Matt Organ

@Viss@mastodon.social @wdormann@infosec.exchange I feel the same way about quantum computing and Shor's algorithms. I mean there might be real gains, albeit very small, but its hidden by the overhyped experiments where they stack the deck with binary trickery and Endian-ness to compute an insane number. Everyone proceeds to wet their pants over the imminent Qday with the reality not yet exceeding factoring two digits.

@PeterLG@theblower.au Nice. Coober Pedy / Breakaways? Looks like Icecream Hill, just right of centre.

Well that was an unexpected twist. Dammit Physics! I decided to put some regular black electrical tape over the camera to block it whilst keeping a neat finish. Turns out IR passes straight through electrical tape 😂 I did consider whether its because of the adjacent backlight and so I tried blocking that too, however most of the rooms I sit in have enough ambient IR to not matter. I'm considering something more "glass like" since that seems to reflect IR much better but the seems a pain. Anyone else have a better solution they've found? Its probably at the point for me that its "good to know but can't be bothered" but there's just so many interesting and unexpected outcomes I felt compelled to satisfy my curiosity and share. #Cyber #Security #Infosec #Lenovo #Privacy #Hacking

@wdormann@infosec.exchange ah, cool. I didn't see the checker. Cheers. 👍

@mubix@infosec.exchange what goes around comes around over the years. The concept has always existed and AI is just the new version on steroids. Visual basic was the last clear demonstration of citizen developers I can remember. VisiCalc/Lotus123/Excel was the version before it. Plenty of benefits if execution is well considered and yet plenty of pain in the wrong hands. How many people are still scarred by "this previously unknown and undocumented access/excel application abomination is now mission critical but the single author, Bob, retired last year". Sometimes it feels like IT careers in reverse engineering are regularly built on the ashes of poor decisions past.

@wdormann@infosec.exchange the thing I don't get about this whole situation is, if they really are genuine in their plight to make the world a better place (which doesn't not preclude making "paid for" products), I don't see why they can't raise awareness of what they perceive is a critical issue without just dropping the PoC. They're mutually exclusive and plenty of people have successfully done exactly that, while holding back the exact details until later. Sure, other people will poke if given vague direction but the damage and panic is done by making it instantly and easily achievable. Even with the context continually being given and expanded on, it still feels like nothing more than an excuse for attention to "buy our awesome product" through thinly veiled bragging rights.

@FritzAdalis@infosec.exchange @wdormann@infosec.exchange also came here to say exactly this. Kudos 😎 I've been looking to play around with this for a while as it looks awesome.

@mattesilver@101010.pl yeah, can't say I agree with that. I get the privacy flap causing Helpdesk issues trade off. OK, it's not the choice I'd prefer personally but I accept its probably necessary but to have an activity light right there and not use it is an.... odd choice. The framerate drop suggests they're on the same interface, so just using literal power draw when it wakes up to activate the LED would all it needs. Having said all that, I'm hardly outraged. I'm sure there are people out there whom actually need this kinda privacy and subsequently, this info is now available. So good luck to them. The extent of it to me was "oh cool" (plays around with it for 20mins) followed by "hmmm, I should probably wear pants more often around the house if the laptop is running in the same room". Out of this thread I've now learned that the experience is not even consistent across Lenovo product range. Won't stop me buying them in the future but I'll probably change my habits and expectations around privacy switches.

@jaseg@chaos.social I totally get they want to keep support calls down (I don't blame them for that and makes sense). I guess I find it a little more non-negotiable that they could at least blip the activity LED when there's activity on the bus at the hardware level instead of needing consumers to read developer docs. I'm comfortable and capable of doing the research but I until now, I didn't realise I even needed to. I had, incorrectly in hindsight, assumed privacy screen meant privacy and activity LED meant activity which is a pretty normal presumption for any regular person.

@ludrol@mastodon.social @kkarhan@infosec.space @purism@social.librem.one I saw your comment and immediately thought of johhny Chung Lee with his Wiimote hacking years ago .... Good times! 🙌😂 https://www.reddit.com/r/gaming/comments/13l6sw8/throwback_to_2008_when_the_nintendo_wii_was/

@drsbaitso@infosec.exchange lol 😂 (my mind went straight to Monty Python Life of Brian)

@maxy@sigmoid.social Fair point, hadn't considered copper tape, I might give that a go. 👍 I'd been thinking next time I find a smashed phone screen protector, I'd take a small piece of that. I based that theory purely on seeing how bad IR security cameras are from behind glass. The electrical tape experience I had reminded me of a YouTube clip I saw recently where a germanium coin had a similar outcome. https://youtube.com/shorts/Chx2hnZrUAQ?si=uUrHtl46_CCF_wy-

@kraftnix@noc.social @jik@federate.social OK, just booted up real quick. Confirming I am in the "video" group with that standard user. That makes sense. Edit: and that the group permissions on all /dev/video* is also video.

@jessebot There was a really good command line hero's podcast on Brian a few years back. https://www.redhat.com/en/command-line-heroes/season-3/heroes-in-a-bash-shell

@nixCraft

I seem to remember finding an Easter egg back when I was studying in my teens in the help files for Borland turbo c++ in the sound library doco, something about:

• Emits a 7-Hz tone for 10 seconds.

True story: 7 Hz is the resonant frequency of a chicken's skull cavity. This was determined empirically in Australia, where a new factory generating 7-Hz tones was located too close to a chicken ranch: When the factory started up, all the chickens died.

Your PC may not be able to emit a 7-Hz tone. */

Whoa, just discovered this is now fixed. No idea when that happened. #infosec #Windows10 #Windows11 #Networking #Linux

@GossiTheDog@cyberplace.social I'm sure it's just a coincidence this happened recently in those products. https://www.bleepingcomputer.com/news/security/new-progress-sharefile-flaws-can-be-chained-in-pre-auth-rce-attacks/

@wdormann@infosec.exchange Just had a quick squiz at some servers I run with WordPress on based on the URLs mentioned in the article egrep -ir "rest_route=/batch/v1|wp/v2/categories|wp/v2/users" /var/log/apache2/* 21 requests starting 18/07/2026 05:30 UTC None of the requests have anything in common. Seems mostly like people poking around rather than spraying at this stage. #WordPress #CVE-2026-63030 #CVE-2026-60137  #wp2shell

@ranlvor@queerchen.de oh, that's interesting 🧐