John

[Matthew Green @matthew_d_green]

The first rule of data breaches: if it exists in a database on the Internet, it will be stolen.

The second rule of data breaches: the service that lost your data will be incredibly vague about exactly what the hackers took, because it’s way worse than you imagine.

[Daniel Cuthbert @dcuthbert]

Strap in, we's going on a ride, a static analysis ride. I recently came across this paper, which looked at a wide variety of SAST tools against a number of Java apps.

Java being the choice of enterprise, and often not the best Java approaches out there, so it's a good choice

[John @clawsonj]

@shanselman @sleastack @Synology I tried to do this recently… but Synology photos face recognition is pretty poor, object recognition/tagging isn’t there, and there are no ways to create “smart” albums that I saw, like Google’s family sharing. If they can spruce up on some of that I’ll also be doing a Takeout!

[Sergio Pereira @SergioRocks]

Why I don't use Scrum in my Remote Teams?

TL;DR: It adds at least 8 hours of meetings per Sprint. That's 2 full days of time wasted, per team member, per month!

This is what I do instead:

[John @clawsonj]

@eaglemtncity What about the Nolan park splash pad?

[Matt Fuller @matthewdfuller]

AWS, please give us audit mode so we don’t need to test SCPs in prod 🙏

[Ars Technica @arstechnica]

Judge slams Fox News for false election claims as Dominion wins key ruling https://t.co/XNQQ96vFbv by @JBrodkin

[Scott Piper @0xdabbad00]

Confirmation from AWS of ransomware events targeting data in S3.
Generally good advice but recommending MFA delete in 2023 is bad advice, as it requires the root account (via an access key) to enable it, and the MFA delete functionality can only be used by IAM Users.

[John @clawsonj]

@kmcquade3 That's pretty cool, but it IS a VPN... it's wireguard. I essentially do the same thing for my devs but with AWS Client VPN that supports federated users.

[John @clawsonj]

@cyb3rops Nice! That's definitely good stuff - but I wouldn't want to be the guy dealing with maintaining VPNs and on-prem data centers at all any more! I'm all about cloud everything, which does take a certain amount of control away but also gives better UX and reliability these days.

[Ben Hunt @EpsilonTheory]

It's so weird that the macroeconomic environment has impacted Tesla (-41%) and not Ford (+1%) or GM (+8%) over the past six months.

It's almost as if something else happened in mid-October.

[Ars Technica @arstechnica]

Twitter suspends @ElonJet plane-tracking bot after Musk pledged to leave it up https://t.co/2GFtBsQduS by @JBrodkin

[briankrebs @briankrebs]

I guess in @elonmusk's eyes, Mastodon is a threat, and some speech is more free than others.

[John @clawsonj]

@kelseyhightower I love not having to manage physical hardware, insurance, power, etc., but what I love most is a public API to manage everything. Some might say things like openshift and k8s exist to fulfill that need, but they only came after AWS proved the model of API-managed, dynamic infra!

[John @clawsonj]

@0xdabbad00 Did you go to re:Inforce this year too?

[Sinéad Crowley @SineadCrowley]

Ok, I’ve joined #Mastodon but also this

[John @clawsonj]

@leothrix I just signed up on https://t.co/nWJVbKuCpv Mastodon today... just in case. I'm not yet convinced Twitter will implode and unless it goes really poorly it'll be a long time before any other platform has a critical mass.

[National Cybersecurity Alliance @StaySafeOnline]

Using a password manager is an easy way to save login credentials, sensitive information, and spells.

Learn more about #password managers and how to pick the right one for you: https://t.co/VqnFqJWFlK #passwordmanager #BeCyberSmart #CybersecurityAwarenessMonth #halloween