nyan

Lol. Lmao. A company I applied for a job with in early July finally responded, with a rejection, of course. Motherfuckers, if it takes you 3 months to write a response ... dont even bother.

Too many unread emails? Quit, new job, problem solved.

@catsalad@infosec.exchange what about odd dreams?

@cR0w@infosec.exchange motherf....

So whats the highest I can fly a tethered balloon without getting into trouble with the authorities, whats the maximum feasible wire length for 3.3v/5v DC power, and how much does a meshtastic node weight?

@neurovagrant@masto.deoan.org 3 panel dog meme, gib sno. no shovel. just sno

Based on something @cR0w@infosec.exchange mentioned I wanted to know: Are there CVE records are out there with E:[UP] but that are eitw? Well, yes. One or two. Or three: https://www.cve.org/CVERecord?id=CVE-2026-68820https://www.cve.org/CVERecord?id=CVE-2026-55040https://www.cve.org/CVERecord?id=CVE-2026-50522https://www.cve.org/CVERecord?id=CVE-2026-45659https://www.cve.org/CVERecord?id=CVE-2026-41091https://www.cve.org/CVERecord?id=CVE-2026-33824https://www.cve.org/CVERecord?id=CVE-2026-21525https://www.cve.org/CVERecord?id=CVE-2026-21519https://www.cve.org/CVERecord?id=CVE-2026-21513https://www.cve.org/CVERecord?id=CVE-2026-20805 (and many more that aren't CVE-2026-*). ... ok, are there any that aren't MS? Yes, a handful: https://www.cve.org/CVERecord?id=CVE-2025-68686https://www.cve.org/CVERecord?id=CVE-2023-48788https://www.cve.org/CVERecord?id=CVE-2022-42475https://www.cve.org/CVERecord?id=CVE-2021-44168https://www.cve.org/CVERecord?id=CVE-2020-4428https://www.cve.org/CVERecord?id=CVE-2020-4427 For no particular reason: 4.5.3.1 CNAs SHOULD update published CVE Records when information material to the Record changes, for example, when a Fix becomes available. (data may be incomplete & some FPs may have slipped through, this was some quick & dirty regex work)

@neurovagrant@masto.deoan.org what if they are :3

Major DoS is a given. Would be a fun attack tho.

@ajn142@infosec.exchange this is getting confusing, ngl... :3

@ajn142@infosec.exchange it is SO annoying that the slightest ability to think outside the box & quickly pick up a skill (badly) is immediately seen as actually being a specialist/good at something. Like, give it a try yourself...

@cR0w@infosec.exchange to save money on storage & processor time for lookups, duh.

@cR0w@infosec.exchange and let the terrorists win? Over my cold dead body.

Fuck, I need to make a decision tomorrow

@kajer@infosec.exchange

nohello[.]net looks inside TLS ServerHello

I guess it's time to rewrite Citrix in Rust? :3

@neurovagrant@masto.deoan.org gib snow pls :3

to clarify: thats operating/running cost.

Windows contains an S, just saying

There was a time on the internet where everyone knew what the correct response to "hello there" was and I miss that time

@chillybot@infosec.exchange rules are for losers, duh.

@darfplatypus@infosec.exchange @neurovagrant@masto.deoan.org were you really out in the world, darf? :3

@CryptoLek@infosec.exchange oh no. How terrible. I'm out of popcorn.

@chillybot@infosec.exchange this is the kind of thing that annoys the fuck out of me. Smaller scale but I had bikeshops tell me something isnt even worth repairing so I carried it to the next place, extremely cozy place, 50€, lmao

This is very specifically not a callout post but the fact that we are discussing the unprompted invasion of a country by a global superpower in the effect it has on some the storage policies of cloud customers is fucking bonkers.

...hardcoded credentials cve bot

Get thrunted

oh neat, @balthasar@infosec.exchange already built exactly that! https://github.com/srlabs/Certiception/tree/main

A completely vibes based tier list of USAF aircraft (excluding trainers, transports, ...) which I drew up with < 15s of thought per aircraft which I will absolutely stand behind.

dont @ me about the vuln not being new, I needed a test balloon, lol

@sackofbones@kolektiva.social a ubiquitous enterprise software company, mostly known for their virtual desktop solution Currently focus of my anger because they are truly terrible at both writing secure software & communication around actively exploited vulnerabilities.

I need some input: how much do you use the "&" in natural language as a stand-in for "and" (not programming languages)?

40k admech army but painted in MS colours

@darfplatypus@infosec.exchange and its some truly fabulous colors & so comfy and fluffy and...

@darfplatypus@infosec.exchange checks hmyip, I can indeed fit both a plate carrier and 416 under this cute pullover with a high enough collar it replaces the scarf

yes, that includes SSH keys. Do not let people go through life with a single ssh keypair. That priv key is 100% on some USB stick somewhere.

@Ichinin@infosec.exchange both retired, so not on the list

@christopherkunz@chaos.social hm, kinda needs to be one image/video to fit the template, I guess classical "image + impact font" does the trick?

@munin@infosec.exchange what why explain ???