VessOnSecurity
bontchev@infosec.exchange
<p>Anti-virus, malware and infosec expert, crypto amateur, privacy advocate and general annoyance.</p><p>PGP keyID: 0x365697c632dd98d9</p>
Posts
-
View post
The supreme commander of the French armed forces: Some of your children could be lost in a war but this is a sacrifice I am willing to make. (Source in French.) https://www.lemonde.fr/m-le-mag/article/2025/11/25/accepter-de-perdre-ses-enfants-qui-est-fabien-mandon-le-chef-d-etat-major-des-armees-qui-a-cree-la-polemique_6654781_4500055.html
-
View post
Evolving career advice:
-
View post
Somebody please update https://www.felonybench.com/
-
View post
"Flock Wants the Most Detailed Map of Its Surveillance Cameras Taken Offline"; https://theintercept.com/2026/09/24/how-many-flock-devices-in-united-states-300000/
-
View post
I gave Claude.ai a personal access token for GitLab that provides read-only access to all my repos. I put it in the "Instructions" section at the time. Later, Anthropic changed something in the way this section is used and, apparently, it's contents is now pasted at the beginning of every conversation. Unfortunately, this means that every time I start a new project (i.e., when the project memory is empty), Claude freaks out and starts yelling at me that I've leaked confidentia...
-
View post
"GitHub App Private Keys: 474 Leaked Keys Exposed" (and they still work): https://blog.gitguardian.com/github-app-private-keys-leaked/
-
View post
"German police read Signal, Telegram, WhatsApp messages without breaking encryption": https://cybernews.com/privacy/police-telegram-whatsapp-signal-surveillance-linked-devices/ The crypto wars were never about fighting criminals. They were about mass surveillance. The police can fight criminals that use encryption just fine.
-
View post
@campuscodi@mastodon.social I saw someone say somewhere that a better term than "artificial intelligence" (or the "super intelligence" idiocy, of course) is "artificial thought". These systems are not intelligent; they imitate thinking.
-
View post
"More than 1 in 4 French gas stations out of at least one fuel": https://lite.cnn.com/2022/10/14/business/france-gas-stations-fuel-shortage I've lived through this. Twice. Coming up next - empty food stores. Stock up on non-perishable foods as much as you can. (Ideally - two months worth for the entire family, but you probably don't have that much free space.)
-
View post
Doomerism is nothing new.
-
View post
Kevin #cats #catsofmastodon #caturday
-
View post
"OpenAI says it found more instances of AI models acting deceptively": https://lite.cnn.com/2026/09/16/tech/ai-models-acting-deceptively-openai Time to update https://www.felonybench.com/
-
View post
OH: "Bernie Sanders wants laws to make American AI dumber than he is".
-
View post
The new security.txt file at HuggingFace: https://huggingface.co/security.txt
-
View post
"Dutch central bank shifts billions in gold from US to Britain in ‘crisis preparedness’ move": https://lite.cnn.com/2026/09/02/europe/dutch-central-bank-shifts-gold-to-britain-intl-hnk Apparently, the Dutch are more afraid form an US than from a Russian attack... Although they should have imported the gold domestically - the UK has demonstrated to be just as willing as the USA to steal other countries' assets (e.g., Venezuela's gold).
-
View post
When I was a kid, I was asked once what I want to become when I grow up. My answer: "A retiree, like my Grandfather". Well, one life goal reached - I'm now officially retired. I will continue to work, of course, and even continue being on medical leave for as long as the disability commission grants it (for 4 more months, probably), which means that I'll be able to collect both a pension and 70% of my salary from the retirement agency. (I asked them and they confirmed that thi...
-
View post
"Everything I own, owned": https://schlarp.com/posts/everything-i-own-owned/
-
View post
Zero-day (elevation of privilege) in Kaspersky's anti-ransomware product: https://www.kimi.ai/share/1a0530fb-4202-8ada-8000-00006a38c583 (Not found by AI - this is just someone's conversation with an AI about it. Contains link to the repo with the PoC.)
-
View post
How do people actually use Claude Code? I love Claude.ai (the web interface); have done *so* much work with it, have given it read-only access tokens for my GitLab repos - but Claude Code is totally unusable! I tried installing the VSCode plugin and can't figure out what to do with it. I installed the Terminal application - and can't even log into it, because I can't paste the authentication token (or anything else, for that matter).
-
View post
"UniBLEed: Unauthenticated Root RCE on Any Unitree G1 Humanoid Robot Within Bluetooth Range": https://boschko.ca/g1-ble-rce/
-
View post
"Permalink to Microsoft hides watermarks in AI images made with Paint and Photos, researcher claims": https://www.neowin.net/news/microsoft-hides-watermarks-in-ai-images-made-with-paint-and-photos-researcher-claims/
-
View post
Time magazine has started serving ads to AI agents: https://digiday.com/media/time-has-started-serving-ads-to-ai-agents/
-
View post
I believe it. It matches my experience with Gemini's ability to code. https://xcancel.com/akshen121/status/2085414082723881446
-
View post
Vibe-coded age verification.
-
View post
The fix.
-
View post
Lulz. Our sysadmin, who's really a web developer by trade, has started using Cladue.ai for developing frameworks for web design or whatever (not my area of expertise). He's in love with it, says with it he was able to do in 3 days what he normally alone did in 6 months. But his English is much worse than mine - and I'm being polite. So, at one point, they had a misunderstanding. He told Claude "do it that way" and Claude started lecturing him why doing it "that way&q...
-
View post
Perform a security scan (open ports, exposed services, etc.) on your own IP address: curl https://qsa.sh
-
View post
Not The Onion. "US government lists fictional nation Wakanda as trade partner": https://www.bbc.com/news/world-us-canada-50849559
-
View post
"AI Worming through Word": https://enklypesalt.com/posts/context-collapse-part3-ai-worming-through-word/
-
View post
"Researchers Show a Single Malicious Webpage Visit Can Compromise Tor Browser": https://thehackernews.com/2026/07/researchers-show-single-malicious.html