there is no end to the annoying shit powershell will do. what do you mean decimal IP addresses are acceptable arguments for URIs passed to invoke-webrequest. why.
Remote
burritosec 
@burritosec@infosec.exchange
mastodon 4.8.0-alpha.3+glitchhe/him 🏳️🌈
| frontline thrunt ops | ex-GRC grouch & former MDR menace | emo music enthusiast & occasional human Shazam app | internet race car driver | go Bruins | no duh these are my own opinions
496 Followers
398 Following
50 Posts
Joined October 28, 2022
bird app:
deactivated
hair:
wack
jewelry:
wack
malware:
wack
thrunting?:
hell yeah
Replying to on mastodon.social
@FrankEndrullat@mastodon.social @Viss@mastodon.social Thank you! I wasn't on the product end of the shop / didn't see every piece of gear at the time really, but the name switch makes sense with your explanation.
People would normally excoriate the median voter for thinking the President has a lever labeled "GAS PRICES" and all he has to do is pull it one way or the other, but the current guy has basically done exactly that. Except, y'know, lever's been set the wrong way.
Replying to
@darfplatypus@infosec.exchange this is an "it depends" answer through and through. I don't like that I have to pick one, way too situational
nsfw shitpost
agents generate the hackiest most never-send-this in prod solutions to a developer's problems and the second someone pops 1 of the 75000 NPM packages in your dev team's dependency chain, they now get said agent and you aren't auditing what it does
duuuuuumb question but does anyone have any empirical evidence that tools like ublock origin will mitigate/kill/prevent clickfix pop ups? pretty sure I saw a blog about this but I cannot find it
So many years after it was said and Dan Kaminsky's brilliant simplicity in "We're gonna build a stateless TCP stack. It just sends data, it doesn't know to who, and the other guy remembers he's talking to me." is still so wonderful.
Replying to
@neurovagrant@masto.deoan.org @pdfarranger@fosstodon.org @eff@mastodon.social not an official assessment by any means but *usually* these types of activities lead to the download of a junk adware application - currently don't have access to the tools I'd need to dig on the domains that @neurovagrant@masto.deoan.org has provided though
Replying to
@tinker unsurprising given the us fed gov is a big customer of theirs in general & their certs are on the approved list for DoD employee certification requirements.
Replying to
@infoseclogger@infosec.exchange I have the dubious blessing of a 207 area code. You can figure out the rest, I'm sure.
Replying to
@thepacketrat@infosec.exchange aesop rock has a song called "pigeonometry" that you might find relevant.
Replying to
quick update we've also gone through "YMCA" by the village people, "let's go crazy" by Prince, and currently are on "September" by Earth, Wind and Fire
the burritosec is on PTO and having steaks and beers to celebrate. the burritosec is in full duplex mode
https://www.youtube.com/watch?v=TzVZE9UdKIo
internet right now be like "we alll fallll downnnnn"
all things being equal I'm pretty sure AO3 has better uptime metrics than AWS or Azure
It's the day.
over on bluesky they're all hotly debating what is the definitive millennial song, and I would like to submit "chasing cars" by snow patrol for that consideration
every UI designer should take steel toe boots to the nose for this cutesy rotating glowing highlight bullshit around the AI tool icons. bring back the tag you fucking dorks
undisciplined engineering is just figuring out different ways to set stuff on fire and vibe coding is undisciplined engineering at scale
RIP Kavinsky. Dammit. https://www.france24.com/en/france/20260729-french-dj-kavinsky-found-dead-in-paris-home
alcohol
just had to explain what Homestar Runner was to a younger coworker and I am feeling the creeping shadows enter the room
alc, bad joke
Replying to
glad CISOs are losing their minds that their entire enterprise security is at risk from this shit though
soc-as-a-service talks to helpdesk-as-a-service and, uh, wait, why is no one from the actual org affected by the security incident in this conversation yet?
nsfw shitpost, ai adjacent
The NTFS epoch is just fucking weird and I will happily pay anyone to explain the reasons behind it to me.
charged my pixel watch (yeah I know) before bed and the splash screen said "ready to go!" uh huh. ready to go night-night. ready to go beddy-bye. 
new york is this cosmic torture where there are absolutely wonderful things to witness and experience and everything within a five block radius of those things is swearing and diesel engine exhaust and raw human stupidity
LLM trained only on US democratic party fundraising text messages
What is a CI/CD pipeline? A miserable little pile of secrets.
happy american holiday weekend, bsky's cdn is eating shit
Replying to
@lauren@mastodon.laurenweinstein.org Sorry for the random empty tag just now. Didn't have my link ready.
https://youtu.be/fuLllNyfiHs?si=bf7W0YvSflmmpwnB
Also made famous by Eric Koston.
anyone know what actually backs that whole guaranteed 3% return on a high yield savings account
the playlist I made when I was working night shifts in a grocery store still absolutely slaps after all these years
but without "slop", would we not know "peak" as well?
40 minutes of cardio and I'm normal again. waow
Replying to
yeah I get UI design is hard when you don't have CSS but we could have done it
i've heard a lot of "oh, I'm from the era when the PLA left their webshells wide open" and i can't wait to say "i'm from the era after SolarWinds and the ClickFix heyday".
assuming we ever find a way past ClickFix.