Jernej Simončič �

Public Key

npub1pu00d2ufqry7n22jvjn3jc2cgyvwx9pyaz4qnf45cpeaklctryksr7vcqa

NIP-05 Address

jernej__s_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsq78hk4wyspj0f49fxffcev9vyzx8rzsjw32sf566vqu7m0u93jtgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsrxpapt

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1pu00d2ufqry7n22jvjn3jc2cgyvwx9pyaz4qnf45cpeaklctryksr7vcqa

Show more details

Last Notes

2026-10-04 09:43:10 UTC

- reply

APM did exist, but mainly in laptops. AT PCs had power switches that operated on AC power, ATX with software power off was only released a month before 95 went RTM, and I'm not sure if any machines were ready before the release.
Last Windows version with the "safe to shutdown" screen was Server 2003.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/381/981/700/298/015/original/fa181473b56a9cc7.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/382/017/426/371/989/original/3853c64a26052292.png

2026-05-30 21:40:52 UTC

- reply

I could try what happens in a VM…

2026-05-21 21:17:33 UTC

- reply

I've been serving a 32 GB HTML file pre-compressed with zstd to 2 MB to some Meta scrapper for the last two weeks.

2026-05-03 21:42:12 UTC

- reply

Tried VP9VV-VJW7Q-MHY6W-JK47R-M2KGJ ?

2026-04-26 20:30:31 UTC

- reply

Interesting that the results here seem to be the opposite of @npub16ys…sjae's.

2026-04-26 10:25:14 UTC

- reply

RE: https://infosec.exchange/@jernej__s/116470514411412456
@npub1nrx…m4fy
#note1h08…35f8

2026-04-26 10:23:31 UTC

- reply

From a month ago: https://bsky.app/profile/kartoonistkelly.bsky.social/post/3mgxqau5oxc2z

2026-04-24 17:48:44 UTC

- reply

I go out to walk the dog and come back to 21 notifications …

2026-04-24 16:41:47 UTC

- reply

I opened it for a few minutes, and it never refreshed.

2026-04-19 19:31:40 UTC

- reply

mastodon.cloud was my first instance, 9 years ago …

2026-04-18 19:53:05 UTC

Hey, @npub1s6e…n008, another ../ for you: https://vuldb.com/cve/CVE-2026-40342

2026-04-14 22:00:30 UTC

- reply

Why not both?

2026-04-09 13:27:40 UTC

- reply

Here's the price graph for 20 TB Toshiba drive, which cost me 323€ in 2024 (with 22% VAT included, [graph source](https://geizhals.eu/toshiba-cloud-scale-capacity-mg10aca-20tb-mg10aca20te-a2851607.html?hloc=at&hloc=de&hloc=eu&hloc=pl&hloc=uk )):
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/374/962/408/777/629/original/a68e78576574b9ca.png

2026-04-09 13:14:44 UTC

- reply

Well, if they took 6 months, they'd have probably bought the drives before the prices started climbing; that still costs about 200k€, not counting servers, racks and electricity needed.

2026-04-04 19:38:28 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/348/122/488/747/869/original/5dc38989c09fe6a3.png

2026-03-16 11:30:03 UTC

- reply

Sounds like a feature.

2026-01-29 18:55:05 UTC

- reply

I've had so many weird problems caused by (what turned out to be) failing RAM, that I swore off regular RAM years ago. I've since only been using ECC modules. Luckily most Ryzens support ECC, though not all motherboards have all the lanes connected, so if you go this way in the future, check the specifications first (Asus and ASRock usually support ECC, Gigabyte sometimes doesn't).
(Ryzens that don't support ECC are those that start with even numbers – 4xxx, 6xxx, 8xxx series)
Of course, right now any kind or RAM is too expensive.

2026-01-18 22:29:20 UTC

- reply

OK, I *think* this one should match everything, including things like 192.0250.0x7B2D):<code>^((?:(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5]|0x[0-9a-fA-F]{1,2}|0[1-3]?[0-7]{1,2})\.){3}(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5]|0x[0-9a-fA-F]{1,2}|0[1-3]?[0-7]{1,2}) |(?:(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5]|0x[0-9a-fA-F]{1,2}|0[1-3]?[0-7]{1,2})\.){2}(?:\d|[1-9]\d{1,3}|[1-5]\d{4}|6[0-4]\d{3}|65[0-4]\d{2}|655[0-2]\d|6553[0-5]|0x[0-9a-fA-F]{1,4}|01?[0-7]{1,5}) |(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5]|0x[0-9a-fA-F]{1,2}|0[1-3]?[0-7])\.(?:\d|[1-9]\d{1,6}|1[0-5]\d{6}|16[0-6]\d{5}|167[0-6]\d{4}|1677[0-6]\d{3}|16777[01]\d{2}|1677720\d|1677721[0-5]|0x[0-9a-fA-F]{1,6}|0[0-7]{1,8}) |(?:\d|[1-9]\d{1,8}|[1-3]\d{9}|4[01]\d{8}|42[0-8]\d{7}|429[0-3]\d{6}|4294[0-8]\d{5}|42949[0-5]\d{4}|429496[0-6]\d{3}|4294967[01]\d{2}|42949672[0-8]\d|429496729[0-5]) |0x[0-9a-fA-F]{1,8} |(?:0[1-3]?[0-7]{1,9}))$ </code>
Edit: fixed version below.

2026-01-18 21:58:45 UTC

- reply

Here's a partial one (it won't work when you mix hex and octal in dotted notation, nor will it work with things like 8.8.2056):^((?:(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])\.){3}(?:\d|[1-9]\d|1\d{2}|2[0-4]\d|25[0-5])|(?:\d|[1-9]\d{1,8}|[1-3]\d{9}|4[01]\d{8}|42[0-8]\d{7}|429[0-3]\d{6}|4294[0-8]\d{5}|42949[0-5]\d{4}|429496[0-6]\d{3}|4294967[01]\d{2}|42949672[0-8]\d|429496729[0-5])|0x[0-9a-fA-F]{1,8}|(?:0[1-3][0-7]{1,10}|0[1-7]{1,9}))$

2026-01-11 20:10:20 UTC

- reply

There's a second problem with OneDrive: if yo use Office and enable AutoSave, your file is automatically saved to OneDrive – while the old version is kept wherever you had it. I know of at least one case where this resulted in an unfinished file being submitted, because there was no indication that the file that was being worked on was only saved to OneDrive.

2026-01-02 08:16:18 UTC

- reply

With alt-text:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/824/505/709/376/280/original/4f103597b3f560d1.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/824/505/797/900/211/original/0ae85bf1c7d73430.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/824/505/870/066/169/original/8e9ccc6890944ffa.png

2025-12-27 20:53:47 UTC

- reply

RE: https://infosec.exchange/@jernej__s/115793506457095282
@npub1lcc…lcye Too late:
#note17zt…9t42

2025-12-27 20:51:29 UTC

- reply

Just saw this posted on Discord:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/793/501/908/566/808/original/26e99c4b7e67247b.png

2025-12-20 20:42:36 UTC

- reply

About 25 years ago, I found that the Genius mouse driver wrote to Registry every time you moved the mouse…

2025-12-06 14:07:53 UTC

- reply

I saw this on Discord today:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/673/007/656/860/929/original/7e47e8727d27f455.png

2025-11-16 23:17:02 UTC

- reply

What's that 5 HDD cage you have in the Supermicro chassis?

2025-11-14 20:52:13 UTC

- reply

What counts as a valid e-mail address is insane.

2025-11-13 14:42:29 UTC

- reply

RE: https://mstdn.social/@rysiek/115541807566927762
@npub1afm…5gp4 Yup, and you also get a new notification sound to turn off from the ↕ menu (it's enabled by default, even if you turned off all other notification sounds).
#note10pv…8u29

2025-11-13 14:36:05 UTC

- reply

If you want single-click to boost back, there's a setting in Preferences → Appearance that moves Quote to the ⋯ menu:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/542/885/287/172/915/original/fa33cebb6816f144.png

2025-10-26 09:31:11 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/439/762/477/187/311/original/0c98e524a85c665a.png

2025-10-25 19:55:30 UTC

- reply

I saw this linked on Discord:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/436/549/242/206/342/original/e563d28f39c3b54d.png

2025-10-08 11:55:47 UTC

- reply

A client of mine (that I first notified on September 25th) finally patched after they were nudged by their upstream. Funnily enough, their firewall contractor is still running firmware from 2023 according to your scan :)

2025-09-25 22:54:41 UTC

- reply

Očitno je Microsoft v EU podaljšal podporo za Windows 10: https://www.bleepingcomputer.com/news/microsoft/microsoft-will-offer-free-windows-10-security-updates-in-europe/

2025-09-21 16:17:36 UTC

- reply

If there's a link to paywalled story in a toot that interests me, I'll usually post an archive link in reply.

2025-09-16 16:24:15 UTC

- reply

Quotes work for accounts that opted-in (like yours and mine, you can see them in action eg. here: https://infosec.exchange/@cR0w/115210039369607089).

2025-09-05 12:06:37 UTC

- reply

You're not going far enough – why use assembly, when you could generate machine code directly‽

2025-09-03 07:40:07 UTC

- reply

Reminds me of running Windows Memory Diagnostic on some machine with failing RAM:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/139/221/768/454/154/original/accba5d24831c942.jpg

2025-09-02 13:13:38 UTC

- reply

Is this also why you can't add a phone number to a MS account right now (at least in Europe)?

2025-08-31 20:17:39 UTC

- reply

Here's a link that doesn't redirect to Youtube: https://archive.is/a3aBl

2025-08-22 22:38:04 UTC

- reply

Since they're radioactive, shouldn't that symbol be used?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/074/808/934/145/130/original/140eaea6eddfe606.png

2025-08-19 12:35:32 UTC

- reply

I refuse to sign any signature pads (whether or not they show what I'm signing), because there's no way to guarantee that my signature won't be transferred elsewhere. Give me either paper or (better) a PDF that I can digitally sign on my own computer, since that signature is the only one that can't be forged (assuming you don't have NSA resources).

2025-08-18 19:55:39 UTC

- reply

I'm most annoyed at the "It's your fault!" error message, because I've seen it on a ton of different sites, where each was different, but they all assumed I was trying to use an app offline, not a website where I followed an external link to. If it was at least "We're having problems loading the site, try again later", but no, it was always "How dare you try using this thing offline"?

2025-08-18 19:35:06 UTC

- reply

It's not just Github, it's basically every websiteapp nowadays. Click a link to a text article, something fails to load off CDN and you're greeted with "You're offline, try again after establishing internet connection" (seriously, they blame you for a fail on their side).

2025-07-29 10:02:45 UTC

- reply

One of many Nanoraptor's wonderful creations.

2025-07-09 16:00:11 UTC

- reply

I *still* don't get what the problem with Clippy was. It was easy to disable, and most users actually liked it; there was just some very vocal minority of IT pros that (still) seems to be horribly offended by it…

2025-07-08 07:14:44 UTC

- reply

I've been running 10 Gb over about 50 m of 20 years old CAT5e for about half a year, and it surprisingly worked (it stopped suddenly, at which point I finally used CAT7 I bought at the same time as the 10G switches; I still run 10G over shorter spans of CAT5e).

2025-05-24 09:30:42 UTC

- reply

So every passenger should be required to read the manual before entering a Tesla then?

2025-04-12 15:00:20 UTC

- reply

Measure yourself in the morning, you'll be a bit taller.

2025-04-10 18:17:58 UTC

- reply

I just tested, and while you can create inetpub folder without elevation, you can't create an inetpub file, so you at least can't prevent the update from installing as a regular user.

2025-04-09 17:11:14 UTC

- reply

At least it looks like the update fails to apply if you create a file named inetpub in root first.

2025-04-06 13:06:52 UTC

- reply

I'm not even sure why Microsoft is insisting on TPM, secure boot and 8th gen Intel/2nd gen Ryzen CPUs – 11 24H2 runs just fine on basically any machine made in the last 15 years (the only real requirement is POPCNT support by CPU, something that's been available since 2009, and which Windows 10 did not need).

2025-04-05 17:33:15 UTC

- reply

x64 version of taviso's loadlibrary?

2025-04-02 17:59:34 UTC

- reply

You mean the policy that's been deprecated?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/269/664/457/600/600/original/872a30a985e0c81c.png

2025-03-19 21:53:44 UTC

- reply

Chromium-based browsers broke this support somewhere around version 80 or 90 – they will still happily pick your system's configured background colour, but text will always be black if the site doesn't configure it. Luckily Dark Reader fixed this problem, too.

2025-03-14 17:24:40 UTC

- reply

I disabled the Run dialog at my clients (which is mildly inconvenient for me when using those computers, but better than cleaning up afterwards). I just wish it didn't also disable typing into Explorer's address bar…

2025-02-15 10:14:12 UTC

- reply

Given the possible unbalance, even using the supplied cable probably won't help you in the long run – it likely will prevent the PSU-side connector from heating up, but not the GPU side. I'd keep the chassis open while gaming.

2025-02-10 20:35:30 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/981/499/885/530/081/original/a60b13557b0f6b0c.jpg

2025-01-16 08:03:33 UTC

- reply

8: 26266467

2025-01-05 22:04:14 UTC

- reply

Oh, I feel that. Years ago I ported [easy-rsa](https://github.com/OpenVPN/easy-rsa ) to a batch file, and found so many corner cases…

2024-12-20 18:36:44 UTC

- reply

I've heard that in Hungary (which has a law mandating the kids give up their phones at the start of the school day) it resulted in kids simply having decoy phones they lock up.

2024-12-19 13:25:37 UTC

- reply

You can follow his bsky account through brid.gy: [@mmasnick.bsky.social](https://bsky.brid.gy/r/https://bsky.app/profile/mmasnick.bsky.social ), you'll then see that he did.

2024-12-08 18:16:52 UTC

- reply

Why'd you need a Matrox for quad monitors? I had 4 displays at work since around 2012, when I removed a "Do not remove" plate that was screwed over the on-board graphics card on a HP desktop.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/618/563/267/381/239/original/b4f4a625c901b8f7.jpg

2024-12-07 18:51:12 UTC

- reply

What exactly is the reason to limit Win11 to 8th gen Intel and 2nd gen AMD? Seems completely arbitrary (especially since Server 2025 only needs a CPU supporting POPCNT, which IIRC has been supported since 1st gen Core i CPUs).

2024-12-05 18:29:33 UTC

- reply

Yes, this is how most (all?) of Europe works.
If your number is +386 1 2345678, and you're calling from the 1 area code in Slovenia, you can call just 2345678; if you're calling from any other area code, you call 012345678, and if you're calling from abroad, you call +38612345678 (replace + with whatever the country you're calling from uses for international dialling, most often that's 00).

2024-12-01 14:02:26 UTC

- reply

My mother's new car has those sensors, and they're constantly signalling to check tyre pressure, even though there's nothing wrong with it, rendering them completely useless.

2024-11-27 16:09:03 UTC

- reply

100 TB of storage (before RAID).
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/555/778/570/934/230/original/62d34b52e957813d.jpeg

2024-11-26 17:08:05 UTC

- reply

No backplane, so not that useful (every time a drive dies, you have to mess with cables, which probably means taking the whole thing offline).

2024-11-25 17:41:08 UTC

- reply

Weird, I get the opposite results with [slow](https://eternallybored.org/misc/mandelL.cmd ) [enough](https://eternallybored.org/misc/mandelU.cmd ) batch files:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/544/808/332/139/171/original/5c12c96e77c92d6b.png

2024-11-22 21:28:38 UTC

- reply

You can get a brand new 256 GB NVMe SSD for [18€](https://geizhals.eu/?cat=hdssd&sort=p&xf=252_240%7E4832_3#productlist ).

2024-11-22 21:08:11 UTC

- reply

Brand new 256GB ones shouldn't be much more expensive (and will probably be about the same speed – the NVMe drives pulled from OEM machines are almost all QLC, and *will* drop to 20-30 MB/s write speed once you fill their SLC cache).

2024-10-26 21:07:28 UTC

- reply

I've got a chronic medical condition, but becoming immortal would basically get rid of it…

2024-10-21 06:33:38 UTC

- reply

Why did you connect your monitor to the internet?

2024-10-16 08:53:44 UTC

- reply

For me POST takes longer than Windows startup…

2024-10-09 20:32:51 UTC

- reply

The problem is that you can have completely legal USB-C cable types with different capabilities, from supporting just USB 2.0 and 3 A charging to Thunderbolt5 with 5 A charging, and everything in between. Wikipedia has a handy [table](https://en.wikipedia.org/wiki/USB-C#Cable_types ):
https://media.infosec.exchange/infosec.exchange/media_attachments/files/113/279/356/176/021/168/original/5c98fb2d11975110.png

2024-10-09 19:55:00 UTC

- reply

Instead of 20 different cables with different connectors we now have 20 different cables with the same connector, that often isn't even marked with what it supports. I fail to see how this is an improvement.

2024-10-01 21:57:37 UTC

- reply

I'd still suggest you try to RMA it while you can.

2024-10-01 21:25:31 UTC

- reply

If you've already had issues, the new microcode won't fix your CPU, since it's likely already irreversibly damaged; it'll only stop the issues from getting worse (which may not be a good thing, since it could just result in your CPU failing after the warranty period ends instead of before).

2024-09-09 14:20:57 UTC

- reply

IIRC, @npub1lcc…lcye's using toot.io.

2024-09-04 12:48:58 UTC

- reply

That was dimethylmercury, which is much nastier than plain mercury.

2024-08-27 13:55:26 UTC

- reply

Reminds me of when I made a mingw cross-compiler for Windows Services for Unix :)

2024-08-21 20:57:32 UTC

- reply

Wat? I've been running mail servers for years, and I've never heard of any servers using anything other than 25 for SMTP.
Are you confusing e-mail delivery with submission, which does use different ports (465 and 587)?