsa2 yes you do. If you go for some obscure TLDs, they can be had on the cheap. Another option is duckdns.org, you can get free subdomains for small hobbyist projects.
You will also need hosting on something that can stay consistently connected to the Internet.

2023-08-12 05:10:38

- reply

@npub17td…apfk First thought was Arch because that's the distro that I've gotten to like very much (and daily drive) but if there was just 1 distro, I have to hand it to #Debian. It's rock solid, it doesn't shove packages you don't want down your throat, it's predictable, relatively lightweight. Doesn't randomly break shit on you.
Though for desktop, its repositories can get stale, I guess that's where Flatpak comes in with newer desktop app packages regardless of what the Debian repo have.

2023-08-10 16:43:58

- reply

It's also interesting to note that #OpenELA intends to open an X account but no presence on the #fediverse. Hopefully @npub1jey…6m2x can nudge them to fosstodon.org or floss.social?

2023-08-10 16:42:46

CIQ (parent of Rocky Linux), Oracle & SUSE announces the Open Enterprise Linux Association as a trade group that aims to provide RHEL compatible source code that can be implemented in downstream distributions.
https://openela.org/news/hello_world/
#linux #opensource #enterpriselinux #OpenELA #CIQ #RockyLinux #Oracle #SUSE #RHEL

2023-08-06 14:58:34

- reply

@npub1698…hmgt Primal seems to work best for me out of the clients now that I can login lol.
Looks like the mostr bridge currently only exports from ActivityPub but can't get replies from nostr. Just tried to reply to this via nostr & didn't work, oh well lol.

2023-08-06 14:41:33

- reply

@npub1698…hmgt @npub1qmc…v6gx Thanks, much appreciated!
I wish they had some sort of screen or sign to let them know because newcomers aren't going to automatically figure that out lol.Most people look for a sign in button or at least some sort of instructions on "getting started".

2023-08-06 14:00:04

- reply

@npub1698…hmgt @npub1qmc…v6gx I have been doing some reviews myself as well. Regarding Nostr, had some quick first impressions that I posted a couple days ago: https://mstdn.ca/@deltatux/110828937214549484
I like the protocol but the community there is just mainly cryptobros pumping crypto so far...
Personally I couldn't get Primal working either and the apps are still very much in development.

2023-08-04 17:07:04

- reply

@npub1698…hmgt @npub1qmc…v6gx it looks like it appeared on #Nostr through the Mostr ActivityPub-Nostr bridge.