burritosec :donor: :red_panda:

he/him 🏳️‍🌈:bisexual_flag: | frontline thrunt ops | ex-GRC grouch & former MDR menace | emo music enthusiast & occasional human Shazam app | internet race car driver | go Bruins | no duh these are my own opinions

bird app: deactivated
sky app: https://bsky.app/profile/unauthorized.computer
hair: wack
jewelry: wack
malware: wack
thrunting?: hell yeah

Public Key

npub15g8gge4n2yls26cjxnhjheu2e9f9nnlf9asxycy334746h9h8j3qlehwfq

NIP-05 Address

burritosec_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqs2yr5yv6e4z0c9dvfrfmetu79vj5jeel5j7crzvzgc6l2atjmnegsprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntpg4ftu

Publishing to

relay.momostr.pink

Author Public Key

npub15g8gge4n2yls26cjxnhjheu2e9f9nnlf9asxycy334746h9h8j3qlehwfq

Show more details

Published at

2026-08-09T20:15:43Z

Kind type

0 Metadata

Event JSON

{ "id": "7f334e0466bf2a4e6af95a54d9703d48913b016c5d812ac1684f76dc56c3365f", "pubkey": "a20e8466b3513f056b1234ef2be78ac95259cfe92f606260918d7d5d5cb73ca2", "created_at": 1786306543, "kind": 0, "tags": [ [ "emoji", "bisexual_flag", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/028/337/original/086c57ae054ea26f.png" ], [ "emoji", "donor", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/183/594/original/61a35b247fc91e55.png" ], [ "emoji", "red_panda", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/028/435/original/6c29232083acd689.png" ], [ "proxy", "https://infosec.exchange/users/burritosec", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/burritosec", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"burritosec :donor: :red_panda:\",\"about\":\"he/him 🏳️‍🌈:bisexual_flag: | frontline thrunt ops | ex-GRC grouch \u0026 former MDR menace | emo music enthusiast \u0026 occasional human Shazam app | internet race car driver | go Bruins | no duh these are my own opinions\\n\\nbird app: deactivated\\nsky app: https://bsky.app/profile/unauthorized.computer\\nhair: wack\\njewelry: wack\\nmalware: wack\\nthrunting?: hell yeah\\n\",\"website\":\"https://infosec.exchange/@burritosec\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/247/286/152/045/740/original/521db279e66e3499.webp\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/109/247/286/152/045/740/original/f266991af0f97254.jpg\",\"nip05\":\"burritosec_at_infosec.exchange@momostr.pink\"}", "sig": "8354521fb4a60eea96d7bec9f01b0a6f53a42d3c9af2dd651f3e96e2e6e487f3d10e6cc35241a828690d49e91505d3b8ba09c8bd0118db9cd36184864888c845" }

Last Notes

2026-08-09 20:05:00 UTC

RE: https://infosec.exchange/@gayint/117001148115945240
run it back for CVE-2026-64638
#note15cp…mp35

2026-08-08 00:43:01 UTC

- reply

one of these definitely has a gaping hole in it and it's not the weirdly branded condoms

2026-08-07 03:41:12 UTC

- reply

how do I delete someone else's toot

2026-08-04 00:05:34 UTC

bgp stands for bondage gateway protocol

2026-08-01 00:49:50 UTC

GDPR was supposed to be this revolutionary privacy legislation and instead we got "uwu we need you to accept 400 tracking cookies to use this website" popups and "redacted for privacy" WHOIS records

2026-07-23 16:26:15 UTC

- reply

This image is incredible

2026-07-14 16:34:39 UTC

- reply

there's still time to delete this

2026-07-13 17:37:55 UTC

undisciplined engineering is just figuring out different ways to set stuff on fire and vibe coding is undisciplined engineering at scale

2026-06-30 15:39:43 UTC

duuuuuumb question but does anyone have any empirical evidence that tools like ublock origin will mitigate/kill/prevent clickfix pop ups? pretty sure I saw a blog about this but I cannot find it

2026-06-17 20:26:10 UTC

what fortinet doin'

2026-06-10 23:55:05 UTC

I love watching when people re-learn known concepts such as "adding complexity to a system increases the attack surface of that system" and "introducing non-deterministic components into a system will result in unexpected outputs and/or failure modes."

2026-06-10 23:49:16 UTC

- reply

I just kinda operate on the principle that everything is temporary including the things on my hard drives

2026-06-10 22:33:02 UTC

- reply

I was referencing the SMART attributes that apparently are all only known through reverse engineering, because of course https://en.wikipedia.org/wiki/Self-Monitoring,_Analysis_and_Reporting_Technology#Known_NVMe_S.M.A.R.T._attributes

2026-06-10 22:24:35 UTC

- reply

don't SSDs kinda sorta do this internally

2026-06-09 21:03:10 UTC

got a little nitpicky with someone about a summary they wrote that I had to review and at the first question they went "yeah I wondered about that when the AI wrote it" and I screamed AND THAT'S WHY YOU DON'T LET THE FUCKING LYING ROBOT WRITE SHIT FOR YOU

2026-06-08 22:14:32 UTC

the big wild party at the big club that we all aren't in is getting ready to end (IPO) and as usual the already-wealthy revelers are expecting your retirement account to pick up their bar tab

2026-06-05 16:08:27 UTC

sssllleeeuuuttthhhcccooonnnn

2026-05-22 22:28:24 UTC

- reply

:blobcatsipsweat:

2026-05-19 17:23:51 UTC

- reply

look, if you don't fuck it up from the jump, you don't have to undo the fuckup later

2026-05-19 17:13:52 UTC

Inattentiveness and lacking attention to detail gets people into trouble quickly, and then they have an arduous day untangling all of the trouble to right things.

2026-05-13 00:05:22 UTC

the burritosec is on PTO and having steaks and beers to celebrate. the burritosec is in full duplex mode

2026-04-30 23:11:11 UTC

the power of spheal compels
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/496/180/836/235/967/original/28eb4f5b24109746.webp

2026-04-14 21:44:11 UTC

- reply

see you at RSA next year!

2026-03-16 18:19:30 UTC

follow malware and you get malware authors and malware payloads. follow the infrastructure and you don't know where the fuck it's gonna take you.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/240/228/410/926/969/original/280aab7f9d0d24e1.png

2026-02-03 05:30:16 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/005/049/209/417/489/original/80cf9f0050c648a3.png

2025-09-28 20:41:19 UTC

- reply

give "Aesthetica" by Liturgy and "Sunbather" by Deafheaven some spins - blackened shoegaze is where it's at for me

2025-09-23 19:06:55 UTC

- reply

my crimes are only ever disorganized, due to the incompetency of my lackeys and hired muscle

2025-09-23 18:21:34 UTC

if you are not ready to have your opinion or hypothesis changed or overturned by the introduction of new information, maybe a career in information security isn't for you

2025-09-23 16:50:00 UTC

100k SIM cards racked and stacked in a random apartment in New York state but I can't buy a box of cold medicine that actually works without a photo ID and the pharmacy retaining my info for years after the purchase.

2025-07-18 18:02:04 UTC

110% MITRE coverage bro. Gartner Magic Quadrant leader dude. #1 in a Forrester category that we paid them to create and tailored exactly to the thing we claim our product does, man.

2025-02-28 03:42:31 UTC

quit hand wringing about nation-state genAI-powered threats and go fix your group policy

2024-07-25 21:43:46 UTC

think my hottest current take might be most EDRs give just enough telemetry info to system administrators to scare them into calling the company to activate an incident response, and not enough info for in-house investigators to prove or disprove literal malicious activity

2024-07-24 03:06:59 UTC

it's just fuckin infostealers man that's it that's all anything is anymore

2024-06-25 18:42:50 UTC

we are at the point where anytime anyone says "enhancing the $x experience" I automatically know they're making a change no one asked for to support a quarterly KPI

2024-05-26 01:51:18 UTC

Threat intel folks loooooove to talk about threat actors with other threat intel folks.
That's cool, but it's a closed loop.
If you are not talking with your sysops team, your GRC team, your c-suite, you are just blowing hot air into the desert.

2024-05-15 23:01:55 UTC

[sniffling between choked sobs] listen... I just *sniff* I need you to click the AI summary button *sob*; we made it glow and spin when you mouse over it, and...and it will just...help you understand the content of the web page, that you clearly don't have time to read *hitched breath*, and my promotion from director to senior director is 1:1 correlated to how many times the button gets clicked this quarter, please just use the AI we just need this so badly my spouse already left and took the kids [full on sobbing]

2024-03-21 23:45:47 UTC

this industry has a funny way of giving weight to shit opinions when someone who's "made their bones" spouts them.

2023-09-19 17:12:27 UTC

oh my god, BEC-y, look at her DMARC. It is so bad.

2023-08-02 15:06:12 UTC

now class, say it with me:
policy controls that dictate technical controls are not substitutes for actual implementation of technical controls.