Security Adviser. Architect. Technical Auditor. Speaker. Author.
I specialise in organisational and operational security. I help people do better.
#Infosec #ADHD #Privacy #MediaPreservation
GNU Terry Pratchett
Public Key
npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Profile Code
nprofile1qqsrlz3s5dpxye27367zce98qk3zkq8qdr89hs950h2wkjzd93g5q9qpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43q9zry5s
Show more details
Published at
2026-10-16T21:18:19Z Event JSON
{
"id": "d8aef112e137d7663f82a3cec77a4ced90413276c25da2d7713cab8ed8a40c1f" ,
"pubkey": "3f8a30a34262655e8ebc2c64a705a22b00e068ce5bc0b47dd4eb484d2c514014" ,
"created_at": 1792185499 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://infosec.exchange/users/SecurityWriter",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"Security Writer\",\"about\":\"Security Adviser. Architect. Technical Auditor. Speaker. Author.\\n\u2028\u2029I specialise in organisational and operational security. I help people do better. \u2029\u2029#Infosec #ADHD #Privacy #MediaPreservation\u2028\u2029GNU Terry Pratchett\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/324/035/336/557/464/original/0c179bce7d8de002.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/324/035/336/557/464/original/4d8f860f40b2e203.png\",\"nip05\":\"[email protected] \",\"fields\":[[\"GitHub\",\"https://github.com/securitywriter\"],[\"Threads\",\"https://www.threads.net/@securitywriter\"],[\"Locale/Language\",\"🇬🇧🇯🇵🇮🇪🇪🇺\"]]}" ,
"sig": "47f50dd84b64b933f645c78bdcc40f895051b22cf4b967ae9b9e5dc7e8af350e81e25e4d811e700ed1c9473fd5860846e0b5f32025738480499d7bc85d5f68dc"
}
Last Notes npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Shame, that. Anyway… https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/443/815/209/284/363/original/53822f1433711a70.jpeg npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…rh4q subterranean now. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Sigh. It’s exhausting isn’t it? https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/443/295/715/155/798/original/72fd2aeb4e779d9d.jpeg npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Good lord, I hate security conferences these days. Save me. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I’ve just witnessed a horrific LinkedIn trend in person. There’s an increasing contingent of cultists saying: “We should refer to the field of IT as ‘AI’ because that’s what the future is” I’m not sure what podcast they heard it on, but some guy just said to me: “You work in AI, don’t you?” Um… no? Security and IT “Yeah, AI” Stop the planet, I’m disembarking. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…z3lm just whatever the web version is presenting right now I think npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Has ChatGPT just got reaaaaaly dumb in the last week or so? The already painful testing I’ve been doing makes last week’s version look like superintelligence npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…5876 @nprofile…5pam Ill probably leave this exchange here, as I won’t be able to add anything of value-and I don’t want to waste your time arguing with strangers on the internet. In my defence, I’m deeply involved with neurodiversity support services, and interpersonal exchanges are one of the most difficult across the board. Language matters deeply, but our own output is not always screened in the way we micro-analyse others’. This is particularly prevalent with those with low inhibition control or impulsivity. Online or via a messaging app, this is amplified. I’m not being defensive, just as I’ve not attacked anyone. The conversation is important, and I’m not straw-manning or deflecting, but perhaps I can occasionally be militant in terms of voicing my views. My tone and intent was clearly not received as intended, and that is a learning point for me. I harbour no ill will to either of you, and will continue to be deeply interested in the work you do. I also know whom I replied to, and the material you reference, as I own it, a great read. Perhaps as we haven’t had prior direct exchanges, my tone was mistaken away from the typically jovial/cynical/stating-the-obvious nature it normally holds. Arrogance on my part perhaps, but also a testament to circles I’d never really drifted into on the fediverse more than observing from afar. I’m passionate about what I do, and often just want to jump into conversation with like-mind folks. I don’t think that hard and fast rules about how to interact with a thread are particularly useful to someone hard-wired to resisting instruction, and pathologically forgetful, but I’ll take your point, and try to do better. No harm intended, and I’m not here to burn bridges, only build them. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Appreciate my cute new Daruma doll. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/438/794/581/860/369/original/3f5ad63480e74341.jpeg npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…5876 @nprofile…5pam I wouldn’t want to add to that, and I am very supportive of your work. I will say, it gives off very mixed messages if a post on a public forum carries rules of which way is the acceptable way to reply to it, especially for neurodivergent folks. I’m used to this, but I could have worded my allegedly supportive message of your position better, maybe even braved a quote tweet. I’m not here to argue, and you leaving would be a significant loss. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…5876 @nprofile…5pam possibly, certainly wasn’t the intent, but there’s a lot of it around. I still find quote toots a bit ‘twittery’ in that they’re used to insidiously inject an agenda or narrative, rather than add to the current discussion thread. Maybe it’s just me. Perhaps I should adjust that perception somewhat and embrace it. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…5876 @nprofile…5pam forgive me, my rant wasn’t at you, it was just *shakes fist at clouds* npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…5876 @nprofile…5pam once again promoting my campaign to stop calling it ‘hallucination’ and start calling it what it is, ‘erroneous output.’ What software error rate is acceptable? 0.1% is a good starting point, 1% a bright red line for a PoC, negligence in the real world. 10%? Don’t be silly. 20%? It’s just working by accident at this point. Real world tests put the average at 45% last month. Correct output just over half the time. A coin flip. The starry-eyed, hopeful, technology-loving childhood me did not want any of this. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer What are you guys using for Architecture-as-Code these days? npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…l9z3 https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/432/542/948/635/661/original/0099004b77444799.jpeg npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Gonna defrag this SSD to make sure the transistors are aligned. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…44dh @nprofile…vs6a oh good… there’s more https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/414/928/573/653/380/original/c57b5d826e4cf65d.jpeg npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Sooo question on age restriction on Apple devices. Non-age-verified people will get blocklist messages on any 18+ website on, right? This also happens if you have custom DNS, DoH/DoT, or VPN with DNS resolution on the other end... So Apple intercepts the DNS request, checks against their blocklists before anything else happens? npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…a8rk a whole Gallon (US) allegedly. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…a8rk vapours. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Don’t worry you’re getting $3 fuel any time now. 🙄 npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Not sure why I watch these pressers. They talk about financial literacy, anyone with any level of financial literacy can see every number is a lie. Not even sure how this is legal, they’re even giving advice. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…s0vs I mean… it probably doesn’t matter. I have 50kg on him, 30 years of martial arts training, and a stint in semi pro boxing. Oh, and I’m really, really angry. 😂 npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer And if I reaaaaly have to. I’ll wear 16oz gloves, with 2 minute rounds. Only if you can’t make it though. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer If Hunter Biden needs a substitute for his cage match with the Trump kids, I’ll reluctantly stand in. Honestly, it’s no problem at all. No really, I insist. Last minute injury, food poisoning, flu. I’m your guy, if I really have to be. Don’t forget I offered. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Boost for echo effect npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Louis Theroux’s ‘Inside the Manosphere’ was an exceptional demonstration in how someone humble and secure within themselves and their position can demolish someone’s twisted world view in seconds. Do your research and ask the right questions in the right way and without fear, and anything built on sand will crumble. Watching these ‘alpha males’ shrink sustains me. I think my favourite line is the ‘gotcha’ from one of the asshats “how’s your mate Jimmy Saville?” to which Theroux retorts “I helped expose him while he was still alive. He’s dead now”. Referring to the investigative journalism he did in 2000 around the claims of pedophilia, while Saville was *still employed* by the BBC. Claims that weren’t fully investigated until nearly 15 years later. Masterclass. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer How’s my echo chamber doing this fine evening? npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer We can all agree that the heat death of the universe is not conducive to life on Earth. Welcome to my echo chamber. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Ok this is interesting. The desktop app has no such restrictions, only mobile. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Valve: “We need a credit card on file to prove you’re 18” Me: “My account is 23 years old” Valve: “That just proves your account is old” Me: “A credit card just proves you know someone with a credit card” npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…2l00 I agree that they've made it simple, but this information will be exposed to websites in the future, and we are unlikely to get a say in it. We also don't know what information will be provided in that exchange. Is it a yes/no on the 18+ question, or is it yes/no/age + geographic location to 'allow compliance' with different? All of these aid in fingerprinting, removing privacy online, allowing targeted advertising, and data collection for targeting political dissent and minorities. It's just another weapon to use against us. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I won’t be verifying that I’m over 18 on iOS 26.4, and as of yet, I haven’t seen any downside to not doing so. I do think this is going to backfire though. If it’s age restricted apps I can’t download, surely I’d just use the website instead. I hear that the intent is to utilise some sort of age verification flag, but I can’t see it being implemented at all. Put it this way… from 2016 to 2026, following GDPR mandates for handling visitors to websites only around 15% of public facing websites are GDPR ‘compliant’. Good luck getting age verification uptake. You can’t block by default, the internet would implode. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer oh we really are in good hands. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/278/551/587/120/811/original/b142048f5fe60a96.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Oh. Hold on. The agent is typing. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer "The Best Conversational AI Platform for Business" We're in good hands. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer it's this dogshit - https://www.liveperson.com npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I've been 'transferred' three times now. I am not entirely sure these people are actually people. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Stranger, still. I've not provided any identification information. So there's nothing the bot will be able to do anyway. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Very odd interaction with Nationwide Building Society today: Almost like the support staff have accidentally sent the message direct to me, instead of their AI agent. I hate this timeline. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/278/477/246/040/830/original/8739ea1491537a24.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Race weekend, no extra sleep for me. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer You’re on mute. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…rh4q new pics up if interested. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/426/195/335/994/original/bbaebde3f6bfe8d9.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/426/297/846/365/original/f589580e2d650748.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/426/560/703/743/original/b5d2b4223a9b17b8.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/426/719/779/211/original/957a1efbacc16947.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/423/185/891/532/original/5c1ee0be2bbf16db.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/423/352/899/982/original/2ae524d36c12c33d.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/423/457/543/595/original/3b77037b51986eba.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/423/559/521/682/original/c990870535187e33.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Let me share some of my adventures from the weekend with you. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/418/639/475/321/original/f823f69fe9a2f0b4.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/418/819/308/282/original/ddb38dafc2b108d0.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/418/947/827/785/original/8b3affb67b46fe99.png https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/198/419/068/321/498/original/f3719c834863cd3d.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer It’s not going well. Second objective was in a basin with no way out. Spent an hour so far trying to get out. 150m vertical walls aren’t helping npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer In my defence, I can only see out of one eye npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…rh4q I’ll be back soon, ADHD is a wonderful drug. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Ok. I’m finally doing it. After years of false starts, and waiting for the game to be complete before starting it, I’m starting No Man’s Sky afresh. I now realise it may never be finished, and I’ll burn out before seeing all it has to offer, but it is a Herculean effort all round. Maybe I’ll get bored, but it’s worth a shot. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…sh63 ahah! Do you find it as responsive? I think that’s the real defining difference from the “we have that at home” implementations I’ve tried. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I bought the Casio GW-M5610U last week. It’s truly is the only watch you’ll ever need. A great update of the original ‘tough watch’, and some welcome tweaks from the and 5610. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Linux brains… You know how MacOS creates a workspace when you make an app full screen, and you can gesture with three fingers between them… is there a Linux equivalent? It probably has a pretentious name, but I don’t store them in the ol’ melon. Windows’ implementation is terrible. So that’s the baseline. I’ve seen workspaces in Linux for decades now, but it’s been pretty clunky comparatively. I can’t tell you how productive this really simple interaction makes me. Some of it is likely down to the MacBook touchpads being the gold standard, but I do have a Lenovo one that isn’t terrible. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer God damn it. I spend the last two years vetting new cars to buy that come with real TPMS (not that rolling diameter shite) and this is found. It’s a reach, but a fun one. https://www.securityweek.com/researchers-uncover-method-to-track-cars-via-tire-sensors/ npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I’ve been really burned out of modern gaming for a few years now. Sure there’s the odd gem, but there’s a good reason I’ve not been compelled to upgrade my 1080Ti. Arguably the best consumer GPU card ever released, turning 9 years old this month. I’ve been drawn to older, more polished, more mechanically sound games, entirely unphased by the allure of raytracing and more Ks to the screen. This isn’t nostalgia talking. Looking back you can see key points where the artistry and passion of it all met rampant commercialism. I’ve figured it out. It’s the 1997-1998 transition. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer That reminds me. Enterprise tech hack: If you look at your stack, you’ll probably see Dev, Test, QA, Pre-Prod environments. If you delete them, Prod will probably keep running, and you’ll save a shit ton of money. You’ll be promoted in no time. Maybe even knighted. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer While you’re all losing your shit about AI, here’s the real tech agenda unfolding. https://duo.com/docs/identity-verification Drawing straight lines between your identity, online presence, big tech, finance, law enforcement, defence, and government. There’s no conspiracy, here, sit down. But there is a long running effort from tech companies to lobby for an unavoidable techno-authoritarianism which is so, so, marketable to even well meaning Governments. The wider this spreads, the less power privacy focused tools and services matter. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer What better way to end the week than a 7 hour meeting with complete fucking idiots. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer “But they can see them” Neither optical analysis, lidar or surface directed sonar is going to inform the system of a pothole under surface water or ice. The country is wet for 50% of the year. “They can avoid suspected road surfaces” Many roads in the UK are only wide enough for a single car, despite not being one-way. “They can avoid areas with reported potholes” Then you might as well walk. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer In a ditch or abandoned at the side of the road. Day 1. Depending on deployment numbers. Almost certainly by week 2. Just you wait. These people have no clue what car combat awaits an unattended car on UK roads. It’s bad enough in the US. https://www.bbc.co.uk/news/articles/cx2drw12z51o?at_medium=RSS&at_campaign=rss npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer IP stealing machine gets its IP stolen by IP stealing machine. Cries foul play. https://thehackernews.com/2026/02/anthropic-says-chinese-ai-firms-used-16.html npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer How sexy was the Japanese Perfect Dark cover? https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/121/804/531/439/584/original/0b69c27b8e47d030.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Anyone got any intel on the Rafale doing a rather hot pass of the North East of England today? About 1220hrs with transponder off, no support or air wing I could see. Couldn’t get a bearing as I was indoors, but he definitely had places to be, almost certainly subsonic… perhaps 3000ft? #aviation #MilitaryAviation #uk npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Better hit the spin bike. See you 40km. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Up your CTI game by knowing the correct threat actor names for executive briefings. Security isn’t about being right, it’s about being accurate, after all: https://addons.mozilla.org/en-US/firefox/addon/gayint-name-converter/ npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…tuen she’s back. ❤️ npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer “Today I’m definitely going to make time to play with Batocera” *Clicks download* *Website goes down and doesn’t come back up* npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I like how Sony thought to put a weed compartment in the PS2. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Because there’s no data to suggest there’s a problem. As the article clearly says. There is however data to show significant road safety benefits to LED headlights. Except the new Ford Puma. Fuck that car and its skyward pointing headlights. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/096/834/518/655/046/original/b182bc4aacd5fb28.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer They’ve arrested the nonce. I can’t stop laughing. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…44dh bold of you to assume we will be allowed/able to go to surface. Just wait for the people bringing you Patch Tuesday to start running nuclear power plants to MVP 😭 npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer If you’ve not played the Metro games. Their post-apocalyptic currency is bullets. Ours will be RAM. But not the fast stuff, that’s reserved for the things destroying the planet. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer No I won’t learn. I will not proof read my posts before publishing. I am cursed for eternity. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Shit. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/074/103/285/341/018/original/19380abeedf23590.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Does anyone know how to view contents of a directory in Windows transparently, without folders? I just want to see all the files in a flat structure. I’d use smart folders or search on MacOS. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Obviously I jest. But the RAM I put in this machine a couple of years back has tripled in price. I think the drive for putting AI in everything will be short lived if we can’t buy any new devices. 🙄 npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I figured that seeing as memory was getting so cheap a couple of years back, I’d do a round of upgrades now… npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I really hate this new feature in Apple News. Combining news sources and editorialising their headlines to form a narrative. I wonder if the outlets are aware. https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/045/160/774/172/253/original/a12cf561032d6f02.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Why is the PayPal app such an archaic piece of shit? Open > FaceID > Passkey > 2FA EVERY. GOD. DAMN. TIME. And 50% of the time it’ll reset the login process as I switch apps for the 2FA code. Just screams to me that their auth process is fucked somewhere, so they kill sessions to mitigate risk their side. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Not sure what the fuck possessed you when you decided it would be ok to lean on the car I just waxed while you talked to me. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Wife couldn’t remember name of the Navy Seals and called them ‘American Water Animals’. Sorry guys, that’s your name now. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Imagine telling your then-self how bad things would get. You won’t own the game, and you can’t buy the whole game, you can’t play the game offline—or you can, but not for too long—the pedigree will be demolished and reviewers will still laud it The games will use 1000x the resources to run, have no optimisation, with poorer gameplay, worse art styles, and basic features will be overlooked. The games will have abusive gambling mechanics to keep you hooked, instead of being good, and you will need to buy cosmetics with actual money as they’re not unlockable. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Honestly I think SOCOM is one of the most under appreciated video games in the business. Not 4 and the other side characters, I’m talking 1, 2, 3. I think this is the increasingly apparent issue of games chasing realism over authenticity. SOCOM has aged *really* well, and the voice command implementation is not only one of the best, but also the least gimicky I’ve come across… and it works. The recognition is better than pretty much anything I’ve played since. But it’s deeper than that. Your teammates are *good* and they have your back. You don’t worry about getting shot in the back as you sweep rooms, and there’s nothing more satisfying (and efficient) than reeling off commands, seeing them executed, and doing your own piece while you’re at it. And there’s more little details too, like how your teammates won’t run into your arc of fire, or they’ll go prone if you’re crouched for a period. You can go in safety off, but they’ll still defend themselves in a bind or take action to avoid alerting other enemies. It’s such a well rounded package that it’s really sad to see more hasn’t been done with it since. It’s just honest in what it sets out to do. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Finally finished Attack on Titan. Lord, it was difficult. But I managed it. Lazily written. Heavy-handed metaphors and analogies. Unbearable characters. Lost, meandering plot lines. The most egregious exposition filler material I’ve ever encountered. The whole thing is saturated in pseudo-intellectual pretense and unnecessarily convoluted, yet predictable, twists. Save your “oh you didn’t understand the nuance” shtick. I fucking did. It was as subtle as a brick. I am exhausted. I do not know who this show was for. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer A timely reminder that if you have an iPhone (8+) and press the power button and either volume key (think: just squeeze your phone tightly) for a couple of seconds, the phone will vibrate in an unfamiliar way, STOP holding the buttons NOW. It will force you to input the PIN to continue using the phone. *CAUTION* continuing to hold WILL call emergency services. From this screen you can also leave it locked or power it off, or manually call emergency services, depending on your situation and time available to you. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Since reading The Hobbit as a child I’ve had this riddle ingrained in my brain. *Thirty white horses on a red hill* *First they champ* *Then they stamp* *Then they stand still* I never paid much attention to the detail, but last night it dawned on me. *Thirty teeth*. We don’t *have* 30 teeth. We have 32. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Why oh why is my WAN2 up and down like a yoyo? Why can’t you behave like WAN 1 and WAN 3? Why do you need to be like this? npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…6qy0 can’t say I’ve ever heard anyone say this except North Americans, oddly. Makes me twitch. I love the Swedes and Sweden. But then again, I’m just an Irishman living here. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer So secure in your authority you’re going on an immigration visit with a grenade launcher, plate carrier, and gorget. 👊 npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer And look, the Brits can measure some things but not others, so we’re arguably worse in that sense. But we can make tea. :blobeyes: https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/966/435/900/363/522/original/c786c7803cad71f6.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I’ve been pretty scathing of US politics of late. That isn’t reflective of my views of my friends stateside. I have great friends, family, and colleagues there, and they’re as appalled as me. So the judgment isn’t on them. Sure, you can’t measure anything or make tea correctly, but I love you all the same.:blobheartcat: My issues are purely with the behaviours and attitudes on display for all to see. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer The only thing stopping a bad guy with a gun is a good guy with a gun, huh? npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Surprised Pikachu face https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/957/177/216/740/158/original/7b375a11c8a07be3.png npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer Bet y’all didn’t know IKEA were selling Kallax cat bed inserts. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer I don’t need a Lom Geofón. I don’t *need* a Lom Geofón. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…l9z3 me in my teens with full size Mackie PA speakers on each shoulder. Not so much now. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer *20s into opening a new app* “Why not take a moment to rate us on the App Store?” Because I’m not going to make hating your products my entire personality. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer “Are you enjoying this app?” I fucking was until you interrupted me. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…5qj3 the popup doesn’t communicate the risk, as it can’t understand what that looks like organisationally. The developer, in most cases, is not qualified to assess nor manage risk—especially security risk, and certainly wouldn’t be responsible or accountable for that decision… so it’s natural for the ability to make that decision to be removed from them. It’s not personal. The devs I work with can’t run anything locally, anything unsigned or non-inventoried as part of the pipeline SBoM which is checked via SCA, SAST, DAST etc. all pulled from a private repo of hardened containers and screened code. Nothing leaves the container or app that isn’t explicitly allowed. No extensions that dial out. It’s simple stuff. The devs aren’t doing anything differently from the other users. They’re doing their job within defined parameters and tolerances. Maybe if you’re doing low risk stuff or have a wide-open risk apetite, sure, have at it. npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9 Security Writer @nprofile…5qj3 @nprofile…w700 @nprofile…ds0l is there a business need to run the full feature set? Has the risk been appropriately understood and managed? If the scripts and other code are known safe, in a private repo, I’d probably agree. But just downloading and executing anyone’s IDE custom jobs is madness.