infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

Another humble #UX request:

I know dates look ugly, but "last month" is a pretty wide timeframe and when my brain sees "3 weeks ago" it will recall yesterdays dinner and the 1994 World Cup finals with equal probability.

Please display exact dates on frontends!
this post | permalink
TIL cURL only supports the lowercase http_proxy environment variable:

https://curl.se/mail/archive-2001-12/0034.html
this post | permalink
[RSS] HEX ADVENT 2025: Crack the Advent, Conquer the Threat

https://starlabs.sg/blog/2025/11-hex-advent-2025/
this post | permalink
[RSS] "Astral-tokio-tar" / "uv" Arbitrary Write Path Traversal Vulnerability

https://github.com/google/security-research/security/advisories/GHSA-9p78-p5g6-gcj8

This is CVE-2025-59825
this post | permalink
[RSS] dz6: vim-like hex editor

https://crates.io/crates/dz6
this post | permalink
Since yesterdays #AdTech link was received quite positively, I'm sharing again this collection from The Correspondent:

Debunking the science of advertising
https://thecorrespondent.com/collection/the-nonsense-of-online-advertising

The Correspondent was an incredible publication, and as such, turned out to be unsustainable :(
this post | permalink
@mariyadelano @rmd1023 @brouhaha @hacks4pancakes this is a great article, pointing out that if someone charges you by their performance while they are also responsible for measuring their own performance, there is a slight chance of fraud
https://thecorrespondent.com/125/the-non-sense-of-online-advertising-when-the-numbers-dont-add-up
this post | permalink
@mttaggart We have this saying: "I hope it is serious because it'd be too crude for a joke"
this post | permalink
@mttaggart I accidentally made this gif this morning before shit went down
this post | permalink
@mkj maybe, but having a huge "we are cloudflare, we are breaking your app" message displayed to end users by default is a significant difference
this post | permalink
Next Page