B'ad Samurai

@cR0w@infosec.exchange Mmm, unspent fuel, burnt oil, hot turbos, and Acqua Di Gio.

@cR0w@infosec.exchange Feels like DSM and 300ZX bros fighting on Division in Spokane.

What a week in netsec. Let’s see what happens at 4pm pacific today. And remember to push to prod.

@catsalad@infosec.exchange @JessTheUnstill@infosec.exchange love that. What did the Russians ever do with that borehole? Please huck me down a 12km hole blasting Dr. Dre’s The Next Episode. I think a hole that deep would realistically get me a full song.

@cR0w@infosec.exchange @mttaggart@infosec.exchange I could have sworn I saw something, but it appears I only imagined it. Plenty of CISA and FBI docs call out and explain the technique but none explicitly recommend a blocking mitigation for run or windows keys. I found a Michigan State Police doc recommending disabling windows shortcut keys specifically. Still a far cry from the pheds. https://www.michigan.gov/msp/divisions/intel-ops/cyber/mc3/cyber-snapshot---fake-recaptcha-attacks

@glyph@mastodon.social @mttaggart@infosec.exchange

@cR0w@infosec.exchange every other person or organization would have the FBI at their door.

@Viss@mastodon.social right all show up provide Fibonacci or Cartesian shopping list calculations.

Boba buddy. #dogsofmastodon #goldenretriever

@GossiTheDog@cyberplace.social Nope.

@fullywoolly@mastodon.social @syn_rst@norden.social A few orgs maintain lists of troublesome ASNs The @gayint@infosec.exchange team maintains this list: https://gayint.org/blocklists/numbers.txt And @spamhaus@infosec.exchange maintain this list: https://www.spamhaus.org/drop/asndrop.json For a good intro about ASNs, poor governance, lack of support for blocking, @jtk@infosec.exchange gave this excellent talk at FIRSTCON25: https://youtu.be/PiNP9EDPE-I?si=h4bmMqntAgiFHqCB If your devices support it, Geo-based IP blocks can get you reasonably far on a home network, but it's not enough for even a mid-enterprise today. #asn

@cR0w@infosec.exchange #howToGetAwayWithCybercrime

@cR0w@infosec.exchange Cloudflare is also a good replacement for failing septic systems. #fuckCloudflare

@hacks4pancakes@infosec.exchange I know it’s not ideal for any candidate, but do you have any ideas about where to apply those skills in other fields? Since it shouldn’t be about the tools. (Without causing a rush on roles) Insurance? Fraud prevention? Trust & safety? eDisco? Low-volt security? Home/commercial, fire/life inspection? HVAC/BMS? Some of these trade roles could get exposure to BACnet well before a traditional SOC role.

@hrbrmstr@mastodon.social I’m quite proud my talks the last few years have been AI free: GitHub abuse, ClickFix, OCSF, RBA, DNS in Fraud Prevention, etc. Not because of a stance; simply unnecessary.

@dubbel@mstdn.io @hrbrmstr@mastodon.social it’s a horizontally stretched equirectangular projection, so Antarctica looks ridiculous. I imagine the arcs look weirdly uniform. We give LLMs grief, but I feel like the prompter had to be purposefully bad to make this. Winkel Tripel Is only 100 years old and what Google and Nat Geo use. Global projections aren’t exactly cutting edge edge or obscure knowledge.

https://www.theregister.com/off-prem/2026/07/17/billing-software-error-sends-billion-dollar-aws-estimates/5274521 #aws

@k3ym0@infosec.exchange it’s really fkn good work. The FortiLabs RSS if off the hook AND they don’t fill it with sales junk. #AAaA++A+will_bid_again!1!

@cR0w@infosec.exchange reminds me of the old Gumball races @catsalad@infosec.exchange

@TindrasGrove@infosec.exchange @InfoSecSherpa@infosec.exchange PacNW’s is Bloodworks Northwest who is currently aligned with the 2023 FDA change and a partner org to LGBTBE. The 2023 rule is more inclusive but far from ideal.

@GossiTheDog@cyberplace.social I’ve never added a url and hash block so fast as the Atlas release.

@TindrasGrove@infosec.exchange I finally finished mine off! A bank account I’ve had since I was 16, so my Mom is still on it, and the cheques. My spouse makes fun of me. @evacide@hachyderm.io

@RuthMalan@mastodon.social small non-profit conferences held at a school campus, with no budget, would appreciate it, but unless it has AI and monster trucks, a large US conference is likely uninterested. Systems theory also isn’t popular in our upper education. My human factors engineering course was cancelled for the two years I tried because we couldn’t get more than 6 students.

@bryanredeagle@beige.party Ugh, I’m so tired of this infra anti-pattern pushed FAANG worshipping kubebois.

RE: https://live.acarsdrama.com/@acarsdrama/116927482262587381 They’re both named Oliver, are dating and someone put meat scraps in the vermicompst. The culprit was in fact their room mate Liam, again.

@cR0w@infosec.exchange At scale this seems like a potential poisoning mechanism.

@TimWardCam@c.im @cR0w@infosec.exchange @MrAndrewD@aus.social This is a fair lesson actually accounted for by state and municipal disaster response. Why is making schools safe and available a top tier item during a natural disaster? Because response and recovery people aren't available if their kids aren’t safe.

@hrbrmstr@mastodon.social yay so are my manuals (aka the 2026 anti-theft device) 2006 Subaru and 2015 Tacoma!

@nyanbinary@infosec.exchange I love someone included the Mk2

@neurovagrant@masto.deoan.org The name Berenstain is OpSec AF.

@Sempf@infosec.exchange @FritzAdalis@infosec.exchange there are family plans for PrivacyBee and DeleteMe. But if they want to be found that’s a much different thing.

@hrbrmstr@mastodon.social AS401518?

My Moon Picnic with my goth & Wiccan spouse was really nice. Thanks kick-ass 99.7% moon and clear WA skies!

@tantramar@zeroes.ca @AskPippa@c.im Some of BC’s top cocktail bars have moved off US spirits very successfully. (Key Party, Wind Cries Mary, Citrus & Cane) It was enough time to shift preferences, recipes and stable supply chains. Even under favorable political conditions, going back would incur a cost and risk.

The Isar launch site in Andøya Norway is ridiculously pretty.

https://nvd.nist.gov/vuln/detail/cve-2026-63795 #cve202663795 #cve #linux #cve_2026_63795

Whale watching always makes me so happy. I highly recommend this for a team activity. #seattle #orca

@hrbrmstr@mastodon.social The article and slop remind me of Ms Lovett’s songs from Demon Barber of Fleet Street. jfrog needs to be more careful with their coriander.

@ocursedspite@thecanadian.social we have ‘em all for ForEx, I think! Pretty funny reactions by anyone under 30. And everyone tends to pay-the-till and keep them.

@CatherineBabault@mastodon.social Nice! I’m a sucker for bird onomatopoeias and onomatopoeics.

Hearts in trees.#timber #tolt

@cR0w@infosec.exchange Pizzadillaz food truck was in Duvall today! https://pizzadillaz.com/

@moira@mastodon.murkworks.net it even says so right on the ballot! But a good reminder nonetheless.

@TindrasGrove@infosec.exchange It’s Montana. I went to school with the (state-chartered) bank owners daughter and lots of friends worked there. And they’ll happily order us a box of new $2 bills from the Fed. Or $1 CAD bills to screw with Canadians. It feels like leaving family. But they will choose my cheques to be Pooh.. @evacide@hachyderm.io

RE: https://infosec.exchange/@bobdahacker/117037360462544912 Block and monitor these absurdly high-risks. Here’s a list to get you started. https://github.com/BadSamuraiDev/bs-lists/blob/main/ai-meeting-notetakers.md

@neurovagrant@masto.deoan.org Wish I could get away with that IR plan, not get fired, AND cash out.

@ai6yr@m.ai6yr.org the Seattle Mariners believe wut now? I swear I’ll heckle my own team if those dummies go full stupid.

Palo: "Almost Half of Malware Samples Communicate Direct to IP" Also Palo: "We don't understand why you want to Block-by-ASN." https://unit42.paloaltonetworks.com/malware-bypass-dns-direct-to-ip/ #blueteam #asn #paloaltonetworks #unit42

Henry Jimothy! Jimothy. the hero we needed. l've decided to give 100 percent of the money made from this painting to Ballard food bank, a place that helped me through some of my hardest times. Make your offer in my DMs and the highest bid by midnight will get the painting and the ballard food bank will get a hook up they deserve. https://www.instagram.com/p/Da8opgCh6GS/ #ballard #jimothy