infosex.exchange <3

You are probably looking for the infosec.exchange Mastodon instance

This host is mostly for my random stuff, and in little part acts like a well-intentioned placeholder for the typosquatted domain.

Discoverability and Archiving

Currently I'm using this host for saving the items from my own feeds to the Wayback Machine and provide in-links for search engines. I hate that I have to do this, but the non-sense ideology of Mastodon pretty much ruined the search feature for Fediverse as a whole, and this wasn't changed by the fact that they owned their mistake and implemented search eventually.

Yes, I (or anyone else) could do similar things with other peoples published feeds, regardless of the tantrum. No, you can't defederate this, because the process doesn't rely on an instance.

Gluttony Section for Search Engines

@joxean "And if you don't believe drugs have done good things for us, do me a favor; go home tonight, take all albums, all your tapes, and all your cd's, and burn 'em. Because you know what? The musicians that made all that great music that's enhanced your lives throughout the years... real fucking high on drugs." - Bill Hicks
this post | permalink
[RSS] Failure is Required: Understanding Fail-Safe and Fail-Fast Strategies

https://debugagent.com/failure-is-required-understanding-fail-safe-and-fail-fast-strategies

This article mostly answers my previously expressed doubts about handling non-security edge-cases at multiple layers of code.
this post | permalink
As expected, @hackerfantastic pwned run0 in no time (h/t @timb_machine)

Image repost from https://twitter.com/hackerfantastic/status/1785495587514638559
this post | permalink
@rickoooooo @ltriant wow this bring me back massive nostalgia to my first homepage hosted on a very similar server back (with socializing and everything!) in the 90s! I had trouble sharing the URL because I couldn't explain people where ~ is on their keyboards, it was really frustrating :D
this post | permalink
@timb_machine pandoc+wrappers for the non-tech?
this post | permalink
@codinghorror Depending on how much you do (not) like psycho horror genre definitely do (not) watch this: https://www.imdb.com/title/tt1437358/
this post | permalink
Another batch of vulnerabilities released, by @TalosSecurity now for Foxit Reader:

- CVE-2024-25938 - Foxit Reader Barcode widget Calculate event use-after-free vulnerability
- CVE-2024-25648 - Foxit Reader ComboBox widget Format event use-after-free vulnerability
- CVE-2024-25575 - Foxit Reader Lock object fields property type confusion vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2024-1958
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1959
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1963

(I should create a bot for these already...)
this post | permalink
[RSS] iOS: a journey in the USB networking stack

https://www.synacktiv.com/en/publications/ios-a-journey-in-the-usb-networking-stack
this post | permalink
@cryptax AFAICT that was a general issue, not something personal :)
this post | permalink
[RSS] Your NVMe Had Been Syz’ed: Fuzzing NVMe-oF/TCP with Syzkaller

https://www.cyberark.com/resources/threat-research-blog/your-nvme-had-been-syzed-fuzzing-nvme-of-tcp-driver-for-linux-with-syzkaller
this post | permalink
Next Page