Bill

I break software.

Blog: https://sempf.net
OWASP: https://owasp.org/www-chapter-columbus/
Github: https://github.com/sempf
Amateur Radio: KE8PCT
POINT: https://pointweb.net
Header: Medeco Biaxial

Public Key

npub19qjlalzvwsy6jeg99nd8hl7a9v80rv7qjmagla3g624fhcc33m0qvmeda3

NIP-05 Address

sempf_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqszsf07l3x8gzdfv5zjeknmllwjkrh3k0qfd7507c5d925muvgcahspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dszazfms

Publishing to

nostr-pub.wellorder.net

relay.damus.io

nos.lol

Author Public Key

npub19qjlalzvwsy6jeg99nd8hl7a9v80rv7qjmagla3g624fhcc33m0qvmeda3

Show more details

Last Notes

2026-04-22 02:40:56 UTC

Does anyone know if what CISA is putting out post-Jen is worth looking or is just like the rest of the anal flem this administration produces? I mean, for realz inside knowledge?
https://thehackernews.com/2026/04/cisa-adds-8-exploited-flaws-to-kev-sets.html
#cisa #kev

2026-04-09 18:28:36 UTC

- reply

When you say your risk models remain unchanged, does that mean you are not receiving pressure from management to change them due to Glass Wing, or that you already have and you're not changing them back?

2026-04-09 18:11:07 UTC

For those getting questions about Glasswing from their executives, give them this article.
https://tryaether.ai/blog/anthropic-glasswing-frontier-attack

2025-09-08 14:28:40 UTC

Hey #gardening. I have this white powder all over my zucchini leaves. I thought it was Canadian wildfire smoke leavings. My car is covered in that. But this is getting worse and we've had no more rain. Has anyone seen anything like it?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/169/146/034/907/093/original/704ed05b2b8086c8.jpg

2025-09-05 17:38:18 UTC

Saw something on a pen test today I haven't seen before. The application loads the session information from the session storage in the browser rather than from the cookies collection and then adds it as a header to every request. I'm not sure if that's better or worse or what.

2025-08-24 22:10:50 UTC

- reply

Looks like the baristas have been at it already, and drained that pumpkin of spice.

2025-08-10 23:44:01 UTC

seriously what the fuck am I gonna do with this
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/007/122/469/292/300/original/e1607097b7f2883f.jpg

2025-07-21 13:39:46 UTC

The fairies were having Sunday tea in the mint grove. #gardening #mushtodon
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/891/500/230/139/222/original/dad1476f52a3cd99.jpg

2025-07-03 03:44:29 UTC

Are we still on about the MotW flaws? I'm not sure anyone pays attention to that anyway.
https://www.darkreading.com/endpoint-security/clickfix-spin-off-bypassing-key-browser-safeguards
#clickfix #windows

2025-06-25 03:10:18 UTC

WhaaaaaAAAAAT? A physical keyboard? Little chiclets? I am so there.
https://www.theverge.com/news/691938/titan-2-smartphone-keyboard-blackberry-5g-android-15
#android #blackberry

2025-05-11 03:43:00 UTC

"Hey, we're gonna take a screenshot of your PC every five seconds to feed our AI, mmkay? Oh wait, you want a screenshot of a meeting slide? Heck no we don't want your COMPANY to sue us!"
-Microsoft, definitely
https://www.bleepingcomputer.com/news/microsoft/microsoft-teams-will-soon-block-screen-capture-during-meetings/
#privacy #microsoft

2025-04-28 15:17:14 UTC

- reply

Saw this on the Discord and the fix worked perfectly.

2025-04-12 12:49:11 UTC

I am so fucking pissed about this Chris Krebs situation, I can barely put two salient words together. I stand with the EFF.
https://www.eff.org/deeplinks/2025/04/cybersecurity-community-must-not-remain-silent-executive-order-attacking-former
Blog post incoming with my plans, or what I can talk about publicly. Well, @npub1g63…ezt9, you asked me to write more. I'm sorry it's not on a more optimistic note.
#krebs #pissed #fuckingdammit #whatthefuckisevenhappening

2025-03-26 14:41:10 UTC

- reply

I built one. Haven't found a stingray yet, thought I know CPD and the Sheriff have some.

2025-03-26 14:12:12 UTC

- reply

I didn't know there WERE followers! I didn't know that functionality existed until someone connected with me and LinkedIn said "So and So follows you and wants to connect."
I thought "How the hell does LinkedIn know if she follows me?" Then I learned she followed me on LINKEDIN!
I should pay more attention to my tools.

2025-03-04 21:54:38 UTC

- reply

Recession has a definition, two quarters of negative growth. Either we were, or we were not. Problem is, you can't tell when you are in it.
This one gonna be a doozie tho.

2025-02-18 13:51:44 UTC

- reply

He does play, but I was thinking of Gossi Air at the time. Just queued up the wrong grouchy infosec guy.

2025-02-17 21:03:24 UTC

How the actual fuck do you flip a jumbo jet COMPLETELY UPSIDE DOWN?

2025-02-09 02:17:12 UTC

- reply

Are we friends on LinkedIn? I use it too, some customers like it for comms.

2025-01-31 05:08:02 UTC

TIL you can watch the slime in Washington destroying information real time on the GSA GitHub.
https://github.com/GSA
h/t @npub1psa…j5uh
#uspol #opensource

2024-12-12 14:01:40 UTC

- reply

Does anyone actually USE Apache Solr? I don't think CNET even uses it any more.

2024-11-16 04:54:14 UTC

RIP Thomas Kurtz, cocreator of BASIC.
https://computerhistory.org/blog/in-memoriam-thomas-e-kurtz-1928-2024/
#programming

2024-04-22 19:48:15 UTC

- reply

Linux takes a lot of work to get it running. Windows takes a lot of work to make it usable. There is a difference.
To clarify, we might have the differing definitions of "ads." OneDrive reminds me that I need to UPGRADE FOR MORE STORAGE. Excel reminds me that I have a FREE UPGRADE (for 90 days) TO UAE NEW OFFICE FEATURES. Like that.
I'm upset that Ubuntu modified apt to remind me that I can't upgrade some packages unless I upgrade to Pro so maybe I'm just thin skinned.

2024-04-22 03:39:37 UTC

I'm telling yooooou. Linux on the Desktop 2024, if this keeps up.
https://www.theverge.com/2024/4/21/24063379/windows-11-ads-bing-edge-cruft
#ads #windows #linux