ijk64✅ @ijk64@m.futex.au

@stux Admins of Mastodon instances should ensure their legitimate emails and being properly DKIM signed, then publish a DMARC record with a reject policy in DNS to prevent #phishing emails from spoofing their email domain in the from address.

I wrote a blog post on how DMARC works a while back.

https://seanthegeek.net/459/demystifying-dmarc/

#infosec #informationsecurity #cybersecurity #mastodon #adminsofmastodon #phishing #spoofing #dkim #dmarc #email #security

Elon Musk let Andrew Tate back on Twitter and he got himself arrested

Elon let Kanye West back on Twitter and he destroyed his own career overnight

Who had “Elon doing the Lord’s work” on their 2022 Bingo card? 🤣

Kid: "Dad what's leather made from?"
Dad: "Hide".
Kid: "What???"
Dad: "Hide... a cow's outside".
Kid: "I'm not afraid of a cow...

🤣🤣🤣

#puns #alberta #canada

Years ago I was having a really, really hard time at a job, because something very bad had happened that I don't want to talk about (it was over ten years ago). But many of you have probably been there, something has gone terribly wrong at work, but you still need to make a living so you can't just quit and walk away. You have to stay, for a while at least. That's what was happening to me at the time, it took a few months to find a new job, but I couldn't quit, I would lose my pension if I did.

My team could tell I was sad and not myself, but no one said anything. What can you say when your boss is obviously down, but not talking about it? Well, one of my team members said he had something really important to show me, and I needed to come to his office. He was usually a pretty serious person (compared to the rest of us, who were pretty silly on the regular), and we got along really well. He told me he that the very important thing was that he hadn't seen my smile in weeks, and he missed it. Then he said he knew how to give me my smile back.

He pushed back his chair in his tiny shared cubicle, stood up, pressed "play" on the song 'Happy', and then this middle aged man started DANCING. Dancing in our open-concept office, to loud music, in the middle of the day! He was dancing with so much joy, so much energy, so much silliness! I couldn't help myself, after a couple seconds I started dancing too. We danced the entire song, twirling, jumping and wiggling, in his tiny office, with everyone around us probably wondering what was going on. Once the song was done he said "There! I see the smile. It is back. Things are okay again. Thank you, that's all I needed." As though it as ME who had helped HIM.

I don't think I will ever forget that day. I always try to be that person for others if I can. Showing that you care, and that the person might being going through a hard time, but people still care about them.

Not everyone had a great holiday this year. If you see someone down, this might be your chance to give someone their smile back. <3

Hi, this is Greta. You are welcome to follow me here, if you prefer planet earth to planet mars.

TIL that bash >= 5.1 has 32-bit (unsigned) high-quality pseudorandom numbers in $SRANDOM. Woot!

Keeping my tradition of painting octopuses on the bottoms of tables in hotel rooms alive 😀

The right time to point out that your wife is still wearing her slippers is at home, not when you get to the restaurant. I know this now.

Better to remain silent and be thought a fool, than to post a reply video on Twitter and go to Romanian prison

LastPass's default password KDFs:
2008-6/2012: SHA256(email || password)
6/2012-2/2013: PBKDF2-SHA256 500* [1]
2/2013-7/2018: PBKDF2-SHA256 5,000 [2]
7/2018-now: PBKDF2-SHA256 100,100 [3]
* I shamed the CEO into increasing this. "I think it is irresponsible to tell your users the recommended iteration count is 500. When 12 years ago, PBKDF2 had a recommended minimum iteration count of 1000."

[1] https://blog.lastpass.com/2012/06/lastpass-2-0-managing-and-protecting-your-online-life-just-got-more-awesome/
[2] https://blog.lastpass.com/2013/02/lastpass-2-0-20-released-for-all-browsers-featuring-an-automated-security-score/
[3] https://blog.lastpass.com/2018/07/lastpass-bugcrowd-update/

Gonna write this up in longer form, but folks complaining that the $45bn Ukraine costs are high miss two key points:

1. The direct costs in military aid are surprisingly small; in the order of $19bn this year, and $10.8bn committed (so far) for next year

2. The indirect economic costs of the Russian war to the US economy (i.e. to the private sector not via the government) are in the order of $600-700bn per year. To pick a random company, it's nearly $6-10bn in costs to Apple *alone*.

A partial list of Fediverse software in alphabetical order:

akkoma
bonfire
bookwyrm
calckey
castopod
diaspora
drupal (with plug-in)
epicyon
friendica
funkwhale
gancio
gitea
gnusocial
gotosocial
greatape
guppe
hubzilla
immers space
kbin
ktistec
lemmy
mastodon
misskey
mobilizon
nextcloud
owncast
peertube
pixelfed
pleroma
plume
prismo
rebased
smithereen
socialhome
streams
takahe
writefreely
wordpress (with plug-in)
zap

7 things all kids need to hear

1 I love you

2 I'm proud of you

3 I'm sorry

4 I forgive you

5 I'm listening

6 RAID is not backup. Make offsite backups. Verify backup. Find out restore time. Otherwise, you got what we call Schrödinger backup

7 You've got what it takes

<slow clap>

https://www.smbc-comics.com/comic/jpeg

Nice read from The Verge on the #LastPassBreach: “The #LastPass disclosure of leaked password vaults is being torn apart by security experts”

Quoting Jeremi Gosney @epixoip, Jeffrey Goldberg @jpgoldberg and yours truly.

https://www.theverge.com/2022/12/28/23529547/lastpass-vault-breach-disclosure-encryption-cybersecurity-rebuttal

My kids are watching this classic scene from Sesame Street and are just as confused as the Yip Yips. They have absolutely no conception of what this thing is. The humor of the scene has truly come full circle.

Over the last few days, I experimented with moving my Twitter archive to my personal #Mastodon account @luca@social.luca.run and finally succeeded.

I had to modify the Mastodon source to allow backdated posts and prevent it from spamming other instances with old posts. Because image descriptions aren't included in the Twitter export, I had to request them from the API. There I got full text for truncated Retweets as well.

Incomplete notes:
https://github.com/lucahammer/fediporter

#TwitterMigration #MastoAdmin