Some lessons I learned at #BSidesPDX this weekend:

1. Talk about doing good things with tech, loudly, and find friends. There are so many people who want to help out. 🤝
2. No one knows exactly what they're doing, but many are eager to try. There are many valuable teaching opportunities, and just as many times to ask questions. 🙋‍♀️
3. We are stronger when we share, trust each other, and work together. Alone, we are vulnerable. 🫂
4. You can hide in plain sight if you minimize your presence. 💡
5. Update your computers. 🫣

I want to hear about your favourite song, the new band you discovered, the new documentary that taught you something, and possibly even see your new highly advanced memes. I find out new stuff and meet cool new people on Fedi everyday. 😻

If you post a bare link to, say, a YouTube video with no thumbnail, no title, and no alt text I will not learn about your new favourite thing 😿 and my life will not be enriched and I can't go buy the album 🙇🏻‍♀️ ... because I do not activate bare links ( and do not think anyone should). So please, if you are plugging or sharing something you like, write a few words, copy the title as text into your message and yes: Alt Text and Content Warnings where appropriate ... TIA, HTH, usw.

https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/

docker is not a security boundary
stop treating it like one

The hardest part of having a chronic illness (for me) is wanting to want to do the things I planned, but being in enough pain that I don’t want anything. At least let me care that I’m missing out? No? Well, fuck, I guess.

I'm trying to explain "4" memes to my spouse and I have no idea where to even start.

When you're online a lot, it sometimes feels as if everyone's a revolutionary organizer and you betray the cause by not being out on the streets right now doing an uprising.

Bullshit. Global real time mass communication is a very new thing and for the most of history, being part in an uprising, and if, in what role, really was product of circumstance.
Just take care of your people, your neighborhood, etc and you're good. Maybe circumstance will call for a revolutionary act, maybe it'll happen in another place and you won't get to see any of it. Maybe it won't happen at all and you're just gonna continuing to survive and take care of your people during dark times. And maybe you won't.

Anyway, history isn't singular acts of revolutionary heroism, that's just how we tell the stories. It's mostly people taking care of what's in front of them, never to be sung about.

Remediating compromised #eMudhra certificates in #Java runtimes

OpenJDK: https://openjdk.org/emudhra

Oracle JDK: https://ops.java/emudhra

"Usually, the GDPR permits processing for specific purposes (e.g. retention for tax records or fraud prevention). However, the agreed Article 88c (or Article 88bis) legitimises an entire technology. Regardless of the purpose for which it is used, any AI system could lawfully take any personal data by default. For example, the proposed Article would also permit the training and use of AI for manipulation, disinformation, the generation of nude images or killer drones, and indeed any other questionable purpose. Many processing operations that were so far illegal could suddenly become legal – just because they are done “in the context” of an AI system. For example, data processing for personal advertising purposes (without consent) is currently illegal in the EU. Now, however, advertising could suddenly become legal if it is personalised using AI technology.

Max Schrems: “It’s like saying anything goes – no matter what you do – as long as it’s done with AI. If something is illegal in an Excel spreadsheet, it's legal if done with an AI agent. It’s utterly absurd to give preferential treatment to a high-risk technology over every other computer system.”"

https://noyb.eu/en/ai-eu-member-states-approve-digital-expropriation-europeans-ai-companies

#EU #GDPR #AI #BigTech #DataProtection #DigitalExpropriation #DigitalOmnibus

And ... that's a wrap, and many folks are off to the party. Thanks everyone for a great experience at @BSidesPDX ! Have a great time at the party ( or not ) and safe travels home. *mwahs* 😻

URI?

Bravo to the last B-Sides speaker who at the end of his bonus slides gave a personal, apologetic explanation of privilege in intersectionality without using either word. It was a great talk and that was a wonderful extra. Pardon my rendition:
"If you are not any of these things, it will be harder for you. For each way you are different, it will be more difficult to get recognized, hired, or heard."

If "infosec people are not okay", that means that you have to account for the human element in your security analysis. You are not a consistent, trustworthy system, you are a sack of water and proteins.

Infosec processes aim at reducing this effect.

That's also AI companies attack surface.

This is a training exercise, not an attack on anyone or any agency.

The information in and of itself is of public interest. If you are interested in the background of why this may be the most unique insight into one person's investigative mindset using an active, real time, live investigation, I have a really long explanation here:

https://brettshavers.com/ive-spent-nearly-40-years-learning-how-to-teach-now-im-putting-my-investigative-methods-under-the-microscope/

“Before you diagnose yourself with depression or low self-esteem, first make sure that you are not, in fact, just surrounded by assholes.”

– William Gibson

DO NOT HAND OVER YOUR BANK PASSWORDS TO AI AGENTS.

DO NOT HAND OVER YOUR BANK PASSWORDS TO AI AGENTS.

DO NOT HAND OVER YOUR BANK PASSWORDS TO AI AGENTS.

Stop! Ontology time! https://lcamtuf.coredump.cx/blog/ontology/

Oh hey there li'l guy ...

(Can't wait to see what my Newsheen Smart Cat Lamp w/ #esp32 wants to be when it grows up.)

And that’s it! Officially done with the current job. One week of funemployment begins now, then it’s on to the new adventure. Really excited to get started.

Day Two B-Sides PDX! With coffee and the night to think about it, this morning first thing I noisily scratched my badge with the provided tools. It kinda came out like I intended: ベニ一　アィフィン ( Katakana, Japanese )

If you ever think English is not a weird language just remember that read and lead rhyme and read and lead rhyme.
But read and lead don't rhyme, and neither do read and lead.