Matt Nordhoff
mnordhoff@infosec.exchange
<p>He/him. Previously twitter.com/mnordhoff.</p>
Posts
-
Post #4474977
OMG I was trying to use a couple stretched-out old hair ties and one of them DISINTEGRATED. The elastic turned into tacky goop IN MY HAIR. I did not know that could happen! Do not let "old rubber bands" happen to you! (I had ALMOST got a new hair tie out but didn't want to bother...)
-
Post #4444627
Issues with the Los Angeles stratum 1 NTP server gpstime.la-archdiocese.net since yesterday. 🙏 (It's stratum 3 and was down for a while.) Absolutely no criticism, of course, but I hope things work out.
-
Post #4369198
Recently saw two tech company blog posts—the two companies do business, so it might not be a coincidence—say "people don't install software anymore, their AI agents install software for them". I don't even know what to say. (I'm not a customer!)
-
Post #4360024
Either something happened to my eyes (unlikely) or web browser (very possible), or GitHub changed the merged PR icon in the dark protanopia theme to gray. I'm so confused, I think every PR has been closed without merging now.
-
Post #4345908
sent 666.51M bytes received 1.48M bytes 1.31M bytes/sec The rsync of the beast could have more bandwidth.
-
Post #4048441
https://domainnamewire.com/2026/07/23/com-verisign-record/ Revenue is up at the wallet inspector! Some of their plans for .web are discussed.
-
Post #4043015
https://www.nytimes.com/2026/07/12/magazine/data-center-heist.html?unlocked_article_code=1.xFA.Kjgt.3iZRJd-SnQk4 OK you know what maybe the data center segment of 007: First Light was more realistic than I thought.
-
Post #4032024
RE: https://mastodns.net/@diffroot/116966621989680532 Afilias (later Altanovo) and Verisign blew a couple hundred million dollars fighting over .web for like 10 years. *checks Wikipedia* "The ICANN auction of last resort that started on July 27, 2016, and was completed on July 28, 2016." Literally precisely 10 years?? Wtf is this milestone celebration? I guess Verisign's sense of spite temporarily overwhelmed their corporate priority to jettison any business except .com. I won...
-
Post #4012757
RE: https://social.nlnetlabs.nl/@nlnetlabs/116963672862487532 1 of the vulnerabilities was reported by 4 different people/groups, 1 by 3 parties, and... I lost count but several were reported by 2. Wow.
-
Post #3984560
Iran claims to have bombed AWS in Bahrain again. Amazon has not yet confirmed it. https://www.datacenterdynamics.com/en/news/irans-islamic-revolutionary-guard-corps-claims-fresh-hit-on-aws-data-center-in-bahrain/ Amazon's last public status posts were 30 April. https://health.aws.com/health/status
-
Post #3896715
Hrm, after the price gougers increase the price of .com domains 2026-11-01, .com domains will be more profitable to Verisign than .net domains, though .net will still be more expensive for registrants because its ICANN fee is bigger. .com $10.97 (Verisign) + $0.20 (ICANN) = $11.07 .net $10.91 (Verisign) + $0.75 (ICANN) = $11.66 https://www.icann.org/en/registry-agreements/details/com https://www.icann.org/en/registry-agreements/details/net
-
Post #3886701
https://www.theregister.com/networks/2026/07/17/ntp-server-that-traveled-back-in-time-caused-massive-aussie-mobile-outage/5274059 *pained expression*
-
Post #3885383
Several years ago, AWS sent out a billing projection that had clearly used the wrong time unit: it was multiplied by 30 or 720 (24 × 30) or something like that. Luckily it was not a big number, and it was not the real estimated bill, so I didn’t drop dead from shock. IIRC, they sent out an apology a few days later.
-
Post #3877353
"I'm DeeMV your personal AI and I'm glad you are here." Punny LLM (anti-)"assistant" names have gone too far. And this website isn't even for the DMV, which isn't even called "the DMV" in this state anyway!
-
Post #3857899
RE: https://infosec.exchange/@mnordhoff/112814601208026927 This was my favorite toot. It's too bad half of it is gone, but it does seem to have been archived. https://web.archive.org/web/20240719135222/https://piaille.fr/@LaurentChemla/112812800979426563
-
Post #3857854
Seeing https://federate.social/@jik/112812825679959416 and https://piaille.fr/@LaurentChemla/112812800979426563 may or may not be revealing about the American and French mindsets.
-
Post #3829292
Logged in to a website using... only my email address. Zero factor authentication. They must've used cookies to automatically log me in except not, or some sort of hack to trick password managers into filling in a hidden form field. Weird.
-
Post #3823493
https://domainincite.com/31803-cybercrime-link-as-t-me-gets-taken-down
-
Post #3798438
https://www.nytimes.com/2026/07/13/us/politics/israel-mahmoud-ahmadinejad-iran.html :blob_neutral_face:
-
Post #3540744
Hikaru Utada started a 24/7 music video radio stream about a week ago (in Pride Month!) https://www.youtube.com/watch?v=IJqlho9qJIw
-
Post #3535136
Meanwhile at the Priestly Fraternity of Saint Pius X, everyone is in schism and everyone is excommunicated. https://www.vaticannews.va/en/vatican-city/news/2026-07/holy-see-decrees-excommunication-lefebrians-consecrations.html
-
Post #3535045
Imagine telling the Pope 100 years ago that one day they would run websites and they would have cookie banners and they would only have an OK button.
-
Post #3497102
I think rendering someone stateless is maybe the most evil thing a government can do? I mean, also murder, but deciding who lives and who dies, and killing people, is one of the jobs of the government. Making people stateless is rejecting the fundamental nature of the state. If one of your citizens is an asshole, and they don't even have citizenship somewhere else, sucks to be you! You have a whole law enforcement system, maybe you forgot. Use it. Any politician who even thinks about maki...
-
Post #3417796
Why does Amazon own the domain name com.be