@tim_lavoie@cosocial.ca

Tim Lavoie @tim_lavoie@cosocial.ca · Jul 23, 2026

Replying to @fullywoolly@mastodon.social

@fullywoolly@mastodon.social @dheepsinque@susanklopfertruth.com Yeah, they're snooping on other signals as well. As for timing, one would think Flock would move quicker if given a very short timeline, like, "you can take them down if you're faster than our guy with a bucket truck and his angle grinder."

1

2

0

Tim Lavoie @tim_lavoie@cosocial.ca · Jun 30, 2026

Replying to @Yuvalne@433.world

@Yuvalne@433.world @fullywoolly@mastodon.social @rayckeith@techhub.social Here's an Arxiv link for the paper: https://arxiv.org/abs/2512.10100

1

2

1

0

Tim Lavoie @tim_lavoie@cosocial.ca · Jun 30, 2026

Replying to @Viss@mastodon.social

@Viss@mastodon.social @cR0w@infosec.exchange @catsalad@infosec.exchange Reminds me of how we stopped buying the fake "crab" make from pollock, after one of our dogs refused to eat some. This is a dog that would actively seek out literal crap to snack on. Don't know why, but if *she* won't eat it, neither should we.

1

0

Tim Lavoie @tim_lavoie@cosocial.ca · Jun 02, 2026

Replying to @catsalad@infosec.exchange

@catsalad@infosec.exchange @alice@lgbtqia.space Really, I've started to think that open-carry of battery-powered angle grinders should be normalized.

18

2

6

0

Tim Lavoie @tim_lavoie@cosocial.ca · May 12, 2026

Replying to @rk@mastodon.well.com

@rk@mastodon.well.com If my wife told me to start running, I'd be looking for new insurance paperwork. Not that she doesn't want to "prolong my suffering" (hah!), but she already likes to remind me that I find ways to get into mischief without adding to the likelihood.

1

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 27, 2026

Replying to @nosrednayduj@hachyderm.io

@nosrednayduj Oh, I don’t know if they’re related! Scotch broom was introduced in the west coast for sure; loves disturbed soil, so roadways get a ton of it, and nothing eats it either really.

1

0

1

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 27, 2026

Replying to @nosrednayduj@hachyderm.io

@nosrednayduj Anyone else rather triggered by large amounts of the same yellow as Scotch broom? It's that time of year where I do battle with my own plague of the invasive, introduced-by-humans yellow stuff. (In the right context, e.g. not every damn roadway ditch, it's all quite pretty though.)

0

1

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 08, 2026

Replying to @wachoperro@rebel.ar

@wachoperro @LukefromDC @Viss Yeah thanks, I wondered if that might be the case. Figured it takes zero effort to tick all the boxes anyway, at least quicker than finding out what the separate options do.

2

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 07, 2026

Replying to @LukefromDC@kolektiva.social

@LukefromDC @Viss By the way, I just reinstalled #librewolf, and a number of about:config items with "telemetry" in the name are set to "true".

3

2

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 07, 2026

Replying to @LukefromDC@kolektiva.social

@LukefromDC @Viss Yeah, that's pretty much what I see Vivaldi doing for Chrome / Chromium as well.

2

1

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 07, 2026

Replying to @Viss@mastodon.social

@Viss True, and I really love the temporary containers option on Firefox, which along with keeping uBo would be the main drivers to switch back. It's feeling like a harder sell all the time though.

1

7

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 07, 2026

Replying to @tim_lavoie@cosocial.ca

@Viss I'm feeling like we should just get Usenet back on track, so we can come up with newsgroups named alt.snoopy-malware.die.die.die

9

0

1

0

Tim Lavoie @tim_lavoie@cosocial.ca · Apr 07, 2026

Replying to @Viss@mastodon.social

@Viss JFC, there's a ton of shit in there. Makes me think that any time I run FF, I should do it while proxied through Burp. Not exactly coercing me back from Vivaldi (but I did nuke all that while I was in there).

3

10

0

Tim Lavoie @tim_lavoie@cosocial.ca · Mar 26, 2026

Replying to @johannab@cosocial.ca

@johannab Good to know! I'm not sure I'd be starting with anything named Skittles, but spicy/sweet can go together well. (Thinking some Korean sauces, and dark chocolate habanero brownies are glorious.)

0

Tim Lavoie @tim_lavoie@cosocial.ca · Mar 11, 2026

Replying to @tezoatlipoca@mas.to

@tezoatlipoca@mas.to @violetmadder@kolektiva.social @petrillic@hachyderm.io @timbray@cosocial.ca Well, you found an issue, and raised it! The approach we tend to take is that the security team identifies risks, and it's up to the business to decide from there. At least our process puts an executive sign-off in the way with risk assessments. I suspect though that the vibe-code stuff is going to change too fast for us to test it at scale, and it won't get those resulting risk assessments.

0

Tim Lavoie @tim_lavoie@cosocial.ca · Mar 09, 2026

Replying to @petrillic@hachyderm.io

@petrillic@hachyderm.io @timbray@cosocial.ca That's certainly my concern. I'm in security, so mostly watching this from the sidelines, as I listen to execs essentially pushing for "vibe-code to prod". It can only become worse when making changes to programs, since it won't be incremental change. Instead, it'll be, "no, do the thing, but not like that." The old fluff will be thrown away, and so the new version will be whatever it is, possibly completely different from last time. How do you review that?

4

1

0