@CliffsEsport@mastodon.social Computer Security, Physical Security. Gamer: TBS, RTS, Chess, SC2, Minecraft...
Joined October 2011
- Tweets21.9K
- Following1.5K
- Followers214
- Likes6.3K
Cliff'sEsportCorner retweeted
A very encouraging statement from @ZorinOS on the Linux age verification: forum.zorin.com/t/statement-… #Linux
Cliff'sEsportCorner retweeted
People keep asking me about Moxie’s partnership with Meta. They seem enthusiastic about the prospect of TEE-based AI inference integrated with confidential messengers. I guess I’m in the minority here, because this scares the pants off of me.
Cliff'sEsportCorner retweeted
Taking a look at lightweight #Linux distros that work well on older computers: youtube.com/watch?v=sJGf8zVt…
Cliff'sEsportCorner retweeted
My top 10 tips & tweaks for Ubuntu: youtube.com/watch?v=aOTZKcHx…
Cliff'sEsportCorner retweeted
How to turn an existing Windows installation into a virtual machine: youtube.com/watch?v=NJHABjk6…
Cliff'sEsportCorner retweeted
We’re about to add badly-designed age verification to the entire Internet: think how many extortion opportunities that will create.
PornHub extorted after hackers steal Premium member activity data reddit.com/r/InfoSecNews/com…
Cliff'sEsportCorner retweeted
when i was invited to the full panel interview for my job, i turned it down
i sent an email to the hiring manager & architect, saying i was honored that they would even consider me for this role of a lifetime, but i didn’t think i had what it takes just yet
the truth is, despite passing the initial tech screen, i was extremely intimidated by the job req. their wishlist was full of knowledge & skills i either didn’t have enough of or just flat-out didn’t have. i was terrified of somehow getting hired & then failing spectacularly. turning down the job meant i would never have to see what it might be like to fail
they both emailed me back urging me to reconsider. there was a lot of kindness & encouragement. so i did reconsider
4 years later, my network helped launch NASA probes towards Mars & then landed its booster on a barge in the middle of the ocean
i didn’t design it. but i did all the initial testing & integration once we had the equipment. for years, i got to know it on a deep level & i taught many others about it too
the job hasn’t been perfect sunshine & rainbows (nothing ever is). it’s actually been super difficult at times—but it has forced me to grow as a person & as a professional. i’ve learned a lot of cool stuff & met a lot of intelligent, cool people
if u have the means—take the chance on yourself. you really never know
.@sebastianpeak @JoshDWalrath @jeremyhellstrom @malventano something for Josh to emulate since his fav place dropped burger specials 😏 m.youtube.com/watch?v=Ge-RxC…
One of, he's one of the founders if I'm not mistaken, dev's behind Bazzite & rest of uBlue respomomg to GN video m.youtube.com/watch?v=hmQrpA…
.@malventano @ryanshrout @sebastianpeak @JoshDWalrath cc @jeremyhellstrom @dhewlett have a happy Turkey day, even you Canadians ^^
Cliff'sEsportCorner retweeted
We no longer have any active servers in France and are continuing the process of leaving OVH. We'll be rotating our TLS keys and Let's Encrypt account keys pinned via accounturi. DNSSEC keys may also be rotated. Our backups are encrypted and can remain on OVH for now.
Our App Store verifies the app store metadata with a cryptographic signature and downgrade protection along with verification of the packages. Android's package manager also has another layer of signature verification and downgrade protection.
Our System Updater verifies updates with a cryptographic signature and downgrade protection along with another layer of both in update_engine and a third layer of both via verified boot. Signing channel release channel names is planned too.
Our update mirrors are currently hosted on sponsored servers from ReliableSite (Los Angeles, Miami) and Tempest (London). London is a temporary location due to an emergency move from a provider which left the dedicated server business and will move. More sponsored update mirrors are coming.
Our ns1 anycast network is on Vultr and our ns2 anycast network is on BuyVM since both support BGP for announcing our own IP space. We're moving our main website/network servers used for default OS connections to a mix of Vultr+BuyVM locations.
We have 5 servers in Canada with OVH with more than static content and basic network services: email, Matrix, discussion forum, Mastodon and attestation. Our plan is to move these to Netcup root servers or a similar provider short term and then colocated servers in Toronto long term.
France isn't a safe country for open source privacy projects. They expect backdoors in encryption and for device access too. Secure devices and services are not going to be allowed. We don't feel safe using OVH for even a static website with servers in Canada/US via their Canada/US subsidiaries.
We were likely going to be able to release experimental Pixel 10 support very soon and it's getting disrupted. The attacks on our team with ongoing libel and harassment have escalated, raids on our chat rooms have escalated and more. It's rough right now and support is appreciated.
Cliff'sEsportCorner retweeted
For all the fixation on memory corruption 0days, the majority of top threats are actually much higher up the stack. Configuration problems, bad design, trust exploitation, etc etc
OWASP just dropped its 2025 Top 10 - and two new categories made the list.
Software Supply Chain Failures: Reflects the growing risk of attacks hiding in third-party components and dependencies.
Mishandling of Exceptional Conditions: Covers what happens when systems break in unexpected ways — and how attackers exploit those moments.
@SGgrc idk if your checking here often, but I haven't signed up for email, to much email already. Couple of thoughts & questions I have you might be interested in: sure you know Lynx browser lynx.invisible-island.net
1/x
You might be aware of similar Links browser links.twibright.com that has been working bit better for my text based browsing needs. Wondering if you've looked at them at all in recent times from security & privacy perspective?
Cliff'sEsportCorner retweeted
Taking a look at Linux Mint Debian Edition (LMDE) 7: youtube.com/watch?v=VRYkA9RK…
