lapt0r

@grey@infosec.exchange the annals of government are so lousy with people who fetishize power itself that there is almost certainly a NIST SP for this.

@cR0w@infosec.exchange I cannot wait for this to get chained with some of the OOB writes and other tomfoolery available in the registry hive https://youtu.be/8mJLe8sZki8

@mttaggart@infosec.exchange @elebertus@eigenmagic.net you nailed it with blaming JavaScript. We have GraphQL due to Facebook's megasuperobjects in the data layer and the frontend people wanting a BFF that will give them just the two rows they need for a message toast.

@revk @TerrorBite @strypey @Kir @kimcrawley @JessMahler let's just say there are some Rich People Hotels in Tahoe that probably should have paid more for their Mifare deployment.

@TerrorBite @strypey @Kir @kimcrawley @JessMahler there are four star hotels using unencrypted or improperly deployed Mifare Classics/Ultralights

@a_signalcheck@infosec.exchange this was always going to happen, unfortunately. Reactionary busybodies with money were ALWAYS going to wait for companies building these systems to need money and then "offer a generous amount" to get their hands on it. Same deal with 23&Me - that data was ALWAYS gonna get sold to eugenicists/racists/etc. It's really unfortunate that surveillance capitalism was allowed to flourish, because a lot of this data collection for personal use is actually super valuable. You just can't depend on it not leaving your control unless you build it yourself.

@hell@defcon.social what's wrong with NPM's model? leftpad. End of transmission

@0x00string@infosec.exchange honestly, maybe we should switch strategies. This still renders it inoperable, is trivially removable, and as long as you use twine or a rubber band it's not even necessarily defacement because there are no special tools required to return it to the previous operating state. They're privately owned, so flyer laws may not protect them. They can gin up "replacement cost" to felony you, but you have a pretty good absurdist defense if you get nabbed tying cat butthole pictures to Flock lenses

@Viss@mastodon.social @voltagex@aus.social I have learned that lots of people cheap out on doorkings without rolling codes and just because mifare ultralights can do encrypted keys doesn't mean they do encrypted keys

@Lightfighter@infosec.exchange somebody keep an eye out for an improperly decommed Tahoe from Texas in a couple years

Finally getting the hole in my yard filled, trench and ground rods were approved so I can finally do infill

Had a leggy neon (and silver stripe, and manjula, and....) so I chopped em all up into two segment lengths and threw em in water in literal garbage (old coffee cups) and I have active buds on....all of them I'm going to need to build a home automation system just to stay on top of watering

@0xabad1dea yep, my spouse is currently dealing with Border Collie Ennui because MY HUMAN is not home

@0x00string@infosec.exchange it's true the local library has no browsing rules and free printing Someone could just tape goatse printouts over all the lenses

@mttaggart@infosec.exchange browser extension development and security practices writ large are stuck in 1995 I stg

If you live in a Red Area of the US, you should DEFINITELY ramp up your hand washing routine. Alcohol doesn't kill cyclospora and based on an informal survey of ~3000 total miles of road trip from Washington to New Mexico and back, a plurality of redhat people will nuke a rest stop toilet and leave the restroom without washing their hands AT ALL and the remainder run their hands under water for < 10 secs and call it good. This was in 2022. I'm SURE hand washing is trending down, not up. Like, it's not even just redhats, most men in America apparently don't wash their hands properly. WASH. YOUR. HANDS.

@ramsey@phpc.social @JessTheUnstill@infosec.exchange like, but why JVM requirements? Why else add an entirely new class of language nuance and footguns

@dragonfrog @cykonot @strypey @Kir @kimcrawley @JessMahler Sure can Sure can 60 bit Keeloq is pretty safe from Flippers

@jaykuo@universeodon.com state public servants (the rank and file folks who keep the wheels turning) are largely good at their jobs across the country, even if their legislative bosses are idiots and their personal voting habits are abhorrent. "Honest hard work" is a load-bearing pillar of conservative thought in the US. Are some of them going to do tribalist bullshit to help their team win? Yes. Are most of them still going to try to do their assigned job to the best of their ability? Also yes.

The president of the United States is a punk-ass bitch and if you voted for him, fuck you. Conservative immigration policy is un-American and if you like it, fuck you. Cops killing people in the streets is literally part of why we handed England an L (with the enthusiastic help of France) in 1776 and if you like how America does policing, fuck you. Religious law powers some of the most regressive, authoritarian regimes on earth, and if you want that, fuck you. If queer people, trans people, furries, etc. make you feel icky, that's a skill issue and you need to git gud and it's none of your damn business anyway. Also, fuck you. Cryptocurrency is stupid and wholly captured by the people who ruined fiat currency. If you like Kalshi, fuck you. If you feel personally attacked by any of these statements, GOOD. You should feel GREAT SHAME. America belongs to me and people like me, NOT YOU. You just live here.

Will be in Vegas for hacker summer camp from the 4th through the 9th. Mostly going to be trying to see network folks while I'm there - catch me around AI/AppSec/car hacking villages, or the Tinfoil Hat Contest. I will have a bag with a blue Labubu in a DEFCON shirt (sorry, those were a limited run and I don't have time to do one this year).

@DarcMoughty manicured lawns are white supremacist (impossible perfection standard) and fascist (boring uniformity) on top of being a gigantic waste of time, water, and energy. I'm gonna harvest my dandelion seeds specifically to seedbomb Republican lawns.

@redsad@ohai.social yoink

@cR0w@infosec.exchange NGL I'm tempted to see if my mechanic wants another apprentice who's willing to work on ancient ass American iron

What's the best "vaporize me from the internet" strategy these days? I'd ask Google but...you know. My propellant stockpile is approaching escape velocity and I might actually be able to run into the (tropical) woods never to be seen again in the next few years.

@amcooper@toot.cat @redcrew@mstdn.social @ClimateJenny@biodiversity.social @meganL@mas.to +1 hellstrip learned from my (SoCal raised gardener) mother

@btrinen@social.seattle.wa.us yeah this checks out

@MFennVT@mastodon.world @fesshole@mastodon.social the next person who owns my house is going to have to deal with generations of scrub jays expecting peanuts from Hat Man

@Viss@mastodon.social @voltagex@aus.social you think a device would do that? Just go and lie about what it is?

If Count Binface secures a parliament seat, clearly Earth hungers for intergalactic marauder leadership, and Blothar the Berserker should be the next president of the United States.

@mttaggart@infosec.exchange @elebertus@eigenmagic.net also Facebook has the reference graphql implementation and even though all of the public docs and most OSS projects are JSON all the way down, theirs is form encoded. It's super weird.

@krypt3ia@infosec.exchange our troops must have the biggest strongest peepees according to Hegseth's toddler-brain view of the world

My $50 thrifted HP finally made it into the garage