infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

@Viss

I may be wrong but assuming users don't know what files are helped me resolve a number of family techsupport situations.

@krypt3ia @decryption @jpm @da_667 @sassdawe
this post | permalink
@schrotthaufen

SmartScreen windows got increasingly hard to unblock over time "and for a while, it was good". Then I went to a client where the sysadmin unblocked the freshly downloaded executable from the properties window so fast I had to ask him to show me once more what he just did because I couldn't follow.

Life finds a way.

@decryption @jpm @da_667 @sassdawe @Viss
this post | permalink
#Xiaomi advisories by Taszk

https://labs.taszk.io/blog/post/114_mi_heap_bof/
https://labs.taszk.io/blog/post/113_mi_rng_predict/
https://labs.taszk.io/blog/post/112_mi_hshake_bypass/

It seems there is some exceptionally dump vendor policy is in the works so #NoCVE
this post | permalink
@Viss As I see with the rise of smart phones companies successfully convinced users that files and directories are low level magic they are not supposed to know or care about. From this point doing stuff with files in a file manager is sorcery indistinguishable from copying 5 pages of sorcery into the sorcery manager. Confirmation windows never stopped any attacks because users click Yes faster than the blink of an eye.

In essence users are expected to make critical decisions about a system that is hidden from them in every other aspect of working with computers.

@sassdawe @da_667 @jpm @decryption
this post | permalink
this post | permalink
@bluedevil I seriously don't get why we can't have proper error messages in 2026...
this post | permalink
RE//verse 2026 videos are online

https://www.youtube.com/watch?v=o0boA1N6JV0&list=PLBKkldXXZQhD1hzCkhhMQXjEQ_qWnFtQn
this post | permalink
[RSS] [video] RE//verse 2026: Hacking the Xbox One

https://www.youtube.com/watch?v=FTFn4UZsA5U
this post | permalink
[RSS] Fantastic unwind information and where to find them

https://klezvirus.github.io/posts/Byoud/
this post | permalink
@mwichary Is that darker gray frames (on the plastic models) for the wrists??
this post | permalink
Next Page