tbj

IT security troubleshooter & crypto Ph.d. Fond of cats, tea and mountains. Bookworm. Publicly pseudonymous, privacy enthusiast. Erdős # = 3.

[Jonas Gahr Støre @jonasgahrstore]

We stand by Ukraine in their fair struggle for a just and lasting peace.

🇺🇦🇳🇴

[Karen-Anna Eggen @kaeggen]

As a Norwegian security nerd I am probably biased, but this is a brilliant long-read by Ben Taub/@NewYorker on life and (security) challenges in the Arctic High North. A must-read with jaw dropping details on some of Russia's cross-border, sub-threshold advances.

[Larry the Cat @Number10cat]

The kitten will REPORT to Larry the Cat.

[Larry the Cat @Number10cat]

Made it.
#GeneralElection2024

[Daniel Woods @IelTop]

Which security controls reduce cyber risk and by how much?

Until recently, vendors tried to answer with peacock like competition, e.g. ever fancier marketing campaigns.

Our new article is a step towards answering with empirical evidence.

[Jens Stoltenberg @jensstoltenberg]

It’s official – #Sweden is now the 32nd member of #NATO, taking its rightful place at our table. Sweden’s accession makes NATO stronger, Sweden safer, and the whole Alliance more secure. I look forward to raising their flag at NATO HQ on Monday.

[Scott Piper @0xdabbad00]

CISA is requiring all Federal agencies to disconnect Ivanti products by Friday at midnight (Ivanti Connect Secure & Ivanti Policy Secure). This is roughly 48 hours notice, to not patch, but rip it out! Ivanti is an American company. This is unprecedented.
https://t.co/cJZRuHHF5o

[Jens Stoltenberg @jensstoltenberg]

Good call with @PM_ViktorOrban of #Hungary. I welcome the clear support of the Prime Minister and his government for #Sweden’s #NATO membership. I look forward to the ratification as soon as parliament reconvenes.

[tbj @tbj]

@JohnCleese Well, actually the second. A different Norwegian Blue cheese, Kraftkar, won the same top award in 2011.

[John Cleese @JohnCleese]

I see that a Norwegian Blue cheese has won the top award at the World Cheese show

This is the first parrot-flavoured cheese to win an award

[François Chollet @fchollet]

One thing that software engineering should pick up from watchmaking: non-critical software features should be called "complications".

[Joseph Cox @josephfcox]

New from 404 Media: we got hold of an HDMI adaptor that brazenly demands your location, browsing, photos, and spams you with ads. Used with a test phone but wild amount of data collection. Privacy policy straight up says it sends the data to "China" https://t.co/dUss6NVKFP

[Alec Stapp @AlecStapp]

This might be the worst chart crime I've ever seen.

Look closely until you see it...

["Online Rent-a-Sage" Bret Devereaux @BretDevereaux]

Yeah, so once you are safely in the provinces with your rebellious legions, you do not, in fact, return to Rome unarmed to attend meetings of the Senate on day-trips.

You stay in the provinces with your legions.

[tbj @tbj]

We found a *third* zero-day, this time in Ivanti Sentry. Great teamwork on this one. Patch now! https://t.co/xRCTEyZoWL

[mnemonic @mnemonic_sec]

mnemonic researchers found a 0-day RCE #vulnerability within Ivanti Sentry tracked as CVE-2023-38035.
Exploitation allows an unauthenticated threat actor to read and write files to the Ivanti Sentry server and execute OS commands as root:
https://t.co/UbUZQMxN6B

#mnemonicblog

[tbj @tbj]

@matthew_d_green «Hash all the things, always» seemed like the Right approach when I did this 15 years ago. Even if some security proof might have a perverse need for the extra wiggle room given by *not* hashing all the things, there seems no practical reason not to feed the random oracle.

[tbj @tbj]

@si_ferlin I am not 100% sure if I understand what you need, but TLS_AES_128_GCM_SHA256 and TLS_CHACHA20_POLY1305_SHA256 would be the good suites to start with. (See RFC8446.)

[Lex Fridman @lexfridman]

Beautiful 60-day timelapse of a bird building a nest and raising her kids until they fly away from home. This is the magic of life.

[Admiral James Stavridis, USN, Ret. @stavridisj]

Pro-tip: If your ship is heeling over like this, check for leaks. (I know these things because I'm an Admiral.)