Egregoros

Signal feed

Royce Williams

@tychotithonus@infosec.exchange

Just doing my undue diligence.

ISP vet, password cracker (Team Hashcat), security demi-boffin, YubiKey stan, public-interest technologist, AK license plate geek. Husband to a philosopher, father to a llama fanatic. Views his.

Day job: Enterprise Security Architect for an Alaskan ISP.

Obsessed with security keys:
techsolvency.com/mfa/security-keys

My 2017 #BSidesLV talk "Password Cracking 201: Beyond the Basics":
youtube.com/watch?v=-uiMQGICeQY&t=20260s

Followed you out of the blue = stole you from someone I respect.

Blocked inadvertently? Ask!

Am I following a dirtbag? Tell me!

Photo: White 50-ish man w/big forehead, short beard, & glasses, grinning in front of a display of Alaskan license plates.

Boosts not about security ... usually are.

Banner: 5 rows of security keys in a wall case.

#NonAIContent

#hashcat #Alaska #YubiKeys #LicensePlates

P.S. I hate advance-fee scammers with the heat of 400B suns

❤️:⚛👨‍👩‍👧🛡🙊🌻🗽💻✏🎥🍦🌶🍫!

Posts

Latest notes

Update on the FreeBSD ports cleanup after someone committed a 150M blob of the Linux Copilot CLI:

https://people.freebsd.org/~kevans/core/ports-freeze-final.txt.asc

Good as far as it goes, especiallly the striving for transparency, reproducibility, and minimizing downstream impacts.

Notably missing, however:

  • an explanation of how it happened in the first place
  • concrete steps that will be taken to prevent it from happen again

#FreeBSD

I did not have "For security reasons, we can't tell you why you haven't been able to use the on-device passkey on your Pixel phone for the past year, and we can't fix it for you, but we have given you a $20 Google Store credit for your trouble" on my bingo card.

Plugging a YubiKey into my phone is getting old.