overview for jerry

Help understanding video and image size restrictions in c/asklemmy@lemmy.world

[–] jerry 10 points 1 week ago (6 children)

I can increase that if you like.

We Hacked Burger King: How Authentication Bypass Led to Drive-Thru Audio Surveillance in c/pulse_of_truth

[–] jerry 1 points 1 week ago

Thank you!

We Hacked Burger King: How Authentication Bypass Led to Drive-Thru Audio Surveillance in c/pulse_of_truth

[–] jerry 3 points 1 week ago (2 children)

Even better, the author just received a DMCA takedown notice from Burger King and the post is no longer available

Some images are broken in c/infosecpub

[–] jerry 1 points 3 weeks ago

The problem is with the image storage engine, pict-rs. So far, the documented configurations that should fix that haven't worked. In the mean time, I've disabled image proxying, which should prevent the error.

Some images are broken in c/infosecpub

[–] jerry 1 points 3 weeks ago

Thanks. I am trying to sort out what is wrong

Welcome to the new home of what was /r/Blueteamsec and how it works.. in c/blueteamsec

[–] jerry 2 points 1 month ago

I unpinned it. Apologies for leaving it at the top for so long

Some images are broken in c/infosecpub

[–] jerry 1 points 2 months ago (3 children)

Thanks for the report. I’ll investigate

Mentorship Monday - Discussions for career and learning! in c/cybersecurity

[–] jerry 2 points 3 months ago

Thanks. I am interested in hearing from the practitioners what they would like their CISO to know/be/do to be a better CISO

Mentorship Monday - Discussions for career and learning! in c/cybersecurity

[–] jerry 3 points 3 months ago (2 children)

I’m thinking about getting back in the game. What does everyone thing a CISO should know? What makes a good CISO?

We have to solve the money problem! in c/fediverse@lemmy.world

[–] jerry 49 points 3 months ago (8 children)

Hi all. It’s Jerry from the interview talking about infosec.exchange. I think it’s important to understand some apparently missing context in the discussions below. I was talking about a hypothetical future where we saw tens/hundreds of millions of active accounts on the fediverse. I don’t believe the current funding model can support that, and I also don’t think the “spin up your own host” model will work for the masses, either.

I host close to two dozen different fediverse services, from lemmy to mastodon to mbin to peertube and lots more, and all that takes some significant hardware to run at larger scales. My objective has been to provide a fast and reliable fediverse experience, and so I’ve focused more on that than on making my servers scream, and so I’ve landed on hosting the fleet on a series of Hetzner Dell servers with 10GB interfaces, and that is not cheap.

We have to solve the money problem! in c/fediverse@lemmy.world

[–] jerry 3 points 3 months ago

I am not sure if the “he” reference is me, but I did ask and people did step up to support the costs of running the instance.

We have to solve the money problem! in c/fediverse@lemmy.world

[–] jerry 6 points 3 months ago (1 children)

Hey all, Jerry here (from the interview). Happy to answer any questions.

9

Tesseract and Voyager interfaces now available (self.infosecpub)

submitted 3 months ago* (last edited 3 months ago) by jerry to c/infosecpub

4 comments fedilink

I set up tesseract (https://t.infosec.pub/) and voyager (https://v.infosec.pub/) in addition to the existing https://old.infosec.pub/.

43

Fair warning about vote manipulation (self.infosecpub)

submitted 4 months ago by jerry to c/infosecpub

6 comments fedilink

I have no idea why this is a thing, but it’s come to my attention that there are several accounts here that are engaging in vote manipulation. This is fair warning that if it continues, I’ll be suspending the accounts involved.

14

Introducing old.infosec.pub (self.infosecpub)

submitted 7 months ago by jerry to c/infosecpub

7 comments fedilink

Hi all. As requested, I just added the mlmym interface to infosec.pub. It approximates the old style reddit interface.

So far, it has some.... quirks. For example, as far as I can tell, you cannot post with an "undetermined" language.

13

Upgrade complete. Infosec.pub downtime/upgrade (self.infosecpub)

submitted 7 months ago* (last edited 7 months ago) by jerry to c/infosecpub

1 comments fedilink

Hi all. Lemmy 0.19.9 released today and it has some fixes I want to get in place sooner rather than later. I will be installing the upgrade in about an hour. The downtime should be minimal, but it’s also possible it goes horribly wrong and I have to run a recovery.

Edit: the upgrade is complete. It was quite painless.

9

infosec.pub downtime - December 14 (self.infosecpub)

submitted 9 months ago by jerry to c/infosecpub

1 comments fedilink

The following instances will be offline briefly on Saturday, December 14 from 9am ET / 2pm UTC for approxmately 10 minutes: infosec.exchange infosec.town infosec.pub pixel.infosec.exchange books.infosec.exchange matrix/element.infosec.exchange relay.infosec.exchange meetup.infosec.exchange video.infosec.exchange infosec.press infosec.place fedia.io fedia.social elk,.infosec.exchange infosec.space convo.casa

The servers supporting these instances require a reboot. The Dell servers these instances run on take a very long time to boot, so I am estimating 10 minutes of downtime. It could be more, could be less.

We use live patches to minimize reboots needed for patching, however Ubuntu only provides livepatch support for a year, which is how long most of these systems have been running for.

9

Call for moderators (self.foss)

submitted 9 months ago by jerry to c/foss

2 comments fedilink

Hi all. This community was created for a spambot (tuxbot) but it appears to have some following. Is anyone interested in moderating the community?

28

Infosec.pub upgrade to lemmy 0.19.6 complete (self.infosecpub)

submitted 10 months ago by jerry to c/infosecpub

1 comments fedilink

The upgrade went smoothly and took less time than I expected. Let me know if any problems. And yes, tuxbot is still suspended.

17

Infosec.pub downtime (self.infosecpub)

submitted 10 months ago by jerry to c/infosecpub

6 comments fedilink

Hello everyone. Lemmy 0.19.6 was released today. I am going to apply the update Sunday, November 10 at 2am UTC. Downtime should not be more than one hour.

1

test (self.test)

submitted 1 year ago by jerry to c/test

2 comments fedilink

@jerry@infosec.exchange @jb2@mastodon.social

31

Infosec.pub scheduled downtime (self.infosecpub)

submitted 1 year ago by jerry to c/infosecpub

0 comments fedilink

Infosec.pub will be down for maintenance on Monday, July 1 2024, from approximately 10am until 1pm Eastern Time. I will be upgrading to the latest version of Lemmy, which requires an upgrade to postgres.

24

Infosec.pub downtime for maintenance (self.infosecpub)

submitted 2 years ago by jerry to c/infosecpub

7 comments fedilink

Hello everyone. I will be taking infosec.pub offline for a while today to move the instance to a new, larger server.

66

Changes to Infosec.pub (self.infosecpub)

submitted 2 years ago by jerry to c/infosecpub

8 comments fedilink

I am going to be disabling image uploads and image serving, moving to moderated signups, and instituting some extensive block lists on infosec.pub due to the pervasive problems with CSAM attacks on lemmy instances.

No, it’s not happened to any of our instances yet, but I don’t need that headache. And if anyone does, I promise you that I will make it my life’s mission to see that those responsible are convicted and rotting in prison where they belong. ❤️

Edit: h/t to @infosec_jcp for pointing out the problem to me.