Sign in

Christopher Bauer :debian: :i3wm: :blobcatthinkingglare:

@anthro-packets.infosec.exchange.ap.brid.gy
5 followers 0 following 39 posts

My current life: I'm a mid-career switcher trying to break into infosec. I've got some certs and done some volunteer work, details at the links below. My […] 🌉 bridged from ⁂ infosec.exchange/@anthro_packets, follow @ap.brid.gy to interact

PostsRepliesMedia
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 16/06/2025
@joshbressers great episode with @Di4na ! If I were still in higher education I would have totally taken on qualitative/interview/ethnographic research tasked with identifying open source maintainers' needs. Your discussion was really interesting from the standpoint where cyber security can […]
infosec.exchange
Original post on infosec.exchange
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 04/06/2025
Hey @kalilinux, not sure this is the right forum, but any chance Vagrant Cloud is going to receive 2025.1c? I only see 2025.1.0 and obviously there is the signing key issue that borks updates on that one. #kali
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 15/05/2025
"To grow up loving Star Wars is to eventually find that it never quite seemed to grow up with you, to realize that the children’s stories that thrilled you in your youth remain children’s stories when you return to them as an adult. And this can be fine, at times. (I’m not made of stone; I get […]
infosec.exchange
Original post on infosec.exchange
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 04/05/2025
Another entry in the niche blog post chronicles: How to install Guacamole for remote desktop connections to Kali Linux. This is a combo post with both context and guide. Its also the first in a series on migrating from Vagrant/VMWare/Ansible to Proxmox/OpenTofu/Ansible. In it I work through […]
infosec.exchange
Original post on infosec.exchange
010
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 01/05/2025
Andor s2e5, rhat final scene with Forest Whitaker h I'm breathless. Simply outstanding. #Andor
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 24/04/2025
I've got to say, Boardsource.xyz has done right by me. I have my beloved lily58 back up and running thanks to a replacement pcb/micro-controller. Many thanks to all who gave me troubleshooting pointers. I think it was a defective micro-controller all along […] [Original post on infosec.exchange]
Ergonomic split keyboard with beige, blue and gray keycaps. Model type is called a lily58.
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 19/04/2025
My first time seeing @Tarah in person today at #bsidessea and she was a magnetic presenter though her topic was depressing (the state of everything is not Wheeler's fault obviously). #bsidesseattle2025
Presentation image reads "There's No One Coming to Save Us: Small and Underfunded Organizations in an Age of Chaos" withBSides Seattle bigfoot icon in white.
012
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 18/04/2025
This talk by Vasilii Ermilov on Github Actions was pretty interesting among the morning bunch, wish I understood more about the scanning tools he was using to pull from HackerOne.
Most common vulnerabilities in Github Actions slide projection.
010
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 18/04/2025
#bsidessea my first cybersec con! Looking forward to a fascinating day.
Projected slide image saying "Welcome to BSides 2025!"
020
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 08/04/2025
Okay, a couple of folks I follow have written about the 2025 Sophos Active Adversary Report but I repeat their thoughts and draw attention to few others items. - Regarding the "lede" about median dwell times falling to two days: its difficult to assess, when Sophos only offers a single simple […]
infosec.exchange
Original post on infosec.exchange
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 08/04/2025
From the 2025 Sophos Active Adversary Report there’s this gem: “if the hostname “kali” shows up on your network, as it did in 6% of cases, you should investigate.” :blobsmilesweat:
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 07/04/2025
On the journey with #ansible, I've been befuddled for ages on how ansible-vault works. Well, I'm starting to grasp of how sudo passwords for remote hosts work with vault, so I wrote up my understanding to date. Hope it helps someone else on their own journey […]
infosec.exchange
Original post on infosec.exchange
010
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 07/04/2025
Well, now that my lily58 ergo mech board is down I'm falling back to my spare. It's an Epomaker TH 66 and its fine for a standard board. I got to say though going from column staggered back to row staggered is not a happy place for me. #ergomechkeyboards […] [Original post on infosec.exchange]
66 key mechanical keyboard in gray case with beige and light gray keys, yellow special keys and a red rotary knob.
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 07/04/2025
I'm crushed. The left half of my lily58 ergo mech keyboard started flaking out yesterday. Once plugged in it types 5tgb and then those keys go dead. I'm thinking a short. It's a boardsource.xyz buy, not quite a year old. I'm going to reach out but any […] [Original post on infosec.exchange]
Two halves of a grey split ergonomic mechanical keyboard.  Left half is bare, a naked plate.  Right halve has keys in beige, gray and blue.
010
Reposted by Christopher Bauer :debian: :i3wm: :blobcatthinkingglare:
Lesley Carhart :unverified: @hacks4pancakes.infosec.exchange.ap.brid.gy · 02/04/2025
Hello friends. The dreaded and long awaiting blog on WHAT THE FUCK HAPPENED TO THE CYBERSECURITY JOBS MARKET has arrived. tisiphone.net/2025/04/01/lesley-wha… I'm sorry.
tisiphone.net
4537
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 30/03/2025
Starting to dial in on my gluten- and dairy-free sandwich bread. The crumb is a bit tighter than I would like and the psyllium husk gives it a weird grayish-brown color, but it is still loads better than store-bought. Bigger too. I might be a convert. #glutenfree #dairyfree #bread
Top view of bread in a tin, with a golden brown crust.Profile view of sandwich bread, golden brown in color, some tearing.
100
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 28/03/2025
Ok, so it took me more than 10 minutes to figure out the right Caddyfile syntax for a reverse-proxy with TLS using DNS challenge from Cloudflare. Caddy is great, and generally it is super easy, but this particular case was not. So in the interest of saving some other poor frazzled soul like […]
infosec.exchange
Original post on infosec.exchange
010
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 26/03/2025
I'm just a frazzled dad and homeprodder sick of trying to get into docker containers. So have a little post on my journey into new-to-me tools that ease docker log retrieval/viewing. Happy sshing! christopherbauer.org/blog/docker-tr… #selfhosted #selfhosting #docker #homelab
christopherbauer.org
I'm an Irked Docker Maintainer and Homeprodder
000
Reposted by Christopher Bauer :debian: :i3wm: :blobcatthinkingglare:
Maho 🦝🍻 @mapache.hachyderm.io.ap.brid.gy · 07/03/2025
The official account of WA Dept of Health said not much happening in its account. I live in the Puget Sound and did not know such account exists. So, help me boost it so more people discover it, to encourage other orgs for using more open platforms. @WADeptHealth #PNW #Seattle […]
hachyderm.io
Original post on hachyderm.io
011
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 12/02/2025
Transitioning my blog #Jekyll to #11ty came with some obstacles. I wrote up a few python scripts to practice my python skills and facilitate some of the drudgery. Well that was the goal, it was more like practicing my #regex skills. It won't help everyone in the same situation but maybe it'll […]
infosec.exchange
Original post on infosec.exchange
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 11/02/2025
I woke up this morning and realized I'm coddling my #k8s cluster in my #homelab just like the way I care for my houseplants. :blobshock: :neocat_laugh: I decline to self-reflect on the meaning of these revelations.
110
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 29/01/2025
I've rebuilt my blog using 11ty! I'd been using Jekyll with Github Pages previously and it was becoming clear that it was time to move on. My realization came when I recently upgraded my home machine and had to install backports on Debian to obtain a load of outdated software and dependencies […]
infosec.exchange
Original post on infosec.exchange
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 27/01/2025
Welp, I've written up the niche-y-est of niche posts. I'm sure it'll win me the gold star of obscurity :blobcatfakeverified: Pointers on installing Graylog on Proxmox with client config via Ansible. christopherbauer.org/2025/01/24/gra…
christopherbauer.org
Graylog on Proxmox and Ansible for Client Config
Summary This is a bit of an hodgepodge post offering a few pieces of advice and a rough model of Ansible code for Rsyslog instead of a step-by-step guide. This post assumes the reader has foreknowledge of Grayhound as a tool, and a desire to install it using conventional package managers. It moreover assumes the reader is comfortable enough with the Linux command line to install and with Ansible roles and execution.
111
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 07/01/2025
On my disorderly and belated absorption of good sysadmin habits, and a bit on creating a vsftp server as well (non-Docker): christopherbauer.org/2025/01/07/vsf…
christopherbauer.org
Installing VSFTP in a Proxmox LXC Container Or: “How I Learned the Lessons of the SysAdmin”
To make a long story short, I don’t want my NAS to be multipurpose for reasons of admin. I only want it to be a backup server, nothing more. So I thought I’d write up a quick primer on installing and configuring VSFTP in a Proxmox LXC container.
000
Reposted by Christopher Bauer :debian: :i3wm: :blobcatthinkingglare:
Peter Kisner ≈ @ptr-k.dice.camp.ap.brid.gy · 30/12/2024
The looming presence of those towers in the distance reminds me a bit of Simon Stålenhag's stuff. Source: mastodon.art/@6VCR/1137424833110871… #Art #MastodonArt #PixelArt
Large pixel art that is nearly photorealistic.
A cat is looking out a window from a higher vantage point on a drab cityscape of apartments somewhat obscured by mist or rain. On a broad avenue stretching away from the viewer there are yellow and orange splotches of light, in contrast to the relatively muted blue caste of the haze. In the distance, higher than the other buildings, are two truncated cone-like towers, somewhat like nuclear cooling towers, but maybe of different function.
193
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 19/12/2024
M. R. Carey pulls off a masterful balancing act in the latest dilogy of Infinity Gate and Echo of Worlds. Somehow macro and micro scales, engineering and combat, unit cohesion and teen dynamics, all make appearances while spinning a riveting scfi yarn. He has an uncanny way of capturing a lot […]
infosec.exchange
Original post on infosec.exchange
001
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 17/12/2024
New to me, the Sophos Active Adversary Report for H1 2024 says dell times are down to 5 days and in 43% of their investigations victims didn’t have MFA. It wasn’t all reasons for gloom though: “there are signs along the way that can alert defenders to a potential danger lurking in the network […]
infosec.exchange
Original post on infosec.exchange
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 17/12/2024
Just getting around to the Sophos H1 2024 report. A lot of interesting stuff, but I can’t read the following lines seriously because the #talkingheads kick in as soon as I hit the question mark: “RDP abuse has reached new heights, with 90% of attacks using it for internal lateral movement and […]
infosec.exchange
Original post on infosec.exchange
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 13/12/2024
For those pentesters earlier on their career track like me, I wrote up a few steps on DACL abuse in AD with PowerView. I've run across a few DACL fumbles using Bloodhound Community Edition of late, and always used net.exe for much glorys. Bloodhound is adamant on PowerView for opsec however […]
infosec.exchange
Original post on infosec.exchange
010
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 12/12/2024
TIL that for some a role of Cyber Security Analyst Junior should have an experience requirement of "a minimum of 3 years in a mid-level role." What do words even mean anymore?
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 09/12/2024
Hello kind people of Mastodon! Mastodon is a big part of my life, so I'm going to give finding work here a go as well. I'm looking for a junior penetration tester or cyber security analyst role. Should you have any leads, or simply be able to provide info, please reach out. To give you a […]
infosec.exchange
Original post on infosec.exchange
002
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 04/12/2024
I'm really digging #Readeck after having been a Wallabag user for many years and a Shiori user after that. It's got a number of similar features and it's been a breeze to use. I really dig the annotations, that seems to be a feature that is difficult to find. Not trying to throw shade on […]
infosec.exchange
Original post on infosec.exchange
001
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 24/11/2024
Hey everyone, here is my fifth post on the Ansible config and my final post on OpenVPN for Orange Cyber Defense's Game of Active Directory on bare-metal Proxmox. Hope you like lots of screencaps and written instructions! With that, I can call this a success and wrap up my take on installing […]
infosec.exchange
Original post on infosec.exchange
001
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 24/11/2024
Whoops, must have configured #echofeed wrong on my last post, the automatic notification didn't include a link to the blog. Also, echofeed somehow included hashtags? I'll post a proper announcement in a minute.
000
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 23/11/2024
This is part 6 of my series on Orange Cyberdefense’s Game of Active Directory (GOAD) on Proxmox VE. In the fifth installment I covered how to use Ansible to configure the final domain layout and individual Windows VMs. In this post we’ll setup the VPN server on pfSense to simulate an assumed […]
infosec.exchange
Original post on infosec.exchange
100
Christopher Bauer :debian: :i3wm: :blobcatthinkingglare: @anthro-packets.infosec.exchange.ap.brid.gy · 18/11/2024
Hey all, here are my third and fourth posts on installing Orange CyberDefense's Game of Active Directory (GOAD). Not too much to troubleshoot with Packer and Terraform in these posts, they're relatively straightforward. Still, the install as a whole is complicated enough to justify these posts […]
infosec.exchange
Original post on infosec.exchange
021