Hi all. In order to make the Defensive Security Podcast content a bit more approachable and easier to navigate, I've created a playlist of individual stories/segments we cover here: https://www.youtube.com/playlist?list=PLzHXsgtVDQEq9JiCbwJojE4nd9dRVAT5lNote: I've only gone back 4 episodes, but will be doing this for all episodes going forward.Happy holidays!

Many of us will have some time off over the next few weeks. Some of us have more than others Be sure to reflect on what it all means. It’s cold and crappy in the northern hemisphere and Australia is on fire. It’s a time of retailers marking things up to put them on sale. It’s a time for passive aggressive political discussions with relatives. It’s a time to read about the famous people you never met who died over the past year. But above all else, it’s a time to push that code to production. Push like you’ve never pushed before.

@itisiboller @jerry patch traversal is even worse than path traversal

@jerry I'm getting notifications now that people are playing games?! Did LinkedIn add games to their apps!!??

If you can't be part of the solution, be part of the problem! So here is today's DefSec Today: https://youtube.com/shorts/cbjPHyf8u5U

@jerry they « merged » with another company like 2 years ago, and from what I hear this is not going well. They increased their prices *a lot* and many employees left

@jerry Maybe Tony Soprano is still alive?It is odd that this is a story still after all this time. Must be some government testing or some bad group of people establishing themselves there.

@jerry This is why I reboot my personal workstation, lol.

@mia @jerry I probably wouldn't rely on MAC addresses in a datacenter build, but at home it's fine.

Reminder: infosec.exchange and all other infosec/fedia sites are about to be rebooted and will be unavailable for about 10 minutes at the top of the hour.

@jerry I thought it was going to be a directional jammer lol

TIL that Yahoo is still a thing and they just laid off 1/4 of their security team. I’m sure nothing bad will happen as a result.

I woke up this morning and realized that I wasn’t feeling fully connected with the world. As I lay there staring at the ceiling, I pondered how I had relied on Time magazine to keep me informed decades ago, but I realized I hadn’t engaged with them at all for many years. After some more soul searching, it struck me that the reason I haven’t thought much about Time is their utter lack of AI. No chatbots, no AI search engines, and certainly no AI produced articles. Well, imagine my complete surprise when one of my AI minions stumbled upon this post from Time: https://time.com/7201556/generative-ai-time-journalism/

This friday is Friday the 13th. The proper way to avoid the bad luck that day can cause is to push your code to production before you leave for the day.

Time for some popcorn to watch the show https://www.theverge.com/2024/12/11/24318874/matt-mullenweg-says-its-hard-to-imagine-wanting-to-work-on-wordpress-after-wp-engine-ruling#wordpress

@jerry It's freezing and we need to keep the house heated

It’s always good to see that I’m not in the running for the worst person in tech. Voting is here, if you’re interested: https://docs.google.com/forms/d/e/1FAIpQLSc7_08c6lerNY_kowWj8CdHinlF7zYtxmlDoJvodV5srFpr6g/viewform

Some pics of my new red orchid. The blue and green backgrounds on those two pics are created by placing the flower in front of a piece of sem-transparent film and pointing a strobe sitting behind at the film with a colored gel on the front of the strobe. #bloomscrolling

I had a little fun with today's DefSec today: https://youtube.com/shorts/yeLxev3WybA

Hi all. I am rebuilding relay.infosec.exchange using different server software. It’ll be hard down for a while and then will require anyone using it to remove and re-add it