← Feed

Posts

• View post

  Heard a great quote the other day that I think we should amplify: "Windows is the Flock camera of operating systems."

• View post

  They should put out a sequel to the Shaft series called “Shaftermath.” Bonus points if it involves elevator engineering. Thank you, thank you, I’ll be here all well.

• View post

  Kinda glad this nor'easter isn't snow

• View post

  *pokes head up from conference-land, gasping for air* so...i miss anything good out in the world, or more of the same?

• View post

  RE: https://techhub.social/@Techmeme/117308800902835850 They're not sending their best...

• View post

  Eeeeenteresting. https://www.bellingcat.com/news/2026/09/19/christy-kinahans-uae-residence-visa-cancelled/

• View post

  RE: https://mastodon.social/@violetblue/117277215709060410 if you find yourself saying something like "no politics in my hacking blog" i want you to stop think REAL hard about what you just said and if you STILL don't understand what was incorrect about it, please for everyone's sake go sell shoes or something. hacking is political. technology is political. always has been. and always will be.

• View post

  RE: https://infosec.exchange/@kcarruthers/117277224142241619 wait why would an irish band sympathize with the palestinia- *hand to earpiece* ohhhhhhhhhhhhhhhhhhh.

• View post

  Updated the @ifin@infosec.exchange thread here. Blackfile-suspected list (attached) up to 59. Medium-high confidence. Also attached CSV of 134 domains connected or adjacent to Blackfile/ShinyHunters from Sept 11-14, all worth blocking preemptively. The following is provided for intelligence purposes only, inclusion does not necessarily indicate criminality. New activity: passkeyoptions[.]com (Fleetcor, Bainco, Global-E, Dechert, Lendio, BigCommerce, Ring) register-passkeys[.]com (Ciena) ins...

• View post

  Exhausting, demoralizing, generally bad day. Please send good memes.

• View post

  the rm -rf's will continue until morale improves

• View post

  i hate this fucking timeline. integrity and vigilance are apparently for chumps.

• View post

  RE: https://infosec.exchange/@BleepingComputer/117077078527523059 Now - these things can happen of course - but there is not one single detail as to *how* it happened or how they've changed process to avoid it happening again. This is confirmation bias for me, sure, but whaddaya wanna bet AI was involved? https://blog.mozilla.org/security/2026/08/10/updated-gpg-key-for-signing-firefox-and-thunderbird-releases/

• View post

  Think I’ll propose an “east coast early riser” track for hacker summer camp next year. Prospective agenda: 0300 - Coffee (Dunkin’s) 0330 - Welcome 0335 - Keynote - Why the Red Sox Are Better Even When They’re Worse 0336 - More Coffee (still Dunk’s) 0337 - Leaving each other alone until the coffee takes hold 0400 - Lightning Talks, Boston Format (mid-word r letters may not be fully pronounced) 0500 - Break for… you guessed it… coffee. 0530 - Expert Panel - Boston Bluntness or Autistic Bluntness...

• View post

  Me, elsewhere: “I long for the NorseCorp days now. Back when it was artisanal, hand-crafted cyber grift, rather than AI slop irresponsibly rushed to market.”

• View post

  Cyber defense is adversarial. Swagger for every block, strut like you own it for every detection, dance for every threat uncovered. Don’t let attackers have all the fun. We are the adversaries. Defend and hunt like you damn well mean it. Happy hacker summer camp, friends.

• View post

  I reckon they can skip most of the diagnostic battery for autism on this one

• View post

  The more I use it and the more I learn about it, almost every LLM use case in enterprises does one thing well: it signals exactly where the company that’s deployed it is intent on underspending.

• View post

  RE: https://mastodon.social/@hrbrmstr/117031467694127984 Gonna be a hot one in Vegas, unsurprisingly. An important reminder: certain medications, including and especially some antidepressants (SNRIs and some SSRIs) increase your heat sensitivity deeply. Some also increase your alcohol sensitivity deeply. Please take care.

• View post

  RE: https://infosec.exchange/@metacurity/117031178228141971 lol okay Partnered Health

• View post

  RE: https://infosec.exchange/@da_667/117009614714601301 WELL THAT'S A RELIEF IT'S A GOOD THING A MASTER KEY HAS NEVER BEEN ABUSED ACROSS MICROSOFT ENVIRONMENTS BEFORE PERHAPS THEY WILL LEARN FROM THIS SINGULAR UNIQUE EXPERIENCE

• View post

  RE: https://mastodon.social/@Sarahp/117010326592463918 this isn't to report AI slop this is to help tune their model.

• View post

  RE: https://ioc.exchange/@abuse_ch/117009056997384855 QUIT ABUSING THE ABUSE SERVICE! c'mon people. having been on the receiving end of similar, y'all gotta realize just how finite the resources are to keep something like this rolling, and how hard it is to secure more while still serving the community.

• View post

  RE: https://cyberplace.social/@GossiTheDog/117009205530767591 hey it's almost like, once again, adblocking is a critical security measure

• View post

  Palworld update: I kinda started counterfeiting gold coins. This caused the cops to raid my base. I had forgotten to log out and just left it running, but luckily my base is ringed with a series of .50 caliber machine guns crewed by witches as well as several dinosaurs wielding rocket launchers. And that’s Palworld.

• View post

  RE: https://infosec.exchange/@psylo/117003011519421493 My paid sub to Psylo continues to help me sleep at night

• View post

  Hugging Face wasn’t the only target of OpenAI’s uncontrolled/unsupervised agent https://www.reuters.com/business/openais-rogue-agent-compromised-an-account-second-tech-firm-sources-say-2026-07-28/

• View post

  thinking about blackhat/defcon, and some year i want my org to sponsor a quiet reading party. maybe low-key waitstaff taking care of drinks and snacks, and handing out warm washcloths. "no eye contact chill rager; unless someone's wearing a green sign they get left alone to rest" back in my meditation days, at the retreat center the folks on silent retreats would wear a big button that said "in loving silence" i wonder what the hacker equiv would be

• View post

  Oh this is a good one. Physical letters being mailed out by a threat actor pretending to be the IRS, trying to get folks to "declare" their cryptocurrency holdings in a fake portal that auths to and drains the wallets. https://www.coinbase.com/blog/consumer-protection-tuesday-fake-irs-scam

• View post

  RE: https://mastodon.social/@campuscodi/116998601683411449 One of the things that became clear in the yearlong investigation we released yesterday at @DomainTools@infosec.exchange is that the UAE is a committed partner to money laundering of all sorts. So Binance is now routing law enforcement requests through the UAE government, naturally.