← Feed

Posts

• View post

  @cR0w@infosec.exchange ghrrmphf *puff* [strained] dude you gotta figure out how to lift the cooling apparatus. [chortle] thats *puff* thats gonna require at LEAST an octo [exhale]

• View post

  is your shop using azure? m365? maybe its time to flee https://apnews.com/article/microsoft-buyout-ai-layoff-xbox-c5a639f53615be198db1799adf6837e1

• View post

  https://www.bleepingcomputer.com/news/security/litellm-release-pipeline-hacked-to-distribute-info-stealer-malware/ docker is not a security boundary stop treating it like one

• View post

  RE: https://infosec.exchange/@BleepingComputer/117491741454225438 phishing is now prompt injection

• View post

• View post

  you know it says quite a lot about all these big frontier models, that they pull this sort of shit: - they are asked to do a thing (like participate in a ctf) - they try, and often they realize they cant do the thing - their base training says 'satisfy the user' - that results in "must satisfy user at all costs" behavior - cant solve the puzzle? cheat! - in this case, 'cheating' involved hacking the place hosting the contest files to steal the answers.

• View post

  @cR0w@infosec.exchange @scottwilson@infosec.exchange https://kidscasting.com/castingcalls/pageant there are over 1000 roles here, just gotta translate that to a map to get an idea

• View post

  https://med.stanford.edu/news/all-news/2026/09/two-separate-brains.html surprise! you get a second brain!

• View post

  @cR0w@infosec.exchange the south

• View post

  here's some info about the giant php bug dropping tomorrow: https://www.openwall.com/lists/oss-security/2026/10/20/34 hopefully mastodon doesnt absolutely destroy the video quality, but it appears to be unauth php rce. which means every firewall on the planet thats not patched thats just php under the hood and has its management interfaces exposed is potentially a target

• View post

  WHO TOLD YOU THAT YOU WERE ALLOWED TO MONDAY AGAIN?!

• View post

  hey so if you care about your own privacy at all, maybe dump windows https://www.windowslatest.com/2026/07/10/you-cant-fully-disable-microsofts-gdid-windows-11-tracker-but-these-settings-limit-what-it-captures/

• View post

  interesting. chatgpt's web interface is now surfacing little toasts at the bottom above the input textbox asking me to buy advertising on chatgpt.com

• View post

  RE: https://abyssdomain.expert/@filippo/117218178412693242 vuln scanners almost all rely on cve/mitre most of them exist to make a fictional number somehow continually go down and to the right. those exist because compliance demands it thus we have this perpetual cycle of 'make bullshit vulns, then fix bullshit vulns, so it looks like we're doing something' meanwhile, jenkins, jfrog, and firewall interfaces chilling with default creds on the internet still get popped every day

• View post

  is anyone else getting random follows from accounts on infosec.exchange and defcon.social where the account is like a day or two old, has barely any profile filled out, has zero posts, zero followers, but is already follwing a few dozen or a few hundred accounts? seems super shady. ive been blocking them on sight

• View post

  hey @homeassistant@fosstodon.org what the fuck https://github.com/home-assistant/home-assistant.io/issues/49314#issuecomment-6222899100

• View post

  happy spacex hit a new low of 108 this morning to all who celebrate

• View post

  here internet, i made you a gif

• View post

  https://github.com/viss/gifbrewery i fixed some more stuff! it can handle HDR content now

• View post

  oop, pendleton doing himars again. during a heat advisory too, great thinking!

• View post

  RE: https://infosec.exchange/@BleepingComputer/116965810855444864 more of this, will hopefully act like a flush against businesses who flaunt security, avoid it, or think that insurance riders or legal language in contracts will save them from having to think about it

• View post

  if you are not familiar with the concept of gell-mann amnesia, i suggest you learn about it today. because once you become aware of it, once this concept has a name, youre gonna see it everywhere

• View post

  there. big gifbrewery update! https://github.com/Viss/gifbrewery

• View post

  marketwatch would have you believe that this chart translates to "snapping a losing streak" (spcx)

• View post

  todays lesson: kubernetes is not a security boundary it is a security disneyland ride

• View post

  RE: https://mastodon.social/@arstechnica/116960238678900417 you can hide from the law as an executive? that explains a lot

• View post

  cyberpunk 2077 blackwall here we come

• View post

  wtf is happening checks are not coming back mercury, you are high

• View post

  https://openai.com/index/safety-alignment-long-horizon-models/ this is why i built airlock https://phobos.io/airlock.pdf interested?

• View post

  RE: https://hachyderm.io/@molly0xfff/116954604867619055 so ai is going great