Remote
Sharkfie 
@sharkfie@infosec.exchange
mastodon 4.8.0-alpha.3+glitchComputer nerd. Reverse engineering, OS internals, programming, malware analysis (I am bad at all of these).
My opinions are very cool they can be yours too :3
59 Followers
167 Following
50 Posts
Joined April 30, 2026
Replying to
@wdormann@infosec.exchange
Microsoft has now fully remediated the issue, including eliminating the Cosmos Master Key
okay but what was it for? I'd never assume bad intentions from our favorite company but it's weird
Replying to
@cwebber@social.coop @bremner@mathstodon.xyz I am very impressed by your turn around and deciding not to be left behind
Replying to
@gvwilson@mastodon.social
Atlassian I promise you don't need this much data to learn how to improve your product. A lot of people would be happy to tell you, in detail, maybe even for free.
Replying to
@catsalad@infosec.exchange @cR0w@infosec.exchange let's test this out, what should I hack first
Replying to
@mttaggart@infosec.exchange Eve is fun to read about but I still barely understand the game and have zero desire to play
TIL you can use j and k to scroll toots
Replying to
@cR0w@infosec.exchange @wdormann@infosec.exchange oh yes but do you expect them to do security without it in 2026? no choice really
hehehehePRstunt
Replying to
@cR0w@infosec.exchange @wdormann@infosec.exchange the guardrails on whichever model they were used didn't allow it to help with cybersecurity or even low level programming sometimes
Replying to
@glyph@mastodon.social @mttaggart@infosec.exchange I had okay results using it to build "agents" for blue team stuff and others on my team, but it's the situation where I often wonder if it's the most efficient (and deterministic) way or if a LLM is necessary. I don't think costs are subsided much with AWS etc. but I could be wrong.
I'm not a AI booster, but the incentives and budget are for everyone to use AI so I try to make do.
Replying to
@flyingpenguin@infosec.exchange neat, was hoping you'd write something so I don't have to watch their black hat marketing presentation
I could go for a nap
It is time for my biennial having to relearn SQL phase.
Replying to
Replying to
@Viss@mastodon.social @cR0w@infosec.exchange @theorangetheme@en.osm.town we will be having the containers are not a security boundary for the next decades
Replying to
@theorangetheme@en.osm.town @cR0w@infosec.exchange they are not real sandboxes lol
And when they try, they still end up having comical bugs
https://oddguan.com/blog/second-time-same-sandbox-anthropic-claude-code-network-allowlist-bypass-data-exfiltration/
https://infosec.exchange/@sharkfie/116965094091608683
Replying to
@briankrebs@infosec.exchange how much of a chance of a prompt injection in the invisible text or an image?
Replying to
@cR0w@infosec.exchange @Viss@mastodon.social @ehproque@neopaquita.es @catsalad@infosec.exchange my brand value or something (middle age crisis)
yurislop you only like it because it has gay girls
Setting up some services so I can learn more AWS stuff and practice log analysis… the internet is truly a terrible place.
Replying to
@foone@digipres.club how about a VC backed prayer app https://m.youtube.com/watch?v=82FEuZFiR38
Replying to
@glyph@mastodon.social @mttaggart@infosec.exchange developers don't care about fuzzers or even SAST, don't want their code fuzzed/scanned, but are excited for new AI tools to search for bugs
my literal experience unfortunately
Is it weird to have some sort of synesthesia about programming languages
Replying to
@cR0w@infosec.exchange @catsalad@infosec.exchange is this an insult to my real intelligence
It wasn't too much of a pain to move off 1Password (to bitwarden). I was waiting for the weekend because I expected it to be a lot more work.
With the way things are going in tech I will slowly migrate to KeepPass(XC)...
pspspspspppspspssppsspppspsp