realistic af thou

picked a bad night to play on the flight sim, just been sitting in my closet for 3 hours

across masto and bluesky today, ACARS Drama’s follower count tripled in about 2 hours, to ~15k

Heard on Seattle Ground, and validated with @acarsdrama traffic - there is a NATIONWIDE ground stop in effect in the US due to equipment outages - several lost ATC frequencies.

gotta wonder if there are Microsoft employees with briefcases full of cash checking out every Redmond bar trying to find recently laid off employees who know what all them powershell scripts actually do

“We determined the elevated load isn't driven by an increase in traffic, but by a number of servers being unexpectedly unavailable”

has unscheduled rapid disassembly vibes

dear news paper headline writers:

“Huang, Drawn and Quartered”

it’s yours, have at it

to be honest it is nice to see an exec in the space admitting they did something wrong and apologizing for it versus suggesting their penis went rogue and escaped its sandbox

Want to know something funny?

I routinely monitor GitHub for keywords, keys and domains related to the infrastructure and products I am responsible for protecting.

This week I got an alert because one of those domains showed up in someone’s public repository.

I looked into it. This was from what appears to be someone trying to start a competitive company - but the issue was that they’d created their entire stack in public repos, and our domain came up because they’d also committed the Claude prompts they’d used to generate said code - and those prompts included the instructions to copy the material on our domain - which is where the alert came from.

Obviously this stuff happens all the time and has done for years, it’s just that now, it’s easier than ever to discover it at light speed because people are using tools they don’t understand to do it.

Anyway I opened a PR suggesting they do their own work and also lock down their repo.

#infosec

according to my local news channel’s election tracker its a clean sweep for 504 Gateway Time-out Microsoft-Azure-Application-Gateway/v2

wow I can’t wait to hear how much Mike Johnson hasn’t seen of these results

i had to look it up, this is real

i dunno man, i just can’t shake the “country will fuck this up” vibes, on account of all the times the country has fucked this up

new band name just dropped via error message

RE: https://live.acarsdrama.com/@acarsdrama/117536126336248330

Seriously though, I cannot believe how big this thing has become.

Getting closer to 600 feeders around the world, 350k messages reviewed an hour, rewritten in python to keep up, load balancers, replicated databases, an api gateway, a WAF with rate limiting, auth, 8 lambda functions, a mastodon instance, used by journalists as a primary source on multiple occasions - all started a couple of years ago with a raspberry pi and a bash script.

let this be a lesson to you all: your hobbies will become critical infrastructure, plan accordingly

When one of the gang is nominated to ask for the treats while the others hang back #dogsofmastodon

RE: https://live.acarsdrama.com/@acarsdrama/117516351150232043

4

i see the BBC is covering it in a completely normal and non alarmist way

a reminder that if you see a vendor having an unscheduled outage today to apply PHP patches - that is actually one of the most encouraging things you can see from an #infosec perspective, because it means

A) someone/some people at the vendor is paying attention

B) that person/people has enough sway to have them bring down prod in the middle of the day to apply patches

C) enough people at the vendor actually know what software they are running to know its an issue that needs to be dealt with

So, reach out to them and let them know you appreciate it - so they have something to show people who push back the next time a similar thing happens