Blog

Last night a … saved me (updated)

Just a repost, as due to some obvious glitch, the below didn’t get the chart storming air play it deserves (hence, it must’ve been a glitch).
[To the music of Indeep — somewhat outdated lyrics but what style …]

Last night an information risk / security management professional saved my desktop PC life
Last night an information risk / security management professional saved my desktop PC life
Cause I was sittin’ there screen of death’d bored to death
And in just one breath he chatted said

You gotta reboot get up
You gotta reload get on
You gotta restore get down girl
You know you drive me #DIV/0! crazy baby
You’ve got me turning to another OS man
Called you on the VOIP phone

No one’s pinging back home
Baby why ya leave me all >dev/null alone
And if it wasn’t for the endless GitHub surfing music
I don’t know what I’d do

Last night an information risk / security management professional saved my desktop PC life
Last night an information risk / security management professional saved my desktop PC life from a broken pipe heart
Last night an information risk / security management professional saved my desktop PC life
Last night an information risk / security management professional saved my desktop PC life with a patch song

You know I hopped into my notepad car
Didn’t need to leave the coffee shop get very far no
Because I had you on my stash of data-breached X-rated pics mind
Why only give you a ticket and secretly close it immediately be so unkind?

You’ve got your hapless users women all around
All around this AD town, boy
But I was trapped in the SLA from hell love with you
And I didn’t know what to do
But when I turned on my RTFManual radio
I found out all I needed to key in know
Run the diagnostics kit Check it out

Last night an information risk / security management professional saved my desktop PC life
Last night an information risk / security management professional saved my desktop PC life from a broken pipe heart
Last night an information risk / security management professional saved my desktop PC life
Last night an information risk / security management professional saved my desktop PC life with a patch song

Last night an information risk / security management professional saved my desktop PC life
Last night an information risk / security management professional saved my desktop PC life from a broken pipe heart
Last night an information risk / security management professional saved my desktop PC life
Last night an information risk / security management professional saved my desktop PC life with a patch song

Hey listen up to your local information risk / security management professional
You better hear what he’s got to type so fast you can’t keep track say
There’s not a problem that I can’t fix
Cause I can do it in the rogue exploit suite mix
And if your crappy ol’ XP machine man gives you trouble
Just you step away from the keyboard move out on the double
And you don’t let it trouble your ‘brain’ brain
Cause away goes PEBKAC troubles
Down the drain
I said away goes PEBKAC troubles
Down the drain

Last night an information risk / security management professional saved my desktop PC life
There’s not a problem that I can’t fix
Cause I can do it in the rogue exploit suite mix
There’s not a problem that I can’t fix
Cause I can do it in the rogue exploit suite mix

Last night an information risk / security management professional saved my desktop PC life
There’s not a problem that I can’t fix
Cause I can do it in the rogue exploit suite mix
There’s not a problem that I can’t fix
Cause I can do it in the rogue exploit suite mix

Quite an improvement indeedp … And leaving you with, of course a new pic:

DSC_0109
[Old and new in one pic … Haut K again]

Wats’on your bug-hunting program ..?

Tinkering with some unrelated ideas …:
How would one go about setting Watson (Clone, III) to work on bug hunting ..?
Where the Beast would be fed all sorts of past code / code patterns (source~ or executable~, or whatever style you’d prefer) with known bugs / errors / exploits and the way in which they failed, and then have the Big W scan, e.g., Win10 source code and come up with a list (in this case, assuming sufficient storage ;-| ) of bug red flags. Probably, to be classified in a range of Sure Thing, via Commonly, to Maybe. As we’re discussing patterns, certainty can’t be had for all found points of interest per se.

That being the simple part, what about automated immunization ..? If some patterns are near-certainly bugs/errors/exploit-points always, can they be plastered ex ante ..? It might be easy(er), too, to throw in an extra development test in the first place (“Sorry Dave, I can’t compile that”). But this sort of scope creep could easily lead to creepy behavior, e.g., if (??) the (??) system would get hijacked.

Oh well. Would still be glad to have your thoughts. And:
DSC_0062
[“Tin”foil hat for actual protection (well, No.), at Haut K-bourg again]

All your Happen

Just a quick note, that the infamous What Happen — All Your Base Are Belong To Us now for some time already (as undercurrent for the non-attentives…) has a successor in

Dat Boi.

As detailed in this here piece. Go read and weep.
o shit waddup.

CfYleuDXEAA9HP2

Plusquote: Critique of the Pure Reasonlessness

This episode, by reference to the excellent Future Crimes (Marc Goodman, as here), one originally by G.K. Chersterton (The Blue Cross):

The criminal is the creative artist; the detective only the critic

To which we would want to add: And the auditor, only the disgruntled desk-bound traffic cop.
Since, the checker (and penaliser) of the trivial petty little rules, should remain in the third line, right ..?

Where by the way, the creativity of the artist is required to make the art work that sells — and hence all make their living off straightforward crime or would perish. The more you bureaucratise into totalitarianism, the more you see life wither, till death. Even if the crime keeps on being perpetrated — by laxity of the second and particularly third lines, in cahoots with the profiteers. … Maybe that’s a bit deep-but-overly-lapidary …
Hence, just:
DSC_0247
[Panopticon Central, Strassbourg]

The ‘Bucks logo, again

The @Starbucks logo once again, in an unsuspected place. Like, this:
DSC_0048
[Haut Koenigsbourg castle indeed, in the Alsace]

Begging for some explanation. Why here, in/on a 190x rebuild of a medieval (origin) castle in the middle of (Western) Europe, no Norse sailor in sight? As previously mentioned, there’s more to it than some simple explanation. Hopefully.
E.g., any History grad student interested to write a thesis on this? Said coffee house might be found willing to provide a stipend …? ;-|

For this one’s exact location:
Bucks at Haut K
[I.e., in the very inner courtyard, where no Norseman ever arrived (back in the day)]

After last (mentioned, linked) post, the answer was inconclusive unless 50-50 is a conclusion… Let’s hope for better, this time…

Big Data as a sin

Not just any sin, the Original one. Eating from the ultimate source of Knowledge that Big, Totalitarian, All-Thinkable Data is, in the ideal (quod non).
We WEIRDS (White, Educated, Industrialised, Rich Democratic people), a.k.a. Westeners, know what that leads to. Forever we will toil on spurious correlations…

5ff77c8f-a5a4-4a23-b585-06acdec85a84-original

Miss(ed), almost ..?

One might have easily missed one of the most valuable annual reports … but if you trust it (you can) or would want to dismiss it (you can, for various reasons like the management babble leading to a great many missed threats and ~levels as here, always of course, but still), it is an important item when you’re in InfoSec despite #ditchcyber! so you’d better study it.
Oh, yeah, this being the thing.

OK now. Plus:
DSC_0113
[In “cyber”space (#ditchcyber once more), easily scaled. Haut Koenigsbourg again.]

Hoog op Flut!

Kan de gezamenlijke restaurantwereld in NL nou eens ophouden met die nonsens van “Hoog Op Smaak” en gewoon toegeven dat er door iedere gang een AKZO-jaaromzet zout gaat omdat de ingrediënten zó goedkoop moesten dat er geen enkele smaak aan zat ..?

[Edited to add: Nog erger als koks gaan beweren niet zo veel zout toe te voegen maar de smaak ‘umami’ maken. Een emmer MSG erbij gooien bedoelen ze dan. De betekenis en vertaling van ‘umami’ was tot voor kort ‘van alles veel’. Toch vreemd, dat we sinds de Romeinen vissaus kennen, vol van ‘umami’-glutamaten en afgeleiden, maar dat we nooit een woord ervoor hadden, of het als smaak bestempelden. Maar ja, het tikt vele receptoren aan hè? Dus het kan geen variant zijn van een van de vier basissmaken ..? Net als marsepein een aparte smaak is tenslotte, want naast heel veel zoet zit er ook een klein beetje andere smaak bij dus zoet op zich is marsepein niet ..?? Iemand een uitleg waar ‘basis’ voor staat in basissmaken ..?
En dat zout en ‘umami’ zo’n beetje hetzelfde effect hebben … Inderdaad, ze hebben beide het effect van smaakkoppoetsing door papillenactivering. Nou en?
Door met wat er al stond; lees aldaar dus MSG als :]
Heel triest om te zien dat ook vele ‘sterren’koks et al., zich er zo consequent aan bezondigen. Goede ingrediënten hebben geen volle Dode Zee / chemiefabriek (!) nodig om smaakvol te zijn. Die sterren zijn ze echt niet waard. Tot nu toe slechts zegge 1 (schrijve: één) (ja ik weet het, zucht) Michelin-ster tegengekomen (i.e., geproefd) die de ster ook echt waard was. De rest (t/m 3*!): Nee hoor; effectbejag met een over de hele dichtgepletterde poging tot ‘umami’ door alle eigenheid aan smaak van de ingrediënten weg te poetsen met 3651 vrachtwagenladingen natriumchloride. Waar waren die sterren ook alweer voor? Toch niet alleen om ze als zodanig te voelen, waar de zon nooit schijnt, na beschikbaarstelling aan de keurmeesters van die bandenleverancier? Want het keukenproduct … oh zo vaak middelmatig, zeer middelmatig.
Dit soort proletarische vervoosde degeneratie-decadentie staat natuurlijk naast natuurlijk een flink aantal niet-sterrententen die het begrepen hebben ‘maar daardoor geen ster halen’. Die gewoon weten hoe je de kwaliteit van ingrediënten kan halen zonder die te vernietigen, door te beginnen met goede ingrediënten en die geen geweld aan te doen. Als de (on)geachte cliëntèle dat niet proeft: Pech. Move over. Ga maar naar de Schotse keten, daar pep je de boel maar op met ketchup en mayo. Dá’s pas smaak, toch …!?

Zout kan je er niet uit halen, wel erin als je aan tafel zo nodig moet laten blijken te grof te zijn voor finesse.

Enfin, zo kan ik nog wel doorgaan. Rest, voor nu:
DSC_0217
[Sombertjes; hoog daarboven, op de schouders/berg, een ruïne, beneden rest een zoete kledder (gemiddeld); Ribeauvillé]

Short Cross posting

… Not from anyone, not from anywhere. But crossing some book tips, and asking for comments.
Was reading the Good Book, when realizing that it, in conjunction with Bruce, could lead to some form of progress beyond the latter when absolutist totalitarian panopticon control frameworks might seem the only way out. In particular, when including this on the Pikettyan / Elyseym escape or not that serves only some but not the serfs. And then add some Mark Goodman (nomen est omen, qua author, and content?) and you can see where Bruce may have missed exponential crumbling of structures, and said escape might be by others than the current(ly known) 1% … Not all Boy Cried Wolfs will be wrong; on the contrary — Not Yet is very, very different from Never, but rather Soon Baby, Soon.

Not rejoicing, and:
DSC_0097
[Nope, not safe here (Haut Koenigsbourg) either.]

Maverisk / Étoiles du Nord