<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <updated>2026-10-31T13:12:17Z</updated>
  <generator>https://njump.me</generator>

  <title>Nostr notes by InfoSecBen</title>
  <author>
    <name>InfoSecBen</name>
  </author>
  <link rel="self" type="application/atom+xml" href="https://njump.me/npub1a3k6zeh7ewqv7e7e6gccjx38jtvcgemnx79jqa967j6jwpctecvshlatym.rss" />
  <link href="https://njump.me/npub1a3k6zeh7ewqv7e7e6gccjx38jtvcgemnx79jqa967j6jwpctecvshlatym" />
  <id>https://njump.me/npub1a3k6zeh7ewqv7e7e6gccjx38jtvcgemnx79jqa967j6jwpctecvshlatym</id>
  <icon>https://files.ioc.exchange/iocexchange/accounts/avatars/109/216/428/213/203/979/original/b92ec7ce017716d6.jpeg</icon>
  <logo>https://files.ioc.exchange/iocexchange/accounts/avatars/109/216/428/213/203/979/original/b92ec7ce017716d6.jpeg</logo>




  <entry>
    <id>https://njump.me/nevent1qqsznpfqtxf4jftlj6regdzpywh9j8c3wxuk6xqsyc7j5l7j9ch2vtczyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pj6ym90l</id>
    
      <title type="html">when it comes down to it, I would rather have a flawed defense ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsznpfqtxf4jftlj6regdzpywh9j8c3wxuk6xqsyc7j5l7j9ch2vtczyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pj6ym90l" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsfxtr42fspwme5hgnnakrgdn3y9nhh3k2nexzk5wzqrjldk22fm5cv78ums&#39;&gt;nevent1q…8ums&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;when it comes down to it, I would rather have a flawed defense than no defense. next generation firewalls, strong multi-factor authentication, and good endpoint detection and response are IMHO the bare minimum to defend yourself on the Internet and even if those tools need better code and configuration having them is better than not.
    </content>
    <updated>2026-10-27T14:54:49Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqs26wysu7sqzjksatnumf8q0vk52u6r46qeh0ppaqeveatqmy742qqzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pj72skcv</id>
    
      <title type="html">Fair, some vendors take it more seriously than others and it is ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqs26wysu7sqzjksatnumf8q0vk52u6r46qeh0ppaqeveatqmy742qqzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pj72skcv" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqstwvuny69vyfp69n9ys5gwh3nlyxk84pzrjqw4crhpxwxthacketq08weg8&#39;&gt;nevent1q…weg8&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;Fair, some vendors take it more seriously than others and it is hard for those that don’t already know that to figure it out first given how many vendors are no transparent and responsible. But often by being open and discussing vulnerabilities publicly the perception is that a vendor is less secure when in fact it is just they don’t sweep it under the rug.
    </content>
    <updated>2026-10-27T14:18:53Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqstwx9yml2wtl6ur9fh4xpwefpzdwr3vpsxlmks04f0zd2j4wps87gzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjhhaz78</id>
    
      <title type="html">easier said than done. The top platform vendors have hundreds of ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqstwx9yml2wtl6ur9fh4xpwefpzdwr3vpsxlmks04f0zd2j4wps87gzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjhhaz78" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqs9pzt0kqv9mugvcvfn8qg2xwc9mmdzt29gcsu4n9j25jl22w6rsnqsqqjt3&#39;&gt;nevent1q…qjt3&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;easier said than done. The top platform vendors have hundreds of products, which is a lot of attack surface. Nearly all of them rely heavily on open source libraries and tools that balloon the attack surface further. Then look at how AppSec as a discipline is young with many of its practices more a list of pitfalls to avoid rather than how to do it right. I cringe every time I see something dumb and solvable like directory traversal or SQL injection, but even for security vendors development writes more code faster than AppSec can review it. Overall we catch it, but sadly not always before it shipped, thus vulnerabilities and patching. Maybe someday everything will be better with all the bugs squashed but I doubt it. Nothing straight from the crooked.
    </content>
    <updated>2026-10-27T14:04:43Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqsfjmyyhuajwrhm7cp6vhw3vg7cd2hpsfss9z3w7zjskel6778694qzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjygpzrp</id>
    
      <title type="html">I’ve worked here for seven years, and like any job it has its ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsfjmyyhuajwrhm7cp6vhw3vg7cd2hpsfss9z3w7zjskel6778694qzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjygpzrp" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqs0la7vpnvhdqjzn76lzw40jychkfly7gs77u7a3tdxl0vdt75cymceuf2h8&#39;&gt;nevent1q…f2h8&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;I’ve worked here for seven years, and like any job it has its flaws, but I can say I plan to retire here and the good far outweighs the bad.  If you are interested DM me your resume and the position you are looking at. I will get it to the hiring manager if I can.
    </content>
    <updated>2026-09-29T14:54:07Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqsgpncm5q9x5v9tt4uk3ap7svdkvn783zfcrln53u3tssd9wgghesczyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjn0sw36</id>
    
      <title type="html">my employer Fortinet is hiring see ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsgpncm5q9x5v9tt4uk3ap7svdkvn783zfcrln53u3tssd9wgghesczyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjn0sw36" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsz39kqrz7hdgw7700rfnus2mxeg7ge42prulpxluu3u3j640dculc5qtuwn&#39;&gt;nevent1q…tuwn&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;my employer Fortinet is hiring see &lt;a href=&#34;https://edel.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_2001/jobs?keyword=Threat&#43;hunting&amp;amp;mode=location&#34;&gt;https://edel.fa.us2.oraclecloud.com/hcmUI/CandidateExperience/en/sites/CX_2001/jobs?keyword=Threat&#43;hunting&amp;amp;mode=location&lt;/a&gt;
    </content>
    <updated>2026-09-29T14:08:01Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqstptyw7z6q8a4m49ycr73v60g27s9ud97vsjtpgqdlhu5yhhas0jczyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjj74lvm</id>
    
      <title type="html">we live in the sad timeline where the good ones like Aaron and ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqstptyw7z6q8a4m49ycr73v60g27s9ud97vsjtpgqdlhu5yhhas0jczyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjj74lvm" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsv2zy82tdaclej5r0vwfrejzu77g39h44f4gflw7k266nymuj96ug3l2w44&#39;&gt;nevent1q…2w44&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;we live in the sad timeline where the good ones like Aaron and Dan are gone (RIP) and octogenarian war criminals still run the world.
    </content>
    <updated>2026-07-17T22:07:38Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqs8w2akmusa3wcsx559wr2ta07g98q40rf6wt7wfkt2kqw2axrylkqzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjmwl2k0</id>
    
      <title type="html">can’t say I have, though the orange guy is close. What puts ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqs8w2akmusa3wcsx559wr2ta07g98q40rf6wt7wfkt2kqw2axrylkqzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjmwl2k0" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqs8cyt0du5dhwnwz5r8fnprh04nvlpwxtpy8w2jxplyapx6z6vhpkc3za56n&#39;&gt;nevent1q…a56n&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;can’t say I have, though the orange guy is close. What puts clammy Sammy over the top for me was his own board fired him for lying. A shame it didn’t stick.
    </content>
    <updated>2026-07-17T21:55:47Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqsd6xmy3cjh9m2a30y2hgt4j7r0g6m6qmqhv7gcgf4ljg4h6fa0cegzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjgkp5dg</id>
    
      <title type="html">classifiers are great. Expert systems are great. LLMs can die in ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsd6xmy3cjh9m2a30y2hgt4j7r0g6m6qmqhv7gcgf4ljg4h6fa0cegzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjgkp5dg" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsqhm9cl0ejj9t7czep0a05nwg8uvc4zxw7wm7vscd7q67p8s6vq3c6r9s8q&#39;&gt;nevent1q…9s8q&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;classifiers are great. Expert systems are great. LLMs can die in a fire then burn in hell IMHO
    </content>
    <updated>2026-07-17T21:28:39Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqsphseemhwpvjsy7dpwhmg95q5yvn7f8l3gj4cxlzd7cfw3ppp354gzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjsqjn9l</id>
    
      <title type="html">block by ASN could be done manually on a FortiGate by creating an ...</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsphseemhwpvjsy7dpwhmg95q5yvn7f8l3gj4cxlzd7cfw3ppp354gzyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjsqjn9l" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqs8fkex9qzuueykl78q9depzhenp6ledasyjraj86tnnvm3c6erwzcem5evy&#39;&gt;nevent1q…5evy&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;block by ASN could be done manually on a FortiGate by creating an address object for the ASN and then denying traffic from the object. If you had a list you wanted to use instead, an external fabric connector would do the trick:&lt;br/&gt;&lt;a href=&#34;https://docs.fortinet.com/document/fortigate/7.0.2/administration-guide/891236/external-blocklist-policy&#34;&gt;https://docs.fortinet.com/document/fortigate/7.0.2/administration-guide/891236/external-blocklist-policy&lt;/a&gt;
    </content>
    <updated>2026-04-22T17:30:39Z</updated>
  </entry>

  <entry>
    <id>https://njump.me/nevent1qqsvnzf5avx93p3g6z8g6vad29kuqwjtrnlpdhur2yr2yadfarrvdhszyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjte6uv2</id>
    
      <title type="html">https://www.youtube.com/watch?v=LT3cERVRoQo</title>
    
    <link rel="alternate" href="https://njump.me/nevent1qqsvnzf5avx93p3g6z8g6vad29kuqwjtrnlpdhur2yr2yadfarrvdhszyrkxmgtxlm9cpnm8m8frrzg6y7fdnpr8wvmckgr5ht6t2fc8p08pjte6uv2" />
    <content type="html">
      In reply to &lt;a href=&#39;/nevent1qqsgw7w8rk6vxm9dy0wjg6kez9f7g3xzujyfktusnlc53k9m6n70jlqd7ndl8&#39;&gt;nevent1q…ndl8&lt;/a&gt;&lt;br/&gt;_________________________&lt;br/&gt;&lt;br/&gt;&lt;a href=&#34;https://www.youtube.com/watch?v=LT3cERVRoQo&#34;&gt;https://www.youtube.com/watch?v=LT3cERVRoQo&lt;/a&gt;
    </content>
    <updated>2024-11-01T05:00:32Z</updated>
  </entry>

</feed>