Opens profile photo
Follow
Click to Follow ftp_alun
Alun Jones
@ftp_alun
Father, Husband, Cancer survivor, Information Security Guy. Former Microsoft Security MVP. Loves XSS and "-alert(1)-">'-prompt(2)-'><marquee/
Seattle, WAblogs.msmvps.com/alunj/Joined July 2010

Alun Jones’s Tweets

Threat Modelling is awesome, however you do it. Threat Modelling tools can make it easier, but not everyone agrees on which is the best. It's often hard to remember that not everyone knows about the tools you're already comfortable with. Spread the knowledge.
Quote Tweet
WHY DIDN'T ANYONE TELL ME ABOUT THIS TOOL!?!? MSFT Threat Modeling Tool learn.microsoft.com/en-us/azure/se Also, if you're mad at me for not sharing... I **just** learned about this. MSFT Threat Modeling team, I want to hug all y'all.
2
How long before this thread degenerates into a bunch of people in fursuits demonstrating why "bring your whole self to work" isn't as great an idea as it sounds?
Quote Tweet
Everyone loves sharing a space with their favorite pets, unless you're trying to get work done. Show us how your furry friends try to "help" you WFH.
Never seen a web developer screw up a URL quite this badly before. Well done, Nike! Next time, spend a moment or two working through the errors on the console before releasing. Literally a moment.
Image
2
This story is dated today, but could be about anyone at the named company at any time over the last ten years. Far from being unlike this company's usual demeanour, this is an annual occurrence. Stories online match with friends' reports.
The company keeps telling us we need to "bring your whole self to work". No. Do not bring your whole self to work. Figure out which parts of your whole self the people you work with don't ever want to find out about. And leave those parts at home.
2
Show this thread
And because I know you're going to demand to know what I'm talking about, here, judge along with me. Beginning to think my co-workers need to stop. Just stop. Stop and reassess where they are.
A creepy latex full-face mask of a bald woman, a Raspberry Pi, and a distinctly child-looking anime girl.
OK, I recognise that first one, it's Lady Death, then another anime girl, possibly another, then a "female head sculpture", with mouth open, and another anime girl.
1
Show this thread
Returned to the office for a couple of days this week. Now, Edge's suggestions "Inspired by your shopping interests" has gone from 3D printers and electronics to dolls (excuse me, "figurines") of anime girls (no, I don't mean women), and some downright creepy face masks.
1
Show this thread
Reminder that H-1B visa holders laid off by recent tech purges are in rough waters, as they have 60 days to find a new place. L-1B visa holders have it tougher, as they are given 10 days to wind things up and leave the country, if they don't have job and visa sorted out by then.
It's so nice to see stories about malicious insiders now that we're demanding that they place themselves in physical proximity to core infrastructure again.
Quote Tweet
"Companies threat modeling for malicious insiders need to identify where their infrastructure is the most insecure ... and which tactics are most regularly used by threat actors." -Jim Simpson, @4a696d, Dir. of Threat Research, @SLCyberSec darkreading.com/threat-intelli
1
I guess they really don't want that one person to fly.
Quote Tweet
The list includes names and birth dates and more than 1.5 million entries, but many of those entries are aliases that all reference the same person. trib.al/OWapeRu
I'm embarrassed for InfoSec. We complain about a "shortage of talent", and then we'll state flat out that we're not interested in hiring anything other than senior engineers. This is our field's "nObOdY wAnTs To WoRk".
Quote Tweet
Getting a job in a feild where theres "such an employee shortage" should not take a year +.
1
After an unsuccessful year of hunting for a job in cybersecurity I've decided to call it quits. Getting the knowledge and certs was fun but this is just too much.
26
67
Also worth noting things like this plaque in downtown San Antonio, celebrating the visits of Robert E Lee "and other famous men".
Image
Quote Tweet
Today is “Confederate Heroes Day” in Texas. This state holiday was established in 1973 as a direct response to Black legislators proposing MLK Day. I’m proud to co-author Rep. Jarvis Johnson’s bill to abolish this celebration of white supremacy. #txlege
Show this thread
Well, if you're following along online, it was solved by a combination of deleting all the Nuget Cache / Nuget Storage (it's called Cache in VS before 2022, Storage in VS 2022), and removing and reinstalling every Nuget package I had installed, including Xamarin.Forms/Essentials.
1
Show this thread
... combined with its persistent inability to interact well (play nice) with installers and compilers, means I'm uninstalling it just as soon as I have done with the restored data. With ten months still to go on my annual subscription.
Show this thread
What is Carbonite doing? It's certainly not restoring anything right now, and it doesn't have anything to back up. I can't wait to get to the point where I can uninstall this hog. It was useful as a "fire and forget" backup, but the appalling restore speed cap of 3MB/s...
1
Show this thread
Here's another way is awful. I'm trying to install Visual Studio, and I'd like it to go fast. Carbonite is in "Recover mode", meaning it's not allowed to back anything up right now. Carbonite is using 20+% of my Surface's CPU - one whole core, essentially.
Image
1
Show this thread
Goal this year, to learn how to play two diabolos at a time. This would be handy.
Quote Tweet
ディアボロ射出装置の試作機です。マガジンをつけると最大7連射できます。 #ディアボロ #DIABOLO #ディアボロマシーン #DIABOLOMACHINE #手作り #HANDMADE #DIY #ジャグリング #JUGGLING #大道芸 #アルドゥイーノ #ARDUINO #3Dプリンタ #3DPRINTER
Embedded video
0:18
6.1K views
One day, Elon's going to realise that all these "new features" his staff is developing (showing posts by followers of followers, autoscroll to top when new stories arrive, etc) are from lazy devs going through the list of rejected experiments, and presenting them as new & great.
1
2
Show this thread