@thomrstrom@triangletoot.party
@thomrstrom@triangletoot.party avatar

thomrstrom

@thomrstrom@triangletoot.party

security guy @ chainguard

also #unix #linux #infosec #bikes #carrboro

This profile is from a federated server and may be incomplete. Browse more on the original instance.

thomrstrom, to opensource
@thomrstrom@triangletoot.party avatar

One of my favorite things about working with is adding support for platforms that the vendor doesn't care about. Today that would be on - https://github.com/chainguard-dev/kolide-silverblue

thomrstrom, to infosec
@thomrstrom@triangletoot.party avatar

👋 My last was in 2022, so here's an update:

  • Head of Security at
  • Keenly interested in and
  • 30 years of experience messing with the Internet & UNIX systems
  • I build my own frames & spend more time tinkering than riding
  • Spend my idle time playing and wandering on 2-wheel EVs
  • Live in NC with my wife & kids
  • Contributed to 250+ projects including 100+ I've created - bincapz is my latest.
thomrstrom, to random
@thomrstrom@triangletoot.party avatar

I've been following these folks with great interest, going as far as putting down a deposit. Tossing out the traditional chain or belt drive and placing the motor into the rear wheel rim is an exotic engineering decision - here's to hoping it turns out to be a good one!

Tsemppiä, !

thomrstrom, to linux
@thomrstrom@triangletoot.party avatar

I spent too much time banging my head against the wall getting and to run well on distros like

Here's the first article:

https://unfinished.bike/elastic-agent-on-fedora-silverblue

Linux distro's heading to where macOS today: where the root filesystem is mostly immutable, but not entirely. arrived there a decade ago, but everyone seems to be moving in the same direction.

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

It looks like a tornado hit my garage, but I assure you that some crazy things are about to go down in here.

Viss, to random
@Viss@mastodon.social avatar
thomrstrom,
@thomrstrom@triangletoot.party avatar

@Viss @mttaggart I have to admit, our decision to ban Windows at work was inspired by Google's reaction to Aurora. We decided we couldn't afford the security staffing necessary to run Windows in a way we felt comfortable with.

thomrstrom,
@thomrstrom@triangletoot.party avatar

@Viss @mttaggart That mirrors our experience. As a startup it was far easier for us to make that transition.

We were already bought into the Cloud, so it was advantageous to drop the illusion of device or network trust and went all-in on security-key backed identities as our perimeter.

With that shift, we were able to ban VPNs, too, but now we have to trust our Cloud providers & configuration even more. All that work, and we are still just an errant checkbox away from an incident.

thomrstrom, to Indiana
@thomrstrom@triangletoot.party avatar

Looks like we got at least one decent photo of the eclipse from #Bloomington - just clear enough to see the solar flares.

thomrstrom, to opensource
@thomrstrom@triangletoot.party avatar

I'm on vacation, but I heard y'all had this whole supply-chain attack while I've been touring Appalachia.

So, I pushed out a new release (v0.8.0) that detects it. Not by my own doing either, but by the power of rules: https://github.com/chainguard-dev/bincapz

thomrstrom, to IT
@thomrstrom@triangletoot.party avatar

Anyone looking to get a career jumpstarted in & and know at least a little bit about and ? We’re hiring:

https://www.linkedin.com/jobs/view/3856216907/

We’re a scrappy crew, so this position will wear a multitude of hats: IT, Security, Compliance.

thomrstrom, to cycling
@thomrstrom@triangletoot.party avatar

Thanks Google Maps, for directing me to the adventurous route to my new space. I hadn't planned on any water crossings, but had at least a dozen with my single-speed city .

thomrstrom, to BMW
@thomrstrom@triangletoot.party avatar

7 hours in, I'm still stuck at the dealer waiting for the 6,000-mile maintenance on my scooter to be completed. At least they have this entertainingly accurate sign to laugh at.

thomrstrom, to kindle
@thomrstrom@triangletoot.party avatar

Shout-out to for continuing to be the best escape route for DRM'ed eBooks.

The screen on my Oasis died, so I used it as an excuse to finally leave the Amazon ecosystem and buy a Libra 2.

With 200+ books purchased in the Amazon Kindle store, I was a little bit nervous about moving things over, but Calibre and this thread made it straightforward: https://www.reddit.com/r/Calibre/comments/qffvx9/how_to_get_calibre_and_dedrm_working_with_kindle/

What an amazing open-source project.

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

Here is why I’ve been so busy grinding cardamom pods: I made 100 kanelbulla (Swedish cinnamon buns) in the last 24 hours for a cultural fair at my daughter’s school. I hope there are leftovers!

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

You wouldn't believe the amount of cardamom I ground today with a mortar & pestle. It's enough that my biceps ache.

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

I pushed out another release of my side project: https://github.com/chainguard-dev/bincapz

If you ever wanted to determine the capabilities of a binary but were too afraid or lazy to run it, check it out.

Here's an example of running it against a sus make binary that VirusTotal says is fine.

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

What a wonderful day to take an extended lunch break to ramble around the countryside.

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

I felt like doing some binary -engineering this week and made a thing:

https://github.com/tstromberg/bincapz

TL;DR: You pass bincapz a program that runs on a UNIX flavor, and it'll try to tell you what it might try to do via dumb yet surprisingly effective static analysis.

thomrstrom,
@thomrstrom@triangletoot.party avatar

The data isn't fully populated yet, but bincapz can also tell you what syscalls you may need to run a binary in case you are a user, pledge groups, or capabilities.

The latter two will never be perfect though, as it depends on the arguments passed to the syscalls, but at least it'll give you an idea.

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

IT is hard and it’s been a week. Time to go shoot some aliens

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

I'm not going dark – I'm just taking a planned vacation from social media & news websites during December. 🔕

In other news, I bought my first drum kit in an effort to discover hobbies that don't add to the tendonitis in my fingers. I'll let you know how that goes next month! 🥁

thomrstrom, to cycling
@thomrstrom@triangletoot.party avatar

First recreational ride of the season, and first ride since reinforcing the seat post. The CR2032 batteries in my shifters were dead, but thankfully I had some around.

What amazing weather we have in North Carolina today!

tripplehelix, to random
@tripplehelix@fosstodon.org avatar

Why the 'ek would a script run fine manually, but when run by crontab just not work? ARGH

thomrstrom,
@thomrstrom@triangletoot.party avatar

@tripplehelix This has happened so often to me that I have a recipe:

9 out of 10 times for me, it's been $PATH, but overall it should be some sort of environmental difference that the env call will capture.

thomrstrom, to motorcycles
@thomrstrom@triangletoot.party avatar

Finding #winter tires (I'm talking basic M+S, not even 3PMSF) for a #scooter or #motorcycle in #America is nigh impossible. I can't find a single dealer who sells or ships them to the US in my sizes. It's bonkers.

Of all the situations you want the most traction in, it's when you only have two wheels on the ground.

thomrstrom, to random
@thomrstrom@triangletoot.party avatar

Somehow my teenage daughter thinks I'm still cool enough to go camping with her.

Packing list:

  • A new bikepacking tent!
  • Two sleeping bags
  • Clothes
  • J1772 cable + adapters
  • Tire changing kit
  • Air compressor
  • Repair tools
  • First Aid Kit
  • Satellite Messenger
  • Fuji X100V
  • Tie wraps
  • Way too much motorcycle safety gear
  • A healthy sense of adventure
  • All
  • Subscribed
  • Moderated
  • Favorites
  • JUstTest
  • kavyap
  • DreamBathrooms
  • thenastyranch
  • magazineikmin
  • osvaldo12
  • khanakhh
  • Youngstown
  • mdbf
  • slotface
  • rosin
  • everett
  • ngwrru68w68
  • Durango
  • anitta
  • InstantRegret
  • GTA5RPClips
  • cubers
  • ethstaker
  • normalnudes
  • tacticalgear
  • cisconetworking
  • tester
  • Leos
  • modclub
  • megavids
  • provamag3
  • lostlight
  • All magazines