I wonder why TF WhatsApp is reaching out to Google’s DNS servers when system has a configuration policy to use Quad9 and gets a local pihole instance from DHCP.
Remote
brown ☕🍵
@brown@infosec.exchange
mastodon 4.8.0-alpha.3+glitchI work with bits. I don't do bios.
0 Followers
0 Following
34 Posts
Joined November 08, 2022
Gotta love fedi people offering "expert" opinions on passkeys while completely misunderstanding how they actually work.
Get a paper notebook bro, you just have to pick unique high entropy passwords for each site and not fall for phishing. I am very good at infosec.
Replying to
You might be fooled into thinking that something is happening down there, nope.
Replying to
@wdormann@infosec.exchange I remember there was some kind of patent litigation between Apple and Samsung with the slide to answer gesture.
Cloudflare should stick to their core business: blogging about cool stuff.
https://textslashplain.com/2026/08/04/security-is-hard-yall/
Replying to
@bert_hubert residential proxies are a problem that cannot be easily solved, unless you block the entire Internet.
“At Booking.com, we're dedicated to the security and data protection of our guests. In that spirit, we’re writing to inform you that unauthorized third parties may have accessed certain booking information associated with your reservation.”
"I asked $LLMmodel" is becoming a literary genre in itself.
Yesterday I had to listen to a long story about a *conversation* someone had with Copilot, oh the laughs they had together, such fun!
Another phenomenon are blog posts from hobbyists written via LLMs, sometimes they even copypaste the prompt to the stochastic bot. Why? Shouldn't your personal blog reflect your actual creative output? Is it for clout?
Replying to
@kemotep@mastodo.neoliber.al @dangoodin@infosec.exchange it’s about being able to prove that the binary distribution matches the source code. If the source code is already tainted it won’t help.
TIL: octothorpe
Time to milk the gTLD cow again, I guess someone high up at ICANN needs a new boat https://go.theregister.com/feed/www.theregister.com/2026/05/01/icann_new_gtld_applications/
🤧💨 x 1000
Replying to
Context for those living under a rock: https://arstechnica.com/gadgets/2026/07/microsoft-responds-to-lg-monitors-installing-mcafee-ads-on-windows/
The good guys with the golden key.
How do I put it? Using troff as a teaching aid for sed is kinda insane. If you don’t know the syntax of the former you don’t have a clue what the desired output of those scripts is supposed to look like.
"To ensure consistency and minimize integration issues, we strongly encourage all contributors to use Claude Code for development".
The future of Open Source development 🤮
According to the tracking I received: for two consecutive days a delivery of a small package was attempted at 04:50 in the morning and returned to depot because nobody was at home.
I wonder if they have any kind of QA safeguards to spot such absurd claims or they’re just standard practice working as intended.
Fuck re-captcha, seriously, five minutes wasted for a sign up.
“organizations face increased compliance and licensing risk”, this is a problem invented by Microsoft, otherwise organisations couldn’t possibly care less about hardware based attestation of licensing servers.
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/strengthening-key-management-service-kms-with-hardware-based/ba-p/4539465
Replying to
@GuillaumeRossolini@infosec.exchange I think that the PIN request is akin to a reminder, you have to input every know and then so you don't forget it. Its main function is supposed to be a registration lock.