InfoSec. Dragons. Open Access. Occasionally Copyright. I'm also Jewish.
Joined March 2014
- Tweets18.5K
- Following3K
- Followers2.1K
- Likes105K
Pinned Tweet
I will never understand people who think the appropriate response to an insensitive comment is to wage a campaign of personal and professional ruination.
To borrow an old quip - it's akin to fighting dandruff with decapitation.
dragons/acc 🐉 retweeted
Digital ID courtesy of Capital One. This is to use their app.
Oh look, they share your ID and/or imagine with “third-party vendors.” How nice.
dragons/acc 🐉 retweeted
🚨 BREAKING: Meta has suspended Angie Nixon's organizing account ahead of the midterms.
Nixon is the Democratic nominee for US Senate in Florida.
dragons/acc 🐉 retweeted
By "Republican Christian values" I mean those of Texas Republicans.
I'm not referring to the many humble Christians who seem to live according to the Sermon the Mount without bragging about it.
dragons/acc 🐉 retweeted
While the rest of the country was celebrating our 250th anniversary on July 4, 2026 (not 200th), Ken Paxton was on a $1.9 million tax-payer funded vacation in Britain with his long-time girlfriend, Tracy Duhon. Paxton's wife did not accompany him on the trip, staying at home.
But he supports the Christian values of his fellow Texas Republicans (adultery, fraud, corruption) so he's likely going to win his Senate race.
dragons/acc 🐉 retweeted
This is what Orwell was talking about.
Yes, Democrats have bad energy policies, but oil and gasoline are world-wide markets. Dramatic increases in domestic production has little effect on domestic gasoline prices.
Wars disrupt world-markets, such as Putin's war in Ukraine and Trump's war in Iran. Putin and Trump are the ones responsible for the current high-price of gasoline.
Bad Democrat policies add maybe $0.10/gallon to the price of gasoline, bad Trump policies add $2.00/gallon to the price of gasoline.
dragons/acc 🐉 retweeted
Texas is suing OpenAI because ChatGPT collects too much sensitive data about Texans. AG Ken Paxton's fix is to force every user to hand over ID before they can use it. He also wants a court-approved evaluator to sign off on every new model before Texans are allowed to talk to it. The state says it's worried about private conversations...so it wants each one tied to a verified name.
reclaimthenet.org/texas-sues…
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
dragons/acc 🐉 retweeted
No fucking way
ITS 4 AGAIN
DIFFERENT BUG
Announcing 3 Critical vulns for hundreds of millions of IoT, Firewalls, OT, and Military devices including: Palo Alto Networks, Comcast, D-Link, HP, Canon, Honeywell, GE, Oracle, Siemens, Rockwell, Digi, Lockheed Martin, Boeing...
The vulns are with GoAhead Web Server which is a backend library used by these devices. There's a patch available from GoAhead but that doesn't mean there's a patch available for the devices yet -- that's up to the manufacturer.
- TLS traffic over DHE ciphers have a 1-byte secret, "04", meaning anyone can decrypt connections to these devices and steal login credentials and session tokens if the client negotiated with DHE ciphers like the latest TLS_DHE_RSA_WITH_CHACHA20_POLY1305_SHA256, which is extremely likely.
- LibreSSL mTLS has been completely bypassed, meaning anyone can connect over mTLS. If you have one of these devices listening on the internet and are expecting mTLS to protect it from attackers, take it offline or patch asap.
- OpenSSL Certificate Revocation Lists (CRLs) are not enforced, meaning if a user device is stolen or compromised, and you revoke that mTLS cert, nothing actually happens. There are a lot of other attacks this can be used for.
These are critical because these types of devices run our world. Water systems, electricity, military, firewalls, critical infrastructure.
foxio.io/blog/choose-your-ba…
dragons/acc 🐉 retweeted
This is why I went GrapheneOS when I did. Besides the targeted ads I would get through my Samsung phone I was seeing the trend of phone makers and governments pushing for clientside scanning into phones and increasing levels of telemetry.
The fact your phone can decide your now allowed to see your partner in an intimate manner cause its doing clientside scanning of your private conversations should concern EVERYONE.
This same tech system is used in China to surveill citizens to catch them discussing the government in negative manners, to catch them sharing or videoing protest symbols/images, etc.
These companies will claim its protect people but in reality is to surveillance, censor and eventually control them. 💀
dragons/acc 🐉 retweeted
Florida and Texas are both moving fast on digital ID and mass surveillance policies...all under the banner of “protecting kids.”
Age verification, parent-child linking, device-level tracking, and government-mandated data collection. Same playbook, different states.
This will be copied across the country in 2027.
#protectingkidsonline #digitalid #surveillance
dragons/acc 🐉 retweeted
One professor punished for speech? An anecdote. A hundred? Cherry-picked. A thousand? Selection bias. Surveys? Bad questions. Better surveys? Methodological concerns!
I've spent 25 years watching defenders of the higher ed status quo turn every new piece of evidence into yet another demand for proof, creating a never-ending cycle of increasingly impossible standards for demonstrating problems that were already obvious 50 years ago!
dragons/acc 🐉 retweeted
This is why people hate greedy, unethical @Microsoft. They’ve just installed an update on the computer of every user of Mac @Office 2021 that bricks Word, Excel, Powerpoint etc.
We all have perpetual licences for Office 2021 but apparently Microsoft decided it was time to try to make everyone pay them money, even though the licence was supposed to be a one-off purchase.
After some trial and error, this fix worked for me – posting here for anyone having the same problem:
1. Delete the Office apps (Word etc.) from the Applications folder
2. Download and run the Microsoft licence removal tool: go.microsoft.com/fwlink/?lin…
3. Download and install the version of Office for Mac from 6th October 2026: learn.microsoft.com/en-us/of…
4. Enter your original licence code for Office to activate it
5. In the Finder, go to Macintosh HD > Library > Application Support > Microsoft and delete the MAU2.0 folder
6. Open Word, then go to the Word menu, then About Microsoft Word and check that it shows your licence
7. Still in Word, go to the Help menu, and make sure that the Check for updates option isn’t there
8. Don’t update Office for Mac and it should keep working – you need to keep updates off or Microsoft will install an update that bricks Office all over again
What a waste of time.
dragons/acc 🐉 retweeted
"The idea that unwanted #fiction should be removed simply because somebody finds it objectionable is precisely the attitude that makes an #archive necessary in the first place." michigandaily.com/arts/digit…
dragons/acc 🐉 retweeted
Florida’s HB 3 bans kids under 14 from social media accounts even if parents explicitly approve.
🚫 No consent option. 🚫 No override. The state decides, not parents.
That’s not protecting parental rights. That’s government replacing them.
dragons/acc 🐉 retweeted
How. The. Fuck. Do they have this many employees?
BREAKING: DocuSign says it may lay off up to 162,000 employees.
Readers added context they thought people might want to know
As of Docusign's most recent 10-K filing, Docusign had 7,044 employees as of 1/31/2026, making it impossible to lay off 162,000 employees.
sec.gov/Archives/edgar…
