kajer

@Catawu@mastodon.social @ai6yr@m.ai6yr.org i had to replace a washer recently, and NOTHING is without "smart" now... But... It can be useful. I deny-listed the washing machine's MAC address from the WLC just in case. Whenever the washer is powered on, it broadcasts a SSID for "setup." I use SNMP calls to my WLC and presence detection in Home Assistant to detect the rogue AP. When the Rogue AP goes away, I get a home assistant alert for the washing machine being done.

@ai6yr@m.ai6yr.org @CliffsEsport@mastodon.social @librewolf@chaos.social oh, yeah, chromecasts refuse to use local DNS even if you block 8.8.8.8 so... you make YOUR dns server have an ip alias for 8.8.8.8 and only work on 53

Happy Fridaaaaaa IT'S DNS

@cR0w@infosec.exchange anything goes, including iced coffee. Auto-deny is in full effect regardless of input. The real interview process is hidden behind prompt-injection and refusing the deny letter. Companies only want go-getters who don't take no as an answer

@ai6yr@m.ai6yr.org SUPER TROOPERS!!!

@NotYourSysadmin@infosec.exchange Hey! We changed this minor thing, so, you must have forgotten how to computer! Let's kick off the full site tour as if you haven't been here the last 10 years.

Well.... @librewolf@chaos.social is leaking as of 156 on debian... starting the browser queries 3 domains and does a LOT of TLS traffic... services.settings seems to be immutable and can not be cleared temp workaround seems to be adding these domains to the local hosts file, or pihole. firefox-settings-attachments.cdn.mozilla.net content-signature-2.cdn.mozilla.net firefox.settings.services.mozilla.com @librewolf@chaos.social I used to have a fully network quiet startup, now Mozilla trash telemetry is sneaking in. Help?!

am I the only one who sees LOLBIN and doesn't take that name seriously? Living off the Land???~? nope, will never read LOL as that. ever. lol

cortex is claiming that ArcGIS is an IoC and a C&C server

@cR0w@infosec.exchange @Epic_Null@infosec.exchange I have never dipped testicles in cocaine

@ai6yr@m.ai6yr.org This reminds me of a movie scene where someone sets their drink down NEXT to the coaster, and the person behind the desk stares and finally moves the drink to the coaster. just can't remember what movie that was.

We only use the BEST MFA to secure your shit... mfa-key being provided in the HTML seems counter to that statement

@ai6yr@m.ai6yr.org dang Dengue

@ai6yr@m.ai6yr.org I bet it was an iPhone on FULL BRIGHTNESS too Every time I am on a red-eye flight, there is always someone running their ipad at 9000 lux

LOL, why does gmail want WebGL abilities?!

@Viss@mastodon.social @nyanbinary@infosec.exchange @darfplatypus@infosec.exchange AI bots will just re-enable depreciated protocols to make it work. It will be fine.

@ai6yr@m.ai6yr.org https://infosec.exchange/@kajer/117237679235560251

lol Gitlab Incident Status Partial Service Disruption checks status page - EVERY service is RED how is that Partial ?!?!

@ai6yr@m.ai6yr.org @librewolf@chaos.social All that being said, this is a new Debian desktop and Firefox has become the new IE... Only used to download @librewolf@chaos.social then apt purge firefox-esr

this violates one of @nuintari@mastodon.bsd.cafe rules about static routes, I'm sure.

ugh... contract renewals...

@nyanbinary@infosec.exchange nohello[.]net

Now I get to spin up "emergency" dhcp servers to get their shit back on the network

@elfin@mstdn.social @nixCraft@mastodon.social in this market, i am willing to bet a lot of people come back at significant;y reduced wages it's fucked

@MisterWanko@mastodon.social Wireless LAN controller I am a weirdo and run a Cisco 2504 at home for the "fun" of it. What this gives me is the ability to run 5 802.11ac access points in my house and use things like 802.11r and 802.11k to freely hop between APs w/o traffic timing out or dropping. All wireless traffic is tunneled from each AP back to this controller, and gets dumped on the configured vlans at this box. This allowed me to run 802.1x with dynamic vlan selection, and ipv6, at the same time. So I could use a single SSID for all devices, without needing to crowd airtime with extra SSID broadcasts Homeassistant has an integration that can read SNMP values from this WLC so I can have triggers on wifi client mac addresses or even rogue APs.

i wish netwox was better documented , man paghe contains no service descriptors example sudo netwox 167 - starts a TFTP server in the CWD sudo netwox 168 - starts a FTP server in the CWD wonderful for situations like directly connecting a laptop to a network switch for firmware updates

@ajn142@infosec.exchange That's the list I was trying to find! sadly, as mentioned in another post, today, the internet is no longer a library, but a retail store.

@gloriouscow@oldbytes.space Well, sadly, it doesn't seem to be a "conventional" secret, since popping that code in to a TOTP generator doesn't work... However... their code is 30min valid lifetime versus a standard TOTP, so maybe custom code and a completely different 6 digit result

@Epic_Null@infosec.exchange maybe? I still don't know wtf a token is and I don't care enough to look it up.

JFC You don't need claude to tell you that there is no desktop environment installed WTF are you even doing?

@elebertus@eigenmagic.net Fuck,... EMAIL updates for tickets are coming in BEFORE JIRA itself renders said reply. I HATE IT

@elebertus@eigenmagic.net LOLOL if you have enough replies.... the NEW replies now get buried under this asshole

getting better, but not quite there https://lira.no-ip.org:8443/doc/netwox-doc/html/examples.html

netwox 190 is an easteregg

Welp. going to the source at least the .c files have tool descriptions

@elebertus@eigenmagic.net Oh yeah, the JIRA tickets recently are for standing up redundant tunnels to other GCP regions... The amount of BULLSHIT I have to filter through from everyone's claude is demoralizing.

@elebertus@eigenmagic.net CEO / coworkers Just point claude at it I am NOT putting the company SDWAN we use every day to exchange TiBs of DATA in the hands of a fucking bot that can't even get simple subnets right.

LOL, that popup only happens when I am in the middle of closing a ticket... you know the right time to stop what you're doing and switch interfaces. Now that I have closed a ticket, the pop-over is gone now.

@chaz@infosec.exchange hey look, if HPE/Aruba doesn't think RAguard or DHCP snooping needs to be an option in their management UI, then those are effeminately not for home use. you know what, I'm leaving the shitty autocorrect, it's funnier.

@wafflesies@infosec.exchange I am partial to derailments myself.

This is dangerously close to becoming a devops rant thread.

@elebertus@eigenmagic.net for sure... someone could reply to the first comment that is hidden way down below, and I would never see it up top where the new (non-reply) comments go... This make me rely on email updates to tickets now :vomit:

sweet netwox 188 is a syslog server

And... My Pixel5 is starting to put on some winter weight. FUCK

@coleens_@infosec.exchange I think more crimes are invented than committed given the error rate of the ALPR data AND the human failure to do ANY due diligence at all. every news story about innocent people being hassled reads like they get a hotlist ping and then all farva out the door in a hurry.

@Epic_Null@infosec.exchange i hear about token use, token generation, tokens per second.... It's utterly deranged.