🤓 Most honeypots are easy to detect, but what if LLMs could change that?

The problem with traditional honeypots is that attackers can easily spot them due to default configurations or predictable responses. An LLM honeypot is simply a honeypot that uses LLMs to generate responses.

The cool thing about this is that it dynamically adjusts responses based on the probes attackers send to your server.

Instead of giving away useful information, you can mislead, frustrate, or even profile the attacker.

During my GenAI x Sec series, we explored this idea and we had some fun reviewing unexpected responses but let me share some interesting projects you might want to try:

➡️ Galah: an LLM-powered web honeypot
🌐 github.com/0x4D31/galah

➡️ LLMPot: honeypot for Industrial Control Systems (ICS) networks
🌐 arxiv.org/abs/2405.05999

➡️ HoneyLLM: a shell honeypots
🌐 cse.psu.edu/~sxz16/papers/Hone…

➡️ VelMes: honeypot for SSH shell, MySQL, POP3, and HTTP
🌐 github.com/stratosphereips/Vel…

➡️ DECEIVE: A new one just dropped today.
🌐 github.com/splunk/DECEIVE

There are more, but these one are a good start. I personally like Galah 😉

I'd just like to interject for a moment. What you're referring to as Bluesky , is in fact, Blockchain / VC, or as I've recently taken to calling it, Blockchain + VC.

Why Bluesky is not decentralized:

• How Decentralized Is Bluesky Really?
  by @cwebber
• An outage that shuts down a “decentralized” network?
  by @jwildeboer

Why Bluesky doesn't let itself be self-hosted:

• Re: Re: Bluesky and Decentralization
  by @cwebber

^{...and fool all those who think they are now really independent with their personal data server container}

Is Bluesky Web3 and Will Add Cryptocurrency?

• All Protocols are Not the Same: Joanne McNeil on Bluesky
  by @jomc

Bluesky doesn't moderate Queerphobia and Trans-Hate to appeal to a MAGA-Government:

• Is Bluesky obeying in advance?
  by @mastodonmigration

Ties to MAGA, Russia, etc.:

• Important Thread about Bluesky funding and Origins
  by @davetroy

Payment service and Advertising:

• Bluesky is “prioritizing” building its own payment platform
  by @theverge

The mainstream, which is currently migrating from FaXistan to Bluesky, unfortunately has no aim and trots along with the opinion leaders who have migrated there and not to Mastodon, because they quickly realized that they cannot gain the reach and power there without a reinforcing algorithm as on Xcrement.

We should inform and educate about the question of which network to use, especially because of these still existing fundamental differences between Mastodon and Bluesky.

Bluesky is “prioritizing” building its own payment platform.

Bluesky COO Rose Wang, in an interview with Buffer: It might take awhile before they arrive, Wang says. The planned subscription is also set to launch early next year.

^{Jay Peters (The Verge)}

Jan Wildeboer 😷

2024-11-15 15:12:42

IMHO: #BlueSky isn't decentralised or federated. The outage on 2024-11-14 is obvious proof. It may *look* decentralised and they definitely love to outsource traffic/storage costs by claiming that running your own PDS (Personal Data Server) is somehow something federated, but that's all smoke and mirrors. You have to go deep on [1] to find "networking through Relays instead of server-to-server" as their current implementation choice. THEY run the relays. No one else.

[1] bsky.social/about/blog/5-5-202…

Federation Architecture Overview - Bluesky

Soon, we’re launching a sandbox environment for federation. In advance, we want to share some technical details about our design decisions.

^Bluesky

Hello nerds!

We've just created the first release candidate for #GoToSocial v0.18.0!

Adventurous admins can find the release candidate and upgrade instructions here:

github.com/superseriousbusines…

Please read the migration notes carefully for instructions on how to upgrade to this version. This version contains several very long migrations so you will need to be patient when upgrading, and backup your database first!!

Thanks for reading!

Release highlights:

• Status edit support: one of our most-requested features! You can now edit your own statuses, and see instance edit history from other accounts too (if your instance has them stored).
• Push notifications: probably the second most-requested feature! GoToSocial can now send push notifications to clients via their configured push providers.
  You may need to uninstall / reinstall client applications, or log out and back in again, for this feature to work. (And if you're using Tusky, make sure you've got ntfy installed).
• Global instance css customization: admins can now apply custom CSS across their entire instance via the settings panel.
• Domain permission subscriptions: it's now possible to configure your instance to subscribe to CSV, JSON, or plaintext lists of domain permissions.
  Each night, your instance will fetch and automatically create domain permissions (or permission drafts) based on what it finds in a subscribed list.
  See the domain permission subscription documentation for more information.
• Trusted-proxies helper: instances with improperly configured trusted-proxies settings will now show a warning on the homepage, so admins can make sure their instance is configured correctly.
• Better outbox sorting: messages from GoToSocial are now delivered more quickly to people you mention, so conversations across instances should feel snappier.
• Log in button: there's now a login button in the top right of the instance homepage, which leads to a helpful page about clients, with a link to the settings panel. Should make things less confusing for new users!
• Granular stats controls: with the instance-stats-mode setting, admins can now choose if and how their instance serves stats via the nodeinfo endpoints. Existing behavior from v0.17.0 is the default.
• Maintenance router will now be used while your instance is starting up / running migrations. It serves a nice status page informing visitors to wait while migrations complete. Less admin anxiety! Stuff is working!

So I threw the idea out there a while back about reaching out to major Union organizations about joining the Fediverse. I've also spoken about both the immediate need for a national general strike and organizing laid-off workers in competition against corporate assholes.

An idea was raised about a Federated job site like LinkedIn minus the bullshit. I'm going to start pulling together a list of Unions to contact and propose the creation of such a jobsite and unionization platform.

These are the Unions I've got so far. Are there any others I need to add? Focus will be in the US, and with any luck spread from there.

American Federation of Labor and Congress of Industrial Organizations (AFL-CIO)

American Federation of Teachers (AFT)
United States

International Union of Operating Engineers (IUOE)

International Association of Machinists and Aerospace Workers (IAM)

Woodworkers Department
International Longshore and Warehouse Union (ILWU)

American Postal Workers Union
United States Postal Service
Communications Workers of America (CWA)

Industrial Workers of the World (IWW)
International Telecommunication Union (ITU)

United Auto Workers (UAW)

United Mine Workers

United Steel Workers

Communication Workers of America

Service Employees International Union (SEIU)

National Treasury Employees Union (NTEU)

#union #generalstrike