Author | Lightnews

paulschnack.bsky.social @paulschnack.bsky.social · 5h

@troyhunt.com Talk about a long time coming, your favourite example site that didn't support TLS. www.itnews.com.au/news/the-bom...

The BoM has finally tamed SSL

But what a price tag.

www.itnews.com.au

1

Reposted

Blenster 🅅 @blenster.com · 5d

Fair warning this is going to be different from my usual posting but this is making me laugh so I'm going to post it even if it's a little bit "horny on main."

New nerdy pick up line:

"You make me want to be US-EAST-1; I want to randomly go down on you."

3 2 28

paulschnack.bsky.social @paulschnack.bsky.social · 6d

Well, the irony is that WSUS was deprecated by MS a year ago. techcommunity.microsoft.com/blog/windows...
FWIW I retired my last client from WSUS ~6 months ago, it's all Autopatch through Intune now. No excuse for deserialization bugs though ;-).

Windows Server Update Services (WSUS) deprecation - Windows IT Pro Blog

Remember: WSUS remains operational but is no longer investing in new features.

techcommunity.microsoft.com

paulschnack.bsky.social @paulschnack.bsky.social · 6d

Fancy some spooky and scary IT horror stories for Halloween? Here's me and three less scary guys in our recent Sysadmin Weekly podcast for your enjoyment.
www.youtube.com/watch?v=uiLP...

SysAdmin Weekly - 028 - SysAdmin Horror Stories Volume 1

YouTube video by SysAdmin Weekly

www.youtube.com

1

paulschnack.bsky.social @paulschnack.bsky.social · 6d

@patrick.risky.biz Loved the show last Wed. Quick update on the WSUS situation, a lot of business networks (most?) use Intune / 3P MDM for Windows updates, not WSUS. Win Update for Business, now Autopatch lets you create rings / groups etc. with the binaries coming from MS, not WSUS.

1 1 1

paulschnack.bsky.social @paulschnack.bsky.social · 6d

There we have it - seen lots of reports of VPN appliances getting orgs owned over the last few years, but now At-Bay gives us the stats. www.at-bay.com/2025-insurse...

1 1

paulschnack.bsky.social @paulschnack.bsky.social · 23d

@troyhunt.com Since you're into craft beer and tech :-) www.404media.co/what-happene...

What Happened When AI Came for Craft Beer

A prominent beer competition introduced an AI-judging tool without warning. The judges and some members of the wider brewing industry were pissed.

www.404media.co

paulschnack.bsky.social @paulschnack.bsky.social · Sep 20

@troyhunt.com Watching the recording of your weekly update. I have the same Sony camera and Elgato camlink as you do, and had the same problem earlier this year. Mainly in Teams training session delivery. Bought a new Elgato camlink (USB-C instead of A) and that's fixed it.

1

paulschnack.bsky.social @paulschnack.bsky.social · Aug 27

Medieval Kings didn't have nuclear launch codes.

paulschnack.bsky.social @paulschnack.bsky.social · Aug 19

Obviously, makes for a good headline though.

paulschnack.bsky.social @paulschnack.bsky.social · Aug 13

@troyhunt.com What do you think of a $ 20.9 Trillion fine for Optus? ia.acs.org.au/article/2025...

Information Commissioner sues Optus over 2022 data breach

Civil penalties of up to $20.9 trillion mooted.

ia.acs.org.au

1 1

paulschnack.bsky.social @paulschnack.bsky.social · Aug 10

@nycjayjay.bsky.social Long time TBP reader. As someone following the decline of the US from Australia what makes you think you still have democracy? If there's a big swing against R in the midterms, can't he just roll up with his 20X Gestapo + Hegseth's military and "change" the votes?

paulschnack.bsky.social @paulschnack.bsky.social · Aug 10

@patrick.risky.biz Can't wait for you and Adam to cover Buttercup - AI scans OSS package, finds vulns, patches them, tests the patch, all on automatic. From Trail of Bits - second place in the AIxCC competition. blog.trailofbits.com/2025/08/08/b...

Buttercup is now open-source!

Now that DARPA’s AI Cyber Challenge (AIxCC) has officially ended, we can finally make Buttercup, our CRS (Cyber Reasoning System), open source!

blog.trailofbits.com

3

paulschnack.bsky.social @paulschnack.bsky.social · Jul 3

Haven't used it, but should be possible. Nightmare for data governance teams though 😕. Everyone having copies of their own data outside of M365.

1

paulschnack.bsky.social @paulschnack.bsky.social · Jul 3

@patrick.risky.biz For what its worth, my clients all have end user granting disabled, and every app has to go through me to be approved.

1

paulschnack.bsky.social @paulschnack.bsky.social · Jul 3

@patrick.risky.biz A quick note on OAuth apps in Entra (last nights ep=- an end user can only ever grant permissions to an app to their own data, their calendar/inbox/OneDrive etc, both under the old default model, and the new one that's coming. Backup would need tenant access, so requires admin.

1 1

paulschnack.bsky.social @paulschnack.bsky.social · May 16

@patrick.risky.biz Quick clarification based on the last main show and the push snake oilers. Microsoft is defaulting to passkey for new personal MS accounts, they're not enforcing it for commercial accounts in Entra. In commercial only bound passkeys, through MS Authenticator are supported.

1

paulschnack.bsky.social @paulschnack.bsky.social · Apr 19

@samleecole.bsky.social Just watched the recording of the panel from the journalism festival. Great work. I'm in tech, a 404 subscriber, and I'm embarassed by what the male race and AI tech is inflicting on girls and women. Keep up the spotlight on these sites and apps!

1

paulschnack.bsky.social @paulschnack.bsky.social · Apr 15

www.acf.org.au/scorecard

ACF federal election scorecard 2025

www.acf.org.au

2

Reposted

Ekō @eko.org · Feb 28

Trump just orchestrated one of the most shameful moments in US history.

We need *all leaders* outside the US to stand up to Trump.

For that we need to show they have our backing. Add your name and share this link widely, it has never been more critical to have our voices heard:

WorldVsTrump.com

World leaders: stand up to Trump, starting *now*

Donald Trump is a bully. And like any bully…we need to stand up to him. If we don’t, our international world order is in danger. He’s already threatened to annex Canada, Greenland, and the Panama Can

WorldVsTrump.com

120 530 730

paulschnack.bsky.social @paulschnack.bsky.social · Dec 31

@robertwiblin.bsky.social Watched your excellent podcast on OpenAI. On defining AGI, the agreement with Microsoft says that's reached when OpenAI generates at least 100B in profits.https://www.thurrott.com/a-i/openai-a-i/314943/report-microsoft-openai-tied-agi-metric-to-profits-not-intelligence

paulschnack.bsky.social @paulschnack.bsky.social · Dec 30

52 years. We live on opposite sides of the planet now, speak regularly.

2

paulschnack.bsky.social @paulschnack.bsky.social · Dec 25

@patrick.risky.biz Don't know if you saw this, some interesting details on the exploding pagers and walkie talkies. www.cbsnews.com/video/israel...

How Israel's Mossad tricked Hezbollah into buying explosive pagers | 60 Minutes

Pagers exploded across Lebanon in September. Retired Mossad agents, key to the operation, tell 60 Minutes Israel's plot started years ago with getting Hezbollah terrorists to buy walkie-talkies.

www.cbsnews.com

2

paulschnack.bsky.social @paulschnack.bsky.social · Dec 10

@campuscodi.risky.biz As a long time risky.biz news reader, I know you put links to recent cyber security reports in it. Hornetsecurity just published ours, find it here. www.hornetsecurity.com/en/cyber-sec...

paulschnack.bsky.social @paulschnack.bsky.social · Dec 10

@girlgerms.wtf Thought you might find this interesting Jess ia.acs.org.au/article/2024...

Why women last just 4 years in cyber security

Study points to workplace bullying and 24/7 culture.

ia.acs.org.au

3