groved @groved@mastodon.technology

RT @LitMoose@twitter.com

*slaps roof of legacy environment*
"You can fit so many attackers in this bad boy."

🐦🔗: https://twitter.com/LitMoose/status/1232398659368574976

RT @bodil@twitter.com

Jfc, can you please STOP SHAMING WORKERS WHO SHARE THEIR SALARIES? Salary transparency is GOOD for us and BAD for those who control the means of production.

🐦🔗: https://twitter.com/bodil/status/1228666640860110848

RT @jonf3n@twitter.com

This is why we don't trust closed source crypto. Everything seems fine until one day you realize it's been a multi-decade "security theater" show... https://twitter.com/washingtonpost/status/1227310071782178816

🐦🔗: https://twitter.com/jonf3n/status/1227562020674920448

RT @lrvick@twitter.com

Most major holders of data or other digital assets wildly under-invest in security.

Very few companies employ teams of engineers with published security research, CVEs, etc. Most are not hiring for them and lack even one.

You can use this as an indicator for survivors bias.

🐦🔗: https://twitter.com/lrvick/status/1227309734203740161

Normally this is covered with umbrellas, but this is also pretty cool :) https://ift.tt/387On1Z

RT @lrvick@twitter.com

Unpopular opinion: It is negligent to allow users to sign up with vulnerable 2FA methods like, OTP, TOTP, or SMS.

Service providers that don't force use of U2F/WebAuthn, even software emulated, should be partially liable for phishing attacks.

🐦🔗: https://twitter.com/lrvick/status/1224831080928358411

RT @matrixdotorg@twitter.com

And QR code verification with RiotX!! 🎉 @RiotChat@twitter.com #fosdem

🐦🔗: https://twitter.com/matrixdotorg/status/1223992952038535169

RT @jonf3n@twitter.com

Exciting to see #E2EE for Matrix is enabled by default! (developer version only so far)
They seem to have really thought a lot about how this will avoid issues seen in other protocols.
Multi-device cross-signing, searching, better ux, bots, scaling, etc.

🐦🔗: https://twitter.com/jonf3n/status/1223992679543066627

RT @matrixdotorg@twitter.com

Frantic final preparations for #FOSDEM demos are under way... if you want to see the grand reveal for cross-signing, QR verification and enabling E2EE by default, head to K-building auditorium at 4pm on Sunday!

🐦🔗: https://twitter.com/matrixdotorg/status/1223205391531683845

RT @JohnNaulty@twitter.com

@IanColdwater@twitter.com @TinkerFairy_Net@twitter.com @jessica_schalz@twitter.com @MayaKaczorowski@twitter.com @TabbySable@twitter.com @mauilion@twitter.com I think this is the kubecon workshop you're referencing, yeah?
https://securekubernetes.com/

I'm trying to organize a CTF using this in the SF Bay area.
if anyone's interested, ping me :)

🐦🔗: https://twitter.com/JohnNaulty/status/1217900141920735232

RT @lrvick@twitter.com

@ac1dgoddess@twitter.com Lastpass, bitwarden, 1password etc expose your entire password database to an adversary with read access to your memory. They fare worse against remote actors than pen and paper.

Password-store+yubikey or Mooltipass OTOH decrypt one secret at a time with physical approval.

🐦🔗: https://twitter.com/lrvick/status/1217502144015761408

RT @JohnNaulty@twitter.com

Thanks @CloudNativeFdn@twitter.com for helping organize a public #bugbounty program with @Hacker0x01@twitter.com for #kubernetes!

More opensource projects need this kind of financial 'love'

https://kubernetes.io/blog/2020/01/14/kubernetes-bug-bounty-announcement/

🐦🔗: https://twitter.com/JohnNaulty/status/1217320420619108352

RT @pdp7@twitter.com

I gave a talk at #36c3 about Linux on Open Source Hardware with Open Source chip design: https://media.ccc.de/v/36c3-10549-linux_on_open_source_hardware_with_open_source_chip_design

🐦🔗: https://twitter.com/pdp7/status/1215968708172095490

When the streets are aglow and Sparks fly

#fireworks https://ift.tt/2QjBOtJ

If you're in Berlin and want to live the #bitcoin dream, check out Room 77 and pay with Bitcoin or lightning

RT @JohnNaulty@twitter.com

Hey Californians, the California Consumer Privacy Act took effect yesterday!

Know your rights and protect your privacy!
https://en.wikipedia.org/wiki/California_Consumer_Privacy_Act

🐦🔗: https://twitter.com/JohnNaulty/status/1212670395314257922

A little late, but I spent most of the day traveling. Happy New Year from Leipzig, Deutschland

It is proven! I am drgrove on Keybase: https://keybase.io/drgrove/sigchain#bf1c7f818e3dad7d6feb3fa7b5b6ae4f5fb58eba4e24fdbb2e9945802c93e14b0f

I'm a software developer, grinder, cryptography and cryptocurrency enthusiast. I enjoy making things and learning. I enjoy great food, good beer and whisky. Hard Rock, Ska and EDM fan. Seeing the world one flight and one trail at a time. #introductions