home.social

#cfn — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cfn, aggregated by home.social.

  1. #Europol likely operated illegal, clandestine intelligence tools – and the systems might still be in use. All while the transformation of Europol into a "truly operational police agency" is being prepared.

    »Described by former officials as a “shadow IT environment”, the system lacked basic security or data protection safeguards required under #EU law. It was used to store and analyse highly sensitive data – phone records, identity documents and geolocation information – including details of people who were not suspected of a crime. […]

    By 2019, the #CFN held at least two petabytes (PB) of data – almost 420 times bigger than Europol’s primary database for non-forensic work – and effectively held almost all of Europol’s operational data. […]

    According to former insiders, the system was understood within parts of the agency as a space where operational data could be stored and analysed quickly without the constraints of EU law.«

    computerweekly.com/news/366642

    #EUpol

  2. @kc

    @nastja @derwend @derPUPE

    Ankündigung ⬆️ von @kc auf dem #39c3 vorzutragen.

    Tipp di/e/n Vortra(e)g/e zu besuchen, weil sowohl für die Inhalte von #JugendHackt als auch für den Aufbau der Ressourcen/Software des #CfN relevant.

  3. Do you know that CloudFormation and AWS CDK can't write an entry of type SecureString to AWS SSM Parameter Store? I had no idea when I wanted to put a generated password to it as part of my Cfn Stack. I recently wrote a Blog [1] about it. Today I also published a Lambda function, written in Python [2]. Usable as CloudFormation custom resource. Works well for my use-case.

    [1] dominik.wombacher.cc/posts/aws
    [2] git.sr.ht/~wombelix/cfn-custom

  4. Question: I want to set a reverse DNS record on an EIP belonging to a NAT GW.

    The IP is therefore managed by AWS (not in my hosted zone). So putting a PTR record in my hosted zone to that IP is not productive.

    Now I can do this manually from the “Actions” menu on the EIP. And it works!

    To the question: How would I go about doing that same operation in ? Or perhaps just throw me some native IaC samples (, , …)