Elektrine lite

← Feed

Bill

Sempf@infosec.exchange

<p>I break software.</p>

Posts

  • View post

    OK, I&#39;ll admit, Burp AT is pretty fucking awesome at its job.

  • View post

    Help me @ai6yr@m.ai6yr.org! You&#39;re my only hope!

  • View post

    I am beginning to understand how AI is fueled.

  • View post

    In my continuing effort to make AI into a usable tool, I told it I don&#39;t care for connectors, because I don&#39;t trust that my context will be interpreted correctly. The response sorta surprised me: &quot;Fair enough. That control-then-trust approach fits your line of work anyway. Scope defines what touches what.&quot;

  • View post

    My daughter doing the Disney Princess thing again. Just came right to her and hung out.

  • View post

    So, busier than snot here. Anything new happening online?

  • View post

    Everyone has their own schedules and stuff, but I truly appreciate @zackwhittaker@mastodon.social&#39;s &quot;This Week in Security&quot; hitting my inbox around noon or so on Sunday, right when I&#39;m starting to think, &quot;Okay, I need to start clearing up my head for next week and getting ready for what I have to face.&quot; It&#39;s just well-timed for me.

  • View post

    I just make Kung Pao chicken, and it is awesome.

  • View post

    @emarktaylor.bsky.social lol @ &quot;looked a little CFL.&quot;

  • View post

    Well, I finally ran my CLI out of tokens and forced a compaction.

  • View post

    Looks like Clemson watched OSU/Texas. #cfb

  • View post

    What&#39;s the current security industry thinking on public-facing password-protected FTP servers? Is there any new thought on that? Any &quot;don&#39;t do that, replace it with this&quot;? Last time I dealt with this, SFTP was the answer, or just not doing it that way? Anything new is news to me, and I&#39;d love to hear it.

  • View post

    So I think LLM CLIs do an awful job of building front ends. Web sites, windows apps, mobile, whatever. They are terrible. You know what it is pretty good at, if you have it set up right? Data access layers. It&#39;s about as deterministic as it gets. I&#39;m sure it made mistakes and I&#39;ll cuss and swear but 5700 lines of Go in 12 minutes is faster that I would have written it. (TBH I probably would have written a tool to generate it from the data dictionary in good old fashioned Perl....

  • View post

    This is fantastic: malware that uses MQTT for command and control. I looked into MQTT for a side project that never went anywhere, it&#39;s well thought out. https://securityaffairs.com/199205/malware/bambootoken-the-malware-that-speaks-mqtt-to-stay-under-the-radar.html #malware #c2

  • View post

    So, Flock cameras, right? You are telling me that they provide encryption at rest for the queued videos, using a key stored on the device? Lemme guess - vibe coded?

  • View post

    Wow Oklahoma State didn&#39;t beat Oregon, they dominated them. #cfb

  • View post

    I love this photo.

  • View post

    Woah wtf Michigan??? #B1G #cfb

  • View post

  • View post

    @Viss@mastodon.social @cR0w@infosec.exchange

  • View post

    You can&#39;t just ask nicely for a model not not code path traversal into your app. https://www.darkreading.com/cyber-risk/model-knowing-rules-is-not-security-control #vibecoding #controls

  • View post

    When I hit my blogroll at night, there are usually around 50 infosec stories on weekdays, 10 on weekends. Unless someone clears the Full Disclosure queue. Then 75. If I spin up and the insect roll is mid 70s I always think &quot;whelp, someone pushed fd.&quot; High 70s if apple had a patchfest

  • View post

    My kids don&#39;t order paella for their birthday any more, so I made it for mine! The best birthday presents are the ones you get yourself, right?

  • View post

    @Viss@mastodon.social @krypt3ia@infosec.exchange Now it sounds like I am bragging, but CodeMash IS the talks. Then a session time starts the hallways empty. It&#39;s spooky.

  • View post

    Indian buffets rock. In other news, I may never move again

  • View post

    Public Service Announcement: Leg cramps suck. EOM

  • View post

    Google your kids, then click AI Mode, and see if your jaw falls as far as mine did.

  • View post

    Just call me Bobby Flay.

  • View post

    I really need to stop screwing with Burp Suite and actually test this app. Might need some M&amp;Ms first though.

  • View post

    OK, who&#39;s using Burp AT? Anyone? Anyone? No? Didn&#39;t figure.