Mr. Bitterness
@wdormann.infosec.exchange.ap.brid.gy
I play with vulnerabilities and exploits, but am forbidden to discuss such things publicly.
I used to be https://twitter.com/wdormann but Twitter has become […]
🌉 bridged from https://infosec.exchange/@wdormann on the fediverse by https://fed.brid.gy/
I used to be https://twitter.com/wdormann but Twitter has become […]
🌉 bridged from https://infosec.exchange/@wdormann on the fediverse by https://fed.brid.gy/
And apparently if you make this change, you'll get nagged to re-enable it so that you can use "inbox".
All while showing you the... Inbox.
If you re-enable Smart Features, it will revert to "Primary".
Anyone using Gmail surely realizes that Google is […]
[Original post on infosec.exchange]
All while showing you the... Inbox.
If you re-enable Smart Features, it will revert to "Primary".
Anyone using Gmail surely realizes that Google is […]
[Original post on infosec.exchange]
November 21, 2025 at 2:53 AM
And apparently if you make this change, you'll get nagged to re-enable it so that you can use "inbox".
All while showing you the... Inbox.
If you re-enable Smart Features, it will revert to "Primary".
Anyone using Gmail surely realizes that Google is […]
[Original post on infosec.exchange]
All while showing you the... Inbox.
If you re-enable Smart Features, it will revert to "Primary".
Anyone using Gmail surely realizes that Google is […]
[Original post on infosec.exchange]
Apparently Gmail has a default-on setting that grants the permission to train their AI using your emails and attachments.
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
November 21, 2025 at 12:27 AM
Apparently Gmail has a default-on setting that grants the permission to train their AI using your emails and attachments.
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
I'll file this as "expected".
The unexpected part?
When you toggle `Smart features` to turn it off, the pop-up says:
`Smart features turned **on**`
🤦♂️
Twitter sure is something these days.
November 15, 2025 at 5:22 PM
Twitter sure is something these days.
I have a UASP-using USB 3.2 thumb drive that works great on my Windows 11 host, but is virtually unusable (timeouts, errors, etc.) in a VMware Workstation or VirtualBox guest VM (Windows or Linux).
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
November 8, 2025 at 8:04 PM
I have a UASP-using USB 3.2 thumb drive that works great on my Windows 11 host, but is virtually unusable (timeouts, errors, etc.) in a VMware Workstation or VirtualBox guest VM (Windows or Linux).
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
But this drive works fine in a VMware Fusion guest VM […]
[Original post on infosec.exchange]
For reasons, I happened to ponder the concept of 208V circuits in the US. And I saw a YouTube video that explained it well:
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
November 6, 2025 at 9:43 PM
For reasons, I happened to ponder the concept of 208V circuits in the US. And I saw a YouTube video that explained it well:
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
https://www.youtube.com/watch?v=xMZkKI5rleg
It's refreshing to every now and then see quality content, as opposed to slop created […]
[Original post on infosec.exchange]
There's a weird subculture on Youtube where occasionally I see that people post videos of themselves pointing, finger-wagging, and doing things that make absolutely no sense whatsoever.
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
November 2, 2025 at 4:52 PM
There's a weird subculture on Youtube where occasionally I see that people post videos of themselves pointing, finger-wagging, and doing things that make absolutely no sense whatsoever.
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
Dare I ask why such things exist? Do people find such things […]
[Original post on infosec.exchange]
Microsoft:
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
October 30, 2025 at 3:14 PM
Microsoft:
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
> As much as 30% of the company's code is written by AI.
Also Microsoft:
Somehow we managed to make it so that clicking the `x` in Task Manager doesn't close the app. Whoopsie daisy!
Back when I first left the CERT/CC, I was unpersoned by the SEI pretty much right away. "Will Dormann" ? Never existed. All we have is `user-9a25e`.
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
October 29, 2025 at 3:02 PM
Back when I first left the CERT/CC, I was unpersoned by the SEI pretty much right away. "Will Dormann" ? Never existed. All we have is `user-9a25e`.
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
Just recently, looking for a thing I had done in the past, I realized that the entire vuls.cert.org website […]
[Original post on infosec.exchange]
TFW ChatGPT tells you that it saved a script for you. Presumably server-side, as I obviously couldn't see it.
🤔
🤔
October 28, 2025 at 9:47 PM
TFW ChatGPT tells you that it saved a script for you. Presumably server-side, as I obviously couldn't see it.
🤔
🤔
I've noticed that Gmail is letting a pattern of spam messages through lately (maybe the past month or two?).
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
October 28, 2025 at 6:48 PM
I've noticed that Gmail is letting a pattern of spam messages through lately (maybe the past month or two?).
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
With the subject line of `Delivery Status Notification (Failure)` and then just a junk email body.
Just me? Is using a subject line of `Delivery […]
[Original post on infosec.exchange]
I suppose it's fried green tomato season.
October 26, 2025 at 2:46 PM
I suppose it's fried green tomato season.
TIL that I can take the part of my tomatoes that I'd otherwise throw away (the skins), throw them in a spice grinder, and you get delicious tomato powder!
`mindblown.gif`
`mindblown.gif`
October 25, 2025 at 10:08 PM
TIL that I can take the part of my tomatoes that I'd otherwise throw away (the skins), throw them in a spice grinder, and you get delicious tomato powder!
`mindblown.gif`
`mindblown.gif`
If you have a long enough conversation with ChatGPT (I don't want to talk about it), your browser will start to go unresponsive.
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
October 24, 2025 at 9:26 PM
If you have a long enough conversation with ChatGPT (I don't want to talk about it), your browser will start to go unresponsive.
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
Shouldn't all of the heavy lifting be happening, oh, I dunno... server side?
Never change, Linux.
![10ct 21 15:14:24 ubufuzzb4 watchdog[1540]: This interval length (59) might reboot the system while the process sleeps! Try 59 or less](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:z6gnpsdkcqthnmkgw47xsuov/bafkreibkluodrv4hjulsxqrhcyzhdhmfir4cfztdvjah2xwecexgeozjye@jpeg)
October 22, 2025 at 1:23 PM
Never change, Linux.
Wait, are you telling me that if I want a linked-cloneable Win11 VM, I need to create a Win10 VM and then upgrade it to Win11? That sounds silly. Can't I just use Rufus to achieve the same goal?
Of course it is silly. But also silly (IMO) is that Rufus […]
[Original post on infosec.exchange]
Of course it is silly. But also silly (IMO) is that Rufus […]
[Original post on infosec.exchange]
October 21, 2025 at 3:35 PM
Wait, are you telling me that if I want a linked-cloneable Win11 VM, I need to create a Win10 VM and then upgrade it to Win11? That sounds silly. Can't I just use Rufus to achieve the same goal?
Of course it is silly. But also silly (IMO) is that Rufus […]
[Original post on infosec.exchange]
Of course it is silly. But also silly (IMO) is that Rufus […]
[Original post on infosec.exchange]
I don't have any old machines. But I do have VMs that I'd be able to linked clone. Will this help me?
Absolutely. VMware won't allow linked clones of Windows 11 VMs because they're encrypted.
However a "Windows 10" VM can be linked cloned.
Absolutely. VMware won't allow linked clones of Windows 11 VMs because they're encrypted.
However a "Windows 10" VM can be linked cloned.
October 21, 2025 at 3:22 PM
I don't have any old machines. But I do have VMs that I'd be able to linked clone. Will this help me?
Absolutely. VMware won't allow linked clones of Windows 11 VMs because they're encrypted.
However a "Windows 10" VM can be linked cloned.
Absolutely. VMware won't allow linked clones of Windows 11 VMs because they're encrypted.
However a "Windows 10" VM can be linked cloned.
Do you or somebody you know have a Windows 10 that isn't fit for a Windows 11 upgrade? (e.g. no TPM)
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
October 17, 2025 at 1:36 PM
Do you or somebody you know have a Windows 10 that isn't fit for a Windows 11 upgrade? (e.g. no TPM)
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
1. Get a Windows 11 25H2 ISO
2. Run `setup /product server`
Enjoy your Windows 11 with no coerced Microsoft Account, TPM features, etc.
VMware HGFS (host-guest filesystem) is an easy way of giving your guest VM access to files on your host. But I've noticed that it isn't terribly performant, using FUSE and who knows what to move bits around.
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
October 16, 2025 at 7:32 PM
VMware HGFS (host-guest filesystem) is an easy way of giving your guest VM access to files on your host. But I've noticed that it isn't terribly performant, using FUSE and who knows what to move bits around.
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
Surely it's faster than a CIFS connection to my […]
[Original post on infosec.exchange]
My new bus payment phone app says "Tap & Ride"
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
October 16, 2025 at 1:11 PM
My new bus payment phone app says "Tap & Ride"
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
Oh, it must use RFID or something so that I tap my phone on the card reader, right?
No. It creates a "bar code" (QR code) that you optically scan on entering the bus.
I really need to readjust my expectations of the world.
Hello, future black swallowtail butterfly!
October 3, 2025 at 7:03 PM
Hello, future black swallowtail butterfly!
Phase 1:
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
October 2, 2025 at 4:33 AM
Phase 1:
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
Wow. This replacement computer for my semi-old MythTV DVR is:
* Almost free (~$120)
* 1/3 the energy consumption of my old box.
* A tiny fraction of the size of my old box._Awesome!_
Phase 2:
Oh. Despite the firmware offering a CSM / […]
[Original post on infosec.exchange]
Dearest Google,
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet
September 29, 2025 at 12:50 PM
Dearest Google,
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet
If I mark an email as spam, maybe don't suggest an "Are you sure you wouldn't prefer to confirm to the spammer that your email address is active instead?" option?
Signed,
Everyone on the planet
I'll admit that I sort of am getting used to the Compact Safari mode. You do indeed get more usable screen real estate.
Until I reached the point of needing to look at my browser history. I had to watch a YouTube video to discover how to get there.
It is […]
[Original post on infosec.exchange]
Until I reached the point of needing to look at my browser history. I had to watch a YouTube video to discover how to get there.
It is […]
[Original post on infosec.exchange]
September 26, 2025 at 1:07 PM
I'll admit that I sort of am getting used to the Compact Safari mode. You do indeed get more usable screen real estate.
Until I reached the point of needing to look at my browser history. I had to watch a YouTube video to discover how to get there.
It is […]
[Original post on infosec.exchange]
Until I reached the point of needing to look at my browser history. I had to watch a YouTube video to discover how to get there.
It is […]
[Original post on infosec.exchange]
FTR, you can revert to the old look by:
Settings -> Safari -> Tabs, and select Bottom
Settings -> Safari -> Tabs, and select Bottom
September 20, 2025 at 12:44 PM
FTR, you can revert to the old look by:
Settings -> Safari -> Tabs, and select Bottom
Settings -> Safari -> Tabs, and select Bottom