2026-04-13T20:51:37Z https://yabu.me Tod Beardsley https://yabu.me/npub1qzuk6k5w9ajvltt2f56pgy52uwddsf53ngmzqza6g9367jyc8cmsc6rvyk https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/258/798/902/039/585/original/104b3304b7b270b0.jpg https://media.infosec.exchange/infosec.exchange/accounts/avatars/109/258/798/902/039/585/original/104b3304b7b270b0.jpg https://yabu.me/nevent1qqsz2kkujvn9yrthkd0g7l6zxv49v7xfueu50s9tu8wkkqve8ptdwlqzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw3uywpd Breaking news: Max Headroom, one of the greatest TV shows ever made, is free on Tubi.<br/><br/>I find the terrible Tubi ads really enhance the dystopia. 2026-02-21T02:41:04Z https://yabu.me/nevent1qqspjdvtnkeex20a6ucq9pzg2cxh86ph83gp6l757ptv2a0n64t4eeczyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwwcfy80 Computers are great. What a time to be alive.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/974/184/007/001/807/original/521518d781c7e59b.png"> <br/> 2026-01-28T18:40:15Z https://yabu.me/nevent1qqs263l2fl2ywkqfrd54pysegwnsr5347pecc3p0q860f4cyva3j9tczyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwmcvn7f January 1 came and went and Texas’s AI regulation went into effect.<br/><br/>There are a couple things to like about Texas’s attempt here. There are many things to dislike.<br/><br/>One aspect in particular: The definition of AI seems to cover just about any software application, right?<br/><br/>&gt; TRAIGA broadly defines an “artificial intelligence system” as “any machine-based system that, for any explicit or implicit objective, infers from the inputs the system receives how to generate outputs, including content, decisions, predictions, or recommendations, that can influence physical or virtual environments.”<br/><br/>Maybe it’s the legalese, but I’m trying to figure out what machine-based system doesn’t function like this. Does it all hinge on “infer” rather than another verb like “calculate?”<br/><br/><a href="https://www.gtlaw.com/en/insights/2025/6/traiga-key-provisions-of-texas-new-artificial-intelligence-governance-act">https://www.gtlaw.com/en/insights/2025/6/traiga-key-provisions-of-texas-new-artificial-intelligence-governance-act</a> 2026-01-12T13:23:18Z https://yabu.me/nevent1qqsdtxgn2z65l9xrnrly07q8c50guauz0edc9yfg8vpwaqkylyx57xszyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwd5d9dz In reply to <a href='/nevent1qqs9wgss432ej67rm9yeh6u7znaj9cjs4r4pncjs0lx7fns68m88whc3zwlkh'>nevent1q…wlkh</a><br/>_________________________<br/><br/>This bit makes me think it’s a different bug:<br/><br/>“Users who upgraded the tika-parser-pdf-module but did not upgrade tika-core to &gt;= 3.2.2 would still be vulnerable.”<br/><br/>Sounds like two different vectors. Incomplete fixes often lead to multiple CVEs, a la rule 4.1.10: “To help determine whether separate Vulnerabilities exist, CNAs SHOULD consider whether the Vulnerabilities are Independently Fixable.” 2025-12-08T13:43:48Z https://yabu.me/nevent1qqszldd2lxgv7t207hnl9d709y83yljpl7r8dyfc9lule0k3ka8l89czyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrww2xul4 I just noticed that ../ looks like eyes and an outreaching arm, as if it&#39;s a victim drowning in quicksand.<br/><br/>I&#39;m sure this is trenchant, somehow. cc <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>cR0w :cascadia: :gayint: 🏴‍☠️</span> (<span class="italic">npub1s6e…n008</span>)</a></span> 2025-11-14T21:08:13Z https://yabu.me/nevent1qqswalqc3hsddgkqp9qtnxqtkvazcsuexd4438pxlr3aa809s3956vczyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw7el8ww Hey y&#39;all don&#39;t sleep on this one.<br/><br/>**Agency Information Collection Activities: Vulnerability Reporting Submission Form**<br/><br/>#CISA wants to know what your ideal vulnerability reporting system would look like.<br/><br/>&#34;CISA previously published this ICR in the Federal Register on October 30, 2024, for a 60-day public comment period. **CISA received one comment.** The purpose of this notice is to allow an additional 30-days for public comments.&#34;<br/><br/>Man, remember October, 2024? Things were looking pretty great back then. What a time to be alive.<br/><br/>Anyway, thanks for the extension, Kevin, ya big lug!<br/><br/><a href="https://www.federalregister.gov/documents/2025/08/20/2025-15887/agency-information-collection-activities-vulnerability-reporting-submission-form">https://www.federalregister.gov/documents/2025/08/20/2025-15887/agency-information-collection-activities-vulnerability-reporting-submission-form</a> 2025-08-21T04:53:54Z https://yabu.me/nevent1qqsg3t2ej2gcayrup2dp0khrc02k8jsgwnctryz92msru9jerawhq4qzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw2q9eeq #defcon badge fixed<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/993/913/117/946/899/original/87b891873549d1d8.jpeg"> <br/> 2025-08-08T15:44:27Z https://yabu.me/nevent1qqsvyrt6g6qwn7qgauq84uu7nsjna0s4sega7qv78546fll6yqvja3gzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw4rxmdj Last night at about 11:30pm, I took a practice ham radio Technician test. I fell asleep twice. I guessed most answers (I know jack all about radio, slightly more about electrical engineering). I got 63%.<br/><br/>I suspect I can study up enough in time to pass a the exam at <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1dqdh3ta2uxg4wz5qf7h6j0qywrxryzcyjw4vhq0n0alu83d6mgnsxm8xy4" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>DEF CON</span> (<span class="italic">npub1dqd…8xy4</span>)</a></span> ham .<br/><br/><a href="https://hamvillage.org">https://hamvillage.org</a><br/><br/>Thanks to That Texas Country Music Guy at DC512 for encouraging this side quest! 2025-07-21T17:46:10Z https://yabu.me/nevent1qqs9r84tjes6496e5f42typm0de2fly6lnqdmy0lm9ssc024kwzudgqzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwq9u7g9 It&#39;s not just me, right? Post-quantum crytography aka #PQC, especially quantum-resistant cryptography, smells an awful lot like snake oil.<br/><br/>I cannot figure out how people sell this stuff with apparent sincerity when it&#39;s clearly impossible to test in production. 2025-06-09T18:58:37Z https://yabu.me/nevent1qqszw252jutxa6c8e9xre7exfh4rrp38qgqf0jfd0xza5lduqaez48czyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwqssdhk Say, what&#39;s the first major-release film to mention either &#34;the internet&#34; or &#34;the world wide web?&#34;<br/><br/>(Or, alternatively, &#34;DNS&#34; or &#34;SMTP&#34; or &#34;TCP/IP&#34; or other uniquely internet technology, though that seems doubtful.)<br/><br/>And I mean mention as in, either in dialogue or printed and shown on screen in a newspaper or something.<br/><br/>There&#39;s a kind of [annoying reddit thread](<a href="https://www.reddit.com/r/movies/comments/o98hkx/what_was_the_earliest_reference_to_the_internet/">https://www.reddit.com/r/movies/comments/o98hkx/what_was_the_earliest_reference_to_the_internet/</a> ) about this that&#39;s not very helpful and is fixated on WarGames which definitely doesn&#39;t talk about the internet (all the comms in that movie are over dialup).<br/><br/>A timestamp reference would be just great if you have it. 2025-05-24T01:33:15Z https://yabu.me/nevent1qqsqr3q8grvkk7ddwxxqx7ztu9ha6j6f7xlxf50at6n0d7e37gz578qzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwkyr608 #CISA adds CVE-2025-47729 to the #KEV -- which is for the crazy hacked up version of Signal used by high-ranking US government officials.<br/><br/>Wowzo. That&#39;s something.<br/><br/><a href="https://www.cve.org/CVERecord?id=CVE-2025-47729">https://www.cve.org/CVERecord?id=CVE-2025-47729</a> 2025-05-12T19:10:07Z https://yabu.me/nevent1qqsqasjzgnhqw96p6r4mpmh92phr7rnd9mla2nrc3rjkeyk4p6mkraszyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwuuzwsg #CISA ends RSS for #KEV. Sigh.<br/><br/><a href="https://www.cisa.gov/news-events/alerts/2025/05/12/update-how-cisa-shares-cyber-related-alerts-and-notifications">https://www.cisa.gov/news-events/alerts/2025/05/12/update-how-cisa-shares-cyber-related-alerts-and-notifications</a> 2025-05-12T15:56:01Z https://yabu.me/nevent1qqs2xfx8zy4fhnsu9792fur58w0lvsed5zc27y7rerea47f2f0th2lqzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwevx7ls so close #CISA.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/468/070/726/514/583/original/45a5c3c24bb620d6.png"> <br/> 2025-05-07T18:56:15Z https://yabu.me/nevent1qqsy37tmysvtna8dq4mypg0804xp872udh24fk7s0efh37dulxqancqzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwh6g08e Welp. Let’s see which way this room goes.<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/423/125/242/360/613/original/a4ac9c38051802f3.jpeg"> <br/> 2025-04-29T20:25:35Z https://yabu.me/nevent1qqsdanh0gckqhvz63cpp2tn8j5k8r2lzjzxf39p34pkwakzutw8k50gzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw0qch8y In reply to <a href='/nevent1qqs0cst02xxuf54vlscu9m59aqjd0cmk5l8wn5j68gd3zqmh0aea88qjf8v7g'>nevent1q…8v7g</a><br/>_________________________<br/><br/>The linked article doesn’t appear to mention the Internet Archive.<br/><br/>It doesn’t make the NEH cancellations any less tragic, but I don’t see the linked article drawing a link between the San Francisco Art Institute, which does perform archiving functions, and The Internet Archive.<br/><br/>Are they connected? 2025-04-21T12:59:02Z https://yabu.me/nevent1qqs07n4vvwm247yvjl3lgj8rwzfkt0cmuvkx79vat27zq50qn39fweszyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw4q0pml l feel like i’m going to be using this a lot<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/345/087/526/277/853/original/b59dc3f1a3157fc0.jpeg"> <br/> 2025-04-16T01:39:34Z https://yabu.me/nevent1qqs2zj33ln72vnsxjgss7unr253c5rhdtzkp75695hsqgpha0pvsfxgzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw74c5za Trying to articulate levels of invasiveness with typical network scanning with metaphors that don&#39;t come with the implied violence of &#34;rattling doorknobs.&#34; <br/><br/>How&#39;s this grab you:&lt;li&gt;&lt;p&gt;Port Scanning - Waving at passersby, seeing who waves back.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Protocol Scanning - Waving and saying &#34;Good morning,&#34; noting if the reply is in English, Spanish, or something else.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Vulnerability Scanning - Chatting up strangers to see if they&#39;ll reveal their birthday.&lt;/p&gt;&lt;/li&gt;&lt;li&gt;&lt;p&gt;Active Exploitation - Hypnotizing victims into handing over their ATM card and PIN.&lt;/p&gt;&lt;/li&gt; 2025-02-14T18:24:11Z https://yabu.me/nevent1qqsv7rxa7wygk0ypec0760kclkewcx49z76acadj03uy8tf3t7grtrszyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwxvvuhg Archived version of the quoted The Atlantic article is here:<br/><br/><a href="https://archive.ph/2025.02.07-140733/https://www.theatlantic.com/technology/archive/2025/02/elon-musk-doge-security/681600/">https://archive.ph/2025.02.07-140733/https://www.theatlantic.com/technology/archive/2025/02/elon-musk-doge-security/681600/</a><br/><br/>Unrelated: If you believe there has been an intrusion in a US government system, you are encouraged to report it at <a href="https://cisa.gov/report">https://cisa.gov/report</a><br/><a href="https://journa.host/@w7voa/113963205109936094">https://journa.host/@w7voa/113963205109936094</a> 2025-02-07T15:39:39Z https://yabu.me/nevent1qqsrafnpy98qhacqqff359es8vghpzuaucnzntwl9xhjy6q92gtrs9gzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwruqy83 So check it out. KEV data is now available on GitHub, in the proper cisagov organization. I know other people mirror KEV for their projects, but who can say if they&#39;re fiddling with it along the way? With <a href="https://github.com/cisagov/kev-data">https://github.com/cisagov/kev-data</a>, you can rest assured that it&#39;s the Real and True mirror of KEV.<br/><br/><a href="https://cisa.gov/kev">https://cisa.gov/kev</a> is still the actual authoritative source, but this GitHub mirror is a pretty close second.<br/><br/>I posted about this on [LinkedIn](<a href="https://www.linkedin.com/posts/todb_github-build-and-ship-software-on-a-single-activity-7290122220230623234-q92i?utm_source=share&amp;utm_medium=member_desktop">https://www.linkedin.com/posts/todb_github-build-and-ship-software-on-a-single-activity-7290122220230623234-q92i?utm_source=share&amp;utm_medium=member_desktop</a> ) since that&#39;s what people do with work stuff, apparently. 2025-01-28T21:49:52Z https://yabu.me/nevent1qqs0tqtyj8cccm49e7ptdmk88psyjhkeeqsstj60jgqt6ks04llkmwgzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwuvw7dh 98 KEVs to go until KEV #1337<br/><br/>Hopefully it&#39;ll be a good one. 2025-01-02T16:44:53Z https://yabu.me/nevent1qqsr6e0a4zfw8slh3ghhek2ld2ma3xtzvz9g7cx7vrasjzhtxu0800czyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwf5jch0 Near as I can tell, the activity around the #Struts2 bug, <br/>CVE-2024-53677, is just ham-handed runs of some generalized PoC, and nobody&#39;s actually exploiting this yet (since exploitation would be very application/path specific).<br/><br/>Most of the news last week was all &#34;exploitation happening, patch and rewrite everything now!&#34; but not seeing any reports of successful (or even possibly successful) this morning.<br/><br/>Tell me I&#39;m wrong!<br/><br/>(The PoC identified by SANS at <a href="https://isc.sans.edu/diary/31520">https://isc.sans.edu/diary/31520</a> isn&#39;t specific to some particular application -- it&#39;s on the user to define upload_endpoint and assumes no auth or session or anything.) 2024-12-23T13:52:07Z https://yabu.me/nevent1qqsy5un8z7radeuwe8xqye2z23tw40kacqqj0u3kjeku46h3hytz8nqzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwsl96l5 In reply to <a href='/nevent1qqsytuhna977q6srd5kzgr53k6fc46gzksvaek06nyl540lkfzlqsaqjs4kpe'>nevent1q…4kpe</a><br/>_________________________<br/><br/>That’s a nice bit of CVE lore! We should make these more obvious and prominent than a single blog post. <br/><br/>And yes, having a small set of always-valid-but-test CVEs would be nice to publish. That’s a neat idea. <br/><br/>Hey would it be cool to make them Luhn-formula-like so you can detect truncation?<br/><br/>Something like<br/><br/>CVE-2024-12342<br/>CVE-2025-12343<br/>CVE-2026-12340<br/><br/>(all the digits add up to modulo 0)<br/><br/>cc <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1wug9fkx7va4z2glakhnf056u9fj74e2y7u858v7sj7cgp4eav6ys5nghe4" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>zmanion :verified:</span> (<span class="italic">npub1wug…ghe4</span>)</a></span> 2024-12-01T14:59:24Z https://yabu.me/nevent1qqs0lkw0nea8gzgxmas4d3znlv3fnvze032lgyp0d0tjzygwd8l8k8gzyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw2dk6hr I’m not pirating movies, I’m just training my model. 2024-11-27T23:53:26Z https://yabu.me/nevent1qqs0nqg2um4t7llqg06p0p69wkew4pvvtpp0vtfal5wvgmm9w4ze9tszyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwyh5hyl In reply to <a href='/nevent1qqsvsjhwyg8cwkx6xt35sya84xdh4vwgqyylcxp4xjqvntfns0nk3xqde8rv0'>nevent1q…8rv0</a><br/>_________________________<br/><br/>Weirdly, all NCSC employees also have licenses to kill. Seems a little excessive. 2024-10-15T17:43:16Z https://yabu.me/nevent1qqsxnjxwnfmez3ft7vxldccska32nvdrzzemfsa6kte3fdnyc9z2a9szyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwjt7ywq In reply to <a href='/nevent1qqsdpnv84fck7kx23ett9g2dgx5tjnuewjugrq7rcmywf7kftqg6m7srduw5x'>nevent1q…uw5x</a><br/>_________________________<br/><br/>depends on what you’re testing though doesn’t it?<br/><br/>Sounds like DNS CNAME + Apache vhosts is the way to go. Mastodon apparently doesn’t do well with non-443 since fediverse things all assume 443 is where it’s at. <br/><br/><a href="https://github.com/mastodon/mastodon/discussions/20279">https://github.com/mastodon/mastodon/discussions/20279</a> 2024-10-15T00:07:04Z https://yabu.me/nevent1qqspfn6gj4gm6nqy5l664lryesj4ukvz2lucngxvx64d63qjfslydjszyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwec43zn Man. The archive.org outage is really chapping my hide. Good job, jerks.<br/><br/>Hey <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1wug9fkx7va4z2glakhnf056u9fj74e2y7u858v7sj7cgp4eav6ys5nghe4" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>zmanion :verified:</span> (<span class="italic">npub1wug…ghe4</span>)</a></span> we should think about reviving the CVE reference archival effort again. It&#39;s almost as if someone predicted this exact circumstance.<br/><br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1umd6j4jrnjqdvn9kqttvsgxwzw38s92zn2lsuq0d73neh7mjxa3sa8wfr7" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>internetarchive</span> (<span class="italic">npub1umd…wfr7</span>)</a></span> , good luck. 2024-10-11T18:50:26Z https://yabu.me/nevent1qqsg2m69mvx3vyevumv5wv4wy4t20jwrwlhqd9z0ehvxsfawlk5yvwczyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrw6pv74j In reply to <a href='/nevent1qqsfx4f0vkcwsmgsn0pw9qzkfjl6p030v3n0q86hmt894ywjar97ukq3g7eta'>nevent1q…7eta</a><br/>_________________________<br/><br/>Agreed. 2FA is becoming a real disappointment. 2024-09-04T01:16:56Z https://yabu.me/nevent1qqspzeyxl3ju8xk60upeyly8f8pv4njy3ft2danrneyfpfsyxn4j82szyqqtjm263chkfnaddfxng9qj3t3e4kpxjxdrvgqthfqk8t6gnqlrwurhclq So this is neat.<br/><br/>1) Some (all?) antispam/counterphishing email scanners are blind to #QRCode content. <br/><br/>2) You can draw working QRCodes with Unicode character sets, thus avoiding an image parser entirely, even if the scanner could process images in the first place. <br/><br/>3) By providing QRCode links, the attacker encourages the victim to use their personal device rather than the workstation, making defensive tracking more complicated.<br/><br/>I think it’s hilarious that a format designed SPECIFICALLY for machine vision is being used to evade machine interpretation.<br/><a href="https://infosec.exchange/@patrickcmiller/113067302631450126">https://infosec.exchange/@patrickcmiller/113067302631450126</a> 2024-09-02T13:39:28Z