← Feed

Posts

• View post

  Please be sure you don’t take your eye off the big node.js/brotli vulnerability while php2shell was sucking all the air from the room. https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

• View post

  These account takeovers are making my hair fall out. Or rather, it would fall out if I had any left.

• View post

  Ohh, we just had an old account with 2FA (so password not reset) apparently hijacked and used to send spam (a different kind I hadn’t seen before). That is a good indication some service that uses auth tokens got hit. Now to figure out which

• View post

  RE: https://infosec.exchange/@jerry/117457041484080186 To be clear, this ONLY helps with accounts that haven't been accessed in the past 6 months. That means you, who are reading this, could have your mastodon/fedi account taken over if the password you use has been stolen and do not have MFA enabled. Please, make sure you use a unique password here and everywhere and enable MFA. I know it's a PITA, but it makes a difference. thanks

• View post

  There are major account take-over problems happening right now on mastodon instances - all appearances are that the actor is using stolen passwords, probably from malware running on desktops. I've suspended hundreds of compromised accounts over the past 48 hours, but only two on mine. If you run a mastodon instance, here is a postgres query I use to randomize the passwords of accounts that have been inactive for 6 months or more. It also removes logged in sessions. This doesn't loc...

• View post

  Lots of account take overs today resulting in posts with malicious links tagging dozens of accounts. gird your passwords, my friends. turn on 2fa. don't click on sketchy links.

• View post

  said on a meeting today: "This is not a Festivus celebration. We do not need an airing of grievances"

• View post

  This explains a lot about what I’ve been experiencing with combatting scrapers. https://blog.includesecurity.com/2026/06/the-smart-tv-in-your-livingroom-is-a-node-in-the-aiscraping-economy/

• View post

  A boy can dream... https://www.theregister.com/systems/2026/09/23/an-epyc-trip-to-venice-everything-we-do-and-dont-know-about-amds-256-core-monster-chip/5298614

• View post

  I’m seeing more than normal number of account takeovers. Please don’t click on telegram links and for the love of $deity, please use 2fa.

• View post

  ok, now I'm going to need y'all to get off my lawn.

• View post

  My promotion just came through. s/parent/grandparent

• View post

  Today's daily defsec brief: https://www.youtube.com/watch?v=3vMKpXJvKVQ

• View post

  Today’s daily DefSec brief: https://youtu.be/5El_S-0NVdU?is=GhaerHdneojCqKOe

• View post

  I hope Asia and Europe take good care of the sun while it’s gone. I am very fond of it and will be pretty mad if they break it while it’s over there.

• View post

  I’m sure it’s complete coincidental that I get a multi-gigabit bandwidth spike warning shortly after I reject certain signups. Also LOOK AT THIS SUNSET

• View post

  This poor guy down there is going on hour 13 of using an hand held angle grinder to prep the ground under the magic mushroom to get a new floor coating.

• View post

  I managed to get this recorded and posted before leaving for the beach. Daily DefSec Brief: https://youtu.be/GHYXM5kqWmE?is=wUKy51GumuraEBi_ Next time should have a better view in the background 🙃

• View post

  Today's daily defsec brief: https://www.youtube.com/watch?v=xWOMCv0Tcd0

• View post

  Apropos of nothing in particular

• View post

  Is anyone aware of work being done to jailbreak DJI cameras? Totally asking for a friend and not for me

• View post

  Today's daily defsec brief: https://www.youtube.com/watch?v=LsOsw2OlxSw

• View post

  Today's daily defsec brief: https://www.youtube.com/watch?v=Xnm4wbQpvVM

• View post

  I just watched a TV segment on the most highly paid podcasters. I was very disappointed to see that for the 15th year in a row, I am not on the list 😢

• View post

  Today's daily defsec brief: https://www.youtube.com/watch?v=KF-1PYAJ_qI #clankers

• View post

  Anthropic: “our models went rogue and hacked companies way before that OTHER company’s models. And it was way worse and way better at the same time. In completely unrelated news, we are IPOing soon. Don’t forget! XOXO” https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals

• View post

  Just a reminder that the costs of hosting is spiraling so if you love the fediverse, please consider supporting your instance if you can afford to do so and your instance accepts support. And my sincere thanks to the infosec donors that make our part of the fediverse possible. :blobheartcat:

• View post

  Today's daily defsec brief: https://www.youtube.com/watch?v=eK3Ii6L-fVU

• View post

  Today's defsec brief: https://www.youtube.com/watch?v=MGDX5SkL8zQ

• View post

  Today's daily defsec brief: https://www.youtube.com/watch?v=8FpNoTUOLKY