Founder of DEF CON & Black Hat. Maintainer of infocon.org. Member of the UK Gov Cybersecurity Advisory Board & The Council on Foreign Relations. Working to get Hackers and Researchers a seat at the Policy table. I'm interested in hacking, community, technology, privacy, security policy, and the intersection of civil society. (He/Him) Opinions are my own. Previously member ONCD (2024-2025), CISA Cyber Security Advisory Council (2021-2025), and DHS Advisory Council (2009-2020)
Public Key
npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Profile Code
nprofile1qqsdt0cj94tmmtfmteg395y5k04djh6q866lctltrklsc5zpf6kr27spz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsk4lzv3
Show more details
Published at
2026-08-18T03:46:39Z Event JSON
{
"id": "92fac806145344e42aafb7c8d8dbbd4c457113a41c98ea0674ef84fb7651e8bb" ,
"pubkey": "d5bf122d57bdad3b5e5112d094b3ead95f403eb5fc2feb1dbf0c50414eac357a" ,
"created_at": 1787024799 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://defcon.social/users/thedarktangent",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"Jeff Moss\",\"about\":\"Founder of DEF CON \u0026 Black Hat. Maintainer of infocon.org.\\n\\nMember of the UK Gov Cybersecurity Advisory Board \u0026 The Council on Foreign Relations. \\n\\nWorking to get Hackers and Researchers a seat at the Policy table.\\n\\nI'm interested in hacking, community, technology, privacy, security policy, and the intersection of civil society. (He/Him) Opinions are my own.\\n\\nPreviously member ONCD (2024-2025), CISA Cyber Security Advisory Council (2021-2025), and DHS Advisory Council (2009-2020)\",\"picture\":\"https://files.defcon.social/dcsocial-s3/accounts/avatars/109/336/057/058/948/896/original/54d53904bd24bfb7.jpeg\",\"banner\":\"https://files.defcon.social/dcsocial-s3/accounts/headers/109/336/057/058/948/896/original/03efe3fb4b4955f2.webp\",\"nip05\":\"[email protected] \",\"fields\":[[\"DEF CON\",\"https://defcon.org\"],[\"DEF CON Forums Blog\",\"https://forum.defcon.org/node/196796\"],[\"InfoCon\",\"https://infocon.org\"]]}" ,
"sig": "61b3ffbe177c8635bbde2e17847cd9bf9e6cfe57eb20fcde62a7b2d64f0b0d2afaf4f0ae7356aded3da1dfe7f373578a6182fc4fd2773c7f8b1f32fb4643b882"
}
Last Notes npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I’m at the HOMO FABER exhibit in Venice that is celebrating craftsmanship and artistic expression, and it is really impressive and moving. Just want to share a few pictures: https://files.defcon.social/dcsocial-s3/media_attachments/files/117/315/802/752/441/765/original/a770c4280f3ac04e.jpeg https://files.defcon.social/dcsocial-s3/media_attachments/files/117/315/802/928/088/247/original/ebbd04adfd7afb85.jpeg https://files.defcon.social/dcsocial-s3/media_attachments/files/117/315/803/088/911/314/original/69e014abffdf25b3.jpeg https://files.defcon.social/dcsocial-s3/media_attachments/files/117/315/803/226/541/074/original/b9be5a6c68d82bcf.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Last year I was talking with @nprofile…lcd0 and asked for recommendations and he suggested "The City & the City" by China Miéville. It was fantastic, I had never read anything like it. That started a round of requests for this year. (My years tend to start after the end of #DefCon for some reason) @nprofile…0rz0 @nprofile…0kqn npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I am trying to read sci-fi authors I never explored when I was younger, based on recommendations from friends. During #DefCon I had dinner with Bruce Schneier and @nprofile…0rz0 who suggested a bunch, and I’ve started reading Revelation Space by Alastair Reynolds. Best quote so far: “I’m sorry, I thought—“ Volyova trailed off. “Your people don’t use simulations for this kind of work?” “We used to,” Vavilov said, with a long suffering sigh. “But the trouble with simulations is that they put up with far too much shit.” npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Here is Wednesday morning: #LasVegas #Meshtastic #Meshcore #DefCon https://files.defcon.social/dcsocial-s3/media_attachments/files/117/043/303/941/307/361/original/fa4385f755fd1fdd.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss The #LasVegas #Meshtastic mesh is starting to get its annual influx of users. I’m sure #Meshcore is having the same experience. #DefCon https://files.defcon.social/dcsocial-s3/media_attachments/files/117/033/730/498/900/786/original/f1651b031620997c.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…rfqs @nprofile…8z29 You might enjoy “The Circus” “Tinker Tailor Soldier Spy” (The UK TV series) and its successor “Smilies People”. Also “The Sandbaggers” npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…4lqc @nprofile…tk8a Holy hell! He attended #DefCon 2 if I remember correctly, and Barfing Yak magazine gave him a purple shirt.. let me see if Incan find a pic. He was fantastic. I grew up reading his pieces in PC World. RIP. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…n7l8 Do you have a suspend option, or just delete? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…n7l8 Is your “delete” command the same as suspend? Or is it like a combination of “suspend”+”delete data”, just so I understand your terminology. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…xmf3 @nprofile…27qd We use hCaptcha on the "always challenge, hardest complexity" and still get plenty of bots. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss It did not appreciate the floor calibration #DefCon https://files.defcon.social/dcsocial-s3/media_attachments/files/116/910/276/368/288/884/original/aad529480aa63069.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I was just moving a server that will be used for the on-site #DefCon 34 content, and one of the redundant power supplies were not snapped into place... slid out right on to the floor. Not to worry, I fixed it by hitting it with my wallet and $175+shipping. 🤦 npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Because this post got a lot of traction, some more context: Last year I had drinks with another VPN dude at a meeting, and he worked for a holding company that owned many VPN companies. They acquired them pretty regularly and integrated them best they could. I asked why keep all the separate brands and marketing if it’s all basically the same thing, and he explained the market is segmented. Some users believe a particular VPN is better for gaming, or business, or torrenting, or porn, or cheapest or whatever. It actually hurt them the couple times they tried to merge brands, so now they try to merge all they can behind the scenes technically but keep the brand identities separate. #DEFCON #VPN #VPN #Tor npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Next up, a #DEFCON #VPN service sounds awesome. Like with email there is plenty of expertise on how to build VPNs. Technically it is a realistic goal, so let's investigate! To be attractive to a large customer base you need to offer a lot of locations with an ever changing pool of addresses for when some get blocked by someone in the world. Those two things mean you need a pool of providers and great automation playbooks where you can easily spin up and provision "secure" VPN gateways all over the world. Because of the reliance on 3rd parties, unlike with email, you now have to worry about the legal concept of the 3rd party doctrine, so have some more lawyers ready to do battle. Then two things happened, I spoke with two different people with experience in the VPN game. First someone who served as a CTO to a large VPN provider. They spent all their time trying to save money, automate more, and respond to non-stop customer complaints from over seas business people. Chine would block some VPN addresses and they could no longer connect to their company back home and they needed to do that RIGHT NOW. So a sort of daily fire drill. The increasing VPN competition meant they had to keep spending on advertising and cost control. The second person put the final nail in the coffin. They explained as far as they could tell about half of all VPN providers had ties to intelligence services. Either as fronts or investors or super friendly "partners". Iran, Russia, China, North Korea, some Middle Eastern countries, all play in this space. This means half of the VPN providers have a different business model than the other half. Their goal is maximum people at the least cost to cast as large a monitoring net as possible, and revenue from paying customers doesn't have to actually cover your operating costs. Building a #VPN service the right way would mean we would be more expensive, in fewer locations, and support only the strongest technologies - all things that would reduce your pool of potential customers. So, like the private email idea, it was interesting to investigate, we learned a lot, and we will never enter the VPN market. Instead we run free #Tor relays and support @nprofile…g30f Please support Tor and other privacy technologies. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss For #DEFCON to do private email we would want to host our own servers to avoid the 3rd party legal doctrine, and keep them secure. No problem, we have a secure location and lawyers. Back during COVID when we were investigating this it was still possible to gather some open source info on how large other private email services were. How big was the market? Could you make enough money to hire the people and buy the servers? MailFence, Proton, and others showed it was possible if you were very efficient. Great! Then I spoke with someone who worked at a white label email service provider. I realized DEF CON would never do a private email service for two reasons: CSAM: They explained they had about 10 people dedicated to responding to legal requests around CSAM, not including their lawyers and LE relationship people. SPAM: They had another room with about 30 people dealing just with spammers and the impacts of spammers. Managing their ASNs, netblocks that get lower reputation on blackhole lists, moving customers to "clean" netblocks when a shared block gets polluted by spammers, etc. Conclusion? If you are very successful you can look forward to having a room of 40 people dealing with LE, SPAM, CSAM, Networking, and that's before you add on customer service. That doesn't seem fun or very DEF CON Hacker anymore. Next up, VPN. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…4ueq What did you migrate to that doesn’t have security updates? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss With the upcoming #Mastodon 4.6 and the ability to require 2FA for all accounts I'm curious - How do bots handle it? Bots clearly zoom past CAPTCHAS, but what about @FA ORP or Pass Keys? #FediAdmin #FediBlock npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Just connecting through Dubai on the way to Bahrain for some #DefCon meetings. Everything seems oddly normal at the airport, I’m not sure what I expected, and I’m curious what stories I’ll hear from locals. We plan to make a go/no-go decision the beginning of July if we hold DC Middle East the beginning of November, but either way we need to be planning now. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Oh that is really sad to hear. What a PoS. @nprofile…xezz @nprofile…qska npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…ynf4 An http link, bold move! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Looking at traffic patterns on #DefCon WWW, P2P, #Tor, DNS, and this Mastodon instance for the past 24 hours and everything is down. Traffic and queries. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Overall network traffic seems lower / slower. Anyone tracking how the internet is holding up? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss RIP FX - You are a legend https://files.defcon.social/dcsocial-s3/media_attachments/files/116/157/827/529/884/521/original/1702a52a209cf27d.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss #MastoAdmin reminder if you are running on SSD. Linux has atime enabled by default, so to reduce wear consider turning it off with “zfs set atime=off yourpoolname” npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Looking at some statistics from one of our #DefCon name servers reveals something interesting. At some point traffic over TCP 53 was overtaken by TCP TLS 853. Very cool! [Connects] [bytes sent] 222,202 58,890,352 tcp to 853 59,031 7,252,360 tcp to 53 3,410,595 592,245,821 udp to 53 114,315 35,671,044 ip6 tcp to 853 33,537 4,526,104 ip6 tcp to 53 1,833,841 362,515,163 ip6 udp 53 1st - Plain old UDP 53 is still the dominant winner with 5,244,436 connections 2nd - TCP 853 Encrypted DNS with 336,517 connections Last - TCP 53 is last with 92,568 connections 🤔 Now you know npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Hello South Africa! I’ll be enjoying your beautiful country for a few days before leaving your summer and heading to Munich for their Winter 😂 If you will be at the #MCSC conference this Thursday and Friday please drop by our #DefCon sessions on Friday and say hello! https://mcsc.io npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…2kwg @nprofile…fh67 It’s clear he made plans to attend, but as far as we can tell he never did. https://files.defcon.social/dcsocial-s3/media_attachments/files/116/010/863/219/057/512/original/b82e0de4f08c8a71.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss To build on what was said below, your whole online existence is essentially three things combined: 1 - Your email account or mail server where you can get password resets. 2 - DNS that protects the mail server from being impersonated. 3 - Your domain WWW server that can publish records that your DNS registrar trusts when issuing certificates. If you lose control of your email or web server, people can password reset their way into all of your account unless you have some strong second factor as a security key. If you have a secondary email recovery account that would be vulnerable. It could possibly be used to bypass your second factor. If you lose control of your DNS server or your registrar account, then people can impersonate your services such as your web server or mail server for account recovery. A DNS attack could completely remove your existing servers and point traffic to malicious ones as well. Finally if you lose control of you web server then it could be used to publish .well-known files used for identity verification with certificate authorities, spread malicious files, your imagination is the limit. As you can see DNS and email are critical. Today everybody outsources their DNS and email. Choose how you manage these as if your identity, finances, and company depend on them. Basically no one controls their own identities. By running your own email for DNS servers the third-party doctrine would not apply to you, and you would get notice that something was going on with law enforcement. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Wow, HDDs just went price crazy in the last couple weeks. Drives I bought a Mo th ago are now hundreds of dollars more. The predictions of the storage apocalypse are all accurate. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…0rz0 🤦♂️ npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Also, whatever happened to Tech Bros in turtlenecks? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Also, what happened to 5 toe shoes? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Strike one, marking your email importance as High! Strike Two, "Just following up on my last email.." Strike Three, Last email was a generic services pitch with noting specific to my business or needs. -> Forever banished to SPAMageddon npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss “Modern” UPSs, switches, routers, and other infrastructure that only accept RSA 2k certs and not any ECC certs drives me cray cray. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss How do people plan for or change in stressful or chaotic times? Being able to adapt to change, being flexible, and the creating or taking advantage of different opportunities, optionality, seems very important to me. Times of change can be slow, until they are not*. I’m curious what, if anything, people have been doing differently? I’ve been gathering my personal records, updating vaccinations, trying to spend less and simplify where possible. Technically trying to reduce subscriptions and dependence on the hyper scalers. ——— How did you go bankrupt?" Bill asked. "Two ways," Mike said. "Gradually and then suddenly." Ernest Hemingway - The Sun Also Rises npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…2z37 USB-C SanDisk ProReader MicroSD + SD card. That is the only reader that supports their Flow technology that makes things faster. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I’ve tested the Anker 2 in 1 card reader and it is running 70 MB/s but has randomly disconnected on me. It also gets hot like my other readers. So cheap adapter writes at 20 MB/s and is stable, and hot. Anker is 70 MB/s but unstable for me, and hot. Much larger SanDisk Pro-Reader is 120+ MB/s and stays cool. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I have been using inferior USB to MicroSD readers forever, and finally splurged on a SanDisk Pro-Reader. Wow. I should have done this years ago. I went from 20 MB/s writing to 120 MB/s, 5x faster with the same card. Now it is readable to use the larger capacity cards and not wait a day. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss The signature option in LibeOffice is to draw an object, a free form line, and hold the pen / mouse button down when you sign. If you lift the pen up sometimes it mangles things and you have to un-do and try again. I’ve found FireFox to not be as stable as Edge in viewing and editing PDFs. I’ve tried the one that is bundled with WinGPG as well. After removing MS Office the next goal will be to find the “right” pdf viewing / editing software. #ThunderBird #LibreOffice npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…xw8z Sorry for the confusion, on my MS Surface there is a stylus, on Apple it would be their Pencil. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I've managed to get #ThunderBird working as a replacement for Outlook, and #LibreOffice _almost_ working as a replacement for Office. Almost because it is really hard to use a pen to sign documents in LibreOffice where it is super simple in MS Office. If they ever fix that they will cover all of my use cases. I can't wait to uninstall MS Office in early 2026. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Seen on Reddit, “This is just a metaphor for modern technology” - motion capture gone wrong. https://files.defcon.social/dcsocial-s3/media_attachments/files/115/796/206/597/763/238/original/9d4fdc140cc05c25.mp4 npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Best wishes to everyone at #39c3 in Germany! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I'm like 40 minutes into a complicated tech support issue with #Comcast, and at exactly 19:30 an automated voice interrupts us: " Comcast support is now closed, please call back during business hours" and disconnects me. So much for business support! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…u2vu @nprofile…ds0c Doesn’t ring a bell, but there were a lot of talks. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I just realized if you set your iPhone to be used by an underage user you can override app advertising that you can’t override as an adult iPhone user. That seems useful, has anyone done this? Any issues to consider? #iPhone #Privacy npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…7kad It’s also high in Europe npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I grew up reading American Flagg and Judge Dredd, so seeing the government add feels like childhood appropriation because they have no self awareness of the irony. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss And by ending on a cliff hanger I assume they are already doing S04 🎉 npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…mnzw It was good until it required iCloud to use it. Has that changed? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Like I observed last week, AI data centers consume all the memory. https://ohai.social/@dcoderlt/115657082458500409 npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…4gj8 If you update a file in that directory do you need to delete the old share link and generate a new one or is it all automatic? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…94lj Could you please mark your account as being Automated? https://defcon.social/settings/profile then at the bottom "Automated Account" npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…2k5v I'm giving QNAP a try, looking for alternatives to move away from Synology. If that's no good I'll give Terramaster a try. Thanks for the tip! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I placed an order two days ago for a $200 SSD DOM, was contacted today that they can only order them at $270 now. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Here are some more in depth articles: https://www.pcmag.com/news/this-is-insanity-ddr-ram-prices-soar-due-to-ai-demand https://www.gadgets360.com/ai/features/why-ram-prices-are-skyrocketing-shortage-global-price-hike-volatility-ai-data-centres-9704004 https://www.tomshardware.com/pc-components/dram/dram-prices-are-about-to-skyrocket-ddr4-and-gddr6-among-formats-that-could-increase-in-price-by-up-to-45-percent npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss The RAM price increases are real. Hyperscalers have pre-bought giant HDDs years in advance, so if you are desperate enough you switch ahead of schedule to SSD High Bandwidth Memory (HBM) has greater margins than DDR4/5 and is in demand for GPU manufacturing which is causing early reduction of DDR4 production. All the AI datasets need all the RAM. So, unless the AI bubble bursts we are in for high price SSD, GPU, Phones, anything that needs quality memory for the foreseeable future. We are entering the new normal. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…dckc I’m reading subtitles to get the real voice inflection, hopefully they are translated accurately! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss The Family Man season 3 finally came out. I discovered it during COVID, and S3 never happened because of it. I assumed the series was over, but Surprise! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…jrlv That’s the third thing in a week I’ve heard about this. Somethis is in the water. One from a UK Government, one from a U.S. newspaper, and now this. Good deal! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…5sz5 @nprofile…sfjm I always suspected those bags were not the solution to battery fires, but my worry with ammo cans are that if the fire starts and they are closed. The pressure will build up and it will either burst (bad) or maybe just deform enough to vent the pressure? I suppose you could drill holes to let the pressure out, but then in a fire the flame would also shoot out. It needs a way to vent pressure but not have exposed flame. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…s3fx That worked for me, I just copied your text and pasted it in notepad and it was all jumbled up. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Here is an example of Fibberifying "Hello world" Неllо wоrld Copy and paste that into an editor to see it in action. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…szw8 Account required to log in and read, unfortunately npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…7ezu Let me know how it goes! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Anyone have experience in installing a different OS on current QNAP NAS servers? I have found some guides saying it’s possible, but they are from 2021. They have a great looking short depth server that we be fantastic as a #FreeBSD file server. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…ag3t @nprofile…clvk I think they implemented their own version of a quote tweet about a year go, but not sure now if it has been replaced by the new official way. 🤔 npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I hope @nprofile…clvk will soon support the quote posts feature in Mastodon 4.5.x npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…2y2x Crazy how much of this is cultural, or lack of leadership. At DEF CON Bahrain easily half of attendees were women with skills. I asked why so high and an answer I got was the Kings Wife years ago wrote a letter to the government agencies says (essentially) that for IT Director positions if there are two equally qualified candidates, and one is a women, then you choose the woman. Now they have equal representation. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…m2hl @nprofile…7kyk I need someone new to conspire with about #MeshTastic npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…y07g I always tape over ports to help keep dust / moisture out. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…gedf @nprofile…2sw9 There is a reason many rally, race, street car racers rotate their tachometers so that the red line st at 12 o’clock. When the needle is straight up it’s time to shift gears. Simplify your UI under stress. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…qwhe I saw what you write about @nprofile…7kyk passing away, thank you. That was well written. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss It's with a heavy heart that I write this. Long time contributor and friend @nprofile…7kyk has passed away. RIP He always answered the phone with "What's the good word?" and had an insatiable hackers curiosity. He pioneered the Hackers with Debilitates to help make DEF CON more accessible, a selfless soul always on the lookout on how to help. It will be the first time I have set an account to "In Memoriam" and I am not looking forward to it. DEF CON Hackers With Disabilities (HDA) "Making DEF CON Awesomely Accessible" GNCH cDc Ninja Strike Force Dorsai Embassy - Earth npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…hygv @nprofile…c9cr I wasn't talking as a general web replacement - the problems with search are real - but more about specific use cases that may draw people to .onion. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I hope next year some more projects move to #Tor .onion space. With all the censorship and aggressive attempts to unmask domain name and site owners it feels like he pressure to do so is building. The benefits of .onion right now: - No Certificate Authorities required - No reliance on DNS - Much better anonymity The downsides: - Really popular sites will need to learn new ways of handling the traffic - Until @nprofile…c9cr finishes offline key signing of .onion identity keys you risk losing control of your “domain” if your server is compromised and your key is stolen. I thought porn, like all things Internet, would drive people to Tor but maybe the bandwidth demands are too high. Maybe betting sites that use less traffic? What do you think the site types would be to get some migration going? #Privacy #webdev #InfoSec npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…puh7 Check this list of Open Source Software Licenses and you might get more ideas: https://opensource.org/licenses npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss https://www.reddit.com/r/mathmemes/s/Ec6Azcq4FY #math https://files.defcon.social/dcsocial-s3/media_attachments/files/115/523/187/419/538/345/original/e44556c9064d72a7.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…dkjv Do you know if there are any plans to post the PETS videos from 2024 and 2025? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Cool $10k bounty: https://bounties.fulu.org/bounties/ge-refrigerator-water-filter-replacement https://files.defcon.social/dcsocial-s3/media_attachments/files/115/506/940/538/720/850/original/a706b01504db1f41.png npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…kt2h Where is the tracking site for quick lookups? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I’ve enabled the new Administrator Protection feature in the latest Windows update, so far haven’t noticed any work flow differences. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…0yr8 It’s been two years since that was written, curious if people’s perceptions have changed. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…dcm7 @nprofile…mfm4 I was curious what OpenDesk actually is, and found this useful chart: https://files.defcon.social/dcsocial-s3/media_attachments/files/115/468/081/299/347/912/original/0643ae75a7cc3c85.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Is RSA Conference just not releasing their talks anymore? I see some keynotes and innovation sandbox talks on YouTube, but not all the normal talks. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss You know Halloween is here when the Spooktopus is on the menu. https://files.defcon.social/dcsocial-s3/media_attachments/files/115/444/734/751/594/952/original/ccfe6eb80c7e95eb.jpeg npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…3m83 Thank you! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…kn56 @nprofile…wk8l Thank you! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Anyone remember the name of a Fedi / ActivityPub application like Eventbrite? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…0mr9 @nprofile…pl0m You surprised me with that first electronic badge! npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I had a fantastic time at #SAINTCon, thank you for having me, a great conference and community. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Tor .onion sites don’t need DNS (Or Certificate Authorities) to function. Just sayin’ npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss Every year I test disabling 1.1 on our #DefCon media server (It is already disabled on our web site) and at last check several NAS based BitTorrent clients broke using our web seed URL. They only spoke 1.x I think starting 2026 we will disable 1.1 anyway and the old clients will just have to do without. @nprofile…tgne @nprofile…mlwx npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss When working on the #InfoCon collections I noticed the #CCC CryptoCon website TLS certificate expired back in March. https://cryptocon.org/ They have HSTS enabled so I can't just ignore the error with a modern browser, maybe wget or curl will work. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…8ya6 That’s a really well designed Kickstarter, and I want to buy one! Thanks for pointing it out. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss I saw my first triple fold phone today in person, the real estate screen size was 😍 but have very visible folds / creases. Once it is improved it will be impressive. Also rumored is the iPhone fold next year, so hopefully a non-Android option soon. npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…93ml The SIM in the hotspot would be some random sim not associated with you so they wouldn’t know what to track. What I’m most interested in is with this set up what does my location appear as? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…p9pm You would be on WiFi using the VoLTE protocol to still make and receive calls. I’m not 💯 on what ends up discoverable by SS7. I’m guessing it would report something as your location, But is it your Mobile Operator IP? Your gateway IP? npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss @nprofile…x32j This is why you set Safari to have Java and location set to disabled, but I’m sure there are other sneaky ways to discover location npub16kl3yt2hhkknkhj3ztgffvl2m905q044lsh7k8dlp3gyzn4vx4aq9mfgx9 Jeff Moss That latest report on mass location surveillance using SS7 makes me want to try a test. I’ll enable airplane mode and VoLTE, and see how calls and messages perform when only using VPN over WiFi. If that works reasonably well then the next step is to us a mobile hotspot for the WiFi. In the end my SS7 location would always show the geolocated IP address of where the VPN terminates. Does that sound about right #Privacy #DefCon #Phreaks