christopher :rebel:

i'm an autistic privacy and security engineer from the Pacific Northwest living in the Netherlands ✨ he/they ✨ Human Rights Defender AS 396507 (npub13sl…t3va), AS 396507, I nervously spoke about it at DEF CON (npub1dqd…8xy4) 26

:autism: | 🏳️‍🌈 | 🇪🇺 | 🇳🇱 | :rebel: | :vegan: | :hacker: | :blobcatnerd: | :blobcatgamer: | :solarpunk_flag: | :demisexual_flag: | :gay_man_flag: | :fediverse: | :mastodon: | :minecraft_creeper:

|| make love not war :aj_peace:
|| black lives matter ✊🏻
|| trans rights are human rights 🏳️‍⚧️
|| white but anti-whiteness (read "White Fragility" please)

|| let's play #StarCitizen ^_^ you may use my referral https://robertsspaceindustries.com/enlist?referral=STAR-FZPR-XF2M

|| join our open fedi relay: https://relay.disobey.net
|| watch Democracy Now! in 1080p: https://news.disobey.net

Blog: https://yawnbox.is
Activism: https://emeraldonion.org
Sailing: https://nautical.social/@yawnbox
Signal: yawnbox.01

Public Key

npub1hu0ujc4n4xeg3k9p3575rn46ltppfvkd2g5vk7zy7exa6hf2cwvsuevz3q

NIP-05 Address

yawnbox_at_disobey.net@momostr.pink

Profile Code

nprofile1qqst787fv2e6nv5gmzsc602pe6a04ss5ktx4y2xt0pz0vnwat54v8xg48lvfa

Author Public Key

npub1hu0ujc4n4xeg3k9p3575rn46ltppfvkd2g5vk7zy7exa6hf2cwvsuevz3q

Show more details

Published at

2024-10-17T23:15:53Z

Kind type

0 Metadata

Event JSON

{ "id": "353a5333bc793527e055dc6e2e0d28aa24f45e1af90e3fe9ea530d9f77d4dadf", "pubkey": "bf1fc962b3a9b288d8a18d3d41cebafac214b2cd5228cb7844f64ddd5d2ac399", "created_at": 1729206953, "kind": 0, "tags": [ [ "emoji", "autism", "https://disobey.net/system/custom_emojis/images/000/181/990/original/93c71cae4c774276.png" ], [ "emoji", "rebel", "https://disobey.net/system/custom_emojis/images/000/212/171/original/ae730d2055a8765c.png" ], [ "emoji", "vegan", "https://disobey.net/system/custom_emojis/images/000/182/067/original/c748f3c41c47ca07.png" ], [ "emoji", "hacker", "https://disobey.net/system/custom_emojis/images/000/182/051/original/642c329bee6799df.png" ], [ "emoji", "blobcatnerd", "https://disobey.net/system/custom_emojis/images/000/180/786/original/3b52c0a1adb43d7f.png" ], [ "emoji", "blobcatgamer", "https://disobey.net/system/custom_emojis/images/000/180/719/original/59e8b5626d4f3229.png" ], [ "emoji", "solarpunk_flag", "https://disobey.net/system/custom_emojis/images/000/182/069/original/88214c1a6edbc3c1.png" ], [ "emoji", "demisexual_flag", "https://disobey.net/system/custom_emojis/images/000/181/699/original/54133162b99e55f0.png" ], [ "emoji", "gay_man_flag", "https://disobey.net/system/custom_emojis/images/000/181/731/original/0b027d65bd06e113.png" ], [ "emoji", "fediverse", "https://disobey.net/system/custom_emojis/images/000/216/127/original/77c36255f79196c6.png" ], [ "emoji", "mastodon", "https://disobey.net/system/custom_emojis/images/000/216/128/original/cdbee58615d82723.png" ], [ "emoji", "minecraft_creeper", "https://disobey.net/system/custom_emojis/images/000/224/828/original/4dd93c627d00e7e9.png" ], [ "emoji", "aj_peace", "https://disobey.net/system/custom_emojis/images/000/231/316/original/c4275cdddcab238a.png" ], [ "t", "starcitizen" ], [ "proxy", "https://disobey.net/users/yawnbox", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://disobey.net/users/yawnbox", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"christopher :rebel:\",\"about\":\"i'm an autistic privacy and security engineer from the Pacific Northwest living in the Netherlands ✨ he/they ✨ Human Rights Defender nostr:npub13slxpwqq2727rxp2ys9nrztgwd7582chasz2xfggamd0u9nyx6fql8t3va, AS 396507, I nervously spoke about it at nostr:npub1dqdh3ta2uxg4wz5qf7h6j0qywrxryzcyjw4vhq0n0alu83d6mgnsxm8xy4 26\\n\\n:autism: | 🏳️‍🌈 | 🇪🇺 | 🇳🇱 | :rebel: | :vegan: | :hacker: | :blobcatnerd: | :blobcatgamer: | :solarpunk_flag: | :demisexual_flag: | :gay_man_flag: | :fediverse: | :mastodon: | :minecraft_creeper: \\n\\n|| make love not war :aj_peace:\\n|| black lives matter ✊🏻\\n|| trans rights are human rights 🏳️‍⚧️\\n|| white but anti-whiteness (read \\\"White Fragility\\\" please)\\n\\n|| let's play #StarCitizen ^_^ you may use my referral https://robertsspaceindustries.com/enlist?referral=STAR-FZPR-XF2M\\n\\n|| join our open fedi relay: https://relay.disobey.net\\n|| watch Democracy Now! in 1080p: https://news.disobey.net\\n\\nBlog: https://yawnbox.is\\nActivism: https://emeraldonion.org\\nSailing: https://nautical.social/@yawnbox\\nSignal: yawnbox.01\\n\",\"website\":\"https://disobey.net/@yawnbox\",\"picture\":\"https://disobey.net/system/accounts/avatars/109/343/748/640/765/511/original/aff0648936ce239c.jpeg\",\"banner\":\"https://disobey.net/system/accounts/headers/109/343/748/640/765/511/original/3a294b7c2db0afa3.png\",\"nip05\":\"yawnbox_at_disobey.net@momostr.pink\"}", "sig": "6b0af320d7f819e3e362d39bacb0ce1586c3eee89f227f707a6d9a6822b4eacde7abc62e02ad24f4ce149e1202cad09eb28305e030f5163a04280a0dbbec0685" }

Last Notes

2024-10-30 09:45:36

- reply

this is the only change i see affecting CSP in 4.3.1, you probably saw it already, affecting "app/lib/content_security_policy.rb"
https://github.com/mastodon/mastodon/pull/32439
aside, i was able to modify "config/environments/production.rb" to add hsts-preload
https://disobey.net/system/media_attachments/files/113/395/719/008/007/522/original/3befc8282d005b09.png

2024-10-30 09:21:04

- reply

this is my header
> add_header Strict-Transport-Security "max-age=63072000; includeSubDomains; preload";
but there's no preload when i :
$ curl -Is https://disobey.net | grep -i strict-transport-security
this is a related thread where it discusses headers being managed by Rails:
https://github.com/mastodon/mastodon/issues/16379

2024-10-30 09:03:57

- reply

yeah so do i, -preload is an additional flag

2024-10-30 08:50:29

- reply

i've never been able to enable HSTS-preload via nginx, my assumption is that something else is taking control away from the admin
#MastoAdmin

2024-10-28 12:32:29

How do I add more of these "profile metadata" fields in my Mastodon profile? (backend editing) is it possible in vanilla Mastodon? not glitch
#mastoadmin
https://disobey.net/system/media_attachments/files/113/385/059/412/920/263/original/d66846b426ecf279.png

2024-10-28 11:50:32

hello #infosec fedi,
i need help finding companies which are hiring, so please RT. my background is in Platform Security, Data Protection, Windows, Linux, macOS, and ChromeOS systems security, Network Security, and Datacenter Operations.
my last few roles had me focused on IAM: FIDO2 (Yubikey) and 2FA deployments, PlatSec: TLS-intercept forward web proxy w/ DLP supporting corporate Threat Intel, Data Protection: data and liability minimization.
please reach out if you know of anything. the job market is not good and i'm struggling to keep my family in our new home in the Netherlands! i'd ideally like to work for an employer willing to give me an EU work visa, but remote work will provide necessary safety. I'm a US citizen.
#GetFediHired #cybersecurity

2024-10-25 22:46:38

hello #infosec fedi
do you know any employers who use tls-intercept forward web proxies? maybe some that are hiring?
my request includes MSSP/MDR teams as well, i just want to use my proxy skills, doesn't have to be for one company.
thanks! #getfedihired

2024-10-18 21:28:56

- reply

cc @npub1ep8…29a5 "recommendations for coffee that tastes like Starbucks but doesn't have the anti-labor baggage that goes along with it?"

2024-10-09 09:53:21

- reply

#WindowsHello will soon offer users an option to sync their passkeys to their Microsoft account making them no longer device-bound
again, this changes the threat model for enterprises, if they care about such details. a device-bound passkey means the private key material exists no where else in the world. Cloud syncing of private keys is basically the same for TOTP private seeds -- those cloud providers, while encrypting the data at rest, do in fact have clear-text access to those secrets -- making them targets of social engineers, law enforcement, nation states and other hackers.
(only an end-to-end encryption cloud storage solution like Apple's Advanced Data Protection would protect synced passkeys)
HT @npub1sml…np04
https://blogs.windows.com/windowsdeveloper/2024/10/08/passkeys-on-windows-authenticate-seamlessly-with-passkey-providers/
#infosec #IAM #cybersecurity

2024-09-28 07:33:32

would a #Tor exit relay be useful to you if this was its exit policy?
https://disobey.net/system/media_attachments/files/113/214/015/220/404/441/original/1f98279087dd2c85.png

2024-09-20 19:36:02

Google #chrome / #chromeOS no longer device-bound #passkeys
Changes the threat model for enterprises, if they care about such details
https://techcrunch.com/2024/09/19/google-rolls-out-automatic-passkey-syncing-via-password-manager/
#infosec #IAM #cybersecurity

2024-09-17 14:28:23

i'm not finding a solution for getting #Wireguard working on #macOS15 #Sequoia
uninstall/install (from the app store) does not work. restarts do not work. none of my tunnels will connect
anyone having/not having this issue?

2024-09-14 15:28:31

fyi #ASUS #AM4 #AM5 motherboard owners, the new BIOS just dropped
1. Updated to AMD #AGESA PI 1.2.0.1a.
2. Resolved the #SMM Lock Bypass and Sinkhole security vulnerabilities.
3. The control limit mode (cTDP to105W) was moved to a more accessible location for different processors.
(ROG STRIX B650E-I GAMING WIFI link)
https://rog.asus.com/us/motherboards/rog-strix/rog-strix-b650e-i-gaming-wifi-model/helpdesk_bios/

2024-08-31 13:41:42

- reply

personal opinion as a matodon admin, i hope that ATprotocol and activitypub will be able to interop at a protocol level someday soon

2024-08-27 09:28:01

do you have #ADHD? are you medicated for it?
my partner has #OCD and #ADHD. because of his #OCD, he is afraid to even try an #ADHD medication
and nearly every day in the latter half of the day he suffers from a debilitating "deadness", which we presume is related to his conditions
can you share your positive experiences with #ADHD meds to help encourage him to try them?

2024-08-25 15:56:03

#durov hot takes
- data is toxic.
- if telegram were e2ee to begin with (by default) then no one would have any idea what were actually happening on said platform.
- telegram isn't made to be that way, by design. you reap what you sow.
- you don't make billions by protecting everyone's privacy.
- content moderation can't scale unless you build in mass surveillance systems. (or you're federated and community responsibility is not centrally managed)
telegram/#durov is being targeted because, since it's not e2ee, it's very easy to find 'bad behavior' on telegram, which makes it an easy target for these kinds of charges
either this #durov case will 1) cause more tech bro companies to build in more surveillance systems, or 2) build more e2ee into said systems, or 3) both depending on capitalism motivations
the US is less likely to come down hard on American corps because money

2024-08-19 14:56:46

Hello fedi,
I'm helping my partner use my Win11 gaming PC to record #Minecraft content for #YouTube and #Peertube
We've installed #OBS and these attached screenshots are the changes i've made. We don't know a lot about video encoding or anything related, this is all new to us. Can you help us maximize video and audio quality, for the following hardware specs?
RTX 4090
64GB DDR5-6400
Ryzen9 7950X3D
Alienware AW3423DWF 34" OLED Ultrawide (HDR) @ 3440x1440 @ 165Hz
#video #encoding #streaming #recording #fedihelp
https://disobey.net/system/media_attachments/files/112/989/228/393/991/884/original/9144c1d85f26f088.png
https://disobey.net/system/media_attachments/files/112/989/228/402/512/089/original/aa95a39c3d49c3a8.png
https://disobey.net/system/media_attachments/files/112/989/228/405/356/029/original/a42ad554673882eb.png
https://disobey.net/system/media_attachments/files/112/989/228/416/461/399/original/b02cb79f02976591.png

2024-08-10 17:58:22

- reply

does anyone know how to get #SignalProxy working behind Cloudflare? @npub1rkw…5q62
#signalapp #signal

2024-08-08 11:10:44

who at #Mastodon HQ do i need to bother about responding to an email kindly requesting they add new Mastodon server to their public listing of available servers?
i submitted one 2023 September 23...

2024-08-07 14:25:27

i wish people's Mastodon profiles would show the top 10 used hashtags that a person posts about, so it's easier to understand what i'm getting into when i follow someone. also the posts per day count. and like github, a heatgraph of how often they've been posting
#Mastodon

2024-06-15 15:24:42

can anyone recommend a book about intimacy that takes into account neurodiversity?
@npub10v4…s27h
#neurodiverse #adhd #autism

2024-06-07 14:03:36

this should be the headline
"As reported by Bloomberg, Apple won’t force users to use the new AI features and will make the capabilities opt in."
https://www.theverge.com/2024/6/7/24173528/apple-intelligence-ai-features-openai-chatbot

2024-05-31 13:02:24

- reply

thank you!!

2024-05-31 13:00:43

- reply

ooohhhh... wow that makes zero sense. so i have to manually copy 4500 pages of custom emoji...

2024-05-31 12:56:49

- reply

yes, 4500 pages of enabled, remote emoji

2024-05-31 12:53:59

- reply

but they never show up as options in emoji
https://disobey.net/system/media_attachments/files/112/535/800/280/889/424/original/9b06a3619dba88d7.png

2024-05-31 12:36:38

am i missing something?
are custom emojis not... federated?
like, i can see all of these custom emoji from other servers in my admin interface
but... i can't just... get/have/import/use them? directly from the servers that i've federated with?
i have to do some command line bullshit?
#mastoadmin

2024-05-18 13:44:46

here's a taste of a blog post i'm going to publish soon, trying to bring about some simplification and understanding around passkeys compared to YubiKeys
#fido #fido2 #webauthn #passkey #passkeys #yubikey #yubikeys #passwordless #auth #authenticaation #okta #identity #infosec #security
https://disobey.net/system/media_attachments/files/112/462/381/668/439/085/original/be4816538325a870.png

2024-05-18 09:19:56

IT helpdesk (Lapsus$): *ring ring*
Employee: hello?
IT: Hello! This is Roger from IT. We've identified a problem with your Okta access and we need to replace your company Yubikey. We've already mailed you a replacement, return your old Yubikey in the box that will have a return shipping label. Please write down your company email and Yubikey PIN on a sticky note and include it in the box so we can fully remove the old Yubikey from Okta. The delivery is scheduled for today so your work wont be impacted come Monday.
employee: ok!
yes, #phishing a #Yubikey is possible

2024-05-16 13:40:05

i think @npub1ppu…d8t7 needs more followers
#linux

2024-03-25 20:17:24

where should i buy #coffee beans from in #Europe / #Netherlands?