dymaxion

@dymaxion@infosec.exchange

Thinking about security, failure, change, art, and living. Recruiting barbarians; complicate your narratives. Fractional CISO to startups via Systems Structure Ltd. HEL/NYC/LON

This profile is from a federated server and may be incomplete. Browse more on the original instance.

quinn, to random
@quinn@social.circl.lu avatar

This is one of those nights when I need to re-read a little of my own work. https://medium.com/a-side-of-my-own/what-are-broken-people-worth-24ecc562d9ac

dymaxion,

@quinn
In theory, yes! In practice, maybe if spoons allow, and I'd at least love to see the pitch?

hacks4pancakes, to random

I get asked a lot by people how they can do professional speaking engagements. It's not a terribly complicated formula:

~ Pick an area of expertise you are credentialed in (experience, degrees, papers, etc) and can speak to a variety of audiences on.
~ Work on your speaking skills with formal education. I recommend Toastmasters and their Pathways. It's tried and true and a lot of fun. I recommend them to EVERYONE.
~ Do free talks for a couple years at community events to practice and build a portfolio of talk topics and then recordings. For infosec, events like recorded BSides that post talks on YouTube are great.
~ Work on your branding. Good professional looking headshots. Good bio. Get outside editing help.
~ Reach out to a speaking bureau in your region which covers the general topic you would like to speak on, and propose yourself as a speaker with the aforementioned portfolio. They will interview you and review your credentials and recorded talks.
~ Explore the fees on their site from similar speakers to set your general reasonable ballpark. It is probably more than you think. The agent will take a percentile.

dymaxion,

@hacks4pancakes
Huh, I should reach out to a bureau again

pluralistic, to random
@pluralistic@mamot.fr avatar

Rooftop solar is the future, but it's also a scam. It didn't have to be, but the US decided the best way to roll out distributed, resilient, renewable energy was to let Wall Street run the show. They turned it into a scam, and now it's in terrible trouble. which means we're in terrible trouble.

If you'd like an essay-formatted version of this thread to read or share, here's a link to it on pluralistic.net, my surveillance-free, ad-free, tracker-free blog:

https://pluralistic.net/2024/01/27/here-comes-the-sun-king/#sign-here

1/

dymaxion,

@clarablackink
In some cases, they may be receiving a significant discount from their liability insurer if they're doing that, and getting pushed into it by the insurance company. In other cases, they may actually be working for a practice owned by a hedge fund that's still operating under independent branding — increasingly common. Of course, they may also just be super-shady. :-/
@glightly @thestrangelet @pluralistic

jerry, to random

Looking at the news from eBay and thinking...

"Go into IT" they said
"You'll always have a job" they said

My unscientific survey is that IT people either move to farming or bartending, in case that is useful to you.

dymaxion,

@jerry They said you'll always have a job. They didn't say you'll always want that job.

mattblaze, to photography
@mattblaze@federate.social avatar

Moynihan Train Hall, Penn Station, NYC, 2021.

A rush hour's worth of pixels at https://www.flickr.com/photos/mattblaze/51205135362

#photography

dymaxion,

@mattblaze
I do wish they'd done modern flip boards for the smaller displays too, but I guess cost plus the ability to show ads won there. Clearly we need more vintage display technology fetishists in the NYC administration

dymaxion, to random

Holy fuck this comment: https://leehamnews.com/2024/01/15/unplanned-removal-installation-inspection-procedure-at-boeing/#comment-509962

cstross, to random
@cstross@wandering.shop avatar

Chengdu worldcon Hugo nomination statistics suggest the 2023 Hugo awards were rigged: http://corabuhlert.com/2024/01/21/the-2023-hugo-nomination-statistics-have-finally-been-release-and-we-have-questions/

I've also seen it alleged that the concom offered some attendees "special guest" treatment … and stole their Hugo voting rights in return, without telling them about that part of the "deal" first. (I will not cite a source on this until the attendee in question goes public.)

dymaxion,

@cstross
I don't think the delayed vote is sufficient — e.g. on the current case, if that speech in Mandarin occurs at the next con, the Chinese government will absolutely visit penalties on the team that allowed them to be nominated even if they had no control over the vote. They might even find themselves in hot water if the "this country isn't free" mechanism was activated at all, regardless of the outcome.

kissane, to random
@kissane@mas.to avatar

oh good my least favorite internet phrase is now the official language of US federal public health comms

anyway, please consider this an abrasive but non-condescending reminder that if you’re in the US, you can get test-to-treat free now no matter what your situation is with primary care

dymaxion,

@kissane
Constantly doing risk management is exhausting and folks are bad at it, so either theory simplifies your life
@mattblaze

SwiftOnSecurity, to random

Imagine you publishing in the newspaper you were mad Abe Lincoln got elected president last week, and your great-grandkids come across it.
Yours are going to be like “Why is she making fun of Zuckerberg, the guy who made humans immortal?”
You’re going to look so dumb. Delete your posts.

dymaxion,

@SwiftOnSecurity
Fucking lol

dymaxion, to random

There's no point in having institutions of soft power if you don't use them when fundamental principles are at stake.

mjg59, to random
@mjg59@nondeterministic.computer avatar

Every time you boot your computer your CPU establishes a connection to your RAM that's carefully negotiated to take into account the unique characteristics of the specific modules in your machine and there are still people who believe that fucking cathedrals represent some sort of engineering capability that no longer exists?

dymaxion,

@mjg59
We have, however, lost the will to make the physical infrastructure of our lives deeply beautiful and richly ornamented for no other reason than that we can, and to build for centuries rather than quarters.

dymaxion,

@mjg59
I disagree. Public spaces can and should be art and designed for pleasure as much as utility. And I'm not anti-brutalist, to be clear, but it's telling that the only emotions modern architecture has vocabulary for are awe and unheimlich.

dymaxion,

@ignaloidas
This is not how the history went. Before the 20th century, most buildings, public and not, were significantly more ornamented. I'm not taking about public art installations — that's kind of a separate category. I'm taking about ornament and decoration, in accordance with changing taste. The decline began in the years before WW1, and was finished by the mid-60s. Outside of some post-modernist buildings and e.g. the Memphis group, there's been no meaningful resurgence, to the point where most of us have no idea what modern ornamentation would even look like.
@mjg59

dymaxion, to random

If I've talked to you about this crazy Nordic larp thing over the years and you're interested in finding out more about what in my eyes is the most useful works of interaction design experts anywhere, tickets are still available for our annual conference.

This year it's in Tampere, Finland on April 11th-14th, and you can find (shockingly cheap, the prices include room and board) tickets and more information at https://solmukohta.eu.

[If you're coming from the purely academic world, note that this is a social event as well as a para-academic conference, but don't worry, we're very good with new people and also throw some of the best parties going]

cstross, to random
@cstross@wandering.shop avatar

iPhone survives 5km fall, and still works: https://mendeddrum.org/@swaldman/111720437587863267

iPhone survives 10 months on bottom of a river, and still works: https://appleinsider.com/articles/22/06/23/man-recovers-iphone-lost-at-the-bottom-of-a-river-for-10-months

Charlie's Law of Ruggedized Consumer Electronics: If it can survive an event that would kill the owner, you don't need to ruggedize it any further.

(This might be why phone manufacturers are now pushing towards foldable—hence fragile, easily broken—phone screens.)

dymaxion,

@cstross
I believe that depends whether the device has use cases where surviving the owner is a requirement.

While I believe this applies to relatively few pieces of container electronics, I'm not willing to say there are none.

kissane, to random
@kissane@mas.to avatar

Started the day with Alexander Chee's newsletter (https://querent.substack.com/p/what-ive-been-reading-on-and-off — yes, it's on Substack, and YES he just sold a new novel) and this essay he linked

https://harpers.org/archive/2023/12/trapdoor/

and I have no idea how I'm meant to accomplish anything else.

(Harper's essay CWs: complex forms of child abuse, self harm, suicidal ideation, poleaxing writing)

dymaxion,

@kissane
My god, that piece.

Undone.

mattblaze, to photography
@mattblaze@federate.social avatar

270 Park Avenue (Under Construction), NYC. 2021.

All the pixels at https://www.flickr.com/photos/mattblaze/51382836481

#photography

dymaxion,

@mattblaze
Oh, I love that piece. Is there more of his work online anywhere?

malwaretech, (edited ) to random

Christmas gift article :)

An Introduction to Bypassing User Mode EDR Hooks

https://malwaretech.com/2023/12/an-introduction-to-bypassing-user-mode-edr-hooks.html

dymaxion,

@malwaretech
This just feels like an argument that we should demand that our OS vendors build proper EDR tooling, because it can't be done correctly by anyone else.
@HalvarFlake

dymaxion,

@malwaretech
Oh, I'm not saying they've done it — that's why it unfortunately is a demand. If we lived in a more perfect universe etc etc
@HalvarFlake

hacks4pancakes, to random

I am a huge humanist and feminist, and have devoted a lot of my life to expanding and advocating for diversity in technology and yet if I ever receive another email with the term “she-curity” in it again it will be way too soon, and I may shrivel into a corncob.

dymaxion,

@hacks4pancakes
Jesus fucking Christ on a gas-powered pogo stick

li5a, to random
@li5a@chaos.social avatar

Petty grievance #523: “Appetite” being used in any context other than food.

It’s like nails on chalkboard to my ears.

dymaxion,

@li5a
Even sex? Like risk appetite etc I get, but

dymaxion, to random

There is no room in the international community for countries that intentionally commit genocide. It is unacceptable to maintain diplomatic or trade relationships with them.

maxkennerly, to random
@maxkennerly@mstdn.social avatar

You can say Substack should host Nazis, but don't pretend there's some "free speech" principle to it. Substack has a strict ban on pornography. Welcoming Nazis while banning sex workers isn't a principled stand, it's a choice, an expression that you like the former and dislike the latter.

dymaxion,

@feld US, sorry. USG basically sets content policy for the entire industry here, unfortunately. @maxkennerly

dymaxion,

@feld
Yes. Visa and Mastercard sort of tolerate those folks, but enforce the rules across everyone else, and those processors are much more expensive — and still kind of in the targets of stuff like Fosta/sesta. Substack is on Stripe who don't allow this.
@maxkennerly

dymaxion,

@feld
Was this pre-fosta/sesta?
@maxkennerly

  • All
  • Subscribed
  • Moderated
  • Favorites
  • •
  • JUstTest
  • InstantRegret
  • mdbf
  • ethstaker
  • magazineikmin
  • cubers
  • rosin
  • thenastyranch
  • Youngstown
  • osvaldo12
  • slotface
  • khanakhh
  • kavyap
  • DreamBathrooms
  • provamag3
  • Durango
  • everett
  • tacticalgear
  • modclub
  • anitta
  • cisconetworking
  • tester
  • ngwrru68w68
  • GTA5RPClips
  • normalnudes
  • megavids
  • Leos
  • lostlight
  • All magazines
    •