Toots for adamhotep@infosec.exchange account

Written by Adam Katz on 2025-01-22 at 18:24

At the moment, whitehouse.gov doesn't have an MX record and its A records don't listen on port 25, so you can't send #email to anything@whitehouse.gov

=> View attached media

=> More informations about this toot | View the thread

Written by Adam Katz on 2025-01-10 at 19:24

From a truly outstanding blow-by-blow thread covering the Montana anti-trans bathroom bill hearing, a good counter: more elected Republicans have been convicted of bathroom assaults than trans people.

So, who should we be banning from bathrooms?

https://fed.brid.gy/r/https://bsky.app/profile/did:plc:m65ifh7vn5zdgs7izcmht4gy/post/3lffj4accns2a

=> More informations about this toot | View the thread

Written by Adam Katz on 2025-01-10 at 05:14

Betting ... on disasters that any individual can create or exacerbate. Deregulation did this. It wasn't legal a decade or so ago.

https://hachyderm.io/@molly0xfff/113801357461741537

=> More informations about this toot | View the thread

Written by Adam Katz on 2025-01-04 at 16:34

How ReCAPTCHA works for regular users.

In my experience (as a user with tons of privacy controls), I get far more images to classify when off my work VPN (so there's some IP reputation in there), though using FF's private browsing gives me even more, which implies I've got some more knobs to turn.

https://lgbtqia.space/@alice/111870530579850931

=> More informations about this toot | View the thread

Written by Adam Katz on 2025-01-04 at 01:56

hah

=> View attached media

=> More informations about this toot | View the thread

Written by Adam Katz on 2025-01-02 at 20:06

New captcha: get three kills in Doom (yes, really!)

https://doom-captcha.vercel.app/

=> More informations about this toot | View the thread

Written by Adam Katz on 2025-01-02 at 04:38

Lots of people in infosec (and other privacy-aware folks) use January 1 as their birthday on most sites. I get that you don't want to share that (it's too often used as password-like fodder), but it's pretty simple to gemerate a random date (within a plausible time window, of course) and then save it in your password manager.

Of course, this would be far better if managed by @bitwarden, @keepassxc, @1password, et al.

Anyways, #HappyBirthday

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-12-25 at 20:13

This is making the rounds again, as it should.

https://www.newyorker.com/humor/borowitz-report/denmark-offers-to-buy-us

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-11-19 at 05:42

Rick Astley, and Goatse.cx before him, are unsung cybersecurity heroes.

https://thecanadian.social/@MostlyHarmless/113506421300596381

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-11-05 at 20:53

Dice go way back. Some of these appear to meet today's standards for precision and fairness (all dice should have opposite sides add up to 1+sides. The d6's sides add to 7). The Greek stone d20 may be 2200 years old.

Learn more #DnD

=> View attached media | View attached media | View attached media | View attached media

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-10-24 at 23:53

LLM detectors do not work.

I have a ticket assigned to me at work. The task is to implement an "AI detector" since LLMs are so prevalent in spam. Rather than closing it as WONTFIX, I have been using its comment section to collect examples of failed attempts at the endeavor. Thanks for the contribution, @artemis!

https://dice.camp/@artemis/113363617460842480

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-10-18 at 00:26

Perhaps a naive question, but why do news organizations like @npr refer to Gaza as Hamas and Lebanon as Hezbollah? I don't see them referring to Israel as Likud (the ruling party chaired by Benjamin Netenyahu).

I worry that most Americans don't understand that all three of these groups have similar legitimacy to their ruling their nations, instead assuming they're solely terrorist factions.

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-10-03 at 01:28

Look at somebody and know their life story in seconds.

This is why I don't have photos of myself online.

https://docs.google.com/document/d/1iWCqmaOUKhKjcKSktIwC3NNANoFP7vPsRvcbOIup_BA/mobilebasic #privacy #facialrecognition #doxxing

=> View attached media

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-09-29 at 04:33

Cloudflare now supports security.txt! It's off by default, but this should really help adoption. This is a very good thing.

HT @troyhunt, who posted this to X but not here.

=> View attached media | View attached media

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-09-19 at 13:35

The Columbia Spectator has been very good at showing what is really going on at Columbia and Barnard, yet their work is largely ignored by the rest of the media. This piece on the surveillance of students is important:

https://www.columbiaspectator.com/news/2024/09/12/inside-columbias-surveillance-and-disciplinary-operation-for-student-protesters-3/

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-09-18 at 19:59

I worry for @mozilla. For a too-brief time, they were a modern-day Bell Labs or Xerox PARC. They had tons of amazing experiments and weren't afraid to fail.

Their entry to Mastodon never made any sense given all the other options, but I see it as an echo of that era. In Mozilla's best years, we might have seen all sorts of new Fediverse features and Mastodon tweaks, but this can't happen nowadays because they're cash-strapped.

The anti-monopoly rulings against Google might doom Mozilla since it depends on Google's funding, ironically cementing $GOOG's browser engine monopoly. This is why Mozilla is trying cockamamie distractions like their VPN service: they need non-Google money. I am so disappointed that they cut Servo and Rust. These weren't just great research ventures—Firefox can't compete without them. (Rust will survive, but Servo?)

https://mozilla.social/@mozilla/113153943609185249

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-09-05 at 01:03

The IP space the FBI uses to send mail is in transition to the Asia Pacific Network Information Centre (APNIC). What could go wrong?

fbi.gov descriptive text "v=spf1 +mx ip4:153.31.0.0/16 ip4:52.245.185.78 -all"

$ mx fbi.gov

10 153.31.119.142 mx-east.fbi.gov

20 153.31.192.142 mx-west.fbi.gov

$ whois 153.31.119.142

% [whois.apnic.net]

% Whois data copyright terms http://www.apnic.net/db/dbcopyright.html

% Information related to '153.0.0.0 - 153.255.255.255'

% Abuse contact for '153.0.0.0 - 153.255.255.255' is 'helpdesk@apnic.net'

inetnum: 153.0.0.0 - 153.255.255.255

netname: ERX-NETBLOCK

descr: Early registration addresses

remarks: ------------------------------------------------------

remarks: Important:

remarks:

remarks: Networks in this range were allocated by InterNIC

remarks: prior to the formation of Regional Internet

remarks: Registries (RIRs): AfriNIC, APNIC, ARIN, LACNIC and RIPE NCC.

remarks:

remarks: Address ranges from this historical space have now

remarks: been transferred to the appropriate RIR database.remarks:

remarks: If your search has returned this record, it means the

remarks: address range is not administered by APNIC.

…

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-09-05 at 00:47

I am doubling my monthly donations to the @internetarchive and my employer will match it. Please consider funding them for both the WayBack Machine and one of the world's largest libraries.

https://www.wired.com/story/internet-archive-loses-hachette-books-case-appeal/

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-07-03 at 18:16

1,454,942 QR codes to install Windows 11? Yes, the math works! A QR code can contain up to 2953 bytes of binary data and 1454942 / 2953 / 1024³ = 4.00GB.

(Side note: A QR code can alternatively store up to 4296 alphanumerics (including a few specials). Base64 is 75% efficient, so 4296 * 0.75 = 3222b, allowing a little more with base64 than with binary—you'd only need 1,333,013 QR codes this way!)

=> View attached media

=> More informations about this toot | View the thread

Written by Adam Katz on 2024-06-10 at 04:34

Xscreensaver's new privacy policy (which Google requires, despite this app collecting no data and lacking network access) is fire 🔥

Good job, @jwz

https://mastodon.social/@jwz/112590330296163479

=> More informations about this toot | View the thread

=> This profile with reblog | Go to adamhotep@infosec.exchange account