burritosec :donor: :red_panda:

burritosec@infosec.exchange

Posts

Post #4475954
soc-as-a-service talks to helpdesk-as-a-service and, uh, wait, why is no one from the actual org affected by the security incident in this conversation yet?
Post #4398683
the playlist I made when I was working night shifts in a grocery store still absolutely slaps after all these years
Post #4389958
charged my pixel watch (yeah I know) before bed and the splash screen said "ready to go!" uh huh. ready to go night-night. ready to go beddy-bye. :neobot_flop:
Post #4367002
bgp stands for bondage gateway protocol
Post #4281464
just had to explain what Homestar Runner was to a younger coworker and I am feeling the creeping shadows enter the room
Post #4193889
RIP Kavinsky. Dammit. https://www.france24.com/en/france/20260729-french-dj-kavinsky-found-dead-in-paris-home
Post #4144030
LLM trained only on US democratic party fundraising text messages
Post #4128786
new york is this cosmic torture where there are absolutely wonderful things to witness and experience and everything within a five block radius of those things is swearing and diesel engine exhaust and raw human stupidity
Post #4025807
The NTFS epoch is just fucking weird and I will happily pay anyone to explain the reasons behind it to me.
Post #3976703
i've heard a lot of "oh, I'm from the era when the PLA left their webshells wide open" and i can't wait to say "i'm from the era after SolarWinds and the ClickFix heyday". assuming we ever find a way past ClickFix.
Post #3901750
every UI designer should take steel toe boots to the nose for this cutesy rotating glowing highlight bullshit around the AI tool icons. bring back the tag you fucking dorks
Post #3883129
anyone know what actually backs that whole guaranteed 3% return on a high yield savings account
Post #3876380
agents generate the hackiest most never-send-this in prod solutions to a developer's problems and the second someone pops 1 of the 75000 NPM packages in your dev team's dependency chain, they now get said agent and you aren't auditing what it does
Post #3823225
to the tune of "Kokomo": tequila, corona, oooh I wanna sip ya
Post #3790009
undisciplined engineering is just figuring out different ways to set stuff on fire and vibe coding is undisciplined engineering at scale
Post #3697671
script dorks can't even hand write their own batch scripts anymore. this one clearly has LLM comments sprinkled in it. truly a sad state of affairs
Post #3633957
What is a CI/CD pipeline? A miserable little pile of secrets.
Post #3617760
So many years after it was said and Dan Kaminsky's brilliant simplicity in "We're gonna build a stateless TCP stack. It just sends data, it doesn't know to who, and the other guy remembers he's talking to me." is still so wonderful.
Post #3596980
the medley for the DC fireworks show using both "don't stop believin'" and "livin' on a prayer" certainly was a choice
Post #3562224
happy american holiday weekend, bsky's cdn is eating shit
Post #3493200
duuuuuumb question but does anyone have any empirical evidence that tools like ublock origin will mitigate/kill/prevent clickfix pop ups? pretty sure I saw a blog about this but I cannot find it
Post #3416325
subagent this subagent that no one ever hears about dom agents
Post #2603998
all things being equal I&#39;m pretty sure AO3 has better uptime metrics than AWS or Azure
Post #2603997
https://www.youtube.com/watch?v=TzVZE9UdKIo internet right now be like &quot;we alll fallll downnnnn&quot;
Post #2603996
over on bluesky they&#39;re all hotly debating what is the definitive millennial song, and I would like to submit &quot;chasing cars&quot; by snow patrol for that consideration
Post #2603995
It&#39;s the day.
Post #2603994
but without &quot;slop&quot;, would we not know &quot;peak&quot; as well?
Post #2603993
the burritosec is on PTO and having steaks and beers to celebrate. the burritosec is in full duplex mode
Post #1625598
NIST announcing it&#39;s only going to triage CVEs found in software that the government uses is a great practical joke because there&#39;s absolutely no authority that can reasonably catalog every piece of software the government uses
Post #1625596
bet a bunch of you were insufferable when electroswing was in vogue