Jeffrey

Public Key

npub1cn5nsez6j3u6840a28skcsv6853ypc9gmeeznu7sa4l032kcy63q33fmtu

NIP-05 Address

jtig_at_infosec.exchange@mostr.pub

Profile Code

nprofile1qqsvf6fcv3dfg7dr6h74rctvgxdr6gjquz5duu3f70gw6lhc4tvzdgspzemhxue69uhhyetvv9ujumn0wd68ytnzv9hxgqgkwaehxw309aex2mrp0yh8qunfd4skctnwv46q5mkl84

Publishing to

relay.nostr.band

relay.primal.net

Author Public Key

npub1cn5nsez6j3u6840a28skcsv6853ypc9gmeeznu7sa4l032kcy63q33fmtu

Show more details

Last Notes

2025-04-11 08:59:32

- reply

@nprofile…795r sounds like a rough weekend ahead. Good luck.
Listened to the episode this morning, haven’t heard anything egregious. If I would take a guess, it would be on the title of the podcast being very unfortunate at the time of release.

2025-04-07 17:11:51

- reply

@nprofile…k0zs I used an Xbox 360 controller for a while, but they weren’t recognized anymore after an update. Very annoying.

2025-04-06 16:10:32

- reply

@nprofile…k0zs not sure what the state of your printer is, but I was able to just follow these steps: https://help.prusa3d.com/article/squaring-your-mini_158518
Might be similar for yours. Took me 15 minutes of active time, then some troubleshooting an testing in between admin tasks

2025-04-06 16:02:32

Fixed my 3D printer! It was ramming the print head into the build plate, but it seems that (after a year of inactivity) the X axis was sagging.
Prusa support was helpful, still helping me 5 years after I purchased my printer.

2025-04-03 14:44:18

- reply

@nprofile…k0zs Yes, but... Isn't the MFA method somewhat irrelevant for the general public in an age of phishing? Or in other words - why take the effort to move to other methods if it isn't phishing resistant?
This is coming from a Microsoft consultant, I am not aware what color the phishing-resistant grass is on the other side. The passkey/WHfB/security key flow just became somewhat decent that I can recommend it carefully at clients.

2025-04-01 13:57:02

- reply

@nprofile…36ma I do not understand anything from this, but I like the energy and dedication.

2025-03-26 18:27:20

- reply

@nprofile…cl5w congrats!

2025-03-26 11:33:10

- reply

@nprofile…0nz2 @nprofile…d9ln @nprofile…cl5w it was a very fun read for me, and I still can’t take Hubspot seriously because of it.

2025-03-23 18:42:04

- reply

@nprofile…fle4 thanks for the reminder. I strongly believe that substance abuses (even if they are as prevalent and legal as alcohol) has no place at work or at home (even more when kids are involved). Sinning should happen at designated sinning locations.
That did not stop me to stop joking about alcohol and IT. I think it’s just banter, but the other might not. Will think about that the next time.

2025-03-23 16:29:25

- reply

@nprofile…cl5w i disabled all notifications on my phone (except for immediate family), can recommend even more. I even delete Teams off of my phone on my days off.
(Saying this as a consultant who has no any real responsibility outside of work)

2025-03-17 15:53:23

- reply

@nprofile…fle4 It's bringing storage that the user is using the service with to a place where the user has ownership of it. The user can then choose when and how the data on the storage will be used.
I think 🤷

2025-03-17 12:59:23

- reply

@nprofile…cl5w i was looking for a reason to drink today, thanks!

2025-03-08 18:56:41

- reply

@nprofile…r0kn I can not just walk around and own ESP’s left and right while walking around?

2025-03-02 18:31:23

- reply

@nprofile…cl5w now I know how I can call something a circlejerk when I’m at work.

2025-02-26 18:53:49

- reply

@nprofile…fle4 @nprofile…82k3 They were so close. They just had to not drink the koolaid. Still grieving over here.

2025-02-26 17:53:11

- reply

@nprofile…k0zs the art of the deal, I guess…

2025-02-19 09:37:23

- reply

@nprofile…fle4
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/029/876/110/914/747/original/75b78a93e13cdbde.png

2025-02-19 09:22:23

- reply

@nprofile…fle4 will this be a new book, or does everyone get updates if you bought the current book?

2025-02-18 07:00:53

- reply

@nprofile…fle4 semi-related - the keyboard isn’t the only thing breaking your E2EE dream.
Phone notifications go through Apple/Google services
backups are not always encrypted
desktop apps doesn’t always have encryption at rest

2025-02-17 16:45:58

- reply

@nprofile…cl5w wildly unrelated, but I was mesmerized by modern infrastructure today too. In Amsterdam, 150Kv cables got caught on a excavator(?) that a boat was transporting.
I would have thought at a minimum that there was power loss, or that the boat got electrocuted. Or worse, all of the fish in the river were insta-fried.
But nope! The security systems kicked in instantly. The power cables just hang in the water, I think they are now out of the water. No loss of life, no interruptions to electricity. Amazing right?

2025-02-16 06:32:25

- reply

@nprofile…r0kn @nprofile…xxx6 @nprofile…r6ac thanks for the explanation. I can surely understand that. The activism/call to actions you see in the Fediverse are justified, but I also lose a bit of my sanity every time I open Mastodon now.
This is not the reason why I went to Mastodon. Which is not the fault of the users (or the admins!), but it sucks nonetheless.

2025-02-15 17:15:15

- reply

@nprofile…k0zs I will be the first one in the group to tell people if they do their job for free when they admit to pirating. But if I buy a digital copy (like I do with a physical medium), I will make a copy.
I own the (copy of the) movie/show/music (in the resolution it came with), I am not going to buy it again because of some “license to view on a specific platform” nonsense.

2025-02-15 17:08:39

- reply

@nprofile…cl5w I am still kicking off the Balatro and idle game stints I’ve been on since you talked about it. Don’t make me buy another game 😭
In all seriousness, it looks really cool. Wishlisted!

2025-02-07 10:14:52

- reply

@nprofile…cl5w @nprofile…dhy6 I used a Stream Deck (the original one, not the +) for productivity. Worked just great, although I moved to macros/shortcuts via keyboard later on (because I worked from a few different places)

2025-02-07 09:50:41

- reply

@nprofile…dhy6 @nprofile…cl5w or the Stream Deck +! https://www.elgato.com/us/en/p/stream-deck-plus-black
Both not exactly the same, but might be enough for you.

2025-02-07 05:53:47

- reply

@nprofile…d2rl @nprofile…274c @nprofile…fxqq i could not find the talk with a quick search, was it ever publicly released?
Would love to see/hear it, because there are some discussions in NL about what will happen if we get cut off (and Ican imagine other countries asking themselves the same thing)

2025-01-22 05:56:45

- reply

@nprofile…cl5w hopefully this comes over more as a ‘fact of the day’ rather than ‘reply guy’:
The ‘alleged’ ADD is false (maybe not at time or writing). In the fourth edition of DSM-5 (published in 1987) ADD was removed and ADHD got sub-types:
Inattentive
Impulsive/Hyperactive
Combined
I am very certain that I was misdiagnosed in my childhood due to this, as there were different criteria. Which is weird and annoying, as that happened roughly 15 years after the 4th edition of the DSM came out.

2025-01-20 10:17:26

- reply

@nprofile…cl5w I guess minimizing risk during meetings is part of the day two curriculum.

2025-01-16 19:00:36

- reply

@nprofile…fle4 couldn’t you tell us that yesterday!?!?

2025-01-15 22:32:10

- reply

@nprofile…fle4 man, I hate this. I get their reasoning in a vacuum (and as a foreigner, with some missing context), but feels impossible to stand behind with everything outside the vacuum.
I can handle and understand a lot, but mixing politics with business never ends well, especially for a service that (imp) should have been just a neutral and good answer.
Also, moving email is time consuming and annoying.

2025-01-15 22:32:10

- reply

2025-01-14 20:25:37

- reply

@nprofile…fle4 we almost had the seventh(!) zero click RCE in Outlook in two years. Although this is very close...
I summed up the other 6 here: https://infosec.exchange/@jtig/112768122980712688

2025-01-14 06:39:56

- reply

@nprofile…fle4 i do not envy those who homeschool

2025-01-01 11:07:22

- reply

@nprofile…cl5w Thus sounds amazing, but I am still recovering from Balatro.

2025-01-01 06:22:12

- reply

@nprofile…k0zs good luck! I am hoping to do more with GRC this year.

2024-12-19 19:32:47

- reply

@nprofile…fle4 it was also a year of Advanced Persistent Teenagers, and the Crowdstrike thing. Something something resilliency like a piece of paper

2024-12-17 11:46:16

- reply

@nprofile…cl5w i forgot that I enabled the arcade trial voor Balatro!!!
Not that I had work to do or anything.

2024-12-16 11:08:18

- reply

@nprofile…5lc3 they claim timestamps have some “noise” in them to not be able to correlate events based on time.

2024-12-14 06:31:50

- reply

@nprofile…cl5w he didn’t even sweat about if

2024-12-13 18:28:36

- reply

@nprofile…fle4 great you included non-free options. A perfect world would include open source for and by all, but most are not living in one, and just want to make money/be able to pay the bills.

2024-12-11 18:40:19

- reply

@nprofile…cl5w it’s, uh, something: https://m.youtube.com/watch?v=fMuookENY90

2024-12-10 09:36:44

- reply

@nprofile…cl5w First thing that comes to mind, is the lawyers that referenced cases that did not exist, because it was generated through an LLM, which made them lose the trial(?)
Other one is the car dealer that lost a lawsuit and had to sell a car for 1 dollar, because the user tricked the chatbot into agreeing with the sale "and that's a legally binding agreement" (or something like that).

2024-12-10 06:29:08

- reply

@nprofile…fle4 @nprofile…p8e5 you’re right! My train of thought was the (encoded) text was hidden from the security tools through an image, although your explanation makes more sense.
Might also have something to do with web filtering, as those tools (afaik*) block based on reputation. There’s no reputation for localhost URL’s to enforce a block.
*my knowledge does not reach further than the walled garden called Microsoft Defender (for now)

2024-12-10 05:51:59

- reply

@nprofile…fle4 @nprofile…p8e5 I would describe it as being akin to steganography, right?
Before opening the blog, I rolled my eyes and thought Mandiant posted a blog about mobile phones and QR scans, but this (especially the headless browser part) is pretty cool.

2024-12-08 19:30:52

- reply

@nprofile…k0zs might be your route? A VPS in a DC near them might alleviate the problem? With the added cost of a Kali VPS unfortunately…

2024-12-08 19:30:52

- reply

@nprofile…k0zs might be your route? A VPS in a DC near them might alleviate the problem? With the added cost of a Kali VPS unfortunately…

2024-12-05 08:03:12

- reply

@nprofile…cl5w interesting. I’ve switched my 2-3 coffee to one coffee in the morning and green/mate tea during the day. Made a reasonable difference in energy - helping me focus and not feeling ‘borrowing’ energy due to caffeine spikes, so I can’t willfully ignore or drink away how tired I am.
Caveat is that I have to do something people with ADHD really don’t want to do - intentionally take some rest.

2024-12-03 20:05:52

- reply

@nprofile…cl5w even if it was secure, if the company goes belly up, the secure data can trade owners who might not have the same mentality or intention (looking at 23andme)

2024-11-26 18:49:17

- reply

@nprofile…cl5w i am probably an outlier, but I have a leased e-bike through work, that (mostly) I have put almost 6000km on within 11 months. My work is 40km round trip and I get at work faster than via public transport. A car is faster, but I loathe all the other maniacs on the road. It’s also quite expensive.
It costed around 5k, but it’s a longtail model with a carbon belt and Shimano engine, so I splurged a bit due to the heavy use. Which is perfect for a car-less family who wants a second ‘bakfiets’ (cargo bike?) without the ‘bak’, but with the hauling (children or other stuff) capabilities.
Next year, we’ll use it too to go on holiday within the country. Still driving sometimes, but that is in a borrowed car or a rental, usually for business purposes.
Maybe for some actual advice - a good second hand could be better than a cheap new bike? Not sure how much the UK loves bikes. Comes with the caveat that you might need to talk to people in person during your time off work.

2024-11-23 06:31:21

- reply

@nprofile…5lc3 what I find funny, is that they have loads of possibilities (like Azure Chaos Studio) to test out the load. They did know how much they sold, right?

2024-11-22 16:52:14

- reply

@nprofile…fle4 @nprofile…5k2y we are probably thinking about the same attack: https://www.bleepingcomputer.com/news/security/hundreds-of-us-news-sites-push-malware-in-supply-chain-attack/

2024-11-22 16:52:14

- reply

@nprofile…fle4 @nprofile…5k2y we are probably thinking about the same attack: https://www.bleepingcomputer.com/news/security/hundreds-of-us-news-sites-push-malware-in-supply-chain-attack/

2024-11-22 09:42:05

- reply

@nprofile…cl5w geniune question - what are the “few use cases” the current AI generation can help with?
Currently, I’ve found it being helpful with boilerplating documents in Markdown, or rewriting English text as a non-native English speaker (or maybe coaching is a better word, as I never copy the text 1 on 1).
Both times I can rarely use it, as I usually work with confidential documents/IP. Hopefully, by the time I can find local NPU’s for my next refresh, I can experiment a bit more.

2024-11-18 18:06:33

- reply

@nprofile…cl5w this feels like a reminder written in blood.

2024-11-13 15:32:31

- reply

@npub17lg…9uux they should be able to do this quickly, because (after years) they just verified the default Graph app.

2024-11-08 11:36:39

- reply

@npub1u0z…fuse in one cup? You people are hardcore.

2024-08-11 15:00:52

- reply

@npub1zj4…fyjh I do think they work better for podcasts.

2024-08-11 15:00:52

- reply

@npub1zj4…fyjh I do think they work better for podcasts.

2024-07-11 13:36:41

Very hot take: Outlook (classic) should be regarded as a high-risk application at this point, after the numerous critical vulnerabilities that keep being patched.
These CVE's are responsible for zero-click RCE or token theft in Outlook:
july 2024: CVE-2024-38021
june 2024: CVE-2024-30103 (requires user auth)
february 2024: CVE-2024-21413
august 2023: CVE-2023-35384
may 2023: CVE-2023-29324
march 2023: CVE-2023-23397
Outlook Web works just fine for me 🤷

2024-06-30 19:19:30

- reply

@npub1zj4…fyjh I was hoping 10/10 complexity or finesse, but alas..

2024-06-29 07:09:55

Two days ago, two intermediate CA's have expired at Microsoft, resulting in a lot of services that probably spewed out warnings. Office was the more prominent one, but I saw internal Microsoft systems, Azure Event Grid and Xbox services also having expired certificates using this CA.
My thoughts go out for the people that needed to do certificate rotation on a read-only friday.
https://expired.systems/#Microsoft-June-2024

2024-06-29 07:03:11

I have a small side project, inspired by web3isgoinggreat (so much inspired I even cloned the framework). I wanted to aggregate the news about all the companies that still can't manage to monitor expired certificates.
Introducing: https://expired.systems/

2023-11-29 15:15:32

@npub17lg…9uux Quick question - what tools do you use for your honeypot? I would like to use one myself

2023-11-24 12:03:13

- reply

@npub1zj4…fyjh Windows Hello bypass news so good, it’s included twice in the newsletter

2023-10-22 17:49:15

- reply

@npub1zj4…fyjh @npub17lg…9uux while there is no detection or alerting within the service, it is possible to look through the Graph API logs now (and build your own alerting in the mean time): https://learn.microsoft.com/en-us/graph/microsoft-graph-activity-logs-overview