Remote
Kenton Riley
@clueax@infosec.exchange
mastodon 4.8.0-alpha.3+glitchLouisvillian, former submariner.
Infosec for both work & hobby.
Atheist son of a Methodist minister.
Follower of Wheaton's Law.
Furbaby daddy.
He/him.
I've got some stories to tell. Someday, I might just do that.
64 Followers
255 Following
19 Posts
Joined November 05, 2022
Replying to
@jschauma@mstdn.social you get me. Got about 4 years left, depending on how hard the economy tanks & destroys my savings.
Use Copilot, they said. It'll save you so much time, they said.
I'm just trying to avoid copy-pasting info for each of the 570 July Microsoft CVEs into an Excel file. Seems like something that should be right in Copilot's wheelhouse, right? Only Microsoft tools, only Microsoft websites, only Microsoft vulnerabilities. I even did the first one as an example for it to follow.
Admittedly, my follow-up prompts in this case were snarky as hell, but it's been a long day and I'd given up. I can't seem to get Copilot to do much of anything of real value.
I've been eagerly awaiting this #patchtuesday, curious to see if there would be any jump in patches due to #microsoft having access to #anthropic #mythos for over a month, resulting in a flood of vulnerabilities being discovered & dramatic increase in patches released.
That was the worry, right? If Mythos was open to the public we were going to see a massive flood of vulnerabilities being discovered?
Well... MS has had a full patch cycle now with access to the magical AI vulns finding machine, so where is ANY increase in found vulns receiving patches?
April: 167 patch Tuesday vulns, 2 0-days.
May: 120 patch Tuesday vulns, no 0-days.
Replying to
@lowqualityfacts@mstdn.social When you think about it, having a panic attack and hyperventilating is just speed-sighing.
Occasionally there are benefits to living in Kentucky. Made a pretty good haul this week. #bourbon
The DOGE death count is on pace to more than triple the total deaths of Pol Pot's regime by 2030, with a majority of those deaths being children. An estimated 762,000 attributable increased deaths due to starvation, decreased access to medicine, increased conflict, etc. have already occurred. Approximately 500,000 of those are children. Estimated that we could exceed 9M by 2030.
We've had some massive moral failings in our country's history. This is shaping up to be the worst.
https://www.404media.co/doge-cuts-unleashed-a-deadly-wave-of-violence-across-africa-study-finds/
This is the best breakdown of what #MythosAI actual did that I've read so far. There are some actually interesting improvements in finding certain types of vulnerabilities buried under that mountain of fearmongering and marketing hype.
https://www.artificialintelligencemadesimple.com/p/anthropics-claude-mythos-launch-is
Storytime: Back in the day I pre-ordered a Tesla Model 3, and continued to drive it with less and less joy until a certain somebody "tried to hail a cab in a very German way" in front of some fellow fascists. Not my finest decision.
So I sold it and bought a 2016 Porsche Panamera S e-Hybrid off of an auction site for $22,500. Seemed like a good deal at the time.
In less than 2 years, I'd spent over $20,000 on repairs/maintenance (mainly air suspension and carbon ceramic brakes), and knew I had a failing hybrid battery that was going to cost me at least $7,000 to replace (local dealership wanted $40,000+ for OEM replacement). Bottom line: when it worked it was cool, but maintenance costs were killing me. I wanted the fun, but with something I could repair myself.
So I sold that money pit and bought a 2000 Toyota MR2 Spyder. Just registered it last week, but already loving it.
... And today I just realized my 1zz-fe engine is the same one described in the legendary Craigslist Corolla post. https://motorcopia.com/?p=898
Couldn't have picked a cheaper, lower maintenance, more dependable & fun sports car. There's very little to it: About 2200lbs of engine, seats, and just enough sheet metal to hold it all together.
#cars
That's OK. I'll pass.
(link to free Bloomberg article saying Taco Bell is selling $1 lettuce-free enchiritos trying to get customers back.)
https://www.bloomberg.com/news/articles/2026-07-22/taco-bell-offers-1-lettuce-free-enchirito-to-win-back-customers-post-parasite?accessToken=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzb3VyY2UiOiJTdWJzY3JpYmVyR2lmdGVkQXJ0aWNsZSIsImlhdCI6MTc4NDczNzk1MSwiZXhwIjoxNzg1MzQyNzUxLCJhcnRpY2xlSWQiOiJUSUtZWUpUOTZPU1kwMCIsImJjb25uZWN0SWQiOiJBMzBCM0NBRkNCNzY0NzBCQkNERDE0RENDQ0NGRERDQyJ9.3D7jze44-GZfiFEThPCQGOaO6z76ORIBvZG6l6CN4H8
"Your scientists were so preoccupied with whether they COULD, they didn't stop to think if they SHOULD."
#ServiceNow handling a vuln that was disclosed to them (and the eventual breach when they didn't react) like a champ - downplaying and putting notification behind login pages.
When they say "the security issue pertains to customers who are on the Australia platform release or made certain changes to instances on releases prior to Australia", there are two shady things going on.
#1, they're downplaying that EVERYBODY is on "Australia" or prior, because AUSTRALIA IS THE LATEST VERSION.
#2, they're not saying what those "certain configuration changes" on prior versions are, so you don't know if you're vulnerable. Just patch (now that it's available) and trust ServiceNow to tell you if your environment has been breached.
https://thehackernews.com/2026/06/servicenow-flaw-exploited-to-gain.html
Replying to
@noplasticshower@infosec.exchange I'm probably the wrong person to ask for a definitive statement, but seems at least the Weller antique is still around.
Stood in line for a members-only allocation at Wine & More on Shelbyville Rd in Louisville. They had 9 bottles of Weller Antique at $74.99. Had 5 Stagg (not antique) at $83.99, but that was gone by the time I got to pick. 2 tables, get to pick one from each table, pay, then can go back and stand in line for 2 more.
The Forester was purchased at Watch Hill Proper.