Toots for Walker@infosec.exchange account

Written by Walker on 2025-02-01 at 23:05

I get the hate for Musk and his companies, and the desire to ditch them.

Regarding Starlink, I have many colleagues in South America that only have the Internet because of Starlink. Their regular commerical Internet is mediocre at best.

So.. yes hate on the man, but understand that these services, for good or bad, is the only way many can get online in countries that have less established Internet infrastructure.

[#]starlink

=> More informations about this toot | View the thread

Written by Walker on 2025-02-01 at 22:59

Rewatching Worst Cooks in America while cooking to give myself a confidence boost while making dinner.

Whatever I do, can not be as bad as these people. Hopefully, fingers crossed.

=> More informations about this toot | View the thread

Written by Walker on 2025-01-31 at 13:34

Hey Linux users. I have an eSATA external drive enclsoure that I want to use as a RAID, accessable from both Linux and WIndows.

I have set up the software RAID1 using mdadm and its all good in Linux. But I am not able to mount it in Windows (dual boot system). Windows drive manager is able to see the drives, but not the RAID.

From serach it appears this is not possible. Is there one quick trick to get access the RAID from windows.

[#]linux #windows #raid #mdadm #homelab #storage

=> More informations about this toot | View the thread

Written by Walker on 2025-01-30 at 15:51

Used Seagate Drives Sold As New.

My initial question, has anyone tried to recover the data on the drives? I am curious as to where they came from and what can be recovered.

https://www.tomshardware.com/pc-components/hdds/german-seagate-customers-say-their-new-hard-drives-were-actually-used-resold-hdds-reportedly-used-for-tens-of-thousands-of-hours#xenforo-comments-3872021

[#]fraud #seagate

=> More informations about this toot | View the thread

Written by Walker on 2025-01-30 at 15:10

"WFH with privacy? 85% of Brit bosses snoop on staff."

I get the impulse to constantly monitor your staff, but it seems like an excuse for poor management and leadership.

As someone who manages a remote team, I have found that you do not need to constantly monitor staff if you set realistic agreed upon goals and timelines. Then as a manager weekly check-ins with the employee to address any issues that might be an impediment to reaching those goals.

If the employee ultimately does not hit those goals then as a manager you talk with the employee and discuss where things fell and work on a plan to get back on track.

The constant monitoring seems to take up a large amount of resources and money that could be better spent improving the business.

https://www.theregister.com/2025/01/30/forget_the_idea_of_wfh/

[#]employeeprivacy #wfh #monitoring #management #privacy

=> More informations about this toot | View the thread

Written by Walker on 2025-01-30 at 14:34

This will probably impact some sites. But expired certs should get updated when enough users complain to the site owner.

Maybe these sites should pay for a #SSL cert. #letsencrypt

https://linuxiac.com/lets-encrypt-phases-out-expiry-notifications/

=> More informations about this toot | View the thread

Written by Walker on 2025-01-28 at 20:55

IEEE is very desperate for me to renew my subscription (not going to happen). They extended my access for an extra month, they have given me more free articles to read.

Its too bad their articles and magazines are written by an overly educated bunch of academics who seem to get paid by the number of words they write.

Just because you write in academic speak, almost unintelligible by the average person, does not make you sound smart.

Follow the KISS Principle / Less is more.

[#]ieee #academicpublishing

=> More informations about this toot | View the thread

Written by Walker on 2025-01-28 at 20:46

Either #instagram really wants me to reactivate my account or someone is trying to reset my password.

I am guessing #instagram is getting desperate for me to log back in and start using the platform again.

[#]meta

=> More informations about this toot | View the thread

Written by Walker on 2025-01-28 at 13:57

Regarding #deepseek, I am curious how many people shorted #NVIDIA stock before the public announcement.

I am not convinced this is not all vaporware or a massive hype campaign.

=> More informations about this toot | View the thread

Written by Walker on 2025-01-27 at 21:15

Just so my less used home systems do not feel neglected, I parodically move large amounts of data between file servers just to they feel needed.

It gives the network switches some exercise and keeps the farm residents happy.

Servers need attention too.

[#]homelab #proxmox

=> More informations about this toot | View the thread

Written by Walker on 2025-01-27 at 15:35

Sick of the #NFL, yes I will watch the #Superbowl rooting for the Eagles (Though I wager KC will win).

Do I think that the NFL wants KC to win, yes. Do I think the refs are making calls favorable to the KC, probably not.

Could the refs subconsciously tilt calls for KC, maybe?

It does have the appearance of bias, though that maybe just because KC is not a super team on paper, but they keep winning.

Either way, I get enough Taylor Swift from my kids, I don't need it any more in football.

Next year I think I will stick with college ball. #cfb #kansascity #philidelphia #eagles

=> More informations about this toot | View the thread

Written by Walker on 2025-01-22 at 20:25

Does anyone else notice that when you have a holiday Monday off in a 5 day work week that the remaining 4 days back are absolutely insane?

People, we don't need to cram the extra day worth of work in the subsequent four days in the week. It's not necessary and makes everyone very cranky.

FFS it's only Wednesday

[#]work #workweek #fourDayWeek

=> More informations about this toot | View the thread

Written by Walker on 2025-01-17 at 16:25

New malicious AiTM Google Ad campaign. Threat actors use paid Google Ads to poison search results for Google Ad manager login page, redirecting users to a fake website that captures credentials and MFA tokens.

https://www.malwarebytes.com/blog/news/2025/01/the-great-google-ads-heist-criminals-ransack-advertiser-accounts-via-fake-google-ads

[#]google #gws #gsuite #googleads #aitm #threatintel

=> More informations about this toot | View the thread

Written by Walker on 2025-01-16 at 23:50

Dune was David Lynch greatest movie.

//Runs and hides.

[#]davidlynch

=> More informations about this toot | View the thread

Written by Walker on 2025-01-15 at 18:52

Just got a txt message from Mass DoT saying i have an unpaid toll bill.

Based on the txt number it appears that the Mass Gov has outsourced toll collection to a number in the Philippines pointing to a website in China.

Something does not seem quite right. #scam

=> More informations about this toot | View the thread

Written by Walker on 2025-01-14 at 17:02

Hey, job applicants. Its cool if you use ChatGPT to help write your summary. The important word is HELP. Do not cut and paste into your resume as is.

It is painfully obvious what is written with ChatGPT and what is not. Especially if the language style is different from the rest of the document or does not contain relevant information.

Does not leave a good impression.

=> More informations about this toot | View the thread

Written by Walker on 2025-01-06 at 14:24

Investigation: Large global fraud infrastructure. The infrastructure for all these sties appears similar, suggesting a SaaS type service. This activity is associated with click farms.

There may be several groups behind this fraud scheme. The tactics have changed over time but this is the general scam.

Fraud sites assume the identity of legitimate companies: ACEN, Charles Schwab, Nubank, Berkshire Hathaway.

Problem: Users are defrauded out of money and may believe the site belongs to the spoofed company.

Target users: Philippines, Africa, Europe

Users get a signup code via Telegram or social media on their mobile device and then make an initial deposit.

Users are assigned tasks, e.g. click farms for social media.

Users get paid for their activities, often in cryptocurrency, or internal tokens.

Sites often ask users to “invest” more money for higher returns.

Like any Ponzi or fraud scheme, some users do get payouts, enough to publicize the service as legitimate, but most do not see more then their initial investment.

The service closes due to “death of owner” or some other reason; and users lose their initial deposit and any profits.

hxxps://berkshire.hpori.icu/register.html

hxxps://charlee.cyou/#/pages/user/register?code=XVYF3I9X

hxxps://nubank.93vip.one/login/?code=MDk2MjEzMzU1Mjc=

Take down:

Request takedown from registrar for fraud or trademark violation. This works but a replacement site is enabled, often with enumeration. Site1, site2, etc.

The sites are often behind Cloudflare (thanks Cloudflare), making the hosting takedown effectively impossible.

Sites are starting to register with Alibaba or its affiliates. These sites generally do not respond to takedown requests.

[#]fraud #telegram #cryptocurrency #clickfarm #scam #crypto #bankingfraud #threatintel @briankrebs #cybercrime

=> More informations about this toot | View the thread

Written by Walker on 2023-03-17 at 12:46

Your talk," I said, "is surely the handiwork of wisdom because not one word of it do I understand.”

― Flann O'Brien, The Third Policeman

=> More informations about this toot | View the thread

=> This profile with reblog | Go to Walker@infosec.exchange account