Pinned toot

@guizzy @lain I'm really pretty tired of this "Pleroma/GNU Social/SomethingElse is Nazi software/space" bullshit.

I had a StatusNet account until Evan killed identi.ca years ago; a shit-ton of great people I talk with here every day have accounts on Pleroma or GNU Social. Some are their developers.

benefited handsomely from there being a large community of dedicated people in Fediverse before Mastodon was a thing. Let's acknowledge that and stop being so condescending.

Pinned toot

time! I'm a hacktivist, free software advocate, strong supporter of free and open internet. Used to be a policy hacker. Co-founded the Warsaw Hackerspace.

Currently trying to make sure journalists at @OCCRP have the tools and training to safely expose corruption and organized crime.

Also, I bake bread, sail, and dance Lindy Hop. So, there's that.

rysiek ✅ boosted

@rysiek 'git stash list' always gets me. --list would be consistent there.

rysiek ✅ boosted

complex systems Show more

So, `git branch --list` to list branches, but just `git remote` to list remotes.

Consistency FTW, eh?

rysiek ✅ boosted
rysiek ✅ boosted
rysiek ✅ boosted
rysiek ✅ boosted

If anyone out there with a Mastodon instance below 2.0.0 needs help upgrading, I'll do it

rysiek ✅ boosted

Recap: Mastodon :mastodon: security and privacy tips.

infosec-handbook.eu/blog/masto

– enable two-factor authentication
– monitor sessions activity
– regularly check your authorized apps
– check your "post privacy" settings
– use "authorized followers" feature
– host your own Mastodon instance if necessary

#mastodon #security #privacy #2fa #monitoring #infosec #cybersecurity

rysiek ✅ boosted

Mastodon :mastodon: security:

In August, Mastodon 2.4.4 was released which contains two fixes for security vulnerabilities.

Today, 39.5% of all Mastodon instances which show their version number are still running vulnerable Mastodon < 2.4.4.

We already checked this twice:

– 10/1/18: 42% vulnerable
– 8/23/18: 38.6% vulnerable

Either the remaining instances are all unmaintained or admins refuse to update.

#mastodon #security #vulnerability #infosec #security #cybersecurity

rysiek ✅ boosted

Vulnerabilities like this are why exploit mitigations are so crucial: blog.talosintelligence.com/201

ASLR and W^X should mitigate the vulnerability. #HardenedBSD applies ASLR and W^X to vlc by default. SafeStack would also be extremely useful in this case.

#infosec #FreeBSD

rysiek ✅ boosted

In Yurope, we do things differently.
NO FOREIGN MONOPOLIES
ABSOLUTELY NO CHINESE AND AMERICAN COMPANIES!
NO SELLOUT! (But pls pay us to disable ads)

rysiek ✅ boosted
rysiek ✅ boosted
rysiek ✅ boosted

So my ISP not only stores passwords in plaintext, they also send them via SMS. Looks like changing password now will accomplish nothing since the new one is also going to be exposed to my carrier. 🤦 That's not how #infosec is supposed to work, right?

rysiek ✅ boosted
rysiek ✅ boosted
rysiek ✅ boosted

albin.social rundown Show more

rysiek ✅ boosted
rysiek ✅ boosted

Ich werde beim #35c3 Sticker verteilen, die ich selbst gestaltet und drucken lassen habe. Angelehnt an einen Sticker dens bei 34c3 gab. Sprecht mich einfach bei der Chaoszone an und ich drücke euch eine Anzahl in die Pfoten/Hände. :)
Ihr erkennt mich vermutlich an einer Schärpe bestehend aus diesen Stickern ;) Wenn ihr sie in euren Hackspace/Erfa verteilt bekommt ihr gerne auch ein paar mehr.

rysiek ✅ boosted
Show more
Mastodon

Follow friends and discover new ones. Publish anything you want: links, pictures, text, video. This server is run by the main developers of the Mastodon project. Everyone is welcome as long as you follow our code of conduct!