shellsharks

Infosec researcher | Indieweb enthusiast | Find me @ https://shellsharks.com

#fedi22 #infosec #cybersecurity #tech #indieweb #apple searchable

Profile picture: A red shark holding a terminal window shaped like a surfboard. The terminal reads “> whoami shellsharks”

https://keyoxide.org/FA7AC5E3626AEF016A5AD0BB172E73E0A585273E

Blog: https://shellsharks.com
Personal Mastodon: https://mastodon.social/@sass
Shark after Dark 🌙: https://shellsharks.social/@afterdark

Public Key

npub1z3mcjcv2xhwpqgsx7hvmwqfu8lmczcrxkw4lnr2v07hg2fqsm7xsu5zn2f

NIP-05 Address

shellsharks_at_shellsharks.social@momostr.pink

Profile Code

nprofile1qqspgaufvx9rthqsygr0tkdhqy7rlaupvpnt82le34x8lt59ysgdlrgd5av8n

Author Public Key

npub1z3mcjcv2xhwpqgsx7hvmwqfu8lmczcrxkw4lnr2v07hg2fqsm7xsu5zn2f

Show more details

Last Notes

2024-06-21 19:46:36

- reply

Truth.

2024-06-18 15:06:05

- reply

Welcome back! 👋

2024-06-17 22:45:27

- reply

explains a few things... 🧐

2024-06-17 21:09:48

- reply

le hi? 👽

2024-06-17 19:31:54

- reply

here ya go https://video.infosec.exchange/

2024-06-17 18:46:41

- reply

omgz? 🐚 🦈 🦈 🦈 🍺 🍺

2024-06-15 12:37:13

- reply

my dream as a parent 😄🤞

2024-06-15 02:44:13

- reply

There's at least a few helpful folks out there. I like to count myself in that group. I've been fortunate enough so far and if I can pay any of that forward I will. The world could always use more though, that's for sure.

2024-06-15 02:41:42

- reply

Welcome!

2024-06-15 02:09:59

- reply

to be fair, three of those seem to be instances meant to clone down Twitter posts and not their actual main fedi presence yeah?

2024-06-14 23:04:09

- reply

I don't know you personally Adam and I know nothing about this Sean person (thank the heavens). Your work, your books, your blog, your posts have all been inspirations for me though. I'll echo what others have said on this issue, we rally together and stand with you. Here's hoping what little sanity is left in the world can find its way to your situation here. Wishing you the best! 🧡

2024-06-14 18:47:02

- reply

Good luck!

2024-06-14 18:45:29

- reply

Welcome! (Cool blog 👀 😃)

2024-06-14 18:44:16

- reply

We gotst the infosec over here for sure. Welcome back!

2024-06-14 16:56:02

- reply

Haven't you heard? Everything's a CVE!! 😆

2024-06-14 15:06:47

- reply

I suppress duplicate boosts but I definitely don't mute them. Boosts are awesome! They are the “algorithm" in many ways and how you discover more things to follow. MOAR BOOSTS!

2024-06-14 15:02:42

- reply

If it makes you feel better, my ENTIRE instance agrees with you 😅

2024-06-14 12:05:32

#followfriday!
I only have one net new #infosec / #cybersecurity follow from the past week, but a great follow none-the-less!
- @npub1pfn…8d8k
Some other great accounts to follow ⬇️
- @npub1r3d…a5gd (high quality pentesting-related posts)
- @npub14g0…znd6 (very active threat/vuln info - from a goat no less)
- @npub1lcc…lcye (if you're somehow not already following you should - absolutely crushed the microsoft recall research and reporting)
ℹ️ My follow friday archives here: https://shellsharks.com/notes/2023/10/20/infosec-mastodon-starter-pack

2024-06-13 11:40:06

- reply

Howdy! 🤠👋

2024-06-13 10:46:38

- reply

get it.

2024-06-13 02:24:38

- reply

Every year it seems to be a new "thing” that all these vendors have stocked. I remember the year I went to RSA and flew home with like 30 fidget spinners. I had to leave another 20 or so just in my hotel room 😂.
Yeah, cons rarely give much actual "info”, especially considering talks are readily available to those not even at the con. But I've been to a few talks that were worth it in my years…
Have fun!

2024-06-13 02:21:42

- reply

Here is a bunch of IndieWeb-related search engines/resources/tools I've compiled https://shellsharks.com/indieweb#explore-the-indieweb. There are some other resources in there in terms of making it more accessible to people looking to "join" the IndieWeb as well.

2024-06-12 19:43:52

- reply

I found myself on there 😄 so that was nice/surprising https://shellsharks.com/notes/2024/05/23/stracting-myself

2024-06-12 13:51:48

- reply

Where did you come from? (I'm also interested in hearing more about your "rebrand”). You may be interested in archiving your posts from your old account and exposing them on a domain you own. I've done something like that here https://shellsharks.com/toots/infosec-exchange/shellsharks/ as I used to be on infosec.exchange.
I got the idea from this post https://arnaught.neocities.org/blog/2023/07/23/mastodon-archive-on-website.

2024-06-12 13:28:09

- reply

You joke, but if it can fit 3 kids and my gear, I'd consider it... Not enough full-size EVs on the market… 😜

2024-06-12 13:26:23

- reply

I’m not sure which of these has a newsletter capability at all, but here's a list of IndieWeb friendly hosting platforms you could investigate... https://shellsharks.com/indieweb#hosting

2024-06-12 12:30:08

- reply

You joined a great instance for tech/infosec but also a great instance in general. Welcome! 👋
Maybe this can help bootstrap your Mastodon journey https://shellsharks.com/notes/2023/10/20/infosec-mastodon-starter-pack

2024-06-11 15:58:53

- reply

Guess I might be running Sequoia on my 2019 Mac Pro until it dies, or I do. Whichever comes first. 😅

2024-06-11 12:42:05

- reply

Echo reply from the Fedivoid! 👋

2024-06-10 14:16:53

For anyone looking to fill out their #cybersecurity #RSS client, consider perusing this gigantic list of indie #infosec blogs https://shellsharks.com/infosec-blogs (I also have commercial blogs at the bottom). I've provided a (somewhat recently updated) .opml file for easy import as well.
If you have an #infosec blog and are not on the list and would like to be, just send me a msg!
#mondayblogs

2024-06-07 14:07:49

- reply

Hello hello! 👋

2024-06-07 12:55:02

The return of #infosec / #cybersecurity #followfriday! Some great accounts I've discovered from the past week ⬇️
- @npub1akt…m2ly
- @npub1vqv…c08q
- @npub12cj…z47p
- @npub1y5t…3zvs
...and my regularly recurring segment on folks from neat instances across the Fediverse :fediverse: …
- @npub1u9w…8ja3
- @npub1d0v…0xet
Drop 'em all a follow!

2024-06-06 20:38:35

- reply

Q: "How did it flop”
A:
- AI usecases (at least public ones) seem to be 98% crapware
- Nobody wants to pin something to their shirt AND talk to it…
- Phones already exist and are better and everyone has one
- It costs $700 and has a subscription
- Did I mention it doesn't work?
Nothing about Humane failing is surprising to me. The only reason any AI-related things continue to survive is they are propped up by investment money or actual successful product lines.

2024-06-06 20:11:03

- reply

Howdy! 🤠👋

2024-06-05 17:04:20

- reply

thanks!! 🙏

2024-06-05 13:50:30

- reply

Interesting. I've used Jekyll for my site for 5 years and haven't had to do a single thing with Ruby. I understand theres stuff i COULD do, but just haven't needed to. 🤷‍♂️

2024-06-05 13:37:13

- reply

Howdy! 🤠👋

2024-06-05 13:33:08

- reply

Is there something you are unhappy with about Jekyll? My site is built using Jekyll and I think it's great (feel free to check it out)! Easy to use and has more than enough capability for what I need. I couldn't tell you what other SSGs offer that Jekyll doesn't though.

2024-06-05 13:28:35

- reply

Yes! That inventory needs ownership info too =).
I've built/run a few VM programs, the biggest hangups have always been...
1. (aforementioned) Asset Inventory
2. Vuln Prioritization (you can't rely on the tool's severity output, so how can you automate re-risk-ranking?)
3. Scan fidelity (targeting, tuning, discovery, etc...)
4. Reporting (everything from delivering prioritized scan findings to system owners to delivering actionable intel to mgmt)
I should write a post…

2024-06-04 16:03:43

Thanks to @npub1jns…zydu for taking the time to chat! It was a fun episode 😃. https://podcast.shellsharks.com/@ShellsharksPodcast/posts/50494236-a48d-47f5-a365-49b493c4a920

2024-06-04 14:52:01

- reply

FWIW, I've been using Jekyll for 5 years on my site (with GH pages) and it's been very easy to learn and use. I don't consider myself a developer-ey type and have little issue with the Githubby-ness of it all. If you can figure out how to push to the repo (the very basics) and pull down from a repo if you're on a different endpoint writing posts then you're fine. I've also had to learn effectively nothing about ruby. For a solo-site/blog operation, I think it’s a great choice.

2024-06-04 10:32:34

- reply

An old thread with some discussion on this... https://infosec.exchange/@neilmadden/111776304723415347

2024-06-03 16:00:41

- reply

Yeah, it was one of my motivations to move off the infosec.exchange server. Jerry is an AWESOME admin and that server is really great but I wanted my social identity to not appear to be only infosec-related. FWIW, despite the name, video.infosec.exchange and infosec.exchange are open and welcome to all, not just infosec folks.

2024-06-03 14:37:54

Anyone out there who has a #nostr acocunt want to help me test something? Can you search for "shellsharks@shellsharks.com” and see if my profile returns? (As opposed to searching my npub adress). I am testing out the instructions from @npub10y8…6et3 here https://wedistribute.org/2024/05/nostr-nip-05/ to set up a NIP-05 Verified Nostr Address. Thanks!
#fedihelp #askfedi

2024-06-03 14:16:02

- reply

I LoL'ed at this. But very true.

2024-06-03 14:15:16

- reply

If only I could get one of those invites in time!!! 😫

2024-06-03 14:14:19

- reply

This could be an option? https://video.infosec.exchange

2024-06-03 14:10:16

- reply

I sometimes wonder if I would love Pokemon as much as I do if it weren't for the nostalgia. The answer is probably, yes - but not as much. You'll have to post an update after your playthrough and let us know how you liked it. Oh and choose Bulbasaur 🌱😄

2024-06-03 14:08:03

- reply

This kinda post always makes me think of this https://goblin.camp/@sugar/111715317154103020.
For "normal” (non-influencer / celebrity types), I think getting/amassing followers is just something that takes a lot of time. For me it's always been a trickle of people here and there week after week. In the very few occasions I've gotten more than that it's been either because I was on some "list of infosec people” which happened back in 2022 when everyone was coming over or when a big account boosts me 🤷‍♂️.

2024-06-03 14:04:04

- reply

I use #Feedly (for now) as the backend service and #Reeder as my client across my various devices. Thinking of moving to self-hosted #FreshRSS soon though.

2024-05-31 17:44:36

Some weekend reads…
#IndieWeb
- https://humanewebmanifesto.com
- https://derekkedziora.com/blog/after-the-age-of-the-personal-blog?ref=feedle.world
- https://reillyspitzfaden.com/blog/05-17-2024
- https://paulrobertlloyd.com/2024/136/a1/indieweb_principles/
- https://jamesg.blog/2024/05/23/sharing-older-blog-posts/
- https://birming.com/blogging-back/
- https://alexsci.com/blog/blogroll-network/
- https://www.claudinec.net/posts/2024-05-26-indieweb/
- https://kangminsuk.com/blog/workshops
- https://digiday.com/media/why-publishers-are-preparing-to-federate-their-sites/
- https://mikegrindle.com/posts/surf
- https://coleb.blog/posts/cheers-to-the-small-web
#Infosec
- https://lcamtuf.substack.com/p/im-not-cheerleading-for-the-cisa
- https://www.darkreading.com/cybersecurity-operations/rsa-2024-cisa-secure-design-pledge-necessary-toothless
- https://crankysec.com/blog/dead/
- https://crankysec.com/blog/elif/
- https://tldrsec.com/p/dont-security-engineer-asymmetry

2024-05-31 13:38:20

- reply

Thanks!!! 🧡

2024-05-31 13:16:04

#followfriday! Here's some #infosec / #cybersecurity accounts I've discovered from the past week to check out!
- [@an00brektn](https://infosec.town/@an00brektn )
- @npub1tsl…s7yk
Plus! Here's some folks from across the Fediverse who's instance names are awesome.
- @npub1xln…kxwe
- @npub1vv8…pum3
- @npub1v03…6jme
- @npub1sxg…76fk
- [@kopper](https://brain.d.on-t.work/@kopper )
- @npub1h2n…d0cg
- @npub1dny…skl9
- @npub1sm4…qlcm
- [@EmilyK](https://spacelase.rs/@EmilyK )
All previous follow friday posts: https://shellsharks.com/notes/2023/10/20/infosec-mastodon-starter-pack#for-infosec-folks
Giant list of cool instance names (and those from said instances) here: https://shellsharks.com/notes/2024/03/29/the-whimsical-corners-of-the-fediverse

2024-05-30 17:58:31

Today marks 5 years since I published the first post on shellsharks.com. To mark the occasion, I wrote a little note on my site about the blogging/site-having journey thus far.
https://shellsharks.com/notes/2024/05/30/5-years
Thanks to everyone who has bothered to read anything I've written and to those who have reached out to me over the years to give feedback or tell me they liked something I've put out there. 🧡
#blogging #indieweb #weblogpomo2024

2024-05-30 14:45:58

- reply

I like it. It sits neatly between /about and /interests. Got another one for ya @npub12vd…57e8 😄

2024-05-30 03:11:12

- reply

I've had this saved https://firstbranchforecast.com/2022/11/30/members-of-congress-on-mastodon/

2024-05-29 15:49:10

The first episode of "Season 2" is live! My thanks to @npub1re4…mq7d for taking the time to chat.
You can find links to the show feeds and more info here https://shellsharks.com/podcast. (It's available on the usual suspects though, e.g. Spotify, Apple)
https://podcast.shellsharks.com/@ShellsharksPodcast/posts/e8034e70-3f6f-43d6-9613-0754a993d3c6

2024-05-29 01:16:09

- reply

In my experience, hot cocoa is (hot) water + chocolate powder and chocolate milk is...well, milk (w/ chocolate)

2024-05-29 01:05:15

- reply

Absolutely. I only wish I had been more creative when I came up with mine 🤷‍♂️
I've been logging a few of the fun one's I've come across the past few months here though 😄 https://shellsharks.com/notes/2024/03/29/the-whimsical-corners-of-the-fediverse

2024-05-28 23:59:52

- reply

Quite the ecosystem now! At this point, I feel I'm going to have to follow @npub1uk9…xemg and create a /slashes 😅

2024-05-28 20:10:36

- reply

I never used Twitter much, even in the “good times” of Twitter (if that was a thing). That said, I've used Threads which boasts a decently high active user count and will admit I get pretty good interaction there despite not having a large following. I can only attribute it to them having a decent algo that puts my stuff in front of people who don't follow me and the fact that people there seem very willing to engage on rando posts like mine.
Here is pretty good tho sometimes quiet.

2024-05-28 19:59:21

- reply

It's super lively here imo, especially given the very real fact that the active user base is noticeably smaller than other large platforms. Things become a lot less truly "social" when you have 100's of responses to a single post, every time you post. Like, how can you manage that many conversations? Being here, having a few simultaneous conversations is much more human and real.
Besides, if/when Threads federates fully, we'll have even more folks 🤷‍♂️

2024-05-28 19:42:45

- reply

imo, "roadmap" seems more site-specific and less "general things I need to do”. But call me biased because I use /roadmap 😄

2024-05-28 19:41:17

- reply

It's the place to be! 😄

2024-05-28 14:56:42

- reply

I was very easily convinced. I'm XMPP-ified now

2024-05-28 14:55:20

- reply

FWIW, i have my public "todo" list on my /roadmap page https://shellsharks.com/roadmap and to a lesser degree my /ideas page https://shellsharks.com/ideas. I think having a changelog is a great idea though!

2024-05-28 14:50:10

- reply

A mass grass-touching event is underway perhaps 😄.
I do think warmer months here in the northern hemisphere can directly correlate with less social-media / computer time for folks as they spend more time outside 🤷‍♂️.
With the bsky bridge up and improving and full-threads federation on its way this year, I think traditional Fedi will continue to get even livelier even if we technically have less and less truly active users.
All I know for sure is that I'm not goin' anywhere 😃.

2024-05-28 14:39:37

- reply

I think so. Mine is very much manual! https://shellsharks.com/changelog. As for @npub1was…8n33 ‘s question of "who is it for”. I'd say its for me. I (at times) want to know when I added something so it can help with that. I also know some people who frequent my site who go there to see what I've added recently so there seems to be a small audience outside of myself too.

2024-05-28 01:32:33

- reply

I didn't defederate anything tbh. I'm on masto.host so I'm guessing I either inherited some default block list from them or somehow I've floated through the Fedi-ether thus far unharassed 🤷‍♂️
As for content, I feel like I'm getting a pretty good feed. I was using the infosec.exchange relay for a bit which helped. I also have close to 2k followers and 1k following which helps move my stuff around and get stuff into my feed.

2024-05-28 01:30:04

- reply

You're right! Doesn't do anything for an algorithm but I do like to think that whoever is getting those star/boost notifications feels double happy about it. Also a boost from an alt account that has different followers could give that post different exposure so that's cool too 👍

2024-05-28 01:25:43

- reply

Yep exactly. I star what I like and boost what I like, how many other stars or boosts it already has makes no difference when I make the decision.

2024-05-28 01:17:44

- reply

Thoughts…
1. Go to their profile/post on their server
2. You can look directly at posts on their server
3. Post stats is something people on traditional social care about. Time to deprogram. 🤷‍♂️
4. This is true. Not having an algo feed is Masto's greatest strength and biggest weakness and that's especially true on solo instance
5. Not sure I realized this. I use an alt account on a big instance to follow tags tho
6. Yes, moving a big following to a solo instance is the way to go tbh.

2024-05-28 01:13:29

- reply

Great to see it. omg.lol does so much for the IndieWeb, the IndieWeb is a place for humans, i.e. omg.lol does a lot for humans. Thank you! 🧡

2024-05-28 01:11:17

- reply

Mostly metal-type stuff... This or The Apocalypse, Affiance, All Shall Perish, Periphery, In Flames, Trivium, Metallica, Iced Earth, Erra, Eidola, DragonForce, Chevelle, DGD, Eidola, Novelists
(To name a few)
The album Memory Palace by Intervals is pretty sick too.

2024-05-28 00:23:43

- reply

sounds like #threads

2024-05-27 11:41:40

- reply

I did as well. Had to revert. 🤷‍♂️

2024-05-26 13:44:20

One great thing about having multiple alt accounts on Mastodon/Fediverse is that when I come across something I really like, I can star/boost it more than once. #protip ⭐️🚀

2024-05-26 13:43:05

- reply

According to the Economic Policy Institute (https://www.epi.org/publication/ceo-pay-in-2020/) the average pay disparity between CEOs and their typical workers is 351-1 (and that was 4 years ago). So this little diddy should go...
🎶 Boss makes 35 dollars
I make a dime
That's why I eat on company time 🎶
(Politifact has CEO pay disparity pegged at nearly 400-1 now in 2024... so yeah gross - https://www.politifact.com/factchecks/2023/sep/21/bernie-sanders/do-ceos-earn-400-times-more-than-their-typical-wor/)

2024-05-26 13:35:13

- reply

Yeah, people have become too reliant on algorithms.
I write a little bit about why the Fediverse "churns” here https://shellsharks.com/notes/2024/03/29/why-does-the-fediverse-churn.
I also write about quality vs quantity as it relates to Fedi vs "traditional" social media - https://shellsharks.com/notes/2023/11/17/quantity-over-quality-quandary
It takes work to make your Fedi feed good and stay good, work is why it doesn't seem to stick for people.

2024-05-26 13:22:21

- reply

Oh jeez so many…
-> Web Developer
-> Front-End Software Developer
-> Infosec Compliance Analyst
-> Security Analyst
-> Security Engineer
-> Application Security Consultant
-> (Back to) Security Engineer (of various domain specificities and seniority levels)

2024-05-26 13:18:08

- reply

I've heard the most buzz about buttondown and beehiiv with maybe buttondown being the better of the two? I know buttondown has been investigating some fediverse-related integration too fwiw.

2024-05-25 02:15:24

- reply

I've been thinking of writing something about why people move to or like bsky better and why others have never left Twitter/X. Would you mind sharing what it is that you like about bsky versus Mastodon/Fediverse? Is it the people/culture/accounts that are there? Is it feature-set? Both? Appreciate it!

2024-05-25 02:12:03

- reply

Yeah, it's nice here 😃. Never feels like work to scroll through for me.

2024-05-25 02:10:19

- reply

1800 posts where half will be shredding Microsoft and Google. Enjoy the lol’s!

2024-05-25 00:39:45

- reply

There's two problems I see..
1. People have been (unfortunately) conditioned to see AI and assume it means being force-fed AI in an either opt-out fashion or in such a way that you can't turn it off.
2. AI is for many, synonymous with content theft and pointless consumption of resources (electricity/water), so they'd rather not use anything that supports it in any way.
I can believe the iTerm maintainers just innocently want to continue to offer a diverse and modern feature set

2024-05-24 19:21:03

- reply

I’ve seen some mention of it here but haven't really explored it much. I've put it on my list of things to do sometime 😃

2024-05-24 15:52:18

The /c/cybersecurity community on Infosec.pub has new icon and banner artwork courtesy of @npub1sqd…zp3e ! It already makes the space look nicer if you ask me 🎨 😄
Go check it out and if you haven't already, join the community and start sharing and interacting! https://infosec.pub/c/cybersecurity
#infosecpub #lemmy #jerryverse @npub15xh…nj6v

2024-05-24 15:41:25

Recommending some newly discovered #infosec / #cybersecurity folks for #followfriday...
- @npub1j8h…95d2
- @npub18zp…cp0m
- @npub1k6j…eep8
- @npub1w37…kuuj
- [@an00brektn](https://infosec.town/@an00brektn )
- @npub1hp3…unxy
Also, for the sheer hilarity, I recommend following @npub17hk…e496 iykyk
Have a great weekend!

2024-05-24 15:34:25

- reply

This seems like a cool one to add that is new! https://slashpages.net ( @npub12vd…57e8 )
Here's two sites that maybe fit what you are looking for that start with “W”...
- Whimsical.club: https://whimsical.club
- Weird Wide Webring: https://weirdwidewebring.net

2024-05-24 15:24:50

- reply

It's fun here! I like it. Here's a little "starter pack” if you're interested...
https://shellsharks.com/notes/2023/10/20/infosec-mastodon-starter-pack

2024-05-24 14:24:15

- reply

Gotta love a funny or clever 404 page. I’m quite happy with the adorably derpy "shark” that reps my 404 😛 https://shellsharks.com/404

2024-05-24 01:57:41

- reply

It's on the official roadmap for Mastodon at least https://joinmastodon.org/roadmap. (And available as others have mentioned with certain clients including Ivory).

2024-05-24 01:39:22

Microsoft introduces Windows "Precall” - *leverage AI precognition to scroll into your computing future*
https://cdn.masto.host/shellsharkssocial/media_attachments/files/112/493/511/155/019/658/original/d736c65dd3195e87.mp4

2024-05-24 01:35:35

- reply

Obviously DNS, it takes everything down! 😆

2024-05-24 01:30:36

- reply

I find the idea that Microsoft’s AI says "word" to agree with someone pretty dang hilarious 😂

2024-05-24 01:16:19

- reply

My favorite part about this is the Janet Jackson trending search given that her song Rhythm Nation could literally DoS XP laptops 😂 (https://www.bleepingcomputer.com/news/security/janet-jacksons-music-video-is-now-a-vulnerability-for-crashing-hard-disks/)
#cve202238392

2024-05-23 20:29:37

- reply

True, might need to make a /chipotle.json so they can ingest it programatically.

2024-05-23 20:03:00

- reply

Omfg 😂
“Hey I'm putting together a chipotle order, want anything?”
“Yeah, just check out my /chipotle”
✨🌶️ Magic. 🌶️✨
Brought to you by the #IndieWeb

2024-05-23 17:13:41

- reply

savage 🤣

2024-05-23 15:30:46

- reply

Data breach/security incident databases/sites is actually a bit crowded (I have a bunch I've been documenting here https://shellsharks.com/infosec-tools#breaches-incidents--leaks). That said, this site looks *really* good! A few questions…
- How is your data sourced? (I'm assuming from a lot of places). Given the sheer volume of incidents though I wonder how your team plans to stay on top of it all.
- Is there a place where the "Severity" score is explained? i.e. how is it calculated?
- Is there an API?
Awesome stuff!