The movie "Phreaker" is about to premiere at Lund Fantastic Film Festival

https://www.fff.se/feature-films/phreaker

#phreaking #movie

uAllow - Allow-Lists for the Vulnerable

https://github.com/u-allow/u-allow

I did this thing, and would really appreciate any feedback, not to mention contributions!

#OnlineSafety #Scam #phishing

Writing on screen which key takes the user to the BIOS/EFI setup should be mandatory, with heavy penalties for violators.

The top of a car battery it not a good place to put down your metal tools.

Metal calipers are not the right tools to measure the distance of cell terminals.

Follow me for other useful advice!

#adulting #electricity #lifehack

I can't wrap my head around why people keep choosing #JavaScript as their embedded language.

#Frida #WinDbg #ReverseEngineering

Umm why does infosec.place "access my device"?

/cc @jerry

[RSS] ATT&CKing TACACS+ to Pwn Your Network via a Pre-Auth RCE

https://www.elttam.com/blog/att-cking-tacacs-to-pwn-your-network-via-a-pre-auth-rce

US military had close call after using AI for false intelligence report

https://edition.cnn.com/2026/09/18/politics/us-military-ai-false-intelligence-china-ship

They almost attacked a Chinese ship believing it was transporting nuclear weapons component (/via OSINTTechnical@X)

Posting to social media is like writing to the wall of a public toilet.

If you are bothered by replies, pictures taken of your work, or genitals drawn next to it, then you are probably using the wrong medium.

Dependency Cooldowns for different package ecosystems

https://cooldowns.dev

Some places of #Fedi literally require you to look up the Communist Manifesto.

Un-fucking-believable.

@jerry Are infosec.pub's communities/posts intentionally visible for registered users only?

Glad to see MS upgraded Win11 system requirement to a 64GB disk - this way when you buy a minimal laptop you don't have to upgrade your disk immediately after the first update eats 25GB of it (aside of the already installed OS)...

Compromising Signal's Contact Discovery Enclave | V12
https://v12.sh/blog/signal

[RSS] What's in a tag name? JavaScript, apparently

https://portswigger.net/research/whats-in-a-tag-name-javascript-apparently

This should be illegal #xss

I'm on this picture and don't like it.

I thought I'm making up a conspiracy theory around NVIDIA architecting the AI bubble after the crypto bubble bursted. It seems @david_chisnall agrees (sort of):

RE: https://infosec.exchange/@david_chisnall/117075838205635406

[RSS] 4 jsoup vulnerabilities

https://joshua.hu/4-jsoup-vulnerabilities

HuggingFace incident report:

https://huggingface.co/blog/agent-intrusion-technical-timeline

The report itself reeks of LLM slop with gems like the "kill chain", consisting of phases like recon, exfil, c2...and k8s :) Nuances are overemphasized (like how code execution was used to execute code) while important steps are blurry (e.g. they had some kind of "allowlist" in the dataset processor, that allowed everything which didn't look like a URL?).

I feel sorry for blue teams not because they'll have to respond to more incidents but because they'll have to wade through reports like this...

This OpenAI vs. HF story stinks to high heavens, I tell you this much...