TofuSec @tofusec@octodon.social

Or something like that. There's more than one way to season tofu.

Just use friggin Unicode and do uniqueness checks on similar/identical characters

Going "heck people who use other languages" is a very bad way to patch your crappy username security policies.

Backwards compatibility is the root of all evils. All this unicode mess we experience? Wouldn't be an issue if we stopped trying to make computers backwards compatible with humans. Oh wait...

Humans are the source of most infosec issues in social media. The solution, obviously, is to remove humans from social media!

Reminder:

A piece of software strongly discouraging you from compiling from source is VERY sketch.

This https://thatoddmailbox.github.io/2018/01/28/iotaseed.html wouldn't have worked if people compiled the code themselves.

Also, trusting non-reproducible binaries from untrusted distributors is a bad idea. It doesn't matter if the software is open source in that case.

Testing Twitter mirroring!

#introductions

This is the official Mastodon of https://tofusec.me, an InfoSec blog ran by @alana .

This account will talk about InfoSec stuffs ^_^.