Mr. Bitterness
@wdormann.infosec.exchange.ap.brid.gy
I play with vulnerabilities and exploits, but am forbidden to discuss such things publicly.
I used to be https://twitter.com/wdormann but Twitter has become […]
🌉 bridged from https://infosec.exchange/@wdormann on the fediverse by https://fed.brid.gy/
I used to be https://twitter.com/wdormann but Twitter has become […]
🌉 bridged from https://infosec.exchange/@wdormann on the fediverse by https://fed.brid.gy/
Apparently Gmail has a default-on setting that grants the permission to train their AI using your emails and attachments.
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
November 21, 2025 at 12:27 AM
Apparently Gmail has a default-on setting that grants the permission to train their AI using your emails and attachments.
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
Twitter sure is something these days.
November 15, 2025 at 5:22 PM
Twitter sure is something these days.
I have a UASP-using USB 3.2 thumb drive that works great on my Windows 11 host, but is virtually unusable (timeouts, errors, etc.) in a VMware Workstation or VirtualBox guest VM (Windows or Linux).
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
November 8, 2025 at 8:04 PM
I have a UASP-using USB 3.2 thumb drive that works great on my Windows 11 host, but is virtually unusable (timeouts, errors, etc.) in a VMware Workstation or VirtualBox guest VM (Windows or Linux).
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
For reasons, I happened to ponder the concept of 208V circuits in the US. And I saw a YouTube video that explained it well:
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
November 6, 2025 at 9:43 PM
For reasons, I happened to ponder the concept of 208V circuits in the US. And I saw a YouTube video that explained it well:
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
I've already come to terms with the fact that I don't use computers in the way that developers had considered, but every now and then I'm surprised by things.
With macOS, the manual DNS setting is **global**. Not per-configured-WiFi-network.
Scenario: I want to use my pihole when I'm on my […]
With macOS, the manual DNS setting is **global**. Not per-configured-WiFi-network.
Scenario: I want to use my pihole when I'm on my […]
Original post on infosec.exchange
infosec.exchange
November 6, 2025 at 6:37 PM
I've already come to terms with the fact that I don't use computers in the way that developers had considered, but every now and then I'm surprised by things.
With macOS, the manual DNS setting is **global**. Not per-configured-WiFi-network.
Scenario: I want to use my pihole when I'm on my […]
With macOS, the manual DNS setting is **global**. Not per-configured-WiFi-network.
Scenario: I want to use my pihole when I'm on my […]
There's a weird subculture on Youtube where occasionally I see that people post videos of themselves pointing, finger-wagging, and doing things that make absolutely no sense whatsoever.
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
November 2, 2025 at 4:52 PM
There's a weird subculture on Youtube where occasionally I see that people post videos of themselves pointing, finger-wagging, and doing things that make absolutely no sense whatsoever.
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
Microsoft:
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
October 30, 2025 at 3:14 PM
Microsoft:
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
Back when I first left the CERT/CC, I was unpersoned by the SEI pretty much right away. "Will Dormann" ? Never existed. All we have is `user-9a25e`.
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
October 29, 2025 at 3:02 PM
Back when I first left the CERT/CC, I was unpersoned by the SEI pretty much right away. "Will Dormann" ? Never existed. All we have is `user-9a25e`.
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
TFW ChatGPT tells you that it saved a script for you. Presumably server-side, as I obviously couldn't see it.
🤔
🤔
October 28, 2025 at 9:47 PM
TFW ChatGPT tells you that it saved a script for you. Presumably server-side, as I obviously couldn't see it.
🤔
🤔
I've noticed that Gmail is letting a pattern of spam messages through lately (maybe the past month or two?).
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
October 28, 2025 at 6:48 PM
I've noticed that Gmail is letting a pattern of spam messages through lately (maybe the past month or two?).
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
I suppose it's fried green tomato season.
October 26, 2025 at 2:46 PM
I suppose it's fried green tomato season.
TIL that I can take the part of my tomatoes that I'd otherwise throw away (the skins), throw them in a spice grinder, and you get delicious tomato powder!
`mindblown.gif`
`mindblown.gif`
October 25, 2025 at 10:08 PM
TIL that I can take the part of my tomatoes that I'd otherwise throw away (the skins), throw them in a spice grinder, and you get delicious tomato powder!
`mindblown.gif`
`mindblown.gif`
If you have a long enough conversation with ChatGPT (I don't want to talk about it), your browser will start to go unresponsive.
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
October 24, 2025 at 9:26 PM
If you have a long enough conversation with ChatGPT (I don't want to talk about it), your browser will start to go unresponsive.
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
Never change, Linux.
![10ct 21 15:14:24 ubufuzzb4 watchdog[1540]: This interval length (59) might reboot the system while the process sleeps! Try 59 or less](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:z6gnpsdkcqthnmkgw47xsuov/bafkreibkluodrv4hjulsxqrhcyzhdhmfir4cfztdvjah2xwecexgeozjye@jpeg)
October 22, 2025 at 1:23 PM
Never change, Linux.
Me, after buying some cheap computer item from China:
`SerialNumber: 235678C218CA` ... Hmm, that's suspicious.
Oh, it's googleable. A job done, China.
`SerialNumber: 235678C218CA` ... Hmm, that's suspicious.
Oh, it's googleable. A job done, China.
Google Search
www.google.com
October 22, 2025 at 12:27 AM
Me, after buying some cheap computer item from China:
`SerialNumber: 235678C218CA` ... Hmm, that's suspicious.
Oh, it's googleable. A job done, China.
`SerialNumber: 235678C218CA` ... Hmm, that's suspicious.
Oh, it's googleable. A job done, China.
Do you or somebody you know have a Windows 10 that isn't fit for a Windows 11 upgrade? (e.g. no TPM)
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
October 17, 2025 at 1:36 PM
Do you or somebody you know have a Windows 10 that isn't fit for a Windows 11 upgrade? (e.g. no TPM)
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
VMware HGFS (host-guest filesystem) is an easy way of giving your guest VM access to files on your host. But I've noticed that it isn't terribly performant, using FUSE and who knows what to move bits around.
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
October 16, 2025 at 7:32 PM
VMware HGFS (host-guest filesystem) is an easy way of giving your guest VM access to files on your host. But I've noticed that it isn't terribly performant, using FUSE and who knows what to move bits around.
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
My new bus payment phone app says "Tap & Ride"
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
October 16, 2025 at 1:11 PM
My new bus payment phone app says "Tap & Ride"
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
https://my.f5.com/manage/s/article/K000154696
> These files contained some of our BIG-IP source code and information about undisclosed vulnerabilities we were working on in BIG-IP.
> These files contained some of our BIG-IP source code and information about undisclosed vulnerabilities we were working on in BIG-IP.
myF5
my.f5.com
October 15, 2025 at 1:01 PM
https://my.f5.com/manage/s/article/K000154696
> These files contained some of our BIG-IP source code and information about undisclosed vulnerabilities we were working on in BIG-IP.
> These files contained some of our BIG-IP source code and information about undisclosed vulnerabilities we were working on in BIG-IP.
A person is running for mayor of my town.
Their last name only appears in their website in one image. Not in text form. Anywhere.
Someone searching for their name won't find the site as Googling for `site:<theirwebsite> lastname` produces zero hits.
Good luck?
Their last name only appears in their website in one image. Not in text form. Anywhere.
Someone searching for their name won't find the site as Googling for `site:<theirwebsite> lastname` produces zero hits.
Good luck?
October 15, 2025 at 12:47 PM
A person is running for mayor of my town.
Their last name only appears in their website in one image. Not in text form. Anywhere.
Someone searching for their name won't find the site as Googling for `site:<theirwebsite> lastname` produces zero hits.
Good luck?
Their last name only appears in their website in one image. Not in text form. Anywhere.
Someone searching for their name won't find the site as Googling for `site:<theirwebsite> lastname` produces zero hits.
Good luck?
Me, foolishly: Here's a thing that can help Windows people.
Mastodon: This is silly. You should be running Linux.
Don't ever change, Mastodon. You're better than Twitter, but not by much.
Mastodon: This is silly. You should be running Linux.
Don't ever change, Mastodon. You're better than Twitter, but not by much.
October 8, 2025 at 11:34 PM
Me, foolishly: Here's a thing that can help Windows people.
Mastodon: This is silly. You should be running Linux.
Don't ever change, Mastodon. You're better than Twitter, but not by much.
Mastodon: This is silly. You should be running Linux.
Don't ever change, Mastodon. You're better than Twitter, but not by much.
Hello, future black swallowtail butterfly!
October 3, 2025 at 7:03 PM
Hello, future black swallowtail butterfly!
Phase 1:
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
October 2, 2025 at 4:33 AM
Phase 1:
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
Dearest Google,
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet
September 29, 2025 at 12:50 PM
Dearest Google,
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet