Paul Dokas
banner
pauldokas.bsky.social
Paul Dokas
@pauldokas.bsky.social
550 followers 2.8K following 200 posts
Posts Media Videos Starter Packs
“Nearly half (45%) of C-level respondents — including CISOs and CIOs — describe themselves as "very confident" in their organization's readiness. Yet among mid-level managers, that number drops sharply to just 19%.”

They’re both optimists.
thehackernews.com/2025/10/the-...
The Cybersecurity Perception Gap: Why Executives and Practitioners See Risk Differently
Bitdefender 2025 report exposes a widening cybersecurity perception gap between executives and frontline teams.
thehackernews.com
Reposted by Paul Dokas
The AWS outage bricked people's $2,700 smartbeds, leaving them in a reclining position or with the heat up. People were unable to use them, basically. A GitHub repo exists that lets people operate their beds without reliance on the normal infrastructure

www.404media.co/the-aws-outa...
The AWS Outage Bricked People’s $2,700 Smartbeds
When Amazon Web Services went offline, people lost control of their cloud-connected smart beds, getting stuck in reclined positions or roasting with the heat turned all the way up.
www.404media.co
“Google has suddenly confirmed privacy initiatives ‘are being phased out.’ The Privacy Sandbox, now in its sixth year, has essentially ended just months after Google confirmed tracking is here to stay and there are no viable alternatives.”
www.forbes.com/sites/zakdof...
‘Phased Out’—Google Confirms Bad News For All 3 Billion Chrome Users
Is it time to quit the world’s most popular browser as privacy nightmare comes true?
www.forbes.com
Reposted by Paul Dokas
I’d like to attend a rodeo just so I can say, “This is my first rodeo.”
“Close to half of the gain in gross domestic product this year will come from data center construction, and around 80 percent of stock market gains are attributable to a handful of AI-heavy tech companies.”
🤔
prospect.org/world/2025-1...
Why China Can Collapse the U.S. With One Decree
China holds a virtual monopoly over a product needed to produce the only thing holding up our economy right now. And it’s preparing to use that leverage.
prospect.org
Reposted by Paul Dokas
Reposted by Paul Dokas
OpenSSH 10.2 has just been released.

This release contains only non-security bugfixes, most notably for a bad regression that made interactive that used ControlPersist basically unusable

Full release notes at openssh.com/releasenotes...
OpenSSH: Release Notes
OpenSSH release notes
openssh.com
Reposted by Paul Dokas
Shortwave pirate radio station Rolling Stones Radio has been on 6850 USB since about 1100 UTC with a very good signal here in Westminster MD USA. And they've already sent the #eQSL !

www.hfunderground.com/board/index....
Reposted by Paul Dokas
60 hours left to get 3 sysadmin books for the price of 1!

The #kickstarter for "Networking for System Administrators" has gone beyond what I hoped. My next hope is that it makes your #sysadmin job suck less.

mwl.io/ks
Networking for System Administrators (2nd Edition)
The critically-acclaimed sysadmin reference, updated for modern Windows and Unix
mwl.io
Reading between the lines, that article if full of examples of how NOT to write secure software.
Reposted by Paul Dokas
`use-mcp`'s oauth2 process uses a window.open call with untrusted mcp server provided data allowing for code execution under the page using it

https://hackerone.com/reports/3211031
Reposted by Paul Dokas
'You'll never need to work again': Criminals offer reporter money to hack BBC.
I recently got offered millions of pounds to give cyber criminals from the Medusa gang my BBC login. I played along to learn about how these 'insider threat' deals work.
www.bbc.co.uk/news/article...
'You'll never need to work again': Criminals offer reporter money to hack BBC
Reporter Joe Tidy was offered money if he would help cyber criminals access BBC systems.
www.bbc.co.uk
Reposted by Paul Dokas
How is this not bigger news in tech/security circles.

Jaguar Land Lover lost $250M (£200M) and counting thanks to a cyberattack that it still couldn’t mitigate. This is growing every week.

The cost of underinvesting in security is very real. 1+ month recovery is bonkers
OH: "I will say that my friend Gemini is more like Forest Gump than Rain Man."

This is true of all LLMs. They are tools, nothing more.
“Someone allegedly found an MGM Grand employee on LinkedIn and impersonated them, calling the company IT department to ask for a password reset. Once the reset was granted, the hacker reportedly had access to MGM’s internal systems ‘in 10 minutes.’”

Of course. 🙄
www.sfgate.com/travel/artic...
Teen arrested on suspicion of Vegas Strip attack that cost $100M
A teenager has been arrested on suspicion of orchestrating a “sophisticated” hack.
www.sfgate.com