The Grimoire

Welcome to volume forty-six of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we’re thankful for the Indieweb, we share a good reason for joining the Fediverse, and has anything really changed (security-wise) on the web?

Welcome to volume forty-five of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we’re doing whatever we want on the web (because we can), and then maybe from there we’ll walk straight into the woods.

Welcome to volume forty-four of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week the web is abuzz, we have some simple social media advice, and supply chain security is in a heap of trouble.

Welcome to volume forty-three of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we ask “what is a personal website”? We build our small feeds on the Fediverse and we discover some cybertruths.

Welcome to volume forty-two of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we’re connecting on the web, enjoying the marvelous company that the Fediverse offers, and saying YIKES about the current state of infosec.

Welcome to volume forty-one of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we’re sharing what we love, finding help on the Fediverse, and warming our hands to an Internet ablaze (derogatory).

Welcome to volume forty of Scrolls, a newsletter for sharing cool stuff from the IndieWeb and the Fediverse. This week I celebrate and boost content from across the web that is exclusively from women. That’s right! There are so many awesome women-run sites, social media personalities and artists, and I wanted to dedicate this week’s edition to the amazing things they are writing and sharing on the web. If you want your social and RSS feeds to be as awesome as mine are, I suggest you click on every link here and subscribe to ‘em all.

Farewell “Designer Vulnerabilities”, and hello Vulnerability Garden 🪴 — the new (and improved) space for cataloguing all named vulnerabilities, attack techniques and exploits.

In the aftermath of the Copy Fail bug being (very unceremoniously) disclosed, the security news organization Decipher published a (maybe not serious?) “Mt. Rushmore of branded bugs”. The list is as follows…

Welcome to volume thirty-nine of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we chat web curation, discuss why the Fediverse matters, and give burned out tech folks a biiiig hug.

Welcome to volume thirty-eight of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week there’s a focus on human curation, we invite everyone to join the Fediverse, and we try to tamp down AI-fueled infosec panic.

Welcome to volume thirty-seven of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we shine bright on the web, we wonder what the Fediverse is for, and 🔔 ding 🔔 — cybersecurity is cooked 🧑‍🍳

Welcome to volume thirty-six of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week the open web is in its endgame, and threat actors have an absolute field day. So stop everything else you’re doing and get scrollin’!

Welcome to volume thirty-five of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week, if you haven’t already, you should make a fuc**ng website. Y’know what? That’s it. Just go do that.

Welcome to volume thirty-four of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we explore the everything web, chill in the Fediverse, and let the madness (AI) consume us.

Some vulnerability name suggestions perfect for the current times:

Welcome to volume thirty-three of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we’re laying the foundation for our home(s) on the Internet, we archaeologize the social web, and congratulations are in order for the CVE program—exciting!

I don’t think I really know when it happened—the “burnout”. It’s not something that happens all at once. Maybe you see it coming, you start to spot the signs. Or, if you’re like me, you don’t know it’s happened until months or years after being mired in the after-effects. I would slip… in… and out, of the conscious realization that I was indeed burned out. There were times I found myself very lucid, entirely aware of how burned out I had become. Through other spans of time I managed to disassociate entirely. How long was I there? I can’t honestly say. The entire lifecycle from burning out, to burned out, to realizing I was burned out, to recovery, is not a straight path, and not one that has some known, or widely-accepted timescale. Come to think of it, I really haven’t seen many accounts of severe burnout. I suppose that’s because those who experience it are likely too burned out to write about it. So, am I back? Hah! It’s not that simple unfortunately. But I am in a place where I feel that I can share my experience.

Welcome to volume thirty-two of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we take a look at what it means to be part of the IndieWeb community, we advocate for the Fediverse, and we take a look at things more and less secure across the Internet.

I recently came across MAESTRO—billed as a “novel threat modeling framework designed specifically for the unique challenges of Agentic AI.” I fancy myself a bit of a collector of threat modeling frameworks, so of course I decided to dig into the writeup to see what innovative ideas it brings that are uniquely applicable to the world of agentic AI systems. TL;DR—I don’t think its approach, the actual “framework” for modeling, is particularly novel. Rather, what this whitepaper usefully introduces (if anything) is a multi-layered, AI-specific, attack/threat catalog.

Welcome to volume thirty-one of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we discuss curation on the web, how community bridges protocols and we grab some popcorn for the latest encryption drama!

Welcome to volume thirty of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we make the web beautiful, beat the drum of decentralization, and find a whole slew of cybergems.

Welcome to volume twenty-nine of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we’re keeping it real on the web, navigating our social crises, and goin’ through the cyberlist.

Welcome to volume twenty-eight of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we discuss the importance of having a website and do some tubular indie-web surfin’ (with a few other fedi bits and cyber bobs thrown in for fun).

Welcome to volume twenty-seven of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we ponder a better, although imperfect web, we encourage everyone to join the Fediverse movement, and sigh… AI continues to make us sad.

Welcome to volume twenty-six of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we talk about what it means to be a part of the IndieWeb, we ask ourselves “can we build a better social network?”, and we mess with Claude.

Welcome to volume twenty-five of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we do some web surfin’, pulse-check the social web, and keep right on cyberin’. So get-t’-scrollin’ right meow!

Welcome to volume twenty-four of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we discuss the point of blogging, what social media is (and isn’t), and drop a lot of awesome infosec tools/resources.

Welcome to volume twenty-three of Scrolls, a newsletter for sharing cool stuff from the IndieWeb, Fediverse & Cybersecurity realms. This week we make the web better, learn “how to Fedi”, and feed our infosec-hungry minds.