Ben Cohen @ben@ischool.social

Should my recent Go-related videos have sparked some interest in learning Go programming yourself, I've just recorded & uploaded the first part of a small series of Go tutorials:

Learn Go! - Setting Up Your Workspace

YouTube:
https://www.youtube.com/watch?v=QSKUtK_7quc

PeerTube:
https://peertube.social/videos/watch/4ed5d9a1-1a86-44cd-9246-028dbbb4cf42

This is just a start, but as you know, I always appreciate your feedback. So let me know what you think!

Pop!_Planet has now released a Pop Classic icon pack that you can easily install to get consistent icons back under Pop!_OS 19.04.

Just updated my post to highlight that:

https://ar.al/2019/04/20/fixing-the-icon-regression-in-pop_os-19.04/

Updated guidance on mitigating browser fingerprinting as we design new Web features:
https://www.w3.org/TR/fingerprinting-guidance/

Active fingerprinting may be made detectable; we can minimize increases to the surface of passive fingerprinting; and cookie-like mechanisms can be made clearable.

The Computer is your friend. Trust Friend Computer. (Paranoia: The Yellow Clearance Black Box Blues by John M Ford, WEG, 1985) http://oldschoolfrp.tumblr.com/post/183968097837/the-computer-is-your-friend-trust-friend

A few weeks ago I wrote about #Zim and how I use it to organize my daily work, https://www.schiessle.org/articles/2018/11/01/keep-yourself-organized/ In the blog I mention that I still miss a great mobile app. Yesterday I discovered that #Markor has already basic Zim support, which is a great step forward for my daily usage. I'm sure it will get better and better over time.

There was recently a lot of news about DNS over HTTPS. Some people say it's bad for privacy because it centralizes the DNS requests on Google, Cloudflare and Quad9.

Time to change that and run your own DNS over HTTPS server. I spend some time today in writing, documenting and arranging a small container setup to allow you to do this:

https://octo.sh/container-library/dns-over-https/blob/master/README.md

#DNSoverHTTPS #DoH #Docker #privacy #infosec #selfHosting #DNS

~=8 Character Passwords Are Dead=~

New benchmark from the Hashcat Team shows a 2080Ti GPU passing 100 Billion password guesses per second (NTLM hash).

This means that the entire keyspace, or every possible combination of:
- Upper
- Lower
- Number
- Symbol

...of an 8 character password can be guessed in:

~2.5 hours

(8x 2080Ti GPUs against NTLM Windows hash)

#Hacking #Infosec

"Hey, dad, guess what your grand-daughter wants to be when she grows up?"
"I'm guessing Experimental Paradoxist."
"Expe- How did you know?"
"I spent my youth trying to not get killed by her adult self."
"Oh. Well, she gets timetravelling from her mother's side."
"Uh-huh."
#MicroFiction #TootFic #SmallStories

A bit of a status update on work this month:

* #Fortress is getting a face-lift of its detection of h-cards so it'll be more accurate.
* #Koype is entering a heavy bug-fixing mode and its CI system is being locked down.
* The landing site is being re-built to highlight Patreon contributors (been punting on this for some time)

I'll be updating the Patreon followers over at http://patreon.com/jackyalcine with more updates (that'll be the place until a more solid bridge is in place).

____ ____ ____ you up
____ ____ ____ ____ down
Never ____ ____ ____ ____ ____ you

open registration: any and all assholes can flood your instance

closed registration: no one can sign up

This is the worst binary and it's ridiculous that we're still stuck with it in 2019.

For the love of all things not shitty, please start making admin-approval ques for signups. That instances for years now have to have a separate form on a separate website to moderate their communities is really silly.

And for the love of fuck, hire an anti-abuse consultant.

@sophia @ben most people in infosec are shit at threat-modeling because they are apex-privileged and literally have no threats ¯\_(ツ)_/¯

@sophia @strider @lynnesbian I'm not sure if Tarn has implemented satire yet but when he does I fully expect the game to intentionally crash itself

@Vqrxtvs @sophia @strider @lynnesbian also what if a girl replied to your toot and explained in painful detail? Not everyone is a guy o.o

@Copenhagen_Bram @sophia @strider @lynnesbian all this talk has me confused about foss m. If only a guy could reply to my toot and explain in painful detail...

@strider @lynnesbian @sophia look at you, talking about open source software on the absolutely proprietary platform Mastodon, that tracks everything you post and censors free speech loving instances.