infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

ZDI-26-444 - 7-Zip XZ Decompression Heap-based Buffer Overflow Remote Code Execution Vulnerability

https://www.zerodayinitiative.com/advisories/ZDI-26-444/

CVE-2026-14266
this post | permalink
@codinghorror Can't wait for past miracle tech like Mercury or Radium do their comeback on the back of LLMs!
this post | permalink
[RSS] TruthSocial are selling their API - want it for free?

https://old.reddit.com/r/ExploitDev/comments/1v20jw0/truthsocial_are_selling_their_api_want_it_for_free/
this post | permalink
[RSS] Real-world decryption

https://www.bfswa.blog/p/real-world-decryption
this post | permalink
[RSS] Crypto etymology

https://www.bfswa.blog/p/crypto-ethymology
this post | permalink
[RSS] Escalating All The Privileges With Foxit PDF Reader (CVE-2026-57239)

https://blog.paradoxis.nl/escalating-all-the-privileges-with-foxit-pdf-reader-cve-2026-57239-582a78b60492
this post | permalink
[RSS] The Design of Everyday Cryptography

http://dlp.rip/everyday-cryptography
this post | permalink
[RSS] Dnsmasq DNS Remote Heap Buffer Overflow

https://blog.exodusintel.com/2026/07/20/dnsmasq-dns-remote-heap-buffer-overflow/

CVE-2026-2291
this post | permalink
@schrotthaufen https://infosec.place/objects/a0c412dc-b921-4e7d-88c8-df0884ec8ebe
this post | permalink
The year is 2026. Literal trillions are spent in the hope to revolutionize the IT industry.

At the same time children have to deal with OAuth flows, One-Time Passwords and consent prompts to play Minecraft.

We really should stop fetishizing new software and stop for a brief moment to think through how software *should* work so it'd make our lives a bit better.
this post | permalink
Next Page