OllieJC

Security person with @CabinetOfficeUK trying to make UK gov more secure 🤓 (opinions/tweets/irrational thoughts are my own)

[OllieJC @4f4a43]

In the meantime, any feedback/comments/RTs are much appreciated ☺️

[OllieJC @4f4a43]

Okay.. so I think this is in a good enough state to share: https://t.co/hrQYz3FExh Here's a thread.

[OllieJC @4f4a43]

Next steps for me are to create a generator and checker (obeying any scan records of course!) on https://t.co/7kQoFT0lgR

..and look at creating an @ietf #RequestForComment

..and adding entries in @theiana well-knowns

[OllieJC @4f4a43]

@UK_Daniel_Card Shill - https://t.co/xqLSyYMDny 😂 Also looks for DNS security records! I plan to update the top sites scanned daily soon, if you have any recommendations on a list to use, let me know 🙏

[OllieJC @4f4a43]

@thedarktangent it was great to meet you at the UK Gov Cyber Security Conf! I've updated https://t.co/sz8vDpIj07 to support TLS1.3 and HTTP/2 so it now returns https://t.co/awrw6h1VV8's #securitytxt properly 🙏

[OllieJC @4f4a43]

no-direct-ip supports a few languages, follows dark mode, allows private IP ranges, and there's an option to show a blocked page or redirect to the default search engine. Feature suggestions: https://t.co/Vt2G6rfph0 🙏

[OllieJC @4f4a43]

I built a simple browser #extension / #plugin to stop loading an external IP (like a potential indicator of compromise) aimed at #security folks: no-direct-ip
#Firefox - https://t.co/Oyy4KdDyMi

[OllieJC @4f4a43]

#Chrome - https://t.co/29idWe73gn

[OllieJC @4f4a43]

https://t.co/jEv1yFWXLV #Log4Shell #log4j

[OllieJC @4f4a43]

I've put a repo together with a couple of #AWS mitigations for #log4j web apps: https://t.co/Yo9RgM5mHW #awswaf #cloudfront #detection #log4jrce

[OllieJC @4f4a43]

https://t.co/iJGDObq0Z5 showing 50/250 of top sites have a #securitytxt file for the first time! (US still lagging behind slightly at 44/250) @securitytxt

[OllieJC @4f4a43]

@edent @jbond Ah fair! A couple of showers, occasional bath, I want to reduce reliance on gas.. Yeah, I don't get solar water panels, but have been weighing up adding a highly-insulated immersion system to utilise excess solar PV. Thanks for the food for thought!

[OllieJC @4f4a43]

@edent @jbond Used to have? I was recommended something similar, interested to know any pitfalls

[OllieJC @4f4a43]

@edent Yeah... I wonder if we can do a host check? 🤔 Either way, any we get through, we should get routed to the right place with Hackerone/NCSC

[OllieJC @4f4a43]

@edent That's for https://t.co/gda3ee3ykZ. https://t.co/HP0Ji3ykU0 gets caught up in the https://t.co/EmAgrY2xgJ redirect https://t.co/ptvV0PTI8a