faebudo

@GossiTheDog@cyberplace.social I see a lot where the cause of the incident is the uncontrolled usage of GenAI. Not where GenAI is the adversary or used by the adversary.

@KeyJ @soph Yeah, you're missing that the feature itself is slop and it adds those headers to any commit, even if you disabled AI in vscode and it also adds that it was co-authored by copilot if you used claude, kimi, gpt etc.

@vimja@tooting.ch #carryshitolympics

@cR0w I don't know if this is what you want but you can already do this with EDL (External Dynamic Lists) if you have a webservice delivering the IPs for the ASNs: https://iserv.nl/files/edl/feed.php Trend Micro replied to a similar Feature Request that they don't have a good enough data source to allow this (I suggested MaxMind ASN).

@UnderTheDome@troet.cafe @CiclistaRubio@norden.social Shift + Alt wechselt zwischen Anzeigesprachen, Ctrl + Shift zwischen Tastaturlayouts. Falls du die Tastenkombibation nicht explizit deaktiviert hast ("input language hot keys" in den Einstellungen) sind die noch aktiv. Hat mich auch schon Haare gekostet..

@albrecht@masto.a0s.de @tschaefer@ipv6.social Oh Scheisse, das IPv4 Netz auf das die Source genattet wird ist ein RFC5737 Documentation Address Block. Das kann sich einfach niemand ausdenken..

@RoganDawes@infosec.exchange @ifrauding@don.linxx.net @goncalor@infosec.exchange @campuscodi@mastodon.social HDMI also has an Ethernet channel. However Notebooks usually do not implement it. Also Displayport 1.1 afaik also has a "High" (2MB?) bandwidth back channel, however also not implemented usually and removed from newer DP standards. So they seem to have a particular threat scenario in mind but I can't imagine what it is. Also the threat model could be home office where the secure notebook is attached to the unsecure home monitor/tv or doing meetings at outside facilities where you don't particularly trust the beamer/display but still want to show media. But yeah, woud be really interesting what it does.

@tschaefer amazon.com doesn't have AAAA records, it's only reachable via IPv4 but it redirects to www.amazon.com which has IPv6 connectivity.

@davidhuser@swiss.social You could also have a look at the autodiscover.example.net DNS record to get an idea about where mailclients will be connecting to. This would help to identify the infrastructure of municipalities who use gateways to receive as well as send mail.

@albrecht@masto.a0s.de @tschaefer@ipv6.social Ich würde einfach mal ganz frech raten das das Ihre Lösung ist für einen grossen Kunden der einen Grossteil der Infrastruktur bei AWS mit IPv6 hat (IPv4 kostet extra) und für "digitale Souveränität" trotzdem noch einen Dienst bei StackIT im Backend benutzt und diesen erreichen will. Ganz geil ist ja auch das man nach dem NAT64 gar nicht mehr weiss woher der Traffic kommt und einfach alles an Traffic akzeptieren muss. Somit hat man als StackIT Kunde keine Chance mehr irgendwelche Angriffe auf Netzwerkebene abzuwehren.

SaaS companies adding AI to their products seem to be completely clueless on how to fix the security issues that this brings: https://www.promptarmor.com/resources/atlassian-rovo-exfiltrates-data

@mjg59@nondeterministic.computer A shorted TVS diode (or another component) somewhere on the 3.3V rail supplied by that regulator?

@davidhuser@swiss.social A lot of them have spf.protection.outlook.com in their SPF which means that there is a high probability that the mailboxes are actually hosted on M365 but they use a (cloud-hosted) mail security gateway like SEPPMail or cleanmail et al. I just checked some and the map should be a lot more red IMHO.