Bill

I break web applications.

Public Key

npub13yzl843d5qh3rxjqq4ztj2w9av2q6mjvqh4pc0l5jp6maamzxnnq92p3eh

NIP-05 Address

Sempf_at_infosec.exchange@mostr.pub

Profile Code

nprofile1qqsgjp0n6ck6qtc3nfqq239e98z7k9qddexqt6su8l6fqad77a3rfesprpmhxue69uhhyetvv9ujumn0wdmksetjv5hxxmmd62ktdf

Publishing to

relay.noswhere.com

Author Public Key

npub13yzl843d5qh3rxjqq4ztj2w9av2q6mjvqh4pc0l5jp6maamzxnnq92p3eh

Show more details

Last Notes

2024-08-17 03:57:10

There's a buffer overflow in the Windows IPv6 stack. Rust to the rescue? ( Pretty sure not, just wanted to rustle some jimmies.)
https://securityaffairs.com/167117/hacking/windows-rce-tcp-ip.html
#windows #ipv6 #cve

2024-08-13 19:07:21

Have I mentioned how happy I am to be testing a plane jane ecom site this week? Challenges are fun, but every now and again testing something that just does request and response, no BS, is super nice.
Even if they do send the password with every request in the HTTP header.

2024-08-13 03:43:45

Hhhhheeeeeeeyyyyy @npub1vcl…k6t3, isn't this that vuln we were talking about last week? With the lnk files?
https://thehackernews.com/2024/08/russian-government-hit-by-eastwind.html
#windows #security

2024-08-13 02:38:10

- reply

@npub1vcl…k6t3 I call them a fashion brand, but software cartel is better. I guess both can be true.

2024-08-09 03:49:07

- reply

@npub1vcl…k6t3 aNo, I just learned about it. Research seems reasonable.

2024-08-09 03:42:56

Utterly fascinating flaw in the way *nix systems handle requests to 0.0.0.0 in browsers.
https://www.oligo.security/blog/0-0-0-0-day-exploiting-localhost-apis-from-the-browser
#http #browser #rfc1122

2024-08-06 23:28:56

Her Majesty in repose. #catsofmastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/917/653/512/721/981/original/7310f2672e09e032.jpg

2024-07-29 03:49:11

Ok, this is already gonna be the funniest bug of the week and we haven't started.
https://www.windowscentral.com/software-apps/windows-11/passwords-disappear-for-millions-of-windows-users-thanks-to-google

2024-07-28 20:57:19

- reply

@npub1vcl…k6t3 Tennis would just say "hahaha good luck"

2024-07-25 03:55:35

The Verve has a speculative look at potential Harris administration tech leanings.
https://www.theverge.com/24205360/kamala-harris-tech-policy-explainer-democratic-presidential-election
#technology #policy

2024-07-21 19:21:46

- reply

@npub1vcl…k6t3 shit that chart is lacking so many expectations it isn't worth the pixels it used.

2024-07-19 19:34:01

- reply

@npub19ln…4rwe I wonder if they will give an outage credit like a cable company.

2024-07-19 12:40:33

Client machines this morning. The one on the left has been on that boot screen for hours. Bonus early #caturday #cloudstrike
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/813/188/151/134/754/original/62e8dd3ac793af45.jpg

2024-07-19 03:05:10

- reply

@npub1vcl…k6t3 pfft ORMs are so 45 minutes ago.

2024-07-05 03:55:44

ULTRIX on an RP2040? Don't mind if I do.
https://github.com/rscott2049/DECstation2040
#retrocomputing

2024-07-03 03:23:26

Decades long iOS supply chain attack.
Woof.
https://www.theregister.com/2024/07/02/cocoapods_vulns_supply_chain_potential/
#appsec #ios #supplychain

2024-06-29 20:51:45

h/t @npub1j4q…x25x
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/701/882/301/726/951/original/4d2d920fb8c956d9.jpg

2024-06-28 14:55:21

I have ants on my raspberries. Any ideas? #gardening
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/694/817/855/049/643/original/4292a7fb7b03be0a.jpg

2024-06-27 03:49:26

Ho-ly shit. Supply chain and malvertising in one fell swoop.
https://thehackernews.com/2024/06/over-110000-websites-affected-by.html?m=1
#malware #foss #security #supplychain

2024-06-26 18:26:19

We take a pause from our normal shitposting to ask:
Anyone have a recommendation for a "I've fallen and I can't get up" button for older folks? All of them seem to be scams these days.

2024-06-25 03:43:06

This remote access tool called Rafael is being deployed as android malware in PDFs (bug in FoxIt). Kinda slick. I mean, if you into breaking the law and shit.
https://github.com/swagkarna/Rafel-Rat
#android #malware

2024-06-25 02:46:01

- reply

@npub1nlt…t44t Hmm. I dunno, might need research.

2024-06-20 02:44:36

Oh #git (and maybe #programming) - if I am working on an OSS project and I have personal fork, is it normal to merge my personal branch into main before I make a pull request? That would make my life a lot easier.

2024-06-18 20:13:40

- reply

@npub1nlt…t44t Yup. Were good too!

2024-06-18 20:09:23

- reply

@npub1nlt…t44t Just set it right on the concrete!

2024-06-17 21:26:00

- reply

@npub1nlt…t44t With me it was always a beer. That's a better idea.

2024-06-16 20:04:16

Ok NOW what do I do?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/628/082/334/350/135/original/fe0a39aa579d48ab.jpg

2024-06-16 18:45:55

All righty, mise en place! #fathersday #paella
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/627/778/524/513/136/original/75db156bc52a6168.jpg

2024-06-14 14:46:57

- reply

@npub1gzl…kk4u I'm no giri but that looks like lunch to me. Leave em in too much longer you're be fighting off pests of various kinds.

2024-06-11 15:51:13

Great conversation on @npub1384…zdvh's Technology and Friends about application security and Ye Olden Days.
#podcast #programming #security
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/598/780/342/493/870/original/3afd3bd04cbfadce.png

2024-06-10 17:50:40

I'm trying to work. Really. The couch just got comfy. What's a programmer gonna do against such adversaries?

2024-06-08 18:16:18

Blackberries! Soon to be purple spots on my car. 🫤 🐦 💩
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/582/367/081/730/197/original/8c6b40734f829890.jpg

2024-05-30 18:24:51

- reply

@npub1nlt…t44t Well, I guess they already do that ...

2024-05-30 18:23:39

- reply

@npub1nlt…t44t Staffing changes sometimes mean tool changes. The vendors should capitalize on that reality. Happens a lot in dev too.

2024-05-30 18:17:17

- reply

@npub1nlt…t44t Oooo. How did that go?

2024-05-28 01:04:09

Saw my first lightning bug of the year!

2024-05-25 21:59:06

- reply

@npub1nlt…t44t Holy yummies, Allan! That is ... Really fucking impressive.

2024-05-25 02:21:59

- reply

@npub1nlt…t44t I can't tell what you are making, but there will be a metric shitton of it.

2024-05-20 15:22:52

- reply

@npub1lgy…aefg But I never have TIME for that.

2024-05-20 13:49:18

- reply

@npub1lgy…aefg I have at least four poking their um, poking, um, showing up in my landscaping. Could be a start!

2024-05-20 13:36:54

Not the zombie apocalypse I was promised.
#mushroommonday #gardening
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/473/681/756/098/018/original/583f0b2a4151ab0e.jpg

2024-05-18 02:59:41

Blackberries are gettin ready! #gardening
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/459/848/988/411/722/original/9537c59db3b53fa7.jpg

2024-05-14 19:36:38

- reply

@npub1vcl…k6t3 #veilid enters the chat.

2024-05-12 22:14:09

#rightinthefeels
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/430/414/081/600/345/original/f2c4200905e29e36.mp4

2024-05-11 20:20:11

- reply

@npub1nlt…t44t Looks more like a GET to me, after an OPTIONS.

2024-05-06 17:28:39

I need a QA version of the XKCD swordfighting "it's compiling" comic except it says "Postman is updating"

2024-05-01 04:06:13

Docker Hub: the new npm?
https://jfrog.com/blog/attacks-on-docker-with-millions-of-malicious-repositories-spread-malware-and-phishing-scams/
#docker #security

2024-04-30 16:44:00

- reply

@npub1vcl…k6t3 Remember when it couldn't make calls because we were "holding it wrong?"

2024-04-29 22:05:41

- reply

@npub19y8…wxgj I asked on the discord, we'll see what that community says.

2024-04-29 21:38:46

- reply

@npub19y8…wxgj I don't see one that does that, or even if it would be possible honestly. Define "the other direction".
Have you asked on the Discord? (Yeah, I don't like Discord either but it's a reality)

2024-04-27 14:19:29

I am so behind the times but I just discovered Power Wash Simulator and I am trying not to be obsessed.

2024-04-26 22:57:06

- reply

@npub1nlt…t44t Not just pizza, but Delicious Italian Pizza
My daughter and I went to Kroger and spent a week's salary on junk food.

2024-04-24 20:30:17

- reply

@npub1nlt…t44t Wait, dangling modifier. Was the meeting set up to walk her, and you postponed that? Or did you postpone another meeting so you could walk her?

2024-04-24 20:25:47

- reply

@npub1nlt…t44t That's what you think.

2024-04-23 03:42:12

This is such a brilliantly simple flaw, I can't believe I didn't think of it.
Maybe because it is brilliant. And simple.
https://www.theregister.com/2024/04/22/edr_attack_remote_data_deletion/
#security #malware

2024-04-22 03:39:37

I'm telling yooooou. Linux on the Desktop 2024, if this keeps up.
https://www.theverge.com/2024/4/21/24063379/windows-11-ads-bing-edge-cruft
#ads #windows #linux

2024-04-18 01:37:10

- reply

@npub1vcl…k6t3 Look for the hashtags. There are lists of them out there. We use #gobucks for OSU.

2024-04-13 03:08:39

So how y'all doin, Fediverse? Things ok? As good as good be expected?

2024-04-10 14:11:08

It begins, It Begins, IT BEGINS!! #gardening
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/247/324/140/288/031/original/4e952c7f3bcf0685.jpg

2024-04-10 13:50:24

- reply

@npub1dfe…yx8m True, true! Eid Mubarak! Ooh, my excuse to make those cookies. I am not Muslim, but I'll unabashedly culturally appropriate everyone's food!

2024-04-10 13:38:47

#wednesday
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/247/196/672/616/285/original/9b12d628c114264f.jpg

2024-04-06 20:09:15

🏀 Riddle me this. The Men's Final Four is a pretty big deal, yeah? Lots of people watch? Then why the hell is it on TBS? I literally had to look that up. Does CBS really think reruns of shows nobody watches are more important? Will get more eyeballs?
@cbb #cbb

2024-04-03 11:07:25

@npub1nlt…t44t You got people in Taiwan? They OK after that quake? I just heard about it.

2024-03-30 03:50:40

Enough of these #xz shenanigans. Have you heard about the ten year old flaw in #wall?
https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt

2024-03-30 01:43:54

- reply

@npub1nlt…t44t Why do you think Reddit had an IPO?

2024-03-27 01:58:46

- reply

@npub1nlt…t44t You are killing me here, Allan.

2024-03-26 09:21:38

- reply

@npub15hj…jgmk Did you see the family of foxes on Facebook's main campus?
https://www.flickr.com/photos/tehbieber/albums/72157633491182606/

2024-03-26 00:35:02

- reply

@npub1nlt…t44t is that what being an adult's all about? I really wondered about that.

2024-03-25 02:48:00

- reply

@npub1nlt…t44t Don't forget to send that to your coworkers tomorrow.

2024-03-25 02:46:44

- reply

@npub1nlt…t44t Hey Allan!

2024-03-21 19:45:31

You know the whole search for an error and find an SO post that is EXACTLY what you are seeing, so you scroll down to see the OP say "Never mind, I figured it out" and the post is from 2007 and the account is gone?
Yeah, is me.

2024-03-20 03:49:34

I wanna farm with mechs! It's Battletech meets Stardew Valley!
https://www.windowscentral.com/gaming/cozy-co-op-space-farming-game-with-mechs-crashes-onto-xbox-game-pass-today
#gaming #cozy

2024-03-19 02:53:17

- reply

@npub1nlt…t44t Really? Or just decided right now?

2024-03-19 02:33:00

Ya ever have one of those days when you were pretty much useless. Yeah, is me.
At least tomorrow is Friday!

2024-03-19 00:24:53

- reply

@npub1nlt…t44t it's like a blue man group show.

2024-03-18 22:56:24

- reply

@npub1nlt…t44t You a thinker, you are.

2024-03-18 22:48:46

- reply

@npub1nlt…t44t I swear to all that is holy I'm getting Adam a food truck called "Fried Rice With Shit I Found In The Fridge."

2024-03-15 04:09:17

And all y'all made fun of me for wanting a dial lock on my safe.
https://www.theregister.com/2024/03/14/chinese_espionage_safe_locks/
#lockpicking #china #security

2024-03-13 01:32:38

- reply

@npub1nlt…t44t Adam is making kimchi this week! I just got all of the ingredients. Will let you know how it goes.

2024-03-12 08:33:34

My cat calls the police when she runs out of water.
Let me explain.
When Fern runs out of water, she will wander the house looking for any cup that was left out anywhere by the big smelly apes she allows to live with her. Then she promptly knocks it over. The sound of it hitting the ground triggers the glass break sensors, which sets off the alarm, which calls the police.
And they say you can't train a cat.
#catsofmastodon

2024-03-12 02:07:32

So, the US obsession with #TikTok
These folks know there is a website, right?
I mean, right?
Cause unless we are putting up The Great Firewall Of America, ya can't really just block shit.

2024-03-11 16:31:22

- reply

@npub1nlt…t44t Put out a poll with different toppings.

2024-03-11 15:13:01

- reply

@npub1nlt…t44t wat

2024-03-05 23:56:54

- reply

@npub1nlt…t44t The world is your 🦪!!

2024-03-05 04:42:17

And GitHub is under attack. Again.
https://www.darkreading.com/application-security/millions-of-malicious-repositories-flood-github
#programming #foss #security

2024-03-05 04:37:05

Wait, malicious ML models? What is this sorcery.
Just on one platform tho. Probably just a bug.
Still.
https://thehackernews.com/2024/03/over-100-malicious-aiml-models-found-on.html?m=1
#security #ml #ai

2024-03-02 12:52:35

Our cat, Fern, woke the entire house yelling in the main room. She was just going all out, and she isn't very vocal usually.
I went to investigate, fearing injury. Nope, she has found a hairband and "caught" it, saving us all. Just wanted everyone to know.
No pics, sorry, it was dark. (grumble grumble) Here is a random picture of her yelling about something she caught outside last year, a stick I think. She's our savior. #caturday #catsofmastodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/112/026/178/513/640/951/original/c1785f5a2e3be4d5.jpg

2024-02-29 13:22:44

- reply

@npub15hj…jgmk You are getting breakfast all set up over there. Cinnamon bun the other day, donut today! 🦊 🍩

2024-02-28 02:25:27

- reply

@npub1nlt…t44t 💩?

2024-02-25 02:42:29

- reply

@npub1nlt…t44t Ask him if he's gonna open another restaurant.

2024-02-22 14:14:46

- reply

@npub1nlt…t44t Well that's good at least.

2024-02-22 14:09:38

- reply

@npub1nlt…t44t This is part of what Project Fi was made for! Hopefully you won't notice anything at all.

2024-02-22 14:07:10

- reply

@npub1nlt…t44t Eventually, afterthe radios. But the radios THEMSELVES appear down.

2024-02-22 13:48:55

Me: This is no biggie, I'll just turn on VOIP."
AT&T: Hold my beer.
#att #voip #mobile
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/975/443/778/749/713/original/a343e959001656a4.png

2024-02-20 02:36:55

Do you hear that, Mister Anderson? That is the sound of inevitability.

2024-02-16 18:55:24

Hey @npub1nlt…t44t
https://techhub.social/@davidgiard/111942648452498419

2024-02-15 20:10:18

- reply

@npub1nlt…t44t Coding or writing on Windows these days is like Pushy Clippy.
"You know I could code that better than you, right?"
"Ok, AI, show me!"
<no input validation>
https://media.infosec.exchange/infosec.exchange/media_attachments/files/111/937/307/078/897/234/original/16a7dd81a861c130.jpg

2024-02-15 20:03:40

- reply

@npub1nlt…t44t Are you a Mac user? Cause on Windows its way past that and on to nosy aunt.

2024-02-15 14:10:10

- reply

@npub1nlt…t44t How can it only be THURSDAY!!??!! There is just no way. This week has been all month long.

2024-02-14 03:34:07

- reply

@npub1nlt…t44t I don't get it.
I'm not terribly smart though.