Conversation
-
Scroll vīgintī quīnque
sourceWelcome to volume twenty-five of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we do some web surfin’, pulse-check the social web, and keep right on cyberin’. So get-t’-scrollin’ right meow!
IndieWeb
If you’re here, congrats! You’ve made it to the IndieWeb (or whatever we’re calling this—the cozy, quiet, personal side of the Internet). Make no mistake, this is the future for the web. For any other future, just say no. There’s so much to do here, so much to learn, and so many really cool, actual humans to meet!
So go get yourself a website! Or just keep surfin’ around. Yeah, it may be a bit quieter over here, but despite what you may have heard, personal websites—“blogs”—aren’t dead yet! 💀 😄
Small Web Finds and Features
Lookin’ for some cool sites to browse? Here’s some I’ve come across recently…
- The Wyrd by Alis has some fantastic artwork and overall nice aesthetic.
- brennan.day by Brennan is indietastic, information dense 🧡, and has a ton of cool posts from what I’ve read so far!
Fediverse
Is the social web dying? Nah. In my opinion, and thanks to the Fediverse, the true social web experiment has only just begun. The Fediverse, as it exists today is not just one thing. Rather, it is a network of interconnected apps, platforms and communities. You may have only just heard about it, but it’s been around for a while. And despite what you may read in the “media”, it’s not going away any time soon (or ever if you ask me). Unlike traditional corporate social media though, it’s vibrancy is 100% reliant on us—to share, to be kind, and to tend to our social spaces. Come join us!
Cybersecurity
I say “Cyber”, you say “Security”!
CYBER!
…
Oh well, here’s some infosec stuff I’ve found this past week or so…
First, some stuff to read and learn…
- You got that AI? Of course you do. It’s time to map and reduce that attack surface yo. So check this out—Interrogators: Attack Surface Mapping in an Agentic World
- Because yeah, AI will compromise your cybersecurity posture.
- Read about the state of VEX.
- Here’s everything you need to know about email encryption.
- You know you want to learn how to operationalize the CTI-CMM.
- Learn some novel bypasses for SAML auth.
- While we’re on auth, give your OAuth apps the side-eye with OID-See.
…and now, some interesting tools & frameworks…
- The MITRE ENGAGE framework can be used for planning and discussing adversary engagement operations and the Red Team Maturity site provides a standardized, community-informed Capability Maturity Model to measure, report on, and plan for internal Red Team maturity.
- LOL, here’s another technique catalog for pwning Proxmox—LOLPROX
- Scan Homebrew for vulns. Gotta find those vulns!
- Oink! It’s BloodHound, but for SCCM… and with pigs… It’s ConfigManBearPig!
- Finally, make your links a little creepier with CreepyLink.
Thanks for reading Scrolls. Stay warm out there!
