Shakedown Social

1 post1 participant0 posts today

The DefendOps DiariesImagine if every patch update was treated like a potential threat. ThreatLocker’s zero trust approach audits every change before deployment, keeping vulnerabilities in check and hackers at bay. Ready for a security revolution?<a href="https://thedefendopsdiaries.com/threatlocker-a-security-first-approach-to-patch-management/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://thedefendopsdiaries.com/threatlocker-a-security-first-approach-to-patch-management/</a><a href="https://infosec.exchange/tags/threatlocker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatlocker</a> <a href="https://infosec.exchange/tags/patchmanagement" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#patchmanagement</a> <a href="https://infosec.exchange/tags/zerotrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zerotrust</a> <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

WalkerWhen can we declare IP Geo location / country code blocking practically dead as a mitigation strategy?Sure it is still useful blocking script kiddies from Iran and other low hanging fruit, but do any serious APT crews actually launch attacks from their home country anymore? With the use of zero trust, distributed attack and delivery networks (looking at you Cloudflare), and VPN usage country blocking feels less useful than in the past. <a href="https://infosec.exchange/tags/zerotrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zerotrust</a> <a href="https://infosec.exchange/tags/geoblocking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#geoblocking</a> <a href="https://infosec.exchange/tags/apt" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#apt</a> <a href="https://infosec.exchange/tags/scriptkiddie" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#scriptkiddie</a> <a href="https://infosec.exchange/tags/networksecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networksecurity</a> <a href="https://infosec.exchange/tags/cloudflare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cloudflare</a>

TailscaleAt <a href="https://hachyderm.io/tags/RSAC2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RSAC2025</a>, the message was clear: it's time to move beyond legacy VPNs.Discover how Tailscale is leading the charge towards modern, secure networking solutions.Read our RSAC 2025 recap: 🔗 <a href="https://tailscale.com/blog/rsac-2025-recap" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tailscale.com/blog/rsac-2025-recap</a><a href="https://hachyderm.io/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> <a href="https://hachyderm.io/tags/NetworkSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkSecurity</a> <a href="https://hachyderm.io/tags/Tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tailscale</a>

kurtshInterested in stopping: ❌ DNS hijacking ❌ Phishing, malware & beacons ❌ Data exfiltration Zero Trust DNS is now available for preview in Windows 11 Insider Build 27766+.✅ Deployment instructions for testing Public Preview of Zero Trust DNS (ZTDNS) on Windows 11 Insider builds <a href="https://techcommunity.microsoft.com/blog/networkingblog/announcing-public-preview-of-zero-trust-dns/4405802" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://techcommunity.microsoft.com/blog/networkingblog/announcing-public-preview-of-zero-trust-dns/4405802</a> <a href="https://mastodon.social/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> <a href="https://mastodon.social/tags/microsoft" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#microsoft</a> <a href="https://mastodon.social/tags/windows11" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#windows11</a> <a href="https://mastodon.social/tags/zerotrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zerotrust</a> <a href="https://mastodon.social/tags/dns" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#dns</a>

TailscaleMissed our Zero Trust webinar on Least Privileged Access?🎥 It’s now available on-demand.Learn how to stop lateral movement, verify identity in real-time, and apply Zero Trust with Tailscale.📺 Watch now: <a href="https://tailscale.com/events-webinars/zero-trust-series-part-two" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tailscale.com/events-webinars/zero-trust-series-part-two</a> <a href="https://hachyderm.io/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> <a href="https://hachyderm.io/tags/CyberSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CyberSecurity</a> <a href="https://hachyderm.io/tags/Tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tailscale</a>

Tailscale📍 We’re live at RSAC 2025! 📍Tailscale is redefining secure, seamless networking—and we’re here to show you how.🚀 Stop by booth # N-4607 North Expo for a live demo and some exclusive Tailscale swag.🔹 Zero trust networking without the hassle 🔹 Private, encrypted connections—zero config 🔹 Secure access that just works👀 Here’s the team—come say hi!<a href="https://hachyderm.io/tags/RSAC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RSAC</a> <a href="https://hachyderm.io/tags/RSAC2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RSAC2025</a> <a href="https://hachyderm.io/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> <a href="https://hachyderm.io/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://hachyderm.io/tags/Tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tailscale</a> <a href="https://hachyderm.io/tags/NetworkingSimplified" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NetworkingSimplified</a>

TailscaleLightning talks at <a href="https://hachyderm.io/tags/RSAC" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RSAC</a>!⚡ Catch Tailscale at the Jamf booth (S-1835):🔹 Tues @ 1:00–1:15 PM 🔹 Wed @ 12:15–12:30 PMHear how a joint customer secured their global workforce with Jamf + Tailscale. Let’s pack the booth! <a href="https://tailscale.com/rsac-2025" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://tailscale.com/rsac-2025</a> <a href="https://hachyderm.io/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> <a href="https://hachyderm.io/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a>

CloudflareStanding room only at the Birmingham NEC for <a href="https://noc.social/tags/NCSS2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NCSS2025</a> where we are live on the Cyber Solutions Theatre talking about securing AI-native application workloads with <a href="https://noc.social/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> alongside our partner, Safenames.Want to learn more? Meet the Cloudflare and Safenames team at booth 5 / M12.

JimmyChezPants 🇨🇦Hey <a href="https://growers.social/tags/NixOS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NixOS</a> <a href="https://growers.social/tags/Cloudflare" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cloudflare</a> <a href="https://growers.social/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> edit: I have not yet sorted out getting Docker running on NixOS yet, so for the moment I'm gonna get that installed and use the available container, which has latest build. I would like to stick to pure Nix on everything, but there is a need to be, umm, clean on opsec.I was trying to install cloudflared from unstable repo. It installed and works from 24.11, but when I ran the command to create the credentialsFile it complained about the older version and suggested upgrading to 2025.4.0 rather than the 2024.10.0 that is in nixos. Unstable has 2025.2.1, which is better, but is not 2025.4.0. Two branching questions from here.1 - the unstable package returned that <code>error: Package ‘cloudflared-2025.2.1’ in /nix/store/vxwsnfg5mys9v1qrxvim13ddmnhd4z1g-unstable/unstable/pkgs/applications/networking/cloudflared/default.nix:97 is marked as broken, refusing to evaluate.</code>Conveniently, it included instructions for allowing packages marked broken through. Is that considered normal in dealing with Cloudflare on NixOS? Cause it reads to me like an outtake from "How To Get Your Website Pwned By L33t H4krz".2 - considering that even if I allow the "broken" package in, I'm still not getting the version recommended by cloudflared's error message, perhaps there's a flake or something I should try, that would get the daily build or whatever? I'm off to do more searches and maybe poke my head into one of the actual support forums, but this seems like a pretty common task for NixOS admins to be doing, so it's probably an easy answer that I just haven't found yet.Probably been looking at nixos.wiki again or something.

Take Back Your Data - The BigTech Breakaway📢 BigTech built walls. We break them. 🔥 Decentralized. Secure. Untouchable. 💡 BigTech refused to build a world with 100% privacy & security – because it would end their business model. 💥 If we don’t act now, their control will be irreversible.🚀 This is already bigger than they expected – and growing every day. 💡 If you believe in real digital sovereignty, prove it. Boost this. Spread the word. Join the movement.📩 Want to contribute? Secure contact: 🔹 Telegram: @Tbyd2025 🔹 Follow us on LinkedIn: linkedin.com/company/take-back-your-data<a href="https://infosec.exchange/tags/BreakBigTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BreakBigTech</a> <a href="https://infosec.exchange/tags/100PercentPrivacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#100PercentPrivacy</a> <a href="https://infosec.exchange/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> <a href="https://infosec.exchange/tags/DataSovereignty" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DataSovereignty</a>

XWiki SASAfter 10 years of <a href="https://fosstodon.org/@cryptpad" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@cryptpad</a> development, we're humbled by users who've found true digital privacy with our solution. No need to brag - their testimonials speak volumes about what we've built.Check out our new CryptPad Cloud service: <a href="https://xwiki.com/en/Blog/get-started-with-cryptpad-cloud/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://xwiki.com/en/Blog/get-started-with-cryptpad-cloud/</a><a href="https://fosstodon.org/tags/privacymatters" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacymatters</a> <a href="https://fosstodon.org/tags/Secure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Secure</a> <a href="https://fosstodon.org/tags/Collaboration" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Collaboration</a> <a href="https://fosstodon.org/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://fosstodon.org/tags/ZeroKnowledge" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroKnowledge</a> <a href="https://fosstodon.org/tags/zerotrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zerotrust</a> <a href="https://fosstodon.org/tags/Privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Privacy</a> <a href="https://fosstodon.org/tags/technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#technology</a>

Marco Ciappelli🎙️✨:verified: :donor:When we started recording podcasts, Sean Martin and I put writing on pause for a bit—but now it’s back, not just in our individual newsletters but also in our event coverage. I enjoy writing, and I plan to do even more with my Musings on Society & <a href="https://infosec.exchange/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Technology</a> newsletter here on LinkedIn.That said…Here’s my final article (#4) from the ITSPmagazine Podcasts coverage of ThreatLocker’s Zero Trust World 2025 (<a href="https://infosec.exchange/tags/ZTW25" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZTW25</a>). In this piece, I reflect on the intersection of society, cybersecurity, innovation, and disruption, inspired by the final keynote from Reggie Fils-Aime, former President and COO of <a href="https://infosec.exchange/tags/Nintendo" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Nintendo</a>."The Disruptive Edge: Innovation, <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a>, and the Future of a <a href="https://infosec.exchange/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> Society."Throughout our coverage, we tackled the evolution of cyber threats, the dark web, supply chain security, <a href="https://infosec.exchange/tags/cybercriminals" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybercriminals</a> tactics, and now, in this final piece, we turn our focus to the bigger picture.From Reggie Fils-Aime’s insights on disciplined, disruptive innovation to Danny Jenkins’ closing words on embedding security into everything we build, the event left us with one key question: Is innovation moving too fast for security to keep up, or are we finally embedding security at the core of progress?For centuries, innovation was slow. Then came the Industrial Revolution, and today, we live in an era of hyper-acceleration, where disruption isn’t a choice—it’s a given. <a href="https://infosec.exchange/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a>, <a href="https://infosec.exchange/tags/automation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#automation</a>, and cybersecurity threats evolve faster than we can regulate or adapt. But is this pace making us stronger, or is security still an afterthought?🔹 Are we innovating responsibly? 🔹 Are we embedding security into progress? 🔹 Are we disrupting for the right reasons?Huge thanks to <a href="https://infosec.exchange/tags/ThreatLocker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatLocker</a> for bringing us together in Orlando for these critical discussions and to the incredible speakers who shaped our coverage.As Danny Jenkins put it best: "Security isn’t a feature you add later—it’s the foundation of everything we build."Check out the full article and join the conversation: <a href="https://www.itspmagazine.com/event-coverage-posts/the-disruptive-edge-innovation-cybersecurity-and-the-future-of-a-zero-trust-society" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.itspmagazine.com/event-coverage-posts/the-disruptive-edge-innovation-cybersecurity-and-the-future-of-a-zero-trust-society</a>Here is all (A LOT) our content from the event: <a href="https://www.itspmagazine.com/zero-trust-world-2025-cybersecurity-and-zero-trust-event-coverage-orlando-florida" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.itspmagazine.com/zero-trust-world-2025-cybersecurity-and-zero-trust-event-coverage-orlando-florida</a>Enjoy, comment, and share! David Coovert<a href="https://infosec.exchange/tags/Innovation" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Innovation</a> <a href="https://infosec.exchange/tags/Leadership" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Leadership</a> <a href="https://infosec.exchange/tags/BusinessStrategy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#BusinessStrategy</a> <a href="https://infosec.exchange/tags/ZTWorld25" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZTWorld25</a> <a href="https://infosec.exchange/tags/DisruptiveTech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DisruptiveTech</a> <a href="https://infosec.exchange/tags/ITSPmagazine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSPmagazine</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/infosecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosecurity</a>

Marco Ciappelli🎙️✨:verified: :donor:Remember 1969? Landing on the Moon, Woodstock, the Birth of the Internet—So Many Hopes and Dreams… And ‘Come Together’ by The Beatles Playing in the Background.Well, we are talking about the internet and Supply Chain Security here 😅 Here we go:From Trust to Zero Trust: How the Internet’s Original Vision Became a Global Security RiskThe <a href="https://infosec.exchange/tags/internet" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#internet</a> was built on <a href="https://infosec.exchange/tags/trust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#trust</a>. The first message sent over ARPANET in 1969 linked <a href="https://infosec.exchange/tags/UCLA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UCLA</a> and <a href="https://infosec.exchange/tags/Stanford" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Stanford</a> with the idea of open collaboration, a network designed to connect—not defend. That trust-based foundation worked when networks were small and closed. Today, it has become a critical vulnerability.Supply chains are no longer just about moving goods—they are digital, global, and deeply embedded in every part of modern life. From the <a href="https://infosec.exchange/tags/software" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#software</a> updates we install to the <a href="https://infosec.exchange/tags/infrastructure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infrastructure</a> that keeps our world running, trust is now the attack surface. And the reality is simple: when trust is exploited, society pays the price.At <a href="https://infosec.exchange/tags/ZeroTrustWorld2025" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrustWorld2025</a> - aka <a href="https://infosec.exchange/tags/ztw25" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ztw25</a> organized by ThreatLocker - Sean Martin and I were on location to explore this shift. Bradford Bleier delivered a wake-up call on how supply chains have become a <a href="https://infosec.exchange/tags/cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#cybersecurity</a> battlegrounds, why trust relationships are the weakest link, and why <a href="https://infosec.exchange/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> isn’t just an <a href="https://infosec.exchange/tags/infsecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infsecurity</a> framework—it’s a necessity for the world we live in.🚨 When a pipeline attack disrupts fuel supply, a ransomware hit leaves grocery shelves empty, or a compromised vendor shuts down hospitals, this isn’t just a cybersecurity issue. It’s a societal issue.🔍 In my latest article for ITSPmagazine Podcasts' Coverage, I break down how we got here, why trust-based <a href="https://infosec.exchange/tags/networks" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#networks</a> no longer work, and what this means for the future of society, technology, and security.📖 READ IT HERE: <a href="https://www.itspmagazine.com/event-coverage-posts/from-trust-to-zero-trust-how-a-hyperconnected-world-turned-supply-chains-into-a-global-security-risk" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.itspmagazine.com/event-coverage-posts/from-trust-to-zero-trust-how-a-hyperconnected-world-turned-supply-chains-into-a-global-security-risk</a>🎤 Event Coverage Page: <a href="https://www.itspmagazine.com/zero-trust-world-2025-cybersecurity-and-zero-trust-event-coverage-orlando-florida" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.itspmagazine.com/zero-trust-world-2025-cybersecurity-and-zero-trust-event-coverage-orlando-florida</a>📍 On Location Coverage: <a href="https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.itspmagazine.com/technology-and-cybersecurity-conference-coverage</a>📩 Subscribe to Musing on Society & Technology: <a href="https://www.linkedin.com/newsletters/7079849705156870144" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.linkedin.com/newsletters/7079849705156870144</a>What do you think—can trust still exist in a hyperconnected world? Or is Zero Trust the only way forward?David Coovert<a href="https://infosec.exchange/tags/RedefiningSociety" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#RedefiningSociety</a> <a href="https://infosec.exchange/tags/Technology" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Technology</a> <a href="https://infosec.exchange/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> <a href="https://infosec.exchange/tags/Cybersecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cybersecurity</a> <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/SupplyChainSecurity" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SupplyChainSecurity</a> <a href="https://infosec.exchange/tags/ITSPmagazine" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ITSPmagazine</a>

Sæverūd 🇳🇴🌻🚲 :donor:Redundant systems is not waste or inefficiency. It is protection from threats known and unknown. We are now seeing this on a national and global scale. <a href="https://infosec.exchange/tags/threatModel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#threatModel</a> <a href="https://infosec.exchange/tags/infoSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infoSec</a> <a href="https://infosec.exchange/tags/zeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zeroTrust</a>?

Jan SchaumannSystem AdministrationWeek 4, Multiuser FundamentalsWe don't have a video for this segment, but here are the slides discussing group dynamics, foundations of trust (and <a href="https://mstdn.social/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a>), like Least Privilege, headless users or service accounts, group permissions, many examples of different forms of multi-factor authentication <a href="https://mstdn.social/tags/mfa" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#mfa</a>, and raising privileges (a topic we'll come back to again later in the semester).<a href="https://stevens.netmeister.org/615/slides/lecture04.pdf" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://stevens.netmeister.org/615/slides/lecture04.pdf</a><a href="https://mstdn.social/tags/SysAdmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SysAdmin</a> <a href="https://mstdn.social/tags/DevOps" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#DevOps</a> <a href="https://mstdn.social/tags/SRE" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SRE</a>

Daniel AJ Sokolov<a href="https://social.heise.de/tags/AI" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AI</a> gives <a href="https://social.heise.de/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> a whole new meaning.

TailscaleWe worked with 2GuysTek on this video, and he loved Tailscale so much… he switched! 🔥See why he made the move and how Tailscale changed the way he connects.📺 Watch here: youtu.be/yGWVYGUU6Pg<a href="https://hachyderm.io/tags/Tailscale" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Tailscale</a> <a href="https://hachyderm.io/tags/VPN" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#VPN</a> <a href="https://hachyderm.io/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> <a href="https://hachyderm.io/tags/Networking" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Networking</a>

Paul Sanders 😎Think it’s time to update my <a href="https://infosec.exchange/tags/introduction" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#introduction</a> post. Hi! I’m a <a href="https://infosec.exchange/tags/strategy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#strategy</a> <a href="https://infosec.exchange/tags/architect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#architect</a> by trade, focusing mostly on <a href="https://infosec.exchange/tags/iam" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#iam</a> and <a href="https://infosec.exchange/tags/zerotrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zerotrust</a> - albeit a long history in <a href="https://infosec.exchange/tags/infrastructure" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infrastructure</a> architecture. Cut my teeth as it were during the virtualisation revolution (I feel older than that 😂) Prior to that, I did desktop builds using Norton ghost and then <a href="https://infosec.exchange/tags/sccm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#sccm</a>.I live in <a href="https://infosec.exchange/tags/manchester" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#manchester</a>, <a href="https://infosec.exchange/tags/uk" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#uk</a> and started <a href="https://infosec.exchange/tags/Yobah" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Yobah</a> - a boutique <a href="https://infosec.exchange/tags/consultancy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#consultancy</a> working on strategy transformation.Feel free to reach out and say hi!

Nick TaylorToday's the day peeps! Job announcement time. I'm super pumped to be joining Bobby and the <a href="https://bird.makeup/users/pomerium_io" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@pomerium_io</a> crew as a Developer Advocate! I'm also really looking forward to working with the developer community. Let's go! <a href="https://hachyderm.io/tags/zerotrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#zerotrust</a> <a href="https://hachyderm.io/tags/devrel" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#devrel</a> <a href="https://buff.ly/4gbHjUl" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://buff.ly/4gbHjUl</a>

tuxwise(19/N) Let's now turn to the third question of the <a href="https://mastodon.de/tags/ThreatModelingManifesto" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModelingManifesto</a>: 3. What are you going to do about it?It pays to first establish a few contraints for what you can do, in theory, by <a href="https://mastodon.de/tags/classifying" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#classifying</a> your <a href="https://mastodon.de/tags/assets" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#assets</a>. Again, for an individual human being, opposed to organizations or companies, it's nearly impossible to impose principles like <a href="https://mastodon.de/tags/ZeroTrust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ZeroTrust</a> or <a href="https://mastodon.de/tags/NeedToKnow" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NeedToKnow</a> on personal relationships, the closer they get.So, avoid recycling terms from popular, but less intuitive schemes: Fanciful intelligence labels like “top secret”, “confidential”, or “unclassified” do not tell you what goes into the respective box, and how to handle access to it.Add another column to your assets spreadsheet, label it "Classification", and pick a more human-centered approach for its values, like:<ul><li>For Your Eyes Only (FYEO)</li><li>Intimate</li><li>None Of Your Business (NOYB)</li><li>Shared</li><li>Public</li></ul>Let's briefly go through these suggestions:For Your Eyes Only (FYEO)Assets that are only accessible to, and controlled by nobody but you, because they need to be resilient, even in the face of the closest of your close people misbehaving. Preferably, these assets are kept publicly undetectable and unknown. When you are gone, these assets will be gone, too. FYEO does not make a good default class, though.Start of this thread: <a href="https://mastodon.de/@tuxwise/113503228291818865" translate="no" rel="nofollow noopener noreferrer" target="_blank">https://mastodon.de/@tuxwise/113503228291818865</a><a href="https://mastodon.de/tags/ThreatModeling" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ThreatModeling</a> <a href="https://mastodon.de/tags/4D" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#4D</a>

Recent searches

Search options

Administered by:

Server stats:

#ZeroTrust