VessOnSecurity
bontchev@infosec.exchange
<p>Anti-virus, malware and infosec expert, crypto amateur, privacy advocate and general annoyance.</p><p>PGP keyID: 0x365697c632dd98d9</p>
Posts
-
Post #4461349
Time magazine has started serving ads to AI agents: https://digiday.com/media/time-has-started-serving-ads-to-ai-agents/
-
Post #4430299
I believe it. It matches my experience with Gemini's ability to code. https://xcancel.com/akshen121/status/2085414082723881446
-
Post #4347783
Vibe-coded age verification.
-
Post #4323630
The fix.
-
Post #4308991
Lulz. Our sysadmin, who's really a web developer by trade, has started using Cladue.ai for developing frameworks for web design or whatever (not my area of expertise). He's in love with it, says with it he was able to do in 3 days what he normally alone did in 6 months. But his English is much worse than mine - and I'm being polite. So, at one point, they had a misunderstanding. He told Claude "do it that way" and Claude started lecturing him why doing it "that way&q...
-
Post #4268720
Perform a security scan (open ports, exposed services, etc.) on your own IP address: curl https://qsa.sh
-
Post #4267712
Not The Onion. "US government lists fictional nation Wakanda as trade partner": https://www.bbc.com/news/world-us-canada-50849559
-
Post #4229058
"AI Worming through Word": https://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/
-
Post #4229045
"Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser": https://thehackernews.com/2026/07/researchers-show-single-malicious.html
-
Post #4170672
Found the bug.
-
Post #4163366
Petition to rename the straight of Hormuz to the straight of Schrodinger. It's both closed and open depending on whether you look at it or not.
-
Post #4138914
Migrating a physical data center to the cloud(s):
-
Post #4109051
"Meet Phantom Twist, a stealthy new drone that hides in plain sight by tricking your eyes": https://www.livescience.com/technology/robotics/meet-phantom-twist-a-stealthy-new-drone-that-hides-in-plain-sight-by-tricking-your-eyes
-
Post #4071479
Man, the trains in Germany are fast! #LostInTranslation
-
Post #4055444
"Millions of cars could be tracked and unlocked by a hidden security flaw": https://www.malwarebytes.com/blog/bugs/2026/07/millions-of-cars-could-be-tracked-and-unlocked-by-a-hidden-security-flaw
-
Post #4055443
Atlas zuckt mit den Schultern... "Survey: Half of Germany's top earners consider moving abroad": https://www.euronews.com/business/2026/07/19/survey-half-of-germanys-top-earners-consider-moving-abroad
-
Post #4039775
Debugging my code.
-
Post #4037946
Me to Kimi AI: "Please examine the Cowrie honeypot for any unfixed bugs that you can find." Kimi: *Goes to the Issues section of Cowrie's GitHub repo and lists a bunch of open issues, most of them opened by me*. Very clever, Kimi, very clever. But I was asking for unfixed bugs that you could find in the code - not about bugs I've already reported.
-
Post #4036263
I guess they weren't kidding when they said that cyclosporiasis causes "explosive diarrhea"...
-
Post #4031604
Exactly.
-
Post #4031599
True.
-
Post #3992256
Have you seen this new-fangled stuff called "automobiles"? They are everywhere! Their producers are showing them down our throats whether we want them or not. One chap, called Ford, has even built something called a "conveyor belt", where their production is streamlined so that he could produce even more of the things faster. With these things, any incompetent horse rider can reach farther and faster than an experienced rider. This is disgusting! If they become widespread, p...
-
Post #3987664
Do I know anyone who has a high-end Shodan API key (Enterprise, maybe?) that would let them force a re-scan of a particular port (445) of a particular IP address? I need to debug my SMB honeypot but normally Shodan scans the honeypot machine only once every month, which makes he process rather tedious. I do have a key but it's the cheapest one and apparently it's not good for this because trying to force a re-scan has no effect (although no errors, either). cc @GossiTheDog@cyberplace.s...
-
Post #3978054
Two more articles about the GDID thing: "GDID: The Windows Global Device Identifier": https://zerotracelab.com/blog/gdid-windows-tracking "Inside GetOfflineDeviceUniqueID: How Windows Derives Its Offline Device ID": https://iretq.com/inside-getofflinedeviceuniqueid-how-windows-derives-its-offline-device-id/
-
Post #3977636
She's obviously smart. "Hungary’s chess queen declines Péter Magyar’s offer of role as president": https://www.theguardian.com/world/2026/jul/20/peter-magyar-judit-polgar-president-hungary-chess-prodigy-strategic-move
-
Post #3977515
Sea plus plus.
-
Post #3971167
Health (or lack thereof) update: https://blog.bontchev.nlcv.bas.bg/en?articleId=21
-
Post #3966846
"Israel clears way for crocodiles to stop prison breaks": https://www.dw.com/en/israel-clears-way-for-crocodiles-to-stop-prison-breaks/a-78022950
-
Post #3966835
Novice infosec person looking for advice.
-
Post #3938034
Akshually...