Hooloovoo, kernel{, }hacker. Building better worlds. Opinions are messages from space. Facts approximate. Photos are square. he/they. 0.9x eng 🚴 :mbta: Ban cars. Sometimes I make portraits of buildings and infrastructure.
Public Key
npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Profile Code
nprofile1qqst440gsy6uhafhyeu4zdqwz4j4ent2dkdfmqve9nec653nf3e9dsqpz4mhxue69uhhyetvv9ujuerfw36x7tnsw43q430qj0
Show more details
Published at
2026-09-03T11:39:36Z Event JSON
{
"id": "899a9d412d9f4f048b1c2c7664e58f79aa211b8c34f48f83c3ea1bf86dd9d2f9" ,
"pubkey": "bad5e88135cbf537267951340e15655ccd6a6d9a9d81992cf38d52334c7256c0" ,
"created_at": 1788435576 ,
"kind": 0 ,
"tags": [
[
"proxy",
"https://infosec.exchange/users/vathpela",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "{\"name\":\"Farce Majeure\",\"about\":\"Hooloovoo, kernel{, }hacker. Building better worlds. Opinions are messages from space. Facts approximate. Photos are square. he/they. 0.9x eng 🚴 :mbta: Ban cars. Sometimes I make portraits of buildings and infrastructure.\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/365/560/998/985/877/original/3435816569609e37.png\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/365/560/998/985/877/original/4c2843d030e438db.jpg\",\"nip05\":\"[email protected] \",\"fields\":[[\"GitHub\",\"https://github.com/vathpela\"],[\"MetaPixel\",\"https://metapixl.com/i/web/profile/511229747584501340\"]]}" ,
"sig": "eaa56748b5795538fa232b38ceb003e1a2448fb0fee50ed7bcd28a7ecd3c8d2d5c7cb5dd852e3c63420201dbfc03cbfd15f8b1b96fa5a1ca1ad58ed89af91f8b"
}
Last Notes npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure Today in being forced to use LLMs because "vulnerability" disclosures have been produced by them: npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…re2d And again I need to point out that none of what's been posted shows this to be anything but a coordinated marketing effort between two "AI" companies. There's no public evidence it wasn't 100% directed, and no reason to believe the "victim" wasn't in on it. And the timelines of the press releases suggests they probably were. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…mv7s sort of ignores how cdma intends to have this relationship with the noise floor and Manchester doesn't have that vocabulary. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure Oh, by the way, Microsoft's 2011 UEFI CA expired last week. The world did not end. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure If you're using Ubuntu, Julian Klode wrote a post about the upcoming Secure Boot certification expiry here: https://discourse.ubuntu.com/t/microsoft-uefi-ca-rotation-what-it-means-for-ubuntu-users-and-vendors/82652 npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure Steve McIntyre wrote up a page for Debian about the upcoming Secure Boot certificate expiration here: https://wiki.debian.org/SecureBoot/CAChanges , and he's also started a list of systems with known broken firmware here: https://wiki.debian.org/SecureBoot/BuggyFirmware . Much thanks to Steve! npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure If anyone has been wondering about the upcoming Secure Boot certificate expiration and how it relates to RHEL, we've written some stuff up about it here: https://www.redhat.com/en/blog/expiration-secure-boot-signing-certificates-2026 npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…mex9 admit it, it's beautiful. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…z8u4 @nprofile…ragk Of course safety only for those inside the car isn't safety at all, as public statistics of car fatalities quite clearly demonstrate. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure So, uh, can we criminalize dropping 0days on github without doing /any/ coordinated disclosure yet? npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure If any of yall need to know more about how UEFI is going to adapt to Post-Quantum Crypto, there's a whitepaper about proposed spec changes here: https://uefi.org/sites/default/files/resources/UEFI_PQC_Update_Whitepaper_Final.pdf npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…3qha such a simple machine... npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…ds0l Both April 1 RFCs and being extremely fucking late are proud IETF traditions. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure My pet peeve, as a Linux distro and upstream maintainer since forever: being told things that we do on the regular are impossible. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…t05x @nprofile…r9vg so does "what counts as a router?" https://csrc.nist.gov/pubs/ir/8425/a/final is kind of all over the place. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure Anyone find any American-made cablemodems yet? npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure If you have anything to do with Secure Boot on a linux distro, I've written a tool to help with the upcoming UEFI CA expiry and transition to the 2023 certificates, and I could use feedback. Here's my draft PR: https://github.com/rhboot/efivar/pull/294 . (Yes, putting it in efivar is somewhat arbitrary, but all the other options are about the same.) npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure Any of y'all want to help run software for a transit system? npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…3qha lol, my sister built a "taser" that way once when we were teenagers. I have scars. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure I guess this is my long (and likely very slow) thread about the HALStation. This is a reverse engineering project that my ADHD occasionally becomes interested in, works on for a while, and then sets aside for a while. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…le5s @nprofile…tyf6 on the phone pad, I meant. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…le5s @nprofile…tyf6 what does it sound like? npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…d2rl lol,,this is the exact opposite of whatever "comcastic" was supposed to mean. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure Calling CVE-2025-47827 a Secure Boot bypass is an exaggeration. It's a kernel bug being exploited once userland is up and running. The discoverer is mostly trying to make it sound cool, AFAICS, and Ars shouldn't have taken the bait. That doesn't mean there won't need to be some remedy, but it's a different problem. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure I do feel like moving CVE to a private foundation to do more or less the same thing instead of keeping it as a public-private partnership and trying to work on its real issues is more or less directly caving to the people trying to ransack the government and sell it off to rich cronies. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure @nprofile…jppq ... okay but how many plug+unplug events is that USB-C socket rated for? npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure Some days, if you have my job, this is what success looks like. npub1ht273qf4e06nwfne2y6qu9t9tnxk5mv6nkqejt8n34frxnrj2mqqsxq20m Farce Majeure I got tired of infosec.exchange being... well, maintained in absentia. So I'm over here now.
