Caligin Tsukihara @caligin@octodon.social
Errorist. Weeaboo. Security Sleepwalker & BevOps @ ThoughtWorks UK (Views are mine etc...). 0x7AD2E918B3D5FFB7
roses are red
violets are blue
in surveillance capitalism
poem reads you
and shows you ads
for flower shops
and tracks your clicks
and never stops
it cares not about
if privacy's harmed
the money is green
when people are farmed
twitter is cyan
facebook is blue
your friends are the product
and so are you
New #ThoughtWorks Tech Radar is out! https://thght.works/2ncfNka #TWTechRadar
I wrote a Docker container using Terraform to automatically create and renew Let's Encrypt certificates running inside scheduled drone.io job .. this smells like a blog post 😊
"When Russians decided to target Americans during the 2016 election, [...] they turned to Facebook, where their content reached at least 126 million Americans. The fact that Facebook prioritized data collection over user protection and regulatory compliance is precisely what made it so attractive."
https://mobile.nytimes.com/2017/11/19/opinion/facebook-regulation-incentive.html #facebook
#34c3 ticket GET!
got my tickets for #hyperjapan next week in London! anyone else going?
today's last day of the #glassroom in #London. stop by, totally worth visiting! https://theglassroom.org/
#privacy
I kinda want to go to BlackHat London but the tickets are quite expensive and I'm not sure I am at a level where I can benefit of it... decisions, decisions...
@jedops spotted! I demand pgp verification!
Conference over, it's been fun! #DevSecCon
"Lambda is a function-policy-KMS mapping security nightmare" #DevSecCon
"We wanted to be a platform, but dropping a platform on top of a bunch of siloes is not gonna work" #DevSecCon
How to be a though leader at conferences/meetups: tweet pictures with lots of people in them with the caption "Full house for <insert event or speaker name here>".
This is the politest fire alarm test ever. Very British. #DevSecCon
We deploy vulnerable software every day, it's just that we don't know it is vulnerable until a CVE gets published #DevSecCon
Fire alarm test will ring in 5 minutes in the middle of a talk.. lol??? #DevSecCon
Interesting Equifax struts vuln timeline with numbers though:
1649 days to patch,
7 days to publish on NVD, 144 days between hack and discovering breach. #DevSecCon
Unsurprisingly, everyone's mentioning the Equifax breach. This is the second talk that tells the whole story of the vuln. #DevSecCon
My earlier toot about sponsor talks was in fact unfair: some are "random self-contradicting blabbering* "by the way this is our tool buy it".
And some others are actually very informative! #DevSecCon
In the context of containerized architecture: "Question everything and continually evaluate trust" #DevSecCon
