@burritosec@infosec.exchange

@burritosec@infosec.exchange · 4d ago

soc-as-a-service talks to helpdesk-as-a-service and, uh, wait, why is no one from the actual org affected by the security incident in this conversation yet?

0

1

0

burritosec

@burritosec@infosec.exchange · Aug 05, 2026

the playlist I made when I was working night shifts in a grocery store still absolutely slaps after all these years

0

burritosec

@burritosec@infosec.exchange · Aug 05, 2026

charged my pixel watch (yeah I know) before bed and the splash screen said "ready to go!" uh huh. ready to go night-night. ready to go beddy-bye.

0

burritosec

@burritosec@infosec.exchange · Aug 04, 2026

Replying to @darfplatypus@infosec.exchange

@darfplatypus@infosec.exchange this is an "it depends" answer through and through. I don't like that I have to pick one, way too situational

0

1

0

burritosec

@burritosec@infosec.exchange · Aug 04, 2026

Replying to @Sempf@infosec.exchange

re: nsfw shitpost Hover or focus to reveal Sensitive

@Sempf@infosec.exchange @darfplatypus@infosec.exchange can't bend the fiber like that, last I tried.

0

burritosec

@burritosec@infosec.exchange · Aug 04, 2026

nsfw shitpost Hover or focus to reveal Sensitive

bgp stands for bondage gateway protocol

9

2

0

burritosec

@burritosec@infosec.exchange · Jul 31, 2026

just had to explain what Homestar Runner was to a younger coworker and I am feeling the creeping shadows enter the room

0

burritosec

@burritosec@infosec.exchange · Jul 29, 2026

RIP Kavinsky. Dammit. https://www.france24.com/en/france/20260729-french-dj-kavinsky-found-dead-in-paris-home

France 24

French DJ Kavinsky found dead in Paris home, local media reports

French DJ Kavinsky, who produced the pounding track "Nightcall" that featured in the hit 2011 film Drive and performed alongside Belgian singer Angèle at the closing ceremony of the 2024 Olympics, has

0

1

0

burritosec

@burritosec@infosec.exchange · Jul 27, 2026

Replying to @infoseclogger@infosec.exchange

@infoseclogger@infosec.exchange I have the dubious blessing of a 207 area code. You can figure out the rest, I'm sure.

1

0

burritosec

@burritosec@infosec.exchange · Jul 27, 2026

LLM trained only on US democratic party fundraising text messages

0

4

0

burritosec

@burritosec@infosec.exchange · Jul 27, 2026

new york is this cosmic torture where there are absolutely wonderful things to witness and experience and everything within a five block radius of those things is swearing and diesel engine exhaust and raw human stupidity

0

burritosec

@burritosec@infosec.exchange · Jul 24, 2026

Replying to @neurovagrant@masto.deoan.org

@neurovagrant@masto.deoan.org @pdfarranger@fosstodon.org @eff@mastodon.social not an official assessment by any means but *usually* these types of activities lead to the download of a junk adware application - currently don't have access to the tools I'd need to dig on the domains that @neurovagrant@masto.deoan.org has provided though

0

burritosec

@burritosec@infosec.exchange · Jul 23, 2026

Replying to @cR0w@infosec.exchange

@cR0w@infosec.exchange This image is incredible

0

1

0

burritosec

@burritosec@infosec.exchange · Jul 23, 2026

The NTFS epoch is just fucking weird and I will happily pay anyone to explain the reasons behind it to me.

0

burritosec

@burritosec@infosec.exchange · Jul 21, 2026

i've heard a lot of "oh, I'm from the era when the PLA left their webshells wide open" and i can't wait to say "i'm from the era after SolarWinds and the ClickFix heyday". assuming we ever find a way past ClickFix.

0

burritosec

@burritosec@infosec.exchange · Jul 18, 2026

every UI designer should take steel toe boots to the nose for this cutesy rotating glowing highlight bullshit around the AI tool icons. bring back the tag you fucking dorks

0

burritosec

@burritosec@infosec.exchange · Jul 17, 2026

anyone know what actually backs that whole guaranteed 3% return on a high yield savings account

0

1

0

burritosec

@burritosec@infosec.exchange · Jul 17, 2026

agents generate the hackiest most never-send-this in prod solutions to a developer's problems and the second someone pops 1 of the 75000 NPM packages in your dev team's dependency chain, they now get said agent and you aren't auditing what it does

8

0

3

0

burritosec

@burritosec@infosec.exchange · Jul 16, 2026

Replying to @burritosec@infosec.exchange

@chillybot@infosec.exchange excellent detail on the burrito. and the floofy ears.

1

0

burritosec

@burritosec@infosec.exchange · Jul 16, 2026

Replying to @chillybot@infosec.exchange

@chillybot@infosec.exchange this is a weird shiny

1

0

burritosec

@burritosec@infosec.exchange · Jul 16, 2026

Replying to @thepacketrat@infosec.exchange

@thepacketrat@infosec.exchange aesop rock has a song called "pigeonometry" that you might find relevant.

0

burritosec

@burritosec@infosec.exchange · Jul 15, 2026

Replying to @lauren@mastodon.laurenweinstein.org

@lauren@mastodon.laurenweinstein.org Sorry for the random empty tag just now. Didn't have my link ready. https://youtu.be/fuLllNyfiHs?si=bf7W0YvSflmmpwnB Also made famous by Eric Koston.

0

burritosec

@burritosec@infosec.exchange · Jul 15, 2026

alc, bad joke Hover or focus to reveal Sensitive

to the tune of "Kokomo": tequila, corona, oooh I wanna sip ya

0

burritosec

@burritosec@infosec.exchange · Jul 13, 2026

undisciplined engineering is just figuring out different ways to set stuff on fire and vibe coding is undisciplined engineering at scale

0

1

0

burritosec

@burritosec@infosec.exchange · Jul 09, 2026

Replying to @burritosec@infosec.exchange

glad CISOs are losing their minds that their entire enterprise security is at risk from this shit though

0

1

0

burritosec

@burritosec@infosec.exchange · Jul 09, 2026

script dorks can't even hand write their own batch scripts anymore. this one clearly has LLM comments sprinkled in it. truly a sad state of affairs

0

2

0

burritosec

@burritosec@infosec.exchange · Jul 06, 2026

Replying to @neurovagrant@masto.deoan.org

@neurovagrant@masto.deoan.org I would not describe that pile as "little"

0

burritosec

@burritosec@infosec.exchange · Jul 06, 2026

What is a CI/CD pipeline? A miserable little pile of secrets.

0

1

0

burritosec

@burritosec@infosec.exchange · Jul 06, 2026

So many years after it was said and Dan Kaminsky's brilliant simplicity in "We're gonna build a stateless TCP stack. It just sends data, it doesn't know to who, and the other guy remembers he's talking to me." is still so wonderful.

0

burritosec

@burritosec@infosec.exchange · Jul 05, 2026

Replying to @burritosec@infosec.exchange

quick update we've also gone through "YMCA" by the village people, "let's go crazy" by Prince, and currently are on "September" by Earth, Wind and Fire

1

0

burritosec

@burritosec@infosec.exchange · Jul 05, 2026

the medley for the DC fireworks show using both "don't stop believin'" and "livin' on a prayer" certainly was a choice

1

0

burritosec

@burritosec@infosec.exchange · Jul 03, 2026

happy american holiday weekend, bsky's cdn is eating shit

0

burritosec

@burritosec@infosec.exchange · Jun 30, 2026

duuuuuumb question but does anyone have any empirical evidence that tools like ublock origin will mitigate/kill/prevent clickfix pop ups? pretty sure I saw a blog about this but I cannot find it

0

4

0

burritosec

@burritosec@infosec.exchange · Jun 27, 2026

nsfw shitpost, ai adjacent Hover or focus to reveal Sensitive

subagent this subagent that no one ever hears about dom agents

0

burritosec

@burritosec@infosec.exchange · May 13, 2026

the burritosec is on PTO and having steaks and beers to celebrate. the burritosec is in full duplex mode

2

0

burritosec

@burritosec@infosec.exchange · May 11, 2026

but without "slop", would we not know "peak" as well?

0

1

0

burritosec

@burritosec@infosec.exchange · May 11, 2026

It's the day.

1

0

burritosec

@burritosec@infosec.exchange · May 11, 2026

over on bluesky they're all hotly debating what is the definitive millennial song, and I would like to submit "chasing cars" by snow patrol for that consideration

1

0

burritosec

@burritosec@infosec.exchange · May 08, 2026

https://www.youtube.com/watch?v=TzVZE9UdKIo
internet right now be like "we alll fallll downnnnn"

2

0

burritosec

@burritosec@infosec.exchange · May 08, 2026

all things being equal I'm pretty sure AO3 has better uptime metrics than AWS or Azure

2

1

0

burritosec

@burritosec@infosec.exchange · Apr 23, 2026

Replying to @tinker@infosec.exchange

@tinker unsurprising given the us fed gov is a big customer of theirs in general & their certs are on the approved list for DoD employee certification requirements.

6

0

burritosec

@burritosec@infosec.exchange · Apr 22, 2026

new boards of canada album may 29th
get hype

0

burritosec

@burritosec@infosec.exchange · Apr 22, 2026

it must rule not knowing how anything works or being at all curious about it, you actually reap the benefits of shoving a chatbot into every corner of existence

5

0

1

0

burritosec

@burritosec@infosec.exchange · Apr 22, 2026

Replying to @chillybot@infosec.exchange

@chillybot@infosec.exchange

5

2

1

0

burritosec

@burritosec@infosec.exchange · Apr 21, 2026

if you remember steam powered giraffe you're likely neglecting some important age-based medical checkups

3

0

burritosec

@burritosec@infosec.exchange · Apr 19, 2026

bet a bunch of you were insufferable when electroswing was in vogue

10

3

5

0

burritosec

@burritosec@infosec.exchange · Apr 16, 2026

NIST announcing it's only going to triage CVEs found in software that the government uses is a great practical joke because there's absolutely no authority that can reasonably catalog every piece of software the government uses

12

1

3

0

burritosec

@burritosec@infosec.exchange · Apr 14, 2026

Replying to @gayint@infosec.exchange

@gayint see you at RSA next year!

3

0

burritosec

@burritosec@infosec.exchange · Apr 04, 2026

https://www.bleepingcomputer.com/news/security/fbi-warns-against-using-chinese-mobile-apps-over-to-data-security-risks/
only red-blooded American app vendors get to run code on *my* patriotic mobile device with the exact same permissions matrix to mine the exact same data

BleepingComputer

FBI warns against using Chinese mobile apps due to privacy risks

The U.S. Federal Bureau of Investigation (FBI) warned Americans against using foreign-developed mobile applications, particularly those created by Chinese developers.

5

0

3

0