Sheogorath 🦊 @sheogorath@shivering-isles.com

Remember when everyone told you to check your Google Account for location history and activity tracking and so on?

You should do the same with your Microsoft account (if you have one). They also have such a page about personalized advertisement, activity history, location history, buy history, …

You might want to change some of those settings :)

#friendlyReminder #Microsoft #privacy

Realy great article about Hardware security tokens:

https://paulstamatiou.com/getting-started-with-security-keys/

It contains a ton of information for people who want to learn a bit about modern security tools :)

#infosec #Yubikey #FIDO2 #U2F

As I just saw some people talking about "With self-hosting this wouldn't have happened", I have to say, looking at the self-hosting scene and their usage of vendor images for server installs, this would have happened the same way with most self-hosted setups.

Most people, don't use their own OS images when setting up new servers. You should do this to mitigate vendor accounts.

#selfhosting #linux #NordVPN

Those "lessons learned" are more like lessons you should already know. But not everyone is an expert, and not everyone thinks of everything in first place. Therefore I hope there are maybe some people who at least get something new out of it.

By the way, most likely you don't need a public VPN service at all. They neither provide anonymity, nor much additional security, when you get some basics right.

If you really wonder about those basics, feel free to reach out :)

Some "lessons learned" from the whole #NordVPN disaster:

1. Revoke keys when you notice the private key was compromised
2. Use HSMs to prevent private keys from getting compromised
3. Inform your customers about breaches
4. Do proper audit logging of your systems' user accounts
5. Use your own OS images, when installing machines
6. Run an IDS to get informed when your production systems act unusual
7. Spend more money on infrastructure security, less on marketing it

#infosec

Currently checking my shared documents on Nextcloud and came across an interesting PDF that seems to be around for quite a while:

https://cloud.shivering-isles.com/s/VWFb0acGStNG0Ia

Just if someone never saw it before. It's a little privacy guide that has quite some nice illustrations for kids. Why not teach team blue vs. team red as a super hero comic?

#privacy #kids #comic

Just decided to run Mastodon in "Secure mode" for a few days and see how that goes.

I really don't make it to figure out the whole gendering thing in languages.

I mean in German we have 3 genders in our grammar (male, female and neutral) and one would think, great, so for gender neutral language, I just use the neutral pronoun. But that doesn't work, because people consider that objectifying. Instead various people tried to setup a new gender and I wonder: Why?

When became language constructs so complicated? And why should we stop making assumptions about the world?

@Gargron I think I noticed that the federated timeline on my 3.0.1 server loads noticeable slower than on 2.7.X, was there such a fundamental change that this can happen or is my setup weird?

I saw you were posting about rebuilding of the timelines recently, but not sure if that's explicitly about that?

#MastoAdmin #MastoDev

Quite nice interview about 15 years of Fedora and the current state of the project:

https://www.techrepublic.com/article/fedora-at-15-why-matthew-miller-sees-a-bright-future-for-the-linux-distribution/

#Fedora #Linux #flatpak #systemd #Gnome3

Want to be in charge of a critical piece of software that runs on pretty much every linux desktop?

libinput is searching for people to eliminate the bus factor:

https://who-t.blogspot.com/2019/10/libinputs-bus-factor-is-1.html

Would be great when such critical software parts wouldn't rely on the shoulders on a single person (not me).

#helpWanted #linux #libinput #freeSoftware

There is one thing #DHL got right and that's #email.

They:

- provide a multipart email, means HTML and plaintext version of the content
- Split links in the plaintext version out with "[1]" and use proper mail formatting
- sign their emails using S/MIME

Sounds easy? Let me put it this way: They are the only company I get such nice emails from to my private mail account.

If your setups are breaking due to missing container images, it's possible that this was me. I just removed a bunch of repositories from Docker Hub. All of them were more than a year old, so you shouldn't have used them anyway anymore.