Has anyone ever refused a bug bounty payment? Curious….
I mean, if the only way to report a bug to some company is via a bug bounty program, is it possible to say “no thanks” on the payout? Or have them donate it to the #eff? I’d be interested in hearing about any such thing happening.
AI - especially agentic AI - is inadvertently creating more technical debt. But there are a few steps one can take to help mitigate the situation.
https://www.markloveless.net/blog/2026/7/2/ai-and-technical-debt
Fairly recently someone asked me about naming a vulnerability, as they were looking for suggestions. Since I kind of hate that sort of thing, I came up with the name of "Fuck". The response was something along the lines of "I can't name it that, Marketing won't like it." Yeah well, it doesn't have to be named. It just needs to be reported, fixed, and patched.
BTW if anyone catches the slight nod to Dan Farmer and his Satan tool followup, you're quite cool (and old).
Thank goodness this happened. Defenders seriously need access to Fable and Mythos.
The full moon in Arlington Texas last night was particularly interesting looking due to the haze from dust blown in from the Saharan desert (yes, across the Atlantic).
Hello fellow nerds. If you and/or your company has access to the new OpenAI models (their "Mythos" versions) the rest of us would love to hear about how good or overhyped they are.
https://thehackernews.com/2026/06/openai-limits-gpt-56-rollout-as-sol.html
I know this happened a few months ago but it is just now making the rounds via social media outside of Germany. What a sick burn.
From last April, I somehow missed this so maybe others did too. Regardless, it's fucked up.
https://futurism.com/artificial-intelligence/ice-facial-surveillance-glasses
The good news? Power outage this morning but the home battery setup kept all of the critical load circuits active (HVAC, frig/freezer, servers, a few other minor things) with no down time. The bad news? All of the smart switches on non-critical load circuits did NOT come back on via the Home Assistant automation I created. I had to do it manually like a neanderthal.
Looks like my blog post (https://www.markloveless.net/blog/2026/6/18/quantum-safe-openssh-and-openssl) from last Thursday on configuring OpenSSH and OpenSSL to make them quantum safe was more timely than I thought.
A new executive order from yesterday is summarized here:
https://thehackernews.com/2026/06/trump-order-sets-2030-deadline-for.html
Happy Fathers Day to all of the fathers out there in the #fediverse. And of course blessed #midsummer and happy #litha to all!
Since both myself and hellNbak were laid off recently, it seems we both have decided to make sure various coding side projects from the past year or so have been brought forward - especially hellNbak. Anyway, enjoy the fruits of NMRC labor.
Recently I blogged about the dangers posed by “harvest now, decrypt later” in relationship to quantum cryptography, and I even released a tool to assess local and remote systems running SSH and HTTPS. Now I have a new blog post where I outline configuration settings for servers running OpenSSH and NGINX to address the threat. The threat is small, but eventually your boss will ask and you can say “we already took care of it”.
https://www.markloveless.net/blog/2026/6/18/quantum-safe-openssh-and-openssl
Note that this was middle of the day in Texas with peak sun, but also bear in mind a tropical storm was riding the coast dumping rain with lots of clouds. Solar was higher than gas and coal, toss in wind and wow, neat.
In case you were wondering, yes when there is a laptop problem and you need to recover a few files that haven’t been backed up and the drive was encrypted it IS a pain in the ass. More tedious than anything. Thank goodness it’s Linux, makes it much simpler, but still a pain in the ass nonetheless.
A noise day for sure. Neighbors across the street are having their roof re-shingled (with solar panels being removed/replaced), the lawn guys are here, another neighbor has out a chain saw, and one of the helicopter manufacturers in the area is doing test flights over the neighborhood. Couple that with the fire station a block away having a couple of calls, wow it is noisy!
It's been a minute on the weird MSRC blog post from last month, and frankly I've been waiting for some type of update coming from Microsoft on this. Nothing is happening. So I jotted down a few thoughts.
I am hoping beyond hope that there is more to this story....
https://www.markloveless.net/blog/2026/6/10/deeper-thoughts-on-microsoft
