I am eminently qualified to speak from experience about a variety of dumpster fires.
Director of Incident Response at Dragos, ICS cybersecurity person, @pancakescon organizer, martial artist, marksman, humanist, level 14 Neutral Good rogue, USAF retired. Speaker available for gigs.
Gin connoisseur. Hamster parent. Some dipshit from Chicago.
I post *very serious* things about infosec. Thoughts are entirely my own.
Guys, it's that bad. I don't know how to get it across to anyone who doesn't get it that it is that bad. Even just voting isn't enough. I hope you're doing something else, too. That was an actual Nazi rally. Things are not going to stay normal, even if you are a little bit down the line. Believe them. #uspol
@hacks4pancakes It used to be that the only person who would call me on my landline was my grandmother. Similarly, now the only person who will email me is my mother.
The best way I have been able to explain being nonbinary to old nerds to me is that,
I am Ed.
I have always been Ed.
Ed is always Ed, Ed is ageless.
Does Ed need a gender or a date? Heck no! Can Ed sabotage a robot facility? Yes! Can Ed also dance with an adorable puppy? Also yes!
Ed needs funnnnn, and probably explosions. Also, really killer hair and a spaceship. I too need really killer hair, explosions, and probably a spaceship. We also just sometimes end up places, and chaos follows.
So there, there is my gender diatribe. I hope everything is much clearer now.
The best way I have been able to explain being nonbinary to old nerds to me is that,
I am Ed.
I have always been Ed.
Ed is always Ed, Ed is ageless.
Does Ed need a gender or a date? Heck no! Can Ed sabotage a robot facility? Yes! Can Ed also dance with an adorable puppy? Also yes!
Ed needs funnnnn, and probably explosions. Also, really killer hair and a spaceship. I too need really killer hair, explosions, and probably a spaceship. We also just sometimes end up places, and chaos follows.
I've always just treated people as who they tell me they are.
But then I've been online since acoustic couplers & have built various personas online.
I firmly believe I could turn up on your doorstep with a takeout bag of ihop pancakes and get you to agree to help me hack the Gibson. (We'll just ignore the whole I have no idea where you live, where the nearest ihop is, there is no Gibson, & there is doubt that I am actually completely harmless)
The number of cases I have that are "China" but are actually VTP,
Do not use VTP
Never use VTP
especially in your legacy industrial environments
somebody is gonna plug a switch in
send toot
@hacks4pancakes you mean people actually use it on purpose!?
I guess it might be the sort of thing that is maybe tempting to use in an enterprise environment if you haven't understood how it works and the resulting risks.
Fortunately I learned with "service provider mindset" as we acquired a SP network with some Cisco in it ~20 years ago and when I took the cisco press books on holiday to learn how to run my new network, the immediate determination on VTP was: "no, never that"
I feel so soap-boxy lately, maybe because I’m teaching a class, but here’s another kernel of truth I’ll throw at y’all about communities:
If you are trying to get new people,especially diverse people and young people into your hobby, and your first reaction is to show off your really expensive kit and say how much it cost, you are gatekeeping mega mode, even if you’re just trying to share your interest. Nobody wants to hear there is a $1500 (or $5000) barrier to entry to their new hobby. It’s demoralizing, not educational, and they’re just gonna leave.
Happens in bicycles, drones, photography, astronomy, gaming, marksmanship… you name it, there’s a rich older white dude ready to show off his six grand investment in a hobby to a college student with a three digit bank account.
I feel so soap-boxy lately, maybe because I’m teaching a class, but here’s another kernel of truth I’ll throw at y’all about communities:
If you are trying to get new people,especially diverse people and young people into your hobby, and your first reaction is to show off your really expensive kit and say how much it cost, you are gatekeeping mega mode, even if you’re just trying to share your interest. Nobody wants to hear there is a $1500 (or $5000) barrier to entry to their new hobby. It’s demoralizing,...
@hacks4pancakes so true, it’s setting the bar so high and saying “you shouldn’t even try”.
I subscribe to the mantra of “it’s about you, not the tool”, and the “best camera is the one that’s with you” and “you can make anything good even if it’s with humble ingredients”.
@hacks4pancakes Thank you. This. Absolutely this. All day. The investment hurdle has chased more good people out of music, and kept a lot of well-heeled dabblers entrenched in gatekeeping roles. Watched it for decades and it's disheartening.
This lady on the radio just said the way to get free booze at the bar is to look for the most pretentious looking guy and offer to buy him a drink and threaten his ego, and you know I’m all over that shit, this weekend. For science.
God damn it, I never make dad jokes, but the electrician just showed up and it is a husband+wife duo. I could not resist a "ah, power couple" and it fell flat, fam. IT FELL FLAT.
@hacks4pancakes
I don't use ad blockers because I don't like advertising companies, I do it because I don't have any reason to trust them.
Suppose that you had a friend who claimed that they were a completely self-taught driver, had no driver's license and had still managed to be behind the wheel for several spectacular accidents within the last month. And suppose that they asked to borrow your car.
@hacks4pancakes
To be fair, unblocked ads do tend to secure a web browser, by soaking up so much bandwidth that nothing else, malicious or otherwise, can get through.
Y’all, if you’re getting frustrated you’re not seeing the content you want to like news or intel you need on Mastodon, you really need to shift your thinking from algorithmic social media. Follower counts don’t matter much here. Likes do not matter to post reach. Without your interaction, you will just see a live FIFO firehose. Some quick fixes:
Hashtag your posts liberally and consistently, and follow key hashtags of interest to you. Hashtags matter a ton here to being seen.
Follow and also alert on accounts you always want to see content from.
Consider using the built in RSS feature for your feeds and for specific hashtags.
Consider switching to the more advanced UI in your preferences, so you can watch multiple filtered and unfiltered feeds. Or a different mobile app.
Use Fedifinder to follow all the accounts you followed on Twitter, and sync up your follow and block lists.
Avail yourself of the multiple public lists of hundreds of journalist accounts on Mastodon.
Y’all, if you’re getting frustrated you’re not seeing the content you want to like news or intel you need on Mastodon, you really need to shift your thinking from algorithmic social media. Follower counts don’t matter much here. Likes do not matter to post reach. Without your interaction, you will just see a live FIFO firehose. Some quick fixes:
Let me add some screenshots to show you how to do these things. First, let me show you the notification and list options on my fabulous best pal's page:
Leaving this here one last time, if you can't volunteer. https://secure.actblue.com/donate/mastodon-for-harris