#fedisec — Public Fediverse posts

We really need to start #FediSec teams to start to investigate threats.

There seems to be about 15 people doing it on their own, and 5 other small group chats on multiple platforms who all dislike each other.

We really need to start #FediSec teams to start to investigate threats.

There seems to be about 15 people doing it on their own, and 5 other small group chats on multiple platforms who all dislike each other.

The industry keeps face-planting on supply chain security — and it’s not because the problems are new.

We broke down the systemic issues in our new blog, "Package managers - malware delivery as a service":

https://distrust.co/blog/package-managers.html

#SupplyChainSecurity #InfoSec #DevSecOps #OpenSourceSecurity #CVE #FediSec

Found an old-school password manager in the wild at a stationary store. #fedisec #security

Found an old-school password manager in the wild at a stationary store. #fedisec #security

Any security concepts you would like to see explained, broken down, or discussed on #Glassof0J ?

#Infosec #cybersecurity #fedisec #hacking #hackers #cyber

Any security concepts you would like to see explained, broken down, or discussed on #Glassof0J ?

#Infosec #cybersecurity #fedisec #hacking #hackers #cyber

Have you turned on 2FA Authentication on your fediverse accounts ?

#fedipoll #fedisec #opsec #fediverse #privacy #security #foss

Have you turned on 2FA Authentication on your fediverse accounts ?

#fedipoll #fedisec #opsec #fediverse #privacy #security #foss

@davidgerard @Edent

The underling design problem:
Instances in a federated network are implemented as peers in a p2p network.
Thus not advantaging federation at all.

¯\_(ツ)_/¯

#Infosec
#FediSec
#MastoSec
#vulnerability
#cybersecurity
#SoftwareEngineering
#DistributedSystems

@davidgerard @Edent

The underling design problem:
Instances in a federated network are implemented as peers in a p2p network.
Thus not advantaging federation at all.

¯\_(ツ)_/¯

#Infosec
#FediSec
#MastoSec
#vulnerability
#cybersecurity
#SoftwareEngineering
#DistributedSystems

» What is the number one vulnerability?

That question caught me by surprise.
...
I responded with “developers pushing credentials into public repositories”.

The interviewer smiled at me, she liked my answer, but clearly I was wrong. She said

The number one vulnerability is system misconfiguration «

@alevsk

https://www.alevsk.com/2022/11/system-misconfiguration-is-the-number-one-vulnerability-at-least-for-mastodon/

#Infosec
#FediSec
#MastoSec
#vulnerability
#cybersecurity

» What is the number one vulnerability?

That question caught me by surprise.
...
I responded with “developers pushing credentials into public repositories”.

The interviewer smiled at me, she liked my answer, but clearly I was wrong. She said

The number one vulnerability is system misconfiguration «

@alevsk

https://www.alevsk.com/2022/11/system-misconfiguration-is-the-number-one-vulnerability-at-least-for-mastodon/

#Infosec
#FediSec
#MastoSec
#vulnerability
#cybersecurity