scriptjunkie

Find a vuln? Your disclosure options:

1. Exploit it! Plant ransomware, steal cryptocurrency
2. Sell it to a broker. Add "journalist hacked" to the muted words list. Ignorance is bliss
3. Sell to your country's military. Patriotic.
4. Tell people who are affected by disclosing it

If your site takes 15 seconds to load or log in and has 100,000 user visits in a year, then the CEO should be mandated to spend 15*100k seconds, or 17 days in jail next year. Our time is now your time.

I appreciate everyone dropping linux privesc 0days in the current AI renaissance, but to really make it feel like the good ol days someone needs to drop a weaponized pre-auth SMB or RDP RCE. We haven't had a good Windows worm in AGES.

So I read the election files and the main takeaways, aside from a zillion ineligible people registered to vote, are:

• All the PII has probably been breached and
• Voting machines and registration systems have vulns too So states and counties running election related things (but also the rest of you) should do the following:
• Back up data files regularly
• Audit data integrity and implement alerts
• Test out your backups
• Watch out for phishing, re-used passwords, enable MFA
• Watch out for ransomware, patch, least privilege
• Do network segmentation and not once was AI mentioned. Honestly kind of impressed.

"Guys, they told me to delete the incriminating evidence before it got revealed. This is such a good idea, I never would have thought of it. That's why I'm telling you, in this email I'm sending. So smart!"
*Clicks send*

So many browser exploit chains that Pwn2Own is rejecting fully demonstrated submissions.
I'm sure it's a fine time to be browsing the internet.
https://x.com/ggwhyp/status/2053775203256393981

https://copy.fail/
Oh yeah

Why would I spend 25 to get a brand new part when I can spend 35 to get a repair tool for this obscure problem

I'm a steakholder. Add me to your quick syncs.

@computerywar@infosec.exchange In this case, road bikes, for which my maintenance arsenal will continue to expand, because you just never know...

Remember, if all you do is delete random lines of code, you never show up in "git blame"

No! The protocol my botnet uses leaked
https://www.ietf.org/archive/id/draft-meow-mrrp-00.html

I will never understand why airlines prohibit inexpensive ticket holders from buying upgrades or changes. It's free money!

I knew the SPLC could be scummy, but man, that is another level