Elektrine lite

← Feed

Bill

Sempf@infosec.exchange

<p>I break software.</p>

Posts

  • View post

    RE: https://infosec.exchange/@ifin/117491650509028642 YAY MOAR!

  • View post

    Looks like I picked the wrong week to stop drinking.

  • View post

    🏈 I had no idea that Utah was running a dual quarterback system, and one is a righty and one is a lefty. This might be a fun game to watch. #cfb

  • View post

    Where am I? Wrong answers only.

  • View post

    The Economist appears to have woken up this morning, checked their field of fucks, and determined it was, indeed, barren. #ai #economics

  • View post

    OK, I&#39;ll admit, Burp AT is pretty fucking awesome at its job.

  • View post

    Help me @ai6yr@m.ai6yr.org! You&#39;re my only hope!

  • View post

    I am beginning to understand how AI is fueled.

  • View post

    In my continuing effort to make AI into a usable tool, I told it I don&#39;t care for connectors, because I don&#39;t trust that my context will be interpreted correctly. The response sorta surprised me: &quot;Fair enough. That control-then-trust approach fits your line of work anyway. Scope defines what touches what.&quot;

  • View post

    My daughter doing the Disney Princess thing again. Just came right to her and hung out.

  • View post

    So, busier than snot here. Anything new happening online?

  • View post

    Everyone has their own schedules and stuff, but I truly appreciate @zackwhittaker@mastodon.social&#39;s &quot;This Week in Security&quot; hitting my inbox around noon or so on Sunday, right when I&#39;m starting to think, &quot;Okay, I need to start clearing up my head for next week and getting ready for what I have to face.&quot; It&#39;s just well-timed for me.

  • View post

    I just make Kung Pao chicken, and it is awesome.

  • View post

    @emarktaylor.bsky.social lol @ &quot;looked a little CFL.&quot;

  • View post

    Well, I finally ran my CLI out of tokens and forced a compaction.

  • View post

    Looks like Clemson watched OSU/Texas. #cfb

  • View post

    What&#39;s the current security industry thinking on public-facing password-protected FTP servers? Is there any new thought on that? Any &quot;don&#39;t do that, replace it with this&quot;? Last time I dealt with this, SFTP was the answer, or just not doing it that way? Anything new is news to me, and I&#39;d love to hear it.

  • View post

    So I think LLM CLIs do an awful job of building front ends. Web sites, windows apps, mobile, whatever. They are terrible. You know what it is pretty good at, if you have it set up right? Data access layers. It&#39;s about as deterministic as it gets. I&#39;m sure it made mistakes and I&#39;ll cuss and swear but 5700 lines of Go in 12 minutes is faster that I would have written it. (TBH I probably would have written a tool to generate it from the data dictionary in good old fashioned Perl....

  • View post

    This is fantastic: malware that uses MQTT for command and control. I looked into MQTT for a side project that never went anywhere, it&#39;s well thought out. https://securityaffairs.com/199205/malware/bambootoken-the-malware-that-speaks-mqtt-to-stay-under-the-radar.html #malware #c2

  • View post

    So, Flock cameras, right? You are telling me that they provide encryption at rest for the queued videos, using a key stored on the device? Lemme guess - vibe coded?

  • View post

    Wow Oklahoma State didn&#39;t beat Oregon, they dominated them. #cfb

  • View post

    I love this photo.

  • View post

    Woah wtf Michigan??? #B1G #cfb

  • View post

  • View post

    @Viss@mastodon.social @cR0w@infosec.exchange

  • View post

    You can&#39;t just ask nicely for a model not not code path traversal into your app. https://www.darkreading.com/cyber-risk/model-knowing-rules-is-not-security-control #vibecoding #controls

  • View post

    When I hit my blogroll at night, there are usually around 50 infosec stories on weekdays, 10 on weekends. Unless someone clears the Full Disclosure queue. Then 75. If I spin up and the insect roll is mid 70s I always think &quot;whelp, someone pushed fd.&quot; High 70s if apple had a patchfest

  • View post

    My kids don&#39;t order paella for their birthday any more, so I made it for mine! The best birthday presents are the ones you get yourself, right?

  • View post

    @Viss@mastodon.social @krypt3ia@infosec.exchange Now it sounds like I am bragging, but CodeMash IS the talks. Then a session time starts the hallways empty. It&#39;s spooky.

  • View post

    Indian buffets rock. In other news, I may never move again