Replying to
@catsalad@infosec.exchange oh shit, vibes are about turn …. Immaculate
Remote
Tero Hänninen
@0xtero@ohai.social
mastodon 4.7.2Network janitor. Bug fixing pretengineer. Friendly neighborhood cyberman. Constantly regressing toward the mean. Slowly regarding silent things.
142 Followers
570 Following
35 Posts
Joined August 28, 2023
About Me:
Security Fest:
Reading:
Replying to on infosec.exchange
Replying to
@GossiTheDog I like the part where people are using Claude to write CLAUDE.md to explain Claude about directory traversal.
Nothing in this supply chain could ever go wrong.
Boosted by @cstross@wandering.shop
Replying to
@cstross@wandering.shop @n_dimension@infosec.exchange Oh. I’d already forgotten bored ape NFTs. This timeline is so tightly packed with rubbish even recent past have overflown from my cognitive context window. Sort of like the low earth orbit after Elon gets his way.
Replying to
@paulschoe@mastodon.world having taken two kids through this ”digital native” era, which basically just amounted to giving them iPads and laptops and believing that would magically transform into relevant tech skills, I’m happy for future parents who don’t have to do pen and paper writing exercises at home with their kids after school. The Swedish school system has, for a long time, been a mess and needed a bit less blue-eyed , ”back to basics” strategy.
Replying to
@JessTheUnstill@infosec.exchange
"Procrastinate until final round.
Gains +50 to all stats during final round"
Replying to
@MisuseCase@twit.social @GossiTheDog@cyberplace.social most of the stuff is just pure marketing fluff. Sure, AI is finding bugs. People are fixing them. This has been the case for a while now. Nothing new. Exploitable bugs still very rare. Catastrophic ones like Heartbleed nil, so far. It’s business as usual. The noise volume is up, quality of the signal seems about same as always.
Replying to
@nixCraft very positive changes. Kids deserve their freedom from cellphone parenting and they also deserve to be taught basic skills like writing. After offering several generations of kids to the altar of digitalisation without actually teaching any relevant tech skills (usage of US tech giant cloud platforms is not really a relevant skill), maybe we finally can start to think about future with clearer heads.
Replying to
@JessTheUnstill@infosec.exchange The last round Hyperfocus attack is hard to defend against!
Replying to
@rootwyrm @da_667 @Viss @iagox86 @hrbrmstr This is a realisation I’ve reached as well over the last couple of years in the AI bubble. Can’t teach people who are unwilling to learn. It’s a fools errand. And the pull of easy answers from LLM prompt is far stronger than actually trying to inspire people to figure out the hard stuff by themselves.
@Nerde@beige.party this was after they tried and failed with the OG old dude who was really tough on crime. The whole flooding thing was pretty bad for the economy.
Replying to
@evacide surely Discord's third age-verification partner will be completely TRUSTED and DEPENDABLE and not at all part of the Torment Nexus being built around these services.
Replying to
@MisuseCase@twit.social @GossiTheDog@cyberplace.social For sure. But the "from vuln to exploitation" trend has been clear downward slope for years now. (https://zerodayclock.com/) We're seeing a high volume of vulns and bugs, but I feel lot of it ends up being low, medium severity, because it's hard to exploit in real conditions. Fixing these vulns is good - but the marketing messages don't quite map to reality I feel (when do they ever..)
Replying to
@da_667 the EU has regulations up to wazoo with GDPR and upcoming CRA (product security) and they do dish out fines, but it’s largely ineffective from security point of view and is always reactionary lagging behind. Big tech companies shrug off their fines and next week it’s a new zero day in your perimeter firewall.
Replying to
@maswan@mastodon.acc.sunet.se @gazorg@mastodon.nu @krig@goto.liten.app @carl@heath.social tror att just myndigheter har haft det lite enklare att kämpa emot 365 och ”egen rådighet” har varit på tapeten längre tack vare vägledning och regler från MCF men det är förlorat kamp hos kommuner och deras förvaltningar. Men även myndigheter har länge drivits till att vara ”förvaltningsorganisationer” och IT-driften har varit outsourcad till andra. Men kul att det finns enheter som fortsätter kampen!
Replying to
@krig@goto.liten.app @carl@heath.social Det är min erfarenhet också. Bortsett från Försvaret och handful av beredskapsmyndigheterna så är väl resten av offentliga (och stora delar av privata) Sverige helt fast i 365 och amerikanska moln. Det finns inga konkreta planer att migrera hem.
Replying to on mastodon.social
@taylorlorenz@mastodon.social You have a global reach and audience through federation, but you're still moderated by your local, familiar community - which you yourself have a complete freedom to choose on your own, not some faceless machine algorithm or billionaire whims.
@da_667@infosec.exchange also if you do this as a inhouse gig, you also need to learn a bit about business analysis and the actual industry vertical you’re engineering detections for. For example detecting if the landing strip lights at airport suddenly turned off due to malicious activity? Yeah, gotta know a fair bit about how ATCC’s actually operate.
Replying to on mastodon.world
@anttipeltola@mastodon.world the early 90s Internet in the NORDUnet space was so excellent. Plenty of great things coming out of universities during that time. Visiting some of these places now, they’re all rumning on either Google or O365 and American social media. IT departments don’t work with the faculties anymore. Etc etc
Replying to
@cstross@wandering.shop @quinn@social.circl.lu ah, another one of those ”once in a lifetime economic anomalies” that we’ve grown so familiar with in the last decades. Now that COVID19 recession is just a faded memory, we should really see a new one soon!
Replying to
@skinnylatte@hachyderm.io I think Portugal and handful of other EU countries have been taking on lot of wealthy, young American digital nomads in the past years and the trend will probably continue, but I think it might be a path only for privileged tech workers and influencers, not for everyone.
Replying to
@wackJackle@norden.social It's Meta's Kenyan sweatshop workers who have to manually tag objects in video in order to train their AI. So they watch these things and go "poop, very loose" and "penis, very small" just so that next time when the AI looks at things it can pretend to be smart.
What a time to be alive.
Replying to
@skinnylatte@hachyderm.io Indeed. And as you pointed out in the follow-ups, the refugee situation is difficult, because many countries will send you back as soon as they think things might be getting better. Sweden seems to be following Denmark in this - the government is incentivizing "return home", but it's essentially just same as getting kicked out.