• 0 Posts
  • 341 Comments
Joined 2 years ago
cake
Cake day: July 23rd, 2023

help-circle



  • OSINT off stuff like this includes

    • IP addresses unless you’re using a VPN and periodically changing it up
    • textual analysis if you ever comment
    • interests if you ever subscribe or even regularly visit the same communities regularly (which opens a lot of doors)
    • other accounts if you aren’t using single-purpose emails and handles

    Privacy and social media are mutually exclusive. Find me a security expert that disagrees and I might change my mind. Right now you’re a random person on the internet, I’m a random person on the internet, and OSINT is real.


  • Privacy and social media are mutually exclusive. The ones you have linked are no exception. DD requires a phone number so I didn’t get any further. Minutiae has you taking photos and sending them to a centralized service. That’s not private. I don’t understand why you’d say that no is concerned about privacy with the implication that’s a bad thing then immediately recommend something as bad.









  • As a hiring manager, I don’t give a shit about certs. AWS certs, for example, serve primarily as marketing material and free money. Soft skill certs like agile methodology (of which I have several) are equally bullshit in that everything is a pattern not a prescription yet many people miss that and shoot their teams in the foot. There are some security certs I do value, such as CISSP, because they can be required for certain industries and actually do carry some gravitas. Even those, though, aren’t necessarily valuable for the things I actually need my security folks to do.

    I’d say the market is maybe 30/70 split with folks like me and ATS or idiot hiring managers thinking your ability to memorize the specific GCP settings no one uses will actually make you understand why prod blew up. I refuse to get any; I actively support my team getting them as long as they know what they’re getting into.








  • It does with some hoops IIRC. I used act a couple of years ago to test a very distributed flow for enterprise IaC projects. I can’t remember all of the things we had to do and I think I’m conflating some of the podman issues we had on macOS with act issues. AWS credentials were an annoyance, I think, but we worked around it with some community code. Our primary purpose for act was to be the local testing for enterprise action deployment so I’d guess it’s close to yours. I think our conclusion was to distribute the actions to each repo rather than use the central .github repo for actions because of how GitHub handles overrides. My memory is really fuzzy.

    If you’re going to believe this internet stranger, start with a very simple set of demos to vet me. I remember being very happy; I do not remember how the team solved it. M