Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (Cyborg)
  • No Skin
Collapse
Brand Logo

CIRCLE WITH A DOT

hexamander@infosec.exchangeH

hexamander@infosec.exchange

@hexamander@infosec.exchange
About
Posts
4
Topics
2
Shares
0
Groups
0
Followers
0
Following
0

View Original

Posts

Recent Best Controversial

  • A nice surprise from yesterday: some of my chard plants over-wintered and reemerged when the daytime temperature started to get above freezing.
    hexamander@infosec.exchangeH hexamander@infosec.exchange

    A nice surprise from yesterday: some of my chard plants over-wintered and reemerged when the daytime temperature started to get above freezing. I found them while cleaning out a bed and left them in place to see what they'd do. I've never seen them survive the winter before!

    Hopefully they will start producing leaves large enough to eat in a few weeks.

    This picture was taken before the morning thaw, so they look extra glossy and a little translucent.

    #gardening #highDesertGardening

    Uncategorized gardening highdesertgarde

  • "He sees me, for what I - am, as I am.
    hexamander@infosec.exchangeH hexamander@infosec.exchange

    @robotwig Wow, this one's even more impressive than normal. That's a beautiful set of miniatures.

    Uncategorized theshapeofwater photography miniatures visualart productphotogra

  • I once worked for a client who had a very strong focus on insider threat, and whose entire infrastructure was cloud-based.
    hexamander@infosec.exchangeH hexamander@infosec.exchange

    And, on an internet where we see more and more censorship of completely ordinary and legal things (have you tried looking for information about, say, periods, on Facebook recently?) an Evil Cloud Admin can maybe deny your computer the ability to work on things they don't want.

    Or scan the files on your rented storage to find out if you're doing naughty things, and give that to whatever agency they desire.

    A gross thought for a Monday morning, but I'm sure other and smarter folks than me are already thinking about it.

    I'd like to think about it in company. I do my best work when I can bounce ideas off other people, after all.

    Uncategorized infosec privacy

  • I once worked for a client who had a very strong focus on insider threat, and whose entire infrastructure was cloud-based.
    hexamander@infosec.exchangeH hexamander@infosec.exchange

    I once worked for a client who had a very strong focus on insider threat, and whose entire infrastructure was cloud-based.

    My team and I wrote them the security plan they needed, but it came with a big, bold-text verison of "you cannot reduce the risk of an evil cloud admin, no matter what you do, because you do not own and cannot control the actual hardware you use for critical operations."

    It seems to me that when we're talking about "consumers don't need their own hardware, only a terminal," we are adding the Evil Cloud Admin to individual users' threat model, and that is an incredibly bad idea.

    An Evil Cloud Admin can get your secrets; can inject malware; can read your traffic, tamper with it, or use it to train AI. Can just straight up deny you access to the hardware you paid for and then deny you access to turn it back on.

    And you, no matter how powerful your company or expensive your lawyers, cannot stop them from doing that.

    How much less power does an individual with a terminal that can't do anything by itself have in that situation?

    #infosec #privacy

    Uncategorized infosec privacy
  • Login

  • Login or register to search.
  • First post
    Last post
0
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups