Remote follow

Thomas B. Rücker @tbr@society.oftrolls.com

Admin

I love open source. I work on Icecast in my free time.

382 Toots

99 Following

71 Followers

Toots Toots and replies Media

**Thomas B. Rücker** · Jun 29, 2018, 08:22

Thomas B. Rücker boosted

**FSFE** @fsfe@mastodon.social · Jun 29, 2018, 08:22

When we launched #SaveCodeShare last year, we were sure that a few months later the decision makers would know it's important to #SaveYourInternet. We were wrong.
So make yourself heard today by signing https://savecodeshare.eu, https://saveyourinternet.eu and contacting your MEP!

**Thomas B. Rücker** @tbr · Jun 29, 2018, 07:28

**Thomas B. Rücker** @tbr · Jun 29, 2018, 07:28

Kitchen Nightmares but it's about IT infrastructure & security, hosted by some rockstar sysadmin.

"Customer credit cards on the same server as the WordPress blog?! I am shutting this place down. Shut it down. SHUT. IT. DOWN." *trips circuit breaker*

https://twitter.com/marcan42/status/1012435070555074560
(click for full thread, it's hilarious!)

**Thomas B. Rücker** @tbr · Jun 29, 2018, 07:01

**Thomas B. Rücker** @tbr · Jun 29, 2018, 07:01

"And that, my friends, is how the B-52 can end the world as we know it."
http://www.thedrive.com/the-war-zone/21814/we-heard-what-it-sounds-like-just-before-a-b-52-begins-the-end-of-the-world-last-night

**Thomas B. Rücker** · Jun 28, 2018, 15:36

Thomas B. Rücker boosted

**JP Mens 🔐'** @jpmens@mastodon.social · Jun 28, 2018, 15:36

Oh, What a Fragile Web We Weave: Third-party Service Dependencies In Modern Webservices and Implications https://arxiv.org/pdf/1806.08420.pdf

**Thomas B. Rücker** · Jun 29, 2018, 05:28

Thomas B. Rücker boosted

**dansup** @dansup@mastodon.social · Jun 29, 2018, 05:28

If you know anyone working on an ActivityPub project and they need any advice/feedback/help or want to spread the word, tell them to DM me! I am more than willing to help or spread awareness! #activitypub #fediverse

**Thomas B. Rücker** · Jun 28, 2018, 05:32

Thomas B. Rücker boosted

**Brye Claire 🌻** @memnus@octodon.social · Jun 28, 2018, 05:32

Sometimes I feel like not enough people appreciate what it means if I'm willing to put on pants for them

**Thomas B. Rücker** · Jun 25, 2018, 11:20

Thomas B. Rücker boosted

**Bob Mottram 🔧 ☕ ✅** @bob@soc.freedombone.net · Jun 25, 2018, 11:20

"Intelligence organisations everywhere failed to predict the end of the Cold War. GCHQ and NSA certainly did not foresee it, nor did Britain’s Joint Intelligence Committee. The changes that swept across the Warsaw Pact countries in 1989 also took Communist leaders by surprise, despite the intense surveillance conducted within their own societies. The exact moment at which the Eastern Bloc collapsed was hard to pinpoint, because ultimately it amounted to a failure of self-belief. Once the Communist leadership was unwilling to shoot its own people, the game was up. The closest anyone from Britain had come to a prediction of the end of the Cold War was in the writings of the journalist Timothy Garton Ash, reporting on the free trade union ‘Solidarity’ in Poland in the early 1980s. Having witnessed the mass defiance of the Soviets by trade unionists in the Polish shipyards, he had forecast that Moscow’s empire might well crumble in short order – and he was quite right"

**Thomas B. Rücker** · Jun 27, 2018, 21:42

Thomas B. Rücker boosted

**IzzyOnDroid ✅** @IzzyOnDroid@mastodon.technology · Jun 27, 2018, 21:42

The Norwegian Consumer Protection Agency has just released an analysis of "dark patterns" used by Google, Facebook and Microsoft to trick users into giving up their privacy – in spite of #GDPR. You can download the 44 pages PDF here:

https://fil.forbrukerradet.no/wp-content/uploads/2018/06/2018-06-27-deceived-by-design-final.pdf

**Thomas B. Rücker** · Jun 26, 2018, 23:15

Thomas B. Rücker boosted

**r҉ustic cy͠be̸rpu̵nk🤠🤖** @cypnk@mastodon.social · Jun 26, 2018, 23:15

Oh good #WordPress proves itself to be Swiss cheese once again

https://blog.ripstech.com/2018/wordpress-file-delete-to-code-execution/

What's worse is that they've been informed 7 months(!) ago and still don't have a patch. And don't seem to have any concrete plans to provide a patch

**Thomas B. Rücker** · Jun 27, 2018, 13:13

Thomas B. Rücker boosted

**Sir Bøøps** @Sir_Boops@sergal.org · Jun 27, 2018, 13:13

**Thomas B. Rücker** · Jun 25, 2018, 13:12

**rysiek ✅** @rysiek@mastodon.social · Jun 25, 2018, 13:12

Encrypted remote backups using SSHFS and LUKS: https://ruderich.org/simon/notes/encrypted-remote-backups

I've been using this technique for years and can confirm it's robust and reliable.

#InfoSec

**Thomas B. Rücker** · Jun 25, 2018, 09:58

Thomas B. Rücker boosted

**rysiek ✅** @rysiek@mastodon.social · Jun 25, 2018, 09:58

@tbr what you did is good and you should feel good.

**Thomas B. Rücker** @tbr · Jun 25, 2018, 08:17

**Thomas B. Rücker** @tbr · Jun 25, 2018, 08:17

Any of my #polish #infosec followers have any specific hints about current best practices in following this up?
I haven't dealt with such stuff in Poland for years and a lot has changed since I moved away.
cc @rysiek
PS: Despite the appearance (Name, etc.) I'm actually Polish and sent the email to the MPK contacts in Polish. Can obviously follow up rest of process in Polish too.

**Thomas B. Rücker** @tbr · Jun 25, 2018, 08:03

**Thomas B. Rücker** @tbr · Jun 25, 2018, 08:03

You're drinking your morning espresso. Check emails that arrived during the night, discard spam. Then one weirdly catches your eye.
The spam URL is obviously hosted on the domain of the public transport company of a polish city. 🤔 ("mpk.$cityname.pl" is a dead giveaway) #Poland 🇵🇱
So if you run a CMS from 2009 #TWOTHOUSANDNINE that wasn't ever updated and even if would have been EoL for 5+ years… 🤦 #infosec #ThatswhyIdrink
Mailed the listed contacts on the webpage. Next is hosting company.

**Thomas B. Rücker** · Jun 24, 2018, 21:21

Thomas B. Rücker boosted

Vi @vi@cybre.space · Jun 24, 2018, 21:21

Intel: find bugs and we'll pay you

Researchers: okay

Intel: NOT IN HYPERTHREADING!!!! WE NEED THAT

**Thomas B. Rücker** @tbr · Jun 24, 2018, 19:26

**Thomas B. Rücker** @tbr · Jun 24, 2018, 19:26

Achievement unlocked:
- de-populate broken eMMC from set-top-box circuit board using hot air rework
- add necessary boot loader #blackmagic to existing SD card to make it boot directly
The latter worked on first try 😲 and I'm still puzzled at who now owns my soul for this.🤔