chort ↙️↙️↙️ / is on Nostr

Skills/interests: Listening, understanding, privacy, DFIR, guitars, motorcycles, working out, whisky, anti-fascist action. Opinions NOT those of my employer.

Pronouns: him/him/his
Location: SF Bay Area
Orientation: Hetero, Queer
Relationship: Married, ENM
Neurotype: ADHD

Last Notes

2024-10-23 22:33:30

- reply

it's probably more so that USA is afraid that if all drones, 5G equipment, etc is made in China and no one else can compete, that China has every incentive to use remote surveillance capabilities, or remote sabotage.
That seems like a very reasonable concern. Lots of countries are now realizing that relying on a hostile foreign power for critical industries is probably not smart.

2024-06-15 04:30:49

- reply

whaaaaaaaaat?

2024-06-15 04:30:49

- reply

whaaaaaaaaat?

2024-06-12 17:45:27

Man, fuck CloudWatch. It is probably my most-hated AWS service.
It fucks-up your timestamps by adding its' own (non-optional). That can also fuck-up your formatting (if you're sending in JSON, etc) because of their stupid timestamp prefix.
CloudWatch is the default log destination for pretty much every service, but it's really expensive (both in ingest, and storage).
Some AWS services (looking at you, Route 53 Resolver Logging) are blatantly deceptive, saying they will "deliver the logs to S3," but actually use CloudWatch (as the most expensive possible) middleman. These services could just as easily use Kinesis, but that would cost 85% less than CloudWatch, and thus would be a giant, hidden cash cow for AWS.
In summary: DIAF CloudWatch. You are the right solution for nothing, and a rent-seeking vampire for everything.

2024-06-12 17:45:27

2024-05-31 23:33:44

It may seem stupid, but password spraying (and credential stuffing) are a massive threat.
SaaS providers and SaaS customers are sleeping on this issue. You might think password complexity will prevent this, but (LOL) no.
Attackers have access to huge botnets, or hundreds of cloud VMs. They have access to enormous residential proxy networks. It is absolutely possible to make hundreds of guesses for every one of your users per day for weeks until they get a match. Credential stuffing is even easier, since password reuse is so common.
You might also think that MFA would prevent this, but that's only true of phishing-resistant MFA. Once the attacker verifies working passwords, they can MFA fatigue bomb with push requests, or otherwise socially engineer those users.
Also the burden shouldn't be entirely on the customer. Every SaaS provider should treat this as a top tier threat and they should have automated systems to detect and block credential attacks, and they should all support adding multiple phishing-resistant authenticators to accounts, and require MFA by default.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/538/290/008/670/177/original/25fb0843f1082f42.jpeg

2024-04-30 15:50:59

- reply

man I feel that. Going through some of the same stuff right now myself. Glad to hear you're pulling through. It gives me hope.

2024-04-15 18:56:31

- reply

you mean a shell variable? like export DOMAIN=example.com && curl -I http://${DOMAIN}
Make sure not to use single quotes around the URL, otherwise it becomes a literal.

2024-04-03 04:37:32

- reply

yep! Made me give up trying to ever update Ubuntu. I periodically backup the data and reformat. It’s easier.

2024-03-23 16:32:32

- reply

wow dude. I support Ukraine, but this post seems reeeeeeeally racist. Perhaps there's a way to call out Modi's government without painting all Indians with the same brush.