ISO8601

Public Key

npub1f5x49q505crdtpfzwtfqhe87sf2chdyv7vqefmv3yfuj7c4znv4q0f0xn3

NIP-05 Address

[email protected]

Profile Code

nprofile1qqsy6r2js286vpk4s53895stunlgy4vtkjx0xqv5akgjy7f0v23fk2spz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qp0an48

Publishing to

relay.ditto.pub

Author Public Key

npub1f5x49q505crdtpfzwtfqhe87sf2chdyv7vqefmv3yfuj7c4znv4q0f0xn3

Show more details

Last Notes

2026-09-21 19:17:17 GMT

If an infostealer manages to acquire FortiClient VPN session info, is it possible to prevent that from being used? It seems like the Fortigate accepts the session & never bothers to check for Entra session revocation.

2026-06-04 08:12:33 GMT

copilot.fun is domain which microsoft actually owns & uses 😩

2025-11-18 12:06:16 GMT

- reply

@nprofile…scce supplier management portal down
try to find origin server on Shodan (shodan down, uses CF)
try to find origin server on Censys (censys down, uses CF)
well, fuck

2025-11-11 20:50:49 GMT

"The government says £10million will now be spent on AI to help staff in prisons with sentence calculations"
?!?
https://cyberplace.social/system/media_attachments/files/115/533/035/528/534/089/original/1e0fd18b2d95e86b.mp4

2025-11-04 17:23:08 GMT

Infosec vendors with low-paid oursourced staff. What could possibly go wrong.
https://www.reddit.com/r/paloaltonetworks/comments/1moi0mi/why_palo_altos_tac_glory_days_are_over_and_why_it/

2025-08-13 12:14:15 GMT

- reply

@nprofile…5lc3 ~beginning of the year Youtube started to require a login for my org's Azure egress IP.
IP context services seem to be downgrading the reputation of Azure's ASNs. Flagging as retail VPN etc.

2025-05-24 17:27:47 GMT

- reply

@nprofile…5lc3 4.3GB cumulative Windows updates, MS developers venting at shitty AI code, Nvidia drivers getting far more buggy, ...
Feels like like AI engorgement and codeshittification is now in full swing.

2025-05-23 18:24:07 GMT

- reply

@nprofile…5lc3 e-paper price labels are apparently extremely common in mainland Europe. The UK is extremely slow to adopt things like this.
*In theory*, during an incident, the labels would remain as-is until they receive a new price. So TAs would specifically need to target the pricing database prior to wiping.

2025-05-13 08:45:34 GMT

- reply

@nprofile…5lc3 Dunno why most companies even need to store DoB.
"Are you >18?" would be fine, surely.
Same principle for utility companies.

2025-01-07 22:28:13 GMT

Could someone who works at Microsoft please make it so that extended message traces work basically straight away, rather than waiting several hours? It would help a lot. A LOT.
Even better, make it so that I don't need to include such things when reporting a phishing campaign in a support case which is failing to put phishing URLs into EmailUrlInfo (or the explorer UI) because either 1) there are lots of URLs (maybe>10), or 2) the URL starts with unicode at the beginning.
Ta

2024-07-19 07:49:13 GMT

- reply

@npub17lg…9uux New order to Vanguard subs: "if Radio 4 is offline, please check a couple of other other radio stations to see whether it's an MS or AV outage. Ta."

2023-12-15 14:37:55 GMT

- reply

@npub17lg…9uux Seems a bit weird that companies can do this sort of thing at minimal cost, and nobody appears to get lifetime directorship bans, organised crime shutdowns by the NCA etc.

2023-11-15 10:38:43 GMT

- reply

@npub17lg…9uux Consider setting up a suitably-named company and sending press releases to media outlets. Propper professional like. It's presumably how other people (inc lobbying/reputation management companies) get media eyeballs on things.

2023-07-19 14:06:51 GMT

- reply

@npub17lg…9uux Now I'm starting to think that MSTIC etc probably maintains a list of of devices where telemetry is blocked/disabled, to improve the signal/noise ratio for identifying devices which threat actors might be using. Presumably it would eliminate 99.9% of the uninteresting endpoints.