You Had One Job — FutureCon Seattle 2025

In 2024, attackers didn’t need phishing emails. They waited for the next zero-day in your firewall. As Mandiant’s M-Trends 2025 shows, edge device exploits are now the top intrusion vector — and security vendors themselves are becoming the new initial access brokers (unintentionally, of course).

My talk at #FutureConSeattle was a no-BS reality check: 10 ways orgs are still failing at foundational security, and how to fix it — no buzzwords, no user-blaming, no new vendor required.

Just configure what you already own, document it, and follow through. Because no one wants to explain how your security box got you owned.

Slides here: https://www.slideshare.net/slideshow/futurecon-seattle-2025-presentation-slides-you-had-one-job/281147331
#CyberSecurity #Infosec #NIST #PCI #FutureCon #MTrends2025

I am job hunting if anyone is looking for an #IT #engineer

I currently work in Mergers and Acquisitions as an IT specialist in the embroidery field, but I have experience with #Cisco #networking including their Firepower ASA and their switches. I am also an #MDM engineer and I am the team lead for SOP writing and development. #SSO experience with Okta. Admin experience with #Threatlocker.

I have operated in a variety of compliance frameworks including #CMMC #PCI and #FEDRAMP for the last 2 years. I've spent 3 years working medical field so I'm #HIPAA aware as well.

I would like to get back into a #datacenter job. I am comfortable with #travel and I'm comfortable with #parttime and #contract work if you have any recommendations.

I won't do defence companies though.

I wounder if it would be possible to build like a #ROM #cart for #OS1337 that just plonks into an #ISA slot (or #PCI / #PCIe as a "nice to have") to boot from.

• And yes I got inspired from @vwestlife 's Tandy 1000RL

And I don't mean like an XT-IDE or similar #SSD, but more like a Boot-ROM...

Trop gros, trop cher, trop moche..., le système de publications scientifiques est à bout de souffle. Un article de "niche" pour passer un bon été :https://www.lemonde.fr/sciences/article/2025/07/07/le-monde-des-revues-scientifiques-au-bord-de-l-asphyxie_6619660_1650684.html
(allez au bout car il y a des messages d'espoirs...)

et en bonus, un "appui" sur l'usage de l'IA qui n'arrange rien,
https://www.lemonde.fr/sciences/article/2025/07/07/comment-l-ia-bouscule-les-publications-scientifiques_6619655_1650684.html

#science #preprint #recherche #pci #pubpeer #matilda #openaccess #retraction
@BorisBarbour @enroweb @ElisabethBik

Given that I want to target i486 with @OS1337 but don't want to deal with obsolete hardware that is dying of old age, I think it's more fitting to consider a sort-of mainboard to shove some 486SX-SOM with PC/104-Plus on and have the few necessities hooked up to it. Maybe even put it inside a THINN #Pizzabox-style #case?

It would also make a new "bridge" machine to interface old PCI & ISA hardware and allow connecting i.e. a #QuadFlop and roll with that...

https://github.com/OS-1337/tiny486

Thoughts, @rasteri @polpo @TechTangents @lazygamereviews @foone ??

A Crypto Miner Takes the Straight and Narrow - As it stands, cryptocurrency largely seems to be a fad of the previous decade, at ... - https://hackaday.com/2025/07/01/a-crypto-miner-takes-the-straight-and-narrow/ #repurpose #hardware #crypto #mining #server #media #miner #gpu #pci

From the editorial of the new #PCI #Psychology (https://doi.org/10.31234/osf.io/m456e_v1):

> "The barrier to expanding the list of PCI-Friendly journals is not us. We are happy to work
with any reputable journal that is willing to work with us. Rather, the barrier is the for-profit
publishing industry, academic societies, and researchers’ own investment in the current system. The barrier is the unwillingness to give up control, the unwillingness to move from a system of closely-held power by the few to a more distributed system of power among the many.“

Hear, hear!

I fully support PCI Psych. As explained in my personal reviewing policy (https://www.nicebread.de/posts/reviewing_policy.html), I will devote my reviewing and editing contributions nearly exclusively to diamond #OA and community-driven publication initiatives.

@mordoc yeah...

Not shure if they too do #MAC / #PCI-ID allowlisting of #NIC|s like #ThinkPad|s do for "certification compliance" and oftentimes they have no convenient way to even shove one of those M.2 Ethernet Adaptors in.

• There are some #ThinkStation Tiny boxes in the same exterior form factor with dedicaded GPUs (and bigger power bricks) but whilst those are half-height PCIe x16 slots, they have a proprietary external I/O plate, cost quite a lot more and due to the proprietary I/O plate won't fit like an i350-T4 or X520-T4 NIC...

Personally, I think it's sad that 10" lost out to 19" in terms of form factor, even tho @jwildeboer and espechally @geerlingguy do push for a resurgence of the form factor...

identify.library v45.0 now detects PCI expansions (requirement: openpci.library and IdentifyPci packet).

Available at Codeberg and soon on #AmiNet.

https://codeberg.org/shred/identify/releases/tag/v45.0

Q: Is there any #PCcase #manufacturer that has a removeable #mainboard tray with #PCI(e) slot for ease of maintenance and setup like the #LianLi #PC62 (as featured in this video by @lazygamereviews / #LGR) ?

https://www.youtube.com/watch?v=K5_JFrEHmTk&t=9m31s

Wenn $Merchant herausfindet, dass es günstiger ist den #PCI Non-Compliance Fee zu bezahlen anstatt Fixes zu implementieren und nen Audit durchzuführen.

"Lo ricordiamo con il bellissimo racconto della sua vita che ci consegnò in occasione del volume sui 100 anni dalla fondazione del #Pci."

#AldoTortorella #antifascismo #Partigiano #compagno #6febbraio

https://www.micromega.net/intellettuale-partigiano-in-ricordo-di-aldo-tortorella

L'université de Nantes se désabonne de la base Wiley et du #WebOfScience pour utiliser #OpenAlex et soutenir des initiatives de la #ScienceOuverte dont #PCI et #OpenEdition https://www.univ-nantes.fr/recherche-et-innovation/science-ouverte-et-publications/des-desabonnements-pour-mieux-soutenir-la-science-ouverte

The PCI-DSS spec requires that card numbers (PANs) are hashed with a "keyed hash" to render them unreadable and suggests HMAC, CMAC or GMAC. Putting aside issues of nonce reuse in GMAC, surely you at least want the hash to be a PRF for this usecase? GMAC seems like such a weird choice here, especially as PANs are short, so GMAC is unlikely to have much of a speed advantage.

So, I just opened up a #Dell from 2021, and it's got a #PCI slot. Not PCI Express (although it has those too), but a freaking old-school parallel PCI slot! On the same board as a M.2 #NVMe port and an 11th-gen Intel Core CPU!