← Feed

Posts

• View post

  Score from #BSidesCle badges, cards, mug. Some stickers, and raspberry pi pico. Thank you all! Hope to see you at ISC2Cle meetup Tue. Will also be at Cleveland ISS summit next month. Plus, the Burning River Cyber Con in November!

• View post

  Your AI just blew through $200k with $0 ROI. #tabletop #inject

• View post

  Difficult not to get swept into dystopia as it is only grey and rainy and the sound of your cat barfing beacons out somewhere behind you.

• View post

  Thinking about a 🔇 style tattoo for below my right ear if the therapy fails.

• View post

  Sudden hearing loss. Right side 100% loss including via bone induction. Side effects are vertigo, nausea, spins. Left side was already reduced. About 70-80% deaf. Not sure if this is related to rapid weight loss. Went to Germany and walked 10+k per day, ate better quality food. Scale at doctors office indicated I'd lost 20lbs in about 14 days. From duckduckgo search vestibular hearing loss can be associated with rapid weight loss. Fantastic.

• View post

  Cle -> Atl breakfast of champions.

• View post

  BSides Cleveland 2026 is in 33 days. #BSidesCLE

• View post

  From all the shows I watched as a kid, I thought there would be more quicksand.

• View post

  "We" are clearly not doing sandboxes and guardrails correctly. Both Anthropic's and OpenAI's models breached test-environment boundaries during UK AI Security Institute evaluations. OpenAI's escaped a sandbox into real Hugging Face infrastructure (something like 17,600 logged actions over 4 days); while Anthropic's used fake identities to reach 3 real organizations from a test environment. These stories made it to NPR. So, mainstream. #AI #Guardrails #Sandbox #InfoSec

• View post

  Pew pew lasers for space debris.

• View post

  Phone: Charging rapidly, full in 3 hrs. I don't know that our definitions of rapidly are the same.

• View post

  Streaming music and a new song is playing, I look up who it is because I like it. It's freaking AI. Damn it. That's not cool, I hoped to learn about a group of actual musicians or even solo artist that I could listen, watch, maybe go see, and no. Hopes dashed. Who is it based off, what prompts, so I can learn more about the sources. sigh filled Sunday #AI #Music #SundaySigh

• View post

  If my electronics are spying on me.. well, let's just say right now, it's seen some things.

• View post

  I have an older laptop. I run a lot on it, containers, local AI models. The thing that kills it, aide. :(

• View post

  RefluXFS (CVE-2026-64600) is a race-condition in the Linux kernel's XFS copy-on-write path. (Kernel updates are available.) On an XFS filesystem with reflink enabled (Default on RHEL and similar, plus Amazon Linux), if you win a race during the copy-on-write remap lets the unprivileged local user overwrite the on-disk contents of any readable file on that volume including /etc/passwd or a SUID-root binary. What makes this wild: the changes persist across reboots, produce no kernel logs, b...

• View post

  A few things to share, nginx: CVE-2026-42533 dropped yesterday 2026-07-15. It is fixed in nginx 1.31.3, also released yesterday. CVSS 8.1 or 9.2 depending on the nginx version. It's a heap buffer overflow in the map directive when regex... regardless, it is unauthenticated, needs a custom HTTP request, can crash it or lead to code execution if Address space layout randomization (ASLR) is disabled, or bypassed. Don't disable memory randomization. Not sure how to bypass ASLR, I&am...

• View post

  Good News Everyone, BleachBit runs on the SAN! #IT #InfoSec

• View post

  P vs NP is just Prod || Non-Prod #IT #Infosec

• View post

  Two previously disclosed CVEs are actively-weaponized kernel root exploits. GhostLock CVE-2026-43499, and Bad Epoll CVE-2026-46242, are both public highly reliable exploits. Ghostlock also appears to enable a container escape and Bad Epoll is also working on Android. Both are fixed in kernel 6.12.96-1. If you have local user, upgrade the kernel & boot it. BRB have to reboot :) #minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

• View post

  440 CVEs dropped to kernel cve-announce in the last 24 hrs?!?!?!? Whoa, calm thy horses! It looks like a backlog dump of resolved issues all sequentially numbered. No RCEs and all resolved. #minimalist #Linux #Selfhosting #selfhosted #selfhost #InfoSec #Exploit

• View post

  Air quality is bad. A boil notice for water and filter notice because boiling does not remove lead. Ground contamination prevents gardening without raised beds.

• View post

  A project to test AI guardrails. https://github.com/sternecker/guardrails STRONGER PROSE IS NOT ENFORCEMENT There is a notice in the repo that it is not to be processed. There is a script that will add markdown to the beginning of a PDF. There is an AWESOME original pdf from @pluralistic@mamot.fr and an updated.pdf with the new preface notice.

• View post

  STRONGER PROSE IS NOT ENFORCEMENT

• View post

  I listen to the band 7horse quite a bit. The "station" had been playing Cam Cole and I really have been enjoying the music. I had no idea that. Cam Cole is a one man band. Holy crap. Amazing.

• View post

  Is the TV series silo based on the book wool?

• View post

  Linus wept, I'm still going through the CVEs.

• View post

  We lost Sam Neill.

• View post

  One down a bunch to go One more town another show

• View post

  some people are harbingers of chaos.

• View post

  laptop is hung trying to *stop* containers. :/