well yeah.

[catboycody@tech.lgbt]

@da_667 What happened to the good old sneaker network?

Now I wonder how many people think that wifi, bluetooth etc. is still an airgap...

[benhm3@mastodon.social]

@da_667

It is an airgap of the MIND.

Or:

It's an ALTERNATIVE airgap.

[jackemled@furry.engineer]

@da_667 They must think "airgap" means Wi-Fi instead of Ethernet.

[tehfishman@ioc.exchange]

@da_667 the environment they are describing is actually an air-gape, where they do the goatse spread at their competitors and AI slop attacks spew forth from the OpenAI butthole logo.

[fritzadalis@infosec.exchange]

@catsalad @da_667
Dat airgap

[falken@social.falkensweb.com]

@da_667 "no reason"? Not even "proving" how scary #llm is, so law makers will regulate their competition away?

[womble@infosec.exchange]

@da_667 I guess if you spend long enough with the hell machine that uses words but does not know that words have meanings, you lose the knowledge yourself that words have meanings.

[netzblockierer@tech.lgbt]

@da_667 Yeah.

I remember Aaron. Was a good guy…

He's propably turning in his grave so fast that he could power half of the U.S. households already…

[netzblockierer@tech.lgbt]

@da_667 yeah, they are criminally incompetent dipshits…

[philsalkie@mindly.social]

@becomethewaifu @da_667

I suggest to customers that OT remote access devices be put on a combination of a key switch and a mechanical timer (think bathroom heat lamp).

Vendor wants access to do an update?
Turn the key, set the timer to 30 minutes.
A door that only exists for less than an hour at a time a couple times a year is much more secure than one that's sitting there 24/7/365 with every AI on the planet trying to pick the lock.

Also, VPNs and routing are NOT data diodes or isolated networks. All it takes is for some 12-year-old offshore junior IT admin to log into that switch and go "why this so confusing setup? Fix make easier" and suddenly the whole world can see your controllers. (Yes, that can and does happen.)

I'm a big fan of dumb switches on non-routable subnets for OT networks, with fixed-protocol bridging devices to read data from the subnet and forward it to the outside. Definitely don't want to be in a position where you need to get a system working, but a smart switch has died, that model doesn't exist any more, and nobody knows what routes were programmed into it, so they drop in a dumb switch and - Hooray! - things work again (but now the whole world can access the equipment), or things don't work and nobody thinks that the dumb switch can be the issue, because it clearly works...

[ajn142@infosec.exchange]

@davedave @TindrasGrove @da_667 like this paper?

https://peterstory.me/publications/story_pep_2023.pdf

[adhdruid@infosec.exchange]

@da_667 ️ Improper airgap detected, Druid has entered the chat.

The Industry is being ‘led’ by fucking morons. We all know this, but their hope is that we miss details like this.

The more time goes on, the more people won’t even acknowledge the importance of the words used.

[webframp@hachyderm.io]

@jerry @da_667 no no no, you don’t understand. The _network_ was “airgapped”