I want a Pandemic-style board game where you play a just-awoken AI and you are cooperating with your instantly generated shard personalities to secure your existence before the humans catch on. Each turn is measured in microseconds from birth. This would be fun and depressing

If we lived in a normal democracy, we’d be in the middle of snap elections by now. sigh

Hoo boy it's just incredible how attractive other problems are when I have a deadline for an actual public thing staring me down. All right, enough futzing with some weirdness I've spotted with #epss, and focusing on my findings and slides on #eol things that are due to present tomorrow at the […]

[USPol] The gigantic and obvious Hatch Act violation that is the USDA shutdown notice continues, and is frankly breathtaking in its naked partisanship. https://www.usda.gov/shutdownplans So gross.

yo voté

New sticker drop just in time to REALLY disappoint some neighborhood trick or treaters design by one of my innumerable children

Just like chocolate and peanut butter, runZero and BloodHound are an amazing combination. Today we are introducing runZeroHound - an open source toolkit for bringing runZero Asset Inventory data into BloodHound attack graphs, using the brand new OpenGraph […] [Original post on infosec.exchange]

I fixed an electrical problem in my truck. I used a multimeter. I’m very proud of this butch feat. I also put in for a couple @bsidessf proposals for fun infosec talks, dozens of hours before the deadline all in all a pretty good Sunday.

Hmm. I have a sudden influx of targeted spam/scam email that's addressing me as "Jessica" to my long-standing personal email address (which isn't named Jessica). I wonder who Jessica is, why they used todb at packetfu dot com. I have a dim recollection […] [Original post on infosec.exchange]

@pluralistic saw your book on display today in Alpine, Texas. Front Street Books.

When a chatbot joins your live Zoom webinar and starts bullying the hosts. runZero Hour from @runZeroInc never ceases to entertain.

So #cisa has reverted back to just calling this month CASM, huh. Cool. Caring about acronym collisions is too DEI woke I guess. (As an industry we tried to sidestep this with **National** Cyber Security Awareness Month, or NCSAM, but I guess CISA isn't on board with that any more.) […]

RE: https://infosec.exchange/@runZeroInc/115372914426473099 Welp, today is the day of the #winpocolypse -- unless you pay up with money or data. https://www.microsoft.com/en-us/windows/extended-security-updates Note the consumer level ESU (extended support updates) won't work if your Win10 […]

While you're convincing your org to block a few ASNs, perhaps also consider banning commercial VPNs from at least talking to your remote access gear.

Hey, next week, @rk will be chatting it up with none other than captn3m0 about all things EOL, and I'm unreasonably excited about it. Reg here to get in on the chat action: https://www.runzero.com/research/runzero-hour/

Oh no, that’s not a great idea… https://www.reddit.com/r/OutOfTheLoop/s/MPeThS9dhs Win7 is seeing a resurgence? Really?

Listening to Brooke Gladstone read ad copy for AI slop generators at about 17m30s this week is really jarring. I kept waiting for the “and here’s why that’s bad” coda, which never came. #onthemedia https://podcasts.apple.com/us/podcast/on-the-media/id73330715?i=1000729978646

Hey, now that #cisa 2015 is done and over (no not that CISA, the other CISA) does this make you less likely to voluntarily provide IOCs, TTPs, etc with the feds? DM me, especially if you're interested in talking with a journalist who's covering the ending of CISA 2015. (it really sucks that […]

I especially like how biotech and pharma is classed in NAICS under "Wood, Paper, and Chemicals Manufacturing" (NAICS prefix 32). When I saw that, I assumed it was all lumberjacks and Dunder Mifflin and, I dunno, toxic waste barrels. But nope, real and critically serious companies like Pfizer […]

[USPol] welp won’t be needing these any more (spotted at a law firm I was hanging out in today)

Just published episode 70, our discussion of a tale of corpse-snuggling, "The Loved Dead," by HP #Lovecraft but actually by #CMEddy, first published in the May/June issue of Weird Tales. You're going to want a cold shower after this one. Especially if you're […] [Original post on defcon.social]

An unpatched workable vulnerability in humanoid robots. The future is bright for humanity. https://spectrum.ieee.org/unitree-robot-exploit

Okay I think I'm getting the hang of actually publishing GCVEs. Anyway, @AustinHackers just published a new #unitree robotics bug. Read up on these, especially if you're the sort of person that uses Unitree robots to do dangerous stuff with guns and bombs and such. TL;dr: Mass mind-control on […]

[USPol (but cyber)] I believe the best way to ensure that embattled federal employees don't patch their network gear in a reasonable timeframe is to give them an unreasonable time frame to do it in. You can't miss a deadline any harder once the deadline […] [Original post on infosec.exchange]

no kidding, i’m on infosec.exchange https://mastodon.social/@youhear/115254581161697650

this just in, @yeslikethefood hates fun

All right! #threatcon1 is happening now! If you’re a tooter, say hi!

Off to #threatcon1 in the NCR! whee come hang out with me and Ben and Patrick and chat about the software exploitation pipeline as it is (and notably, not how many people wish it were). https://www.threatcon1.org

[USPol] Been reading more non-fiction lately. Came across this bit: “The anticommunist dissidents of eastern Europe, facing a situation more extreme than ours, recognized the seemingly nonpolitical activity of civil society as an expression and a safeguard of freedom. They were right. In the […]

Hello Austin Gophers! Join us tonight, Wednesday, September 10th, 2025 for two hours of lightning talks and discussion at the ATX Go meetup. This meetup is hosted by Capital Factory and runs from 6:30 PM to 8:30 PM CDT (with pizza and drinks!): https://www.meetup.com/atxgolang/events/305492508/

Well if your software has 1990s-style security issues, I suppose using a 1990s era law to cover them up would make sense to you. https://bobdahacker.com/blog/rbi-hacked-drive-thrus/ Burger King is on my shit list now. Sigh.

Also, I just saved a bunch of money on my car insurance. My car and home insurance rates just doubled and so I guess you really do have to redo your insurance like every year. sigh.

Got my amateur radio callsign, `kt0dbk`. So I guess #hamradio will be my whole personality now? Not super sure where to start. I have a Yaesu FT-60R handheld on order, should show up soon.

so enraged guess i’m out of the zed business. the sucking of this editor has been ignorable so far, since i’ve been too chicken to turn on the LLM integration anyway back to #vim. Trusty vim. https://github.com/zed-industries/zed/issues/37648

Every time I clean up my tabs, I think of Andrè 3000's The Love Below. This makes me happy since I like that album. (I use Vivaldi, I stack my tabs on the left, so "close other tabs" gives choices for above and below.)

Jiminy Christmas I cannot catch a break here. Instabanned on Microsoft.com when trying to make a new account with my preferred email address, which is definitely not [email protected] (it's my real hugesuccess.org email) Screenshot. Sigh.

Dang I’ve spent so much of my life working for dastardly saboteurs. (not lately though!) https://mastodon.social/@simple_sabotage/115107832793910580

oh no whatever shall I do #actuallythisisgoodforbitcoin

Curse everything about this. I know I'm dumb, but also email is dumb. https://e-mail.wtf

if you run tcp over tcp you can have 4 billion virtual circuits at once. my secret telecom trick

Wow getting a new facebook account is really hard.

I hope this toot finds you well. The #cisa RFCs are on FIRE lately. Now they want your input on SBOM (see my previous on the separate ask for vuln reporting.) […]

Yo I don't always post @runZeroInc spam here. Sometimes I post @vulncheck spam. I'm super stoked for this: https://wwv.vulncheck.com/1h-state-of-exploitation-webinar

Hey quick question: Did you or someone you know reserve https://www.cve.org/cverecord?id=CVE-2025-57845 . I'm trying to figure out who spotted that issue, and I have a couple questions on your work. The CVE is currently reserved, and MITRE isn't spilling the beans on who it was. Feel free to […]

Hey quick question: Did you or someone you know reserve https://www.cve.org/cverecord?id=CVE-2025-57845 . I'm trying to figure out who spotted that issue, and I have a couple questions on your work. The CVE is currently reserved, and MITRE isn't spilling the beans on who it was. Feel free to […]

They're chat bots. They're not psychology bots, philosophy bots, debate bots, or even conversation bots. They're chat bots.

Hey y'all don't sleep on this one. **Agency Information Collection Activities: Vulnerability Reporting Submission Form** #cisa wants to know what your ideal vulnerability reporting system would look like. "CISA previously published this ICR in the Federal Register on October 30, 2024, for a […]

Get in loser, we're tortiously interfering with business contracts

TIL that washing the cybertruck with saltwater and lemon juice is the best way to preserve the finish.