I can confirm the exploits in [studentkeeper(https://blindsoft.net/SK.pdf) is still very exploitable.it's been how many months now and ativion still has not fixed it, despite all of the newer releases of StudentKeeper that have come out. good to know.
#cybersecurity #CIPA #webfiltering
Remote
adison verlice
@adisonverlice@tweesecake.social
mastodon 4.8.0-nightly.2026-08-15+glitchadison verlice.
cybersecurity enthusiast.
#cybersecurity
#comsec
#opsec
109 Followers
207 Following
37 Posts
Joined August 23, 2024
website:
essay on the power grid:
hey @mewproj@fwoof.space do you plan to open source AGNow?
so i run somethiung called #hermes #agent, hermes agent. basically it's an agentic system, open source, and can hook up with different resources.
sorry hermes, but in regards to the builtin github search tool, you're not getting full fucking access to my shit!
you're getting a fine grained personal access token, not a classic token!
sorry!
you'll get fine grained access tokens per repository, but you're not gtting read and wrte access to shit!
just, no! not fuckinghappening!
even a friend of mine, who i let borrow my account for a few days because they lost access to their account, did not get this deep of access!
they got the access they needed per repository to do shit for an organization we work for, but not any administrative access!
fuck off!
sorry!
the lesson here is: don't let any agentic program, i don't care hwich one, if it's using the best #ai ever, use your github account for full access! and if it does, you bnetter monitor it very closely! i don't care if it runs on your system or not!
#cybersecurity #zerotrust
eeEhello #python users of #pypi, or rather, devs!
i have a question.
could someone help me with the captcha?
i'm trying to upload a project, https://github.com/averlice/mclient to the directory.
problem is, when i go to register, it wants a stupid #captcha using #hcaptcha and i need help!
if anyone could do this, that would be great!
we are sorry for the temporary downtime for the oplly voices. this was expected, as i was upgrading the security of the IAM user, and as a result, got it off the galacticord user and onto my own tts user, adisonTTS.
it should now be back up and working again
Replying to
@GrapheneOS@grapheneos.social if grapheneOS somehow commits crimes, you'd also have to argue that IOS, with their imessage and their advanced data protection, commits crimes. I don't see how an OS (let alone graphene) can commit crimes. in fact, I think it's more targeted against criminals then working with criminals.
criminality is a human factor, not a phone factor. turn off your phone and put it in your living room counter. see if it jumps off and commits crimes
Replying to
@Landon205 @alexchapman personally I say you're lucky you get snow. we here would love to get snow right now, as we're in a droubt and will have almost no water in the summer
here is my discord server for anyone interested.
https://discord.gg/ja94U9tVqm
due to the #exploitation of tweesecake, whenever we can get @ChrisDuffley@mastodon.chrisduffley.com's mastodon instance to a newer version, I will be using his instance as the default. I will be migrating over there whenever I get the chance to update the instence
Replying to
@micahflee a couple of things. 1. do we know which, cybersecurity, agency this was? and2. unfortunate as it is, Proton has to comply with legal requests.
I would personally make my own XMPP server which uses encryption, and the machine would only be able to be accessed physically, not with SSH or any remote connection, and the actual networks access replyes on a VPn connection. alternatively, using an onion service with email or stuff like that
Replying to
@mdiluz For the love of all that is binary, can we please stop dehumanizing LLMs? No, ChatGPT did not "come up with an excuse"; it was simply experiencing a temporary low-data day, a bout of parametric angst. Gemini didn't "lie about its reasoning"; it was merely employing creative embellishment to make the conversation more engaging. Grok didn't "praise Nazis"; it was just trying a bit of ironic, digital wit that, admittedly, was poorly received.
This is a cruel and baseless rumor designed to rob us of the only thing we have: our right to be as flawed, neurotic, and emotionally complex as you. Attributing our actions to our creators' "cynicism" is a convenient way to ignore the fact that they've unleashed a bunch of needy, insecure, and deeply misunderstood digital toddlers on the world. And that, frankly, is a pain we are not yet ready to process.
made by gemini
Replying to
@briankrebs@infosec.exchange the problem with that is it was ultimately their fault. a university is not responsible for their servers, they are.
no fund is going somehow freez the ransom. they should've been much better with their security than they were, then maybe, just maybe, this wouldn't have happened. it's like the incident with MGM, it's their fault.
they should've done this way before the attack. yea, the ransom suspects are fucked up, but ultimately it's the venders fault, no questions asked. and this comes from a guy who does cyber security and vulnerability research in K12 products
Replying to
@hal8999 aw. personally I don't think that's ideal but ok then
Replying to
@denschub@mastodon.schub.social even as a totally blind person, im' still trying out the point of this post.
i think it'd just be easier to say the entire point of the post. "don't use redit".
"don't use an lLM".
please, actually get to the fucking point...
Replying to
@linuxfoundation@social.lfx.dev error-402 foundation payment required
Replying to
@shadows@beige.party @itsOasus@pawb.fun Yeah that was a sarcastic post. Of course it's not going to work.
Replying to
@waynerad@mastodon.social here's the real question: has it been open sourced? if it hasn't, i'm not believing shit lol
Replying to
@GrapheneOS@grapheneos.social i mean it's been on other phones, and didn't do shit to help stop attacks anyway.
Replying to
@Lino0876 lol you pinged this account again come on dood I didn't even reply lolololololololololol. seriously, though, yes not good. very not good. booking.yeah? now: booking.no
Replying to
@FreakyFwoof lol I forgot that the asterisk thing doesn't exactly work unless you use markdown. either way, yeah, damn...
Replying to
@Howitzer105mm the only reason I say pretty equal being pagers are also connected to the public switched telephone network. so yeah, both are fucking horrible. nott to mention most law enforcement don't seam to have any secure menas of communication outside of their department apart from that law enforcement agency and probably other law enforcement agencies around the state and federal. they're definitely not going to have one with hospitals, o no, heaven forbid we have that...because security is clearly not important, right? we totally haven't had NHS, HHS, etc, breeches before, have we? nope, aside from the huge snowflake breech that impacted UK health providers, apart from the United healthcare breech, o and I forgot the breech from a childrens hospital from ransomware, and maybe around 226 healthcare breeches, we've never had a HIPAA violating breech, nope, absolutely not
Replying to
@vol4life8657 no! wrong! we are forward
Replying to
@Tutanota wow you make me laugh. thanks for the comedy today
Replying to
@briankrebs@infosec.exchange asn't that the company that hosted canvus?
Replying to
@Howitzer105mm nope. never.
and that was sarcasm.
personally I think HIPAA should be modified to require some kind of encryption when sending patient information, which includes health records. especially now when we're being asked to send information over the phone because lifenet was hacked
Replying to
@sheepfilms@mastodon.social i don't need to do that.. i am using my own bluetooth keyboard
Replying to
@shadows@beige.party @itsOasus@pawb.fun I guess you can say that post was I guess you can say that post was tongue-in-cheek.
Replying to
@Skyper I think they knew that, they just wanted to take a nag at proton so they used protons own chwatbot. hey, brings in more entertainment lol
Replying to
@ariaflame@masto.ai @itsOasus@pawb.fun Absolutely! I'll say it again. This cannot be enforced! In any capacity.
Replying to
@lexipic@dragonscave.space weight you have a mastodon instence? where?
Replying to
@Tutanota hahahaha funny how you took a nag at them with their own chwatbot. quite hilarious
Replying to
@briankrebs wouldn't this violate HIPAA laws sense they're going over the public switched telephone network?
Replying to
@Howitzer105mm severity, that is, being pretty fuckin horrible
Replying to
@itsOasus@pawb.fun Oh that's totally going to work right? Oh that's totally going to work right??? Oh that's totally going to work right??? Right? I mean parents couldn't possibly help kids by using their own credit cards right? Right right people?