Remote
Ron Bowes
@iagox86@infosec.exchange
Staff Product Detection Engineer @ Censys
Mostly post about professional stuff, maybe some improv stuff and maybe even magic some day. Seattle-based (originally Canadian), queer, cybersecurity nerd.
(He/him)
1773 Followers
402 Following
50 Posts
Joined November 04, 2022
RE: https://infosec.exchange/@albinowax/117315320823924480
I was at this, and it's really good. I'm skeptical of anything that has "AI" in the title but @albinowax@infosec.exchange showed real results
Quoting
My latest presentation has landed on YouTube, courtesy of SEC-T! Can AI do novel security research? You know it.
https://www.youtube.com/watch?v=jCFZFDHnZrQ
Open quoted postOpen post
Replying to
@datum@zeroes.ca @tychotithonus@infosec.exchange @ZachWeinersmith@mastodon.social that smbc captures such a serious problem with social media.. I see "don't follow this person" or screenshots of hateful posts so often, and I just want to tell people to stop spreading harmful ideas
3
0
0
0
Open post
Open post
This is just egregiously, unbelievably bad: https://github.com/Bin4ry/yarbo-nat-in-my-back-yard
83
29
89
2
Open post
GOOD NEWS! I GOT MY BIKE BACK!! I went out for a snack and noticed it was moving again. I followed it and found him hanging out. I drove by a few times.
Then I had the idea: I was pretty close to the East Precinct, so I drove down there and waited for some cops to walk by. I grabbed them and begged for help. They found me somebody, I gave them the info, and they went and found the guy
The bike is a bit messed up but IT'S HOME!!
13
4
0
0
Open post
RE: https://mastodon.social/@jpmens/117061368325715159
I really enjoyed the path of reading that this post sent me down today
4
1
0
0
Open post
In a few days I'll be nerding out about process injection at @NorthSec@infosec.exchange in Montreal (and also helping run the lockpicking village). Come say hi if you're there!!
12
0
3
0
Open post
Replying to
@Viss @Dio9sys @da_667 @hrbrmstr For no particular reason, I'm thinking of this line:
I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation
Imagine doing a technical review and instead of reading feedback, they simply paste it into Claude. I'm not mentioning this for any particular reason of course
10
2
0
0
Open post
Replying to
@cR0w@infosec.exchange honestly I was looking for either a cop or a security guard who I'd offer cash to. Unfortunately for him, he spent the night in jail for his efforts
I don't think he expected somebody to be as obsessive as me, but I have 48 hours of notes on where he was, who he was hanging out with, and some photos in different places
He very much picked the wrong person to mess with
3
2
0
0
Open post
Replying to
@cR0w@infosec.exchange nah I get that at home
Seriously though, parties the end by 9 plz. I'm old
2
1
0
0
Open post
Replying to
@DaveMWilburn@infosec.exchange @wdormann@infosec.exchange yeah, exactly - I'm no AI apologist, but reduced-round attacks are a very standard cryptanalysis technique, and finding a novel easy to break "n" rounds is potentially a big deal
2
0
0
0
Open post
Replying to
@tychotithonus@infosec.exchange @wdormann@infosec.exchange my assumption is that these were publicly shared (possibly by accident), but that assumption is probably worth testing
2
0
0
0
Open post
Replying to
@ariadne@social.treehouse.systems I've been sharing this a lot, which captures the problem quite well: https://ergosphere.blog/posts/the-machines-are-fine/
5
4
4
1
Open post
Replying to
@cR0w@infosec.exchange he also did quite a lot of damage.. I asked the bike store to document everything because I'm considering taking him to small claims
2
1
0
0
Open post
This guy has officially saved my bike twice.. $6000 value for like $30. Must-buy IMO
https://www.elevationlab.com/products/tagvault-bike
2
0
0
0
Open post
Replying to
@biomemetic@infosec.exchange @DaveMWilburn@infosec.exchange I do have a receipt, serial number, tracker, and my phone is paired to it
The issue with the police is they can't enter the building without a warrant and they don't show up fast with to confront him outside
2
2
0
0
Open post
Replying to
@davidtheeviloverlord@mastodon.social @Lana@beige.party @thejacenallen@mastodon.social @tehstu@hachyderm.io "Signing up homeless people" feels like the sorta assertion that needs evidence
1
2
0
0
Open post
I seriously love how similar video game explore development is to standard exploit dev. This video is honestly educational for more than just gaming!
5
0
1
0
Open post
Replying to
@Javvad@infosec.exchange I tell people over and over: unique is more important than strong. Your password can be as security as you want, but if your Pokemon forum with plaintext passwords gets dumped it doesn't matter
Until sites are forced to attest to which password scheme they use, worrying strong password hashing feels exceedingly pointless.
1
1
0
0
Open post
Replying to
@vathpela@infosec.exchange IMO after we make organizations financially liable for vulnerabilities they negligently introduce, we can talk about how we feel about Full Disclosure
4
2
0
0
Open post
Replying to
4
0
1
0
Open post
Open post
Replying to
@SecureOwl neat idea! Although if I was visiting I might scan it out of curiosity
4
1
0
0
Open post
Replying to
@christianrickert @nixCraft C is very frequently more efficient than assembly, because compilers are capable of doing crazy things to your code to optimize it for you
3
2
0
0
Open post
Replying to
@tychotithonus@infosec.exchange no, I confronted him once, shortly after he took it. He knew what he was doing
1
1
0
0
Open post
Replying to
@gbargoud@masto.nyc ohh interesting! This is Seattle, I should look into it tomorrow
1
0
0
0
Open post
Open post
Replying to
@straithe@infosec.exchange I forget exactly how we came up with it, but the second we said it we knew it was perfect
1
0
0
0
Open post
Replying to
@straithe@infosec.exchange the best names I've come up with for groups involves sitting with others brainstorming until something makes everyone laugh, then we use the
The Long Con was definitely that
1
2
0
0
Open post
Open post
Replying to
@pixelfed@mastodon.social I had a hell of a time making an Instagram account for my improv team - they just kept insta-banning it. I have no idea why, it's so annoying :(
1
0
0
0
Open post
Replying to
@G33KatWork@infosec.exchange I seriously don't get how people can live without that shortcut
1
1
0
0
Open post
Okay seriously Internet. What do you do to retrieve a stolen bike with a tracker? I confronted, got threatened with mace. Found him again, stayed back and called 911, 4 hours later I'm giving up
Do I have any options, other than waiting for him to be careless???
0
4
0
0
Open post
Replying to
@DaveMWilburn@infosec.exchange @biomemetic@infosec.exchange Seattle law enforcement isn't well known for putting any effort in. I got some advice that I would specifically ask for a property crime detective rather than a patrol officer
0
0
0
0
Open post
Replying to
@earthshine@masto.hackers.town When you said DC, I thought you were going somewhere where I'd have to disavow all knowledge of this discussion
0
1
0
0
Open post
Open post
Replying to
@Semmelstulle@mastodon.social @gamingonlinux@mastodon.social Yeah, we've repeatedly had the issue of save games getting mixed up or overwritten.. it doesn't sound like that's being fixed
0
0
0
0
Open post
Replying to
@zzt@mas.to it's tough, because I don't want to be a jerk but it's also a good guy reaction to have on the modern Internet where there's so much bullshit. I'm a researcher and I see so many claims that have no evidence!
0
0
0
0
Open post
Replying to
@Dio9sys@haunted.computer Funny, I've never seen Bluey but I love saying "hooray".. I don't even know why. Cultural osmosis?
0
0
0
0
Open post
Replying to
@DaveMWilburn@infosec.exchange I wonder what information I'd need? I have photo, video of him, and his apartment's address (just the building, the leasing office hasn't been helpful yet)
0
1
0
0
Open post
Replying to on universeodon.com
@MarkBrigham@universeodon.com @davidho@mastodon.world since the bins are open, is it the trash workers doing it after emptying them? Perhaps a complaint to the city could help
0
2
0
0
Open post
Replying to
@DaveMWilburn@infosec.exchange I was actually wondering that! Just hand him a summons
0
1
0
0
Open post
Hey friends! What are the cool events at BSides and Defcon next week that I haven't heard about??
0
1
0
0
Open post
Replying to
@mycotropic@beige.party @biomemetic@infosec.exchange @DaveMWilburn@infosec.exchange I can prove it's mine, but I think I can disable it if I get close enough
0
0
0
0
Open post
Open post
Replying to
@shadownetworks@infosec.exchange @jerry@infosec.exchange I dutifully keep my long random password in the same vault as my TOTP
0
1
0
0
Open post
RE: https://mastodon.social/@fesshole/117291791643058548
When I was a kid, before I even had a computer, I used to take out programming books. One time that accused me of ruining the CD in the back and said I'd have to pay the people of the book. I simply never went back to a library
Open quoted post
Quoting
I work at a library that still issues fines to kids and teens for late books. I don't fine them. Because it's ridiculous to give a child a negative experience of books, & equally ridiculous to punish students for working hard. I always make the fines disappear from their account.
Open quoted post 0
0
0
0
Open post
Open post