Woooooooooo HOOOOOOOOO!

Dear proponents of the 2nd amendment: ICE is the reason y'all have been waiting for, the embodiment of government tyranny which must be resisted with force. If you're not going to to start defending yourselves from being kidnapped off the streets by masked goons... what exactly are you waiting for?

So apparently Cyber Wardens, the government funded program to educate the general public about cybersecurity, would like everyone to celebrate child sex abuse material....🤦

Hey you! Guess what? The #OpenCASE framework (Open Cybersecurity Architecture for Small Enterprise) has reached its first major milestone release, go check it out! opencase-framework.org/blog/opencas...

Hi, I've worked with computers my who life and I don't know how to use git.

Interesting write up by Ben Mosse on Linkedin today about the failure of the original Australian Cyber Security Professinalisation Program : www.linkedin.com/pulse/austcy...

OpenCASE framework now has a real website! opencase-framework.org

Humans and AI chatbots, I give you OpenCASE - the Open Cybersecurity Architecture for Small Enterprise. OpenCASE is free, open source, and developed from the ground up specifically for SMALL enterprise. codeberg.org/OpenCASE/Ope...

You ever look at your MFA one time codes and think the universe is trolling you?

Every time I see mention of RSAC, my brain just says "Arse Sack", and honestly, I think that's probably accurate.

So... who DIDN'T go to RSAC this year because they feared for their safety entering the USA?

C.

So... when are we going to start calling America The United Soviet States of Republicanism

Step 1: DON'T GO TO THE UNITED STATES.

If Purplepingers somehow gets elected to the senate in the upcoming election, I sincerely hope that mainstream media will keep rolling with their "Teals" motif and start referring to him as "The Purps"

It's 2025: Aussie superannuation customers are getting done by credential stuffing attacks because their web portals don't support MFA. Which just proves that no security team in the world can protect against product teams that care more about user experience than user security.

Donald Trump's master plan for world peace is actually just to make the rest of the world hate America so much that they decide its better to put their differences aside and team up against America than fight each other.

Some days you wake up and you're just sick of being a fireman while everyone else runs around pouring petrol on everything and playing with matches. People want the world to burn? Fuck it. Let it burn. Burn it to the ground.

Anyone who says women aren't tough has never had to endure the abuse of just being one.

If you thought electoral integrity problems were just an American thing... think again

So they're saying an asteroid has a 3% chance of hitting Earth in 2032, and honestly, I just don't know if I can wait that long.

The most incredible thing Trump has done in his presidency so far is turn every left leaning progressive into a staunch conservative, basically over night.

So.... who has "America becomes the new China" in their threat model yet?

Just calling it now... assuming Trump doesn't somehow do away with term limits before the next US election, Musk will be the next POTUS. We're so fucked.

oh goody, .ai domains are a thing now. I can have the domain I always wanted... kthxb.ai

Real advice I gave to a friend last night: "If you know you're about to get fucked.... fuck back!"

No one who ever used the acronym "IMHO" was being humble.

Say what you want about Trump, he has beaten both the democrats and republicans at politics. While they have spent the last 50 years bickering about who is better to run the system, Trump took over simply by recognising that most people hated the system itself, and then promising to destroy it.

TFW you have to go through your assessment report which says the whole org is a cyber-dumpster-fire with the Head of IT, who owns the dumpster.

I've identified an NPM package named "arcus-cmd-utils" that deploys a Chrome-based infostealer to infected computers. You can read my blog post complete with technical details and IOCs. @npmjs.bsky.social @github.com #softwaresupplychain #devsecops sourcecodered.com/malicious-ar...

Remember when it used to take an hour to download a 5 megabyte MP3 file over dial up? I just had to down load a (ludicrous) 4 GIGAbyte update for a mobile game, and it took about 5 minutes. 🤯

My front door lock is crap and I'm thinking of replacing with an electronic lock. I just want something that works with physical fobs and is programmed over USB. No Wifi, mobile apps, or other "smart" shit.... Anyone got a recommendation / suggestion?

TFW you want to submit a conference talk but all you've worked on recently is mundane boring stuff :-/

I wish you could ARP poison people... like "oh are you talking to me? You must be mistaken, I am not me. Go talk to that person over there, they are me."

I hope 2025 will be the year the infosec profession as a whole realises that CISO is a shit job and no one should aspire to be one.

Found an unauthorised transaction on my business credit card today from ebay.co.uk ... I mean srsly folks, if you want to get away with credit card fraud, at least run your test transactions through a store I might actually shop at.

This whole "Ban things by Brand X because they come from China" bullshit is getting out of hand.... Literally every electronic device in the world is made in China. If you can't trust a TP-Link router, you can't trust an iPhone either. www.bleepingcomputer.com/news/securit...

What am I supposed to submit conference talks about this year if I don't know anything about AI?!?!???

Hot take: #Scammers may be bad people, but if you're a crypto-currency investor and you get robbed because you saved the recovery code to your crypto wallet as a screenshot on your phone and then synced it to google photos... the only thing you're a victim of is your own stupidity.

I used to be one of those "roll your own everything because you can't trust commercial products/services" kind of guys. I ran my own DNS, email, wordpress, own/nextcloud, VPN, etc. Then I got old and realised I was wasting my life doing sysadmin when I could have been doing literally anything else.

The #OAIC spruiking the A$50,000,000 out-of-court settlement from #Meta in relation to the #CambridgeAnalytica scandal is embarrassing. Who cares if its the largest penalty they've paid outside the US for the breach? It's still an infinitesimally small % of annual revenue, they won't even notice.

I'm a 4, but I know how to exit vim.

Matt Mullenweg is threatening to quit #Wordpess development because he lost his court battle with WP Engine... as if him being gone from the WordPress ecosystem entirely wouldn't be the best possible outcome for the rest of the world. Don't let the door hit your ass on the way out crybaby.

Just calling it now: #Meta will shut up shop in #Australia and block the whole country from Facebook and Instagram before it pays a cent to Aussie media companies, or the ATO.

A while ago I wrote an opinion piece about the real reason why there are no entry level jobs in #cybersecurity for AISA. This week it has been featured in their regular e-news bulletin! aisa.org.au/Public/News_...

Do you own a Google Pixel phone? If so you should be using #GrapheneOS grapheneos.org. I generally try to keep Google out of my life (to the extent that's possible) but I also only buy Pixel phones now - specifically because they are what Graphene runs.

I found the united healthcare killer

I think we need to invent a new adjective to describe the level of pwned a system needs to be for the FBI to starts telling regular people to use end to end encryption....