I work at a public library. People who want to use AI seem to have no trouble doing so. People who don't want to use AI have a harder time. I crowdsourced and then finalized this document "How to disable or avoid intrusive AI" and then gave it a short URL: notoai.org Please pass along if it's useful
Famously when I want to hide my data exfil from foreign adversaries, I also do it using UDP via Netcat. No one would ever look at UDP via Netcat.
A thing I've noticed that is mildly annoying - Package repositories are falling victim to a very typical programming problem. Use datetimes instead of bools. Pypi? yanked: false crates.io? yanked: false npm? Lol deleted no metadata left nerd golang? Maybe the git timestamp on the go.mod change?
Just got this absolutely sick new art from Bolt Industries. I’d tag the artist but I can’t find him on Bluesky - ian_dunn@defcon.social for fediverse, though. Cant wait to get this hung up. The street lamp, the occasional lightning, the way the rain falls off the side of the umbrella. Very cool.
holy yikes. i've heard some legendary stories about Apple security. you don't even *think* about doing these things www.documentcloud.org/documents/28...
TechCrunch@techcrunch.com · 4w ago🌶️ "This is the tip of the iceberg. Apple lacks visibility into what’s been happening behind closed doors at OpenAI, where such misconduct is normalized and exemplified by leadership." 🌶️
Just got this absolutely sick new art from Bolt Industries. I’d tag the artist but I can’t find him on Bluesky - ian_dunn@defcon.social for fediverse, though. Cant wait to get this hung up. The street lamp, the occasional lightning, the way the rain falls off the side of the umbrella. Very cool.
Working on Whose Slide related stuff for @defcon.bsky.social & @hackglasgow.bsky.social. Getting all sappy & sentimental going through photos. Without @0xda.de & @ajediday.bsky.social , this contest wouldn’t have lasted past Year One. I owe them EVERYTHING and I’ll love them forever.
‘Say yes and never do it’ Mel Brooks knew how to deal with the studios
![That’s probably the most famous scene in the movie, the campfire scene.
I know. He said, “You can’t punch a horse.” I said, “You’ll never see it again.” I kept saying, “You’re absolutely right. It’s out!” Then, when he left, I crumpled up all his notes, and I tossed it in the wastepaper basket. And John Calley, who was running [production at] Warner Bros. at the time, said, “Good filing.” That was the end of it. You say yes, and you never do it.
That’s great advice for life.
It is. Don’t fight them. Don’t waste your time struggling with them and trying to make sense to them. They’ll never understand.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:yvbszlkc7d75ixkid5g2zmw7/bafkreiar4z6n6pfk7wob2gznv6l6euw7ltxbetgto5drfd4wqzjalldp5m)
I just want to say that @xeiaso.net's "No way to prevent this" series is my favorite thing to see show up in my RSS reader. xeiaso.net/shitposts/no...
"No way to prevent this" say users of only package manager where this regularly happens
Xe Iaso's personal website.
xeiaso.net
Invert, always invert. I wrote a post on how to get hacked. Hope it helps. (Also I’m breaking my handle/name barrier) jasonstrange.com/posts/how-to...
How to Guarantee You Get Hacked: A 5-Step Guide
I cannot guarantee that you will never get hacked. But if you are looking to get hacked then I have some fantastic advice for you. Follow these 5 simple steps and there will be dozens of attackers pre...
jasonstrange.com
I unintentionally switched to Bing at work a while back and it’s insane how much I accepted Google’s enshittification. I search and then immediately start scrolling to find the thing I’m looking for. In Bing, the result I want is at the top like 9/10 times. Google requires a scroll 10/10 times.
I don’t think the problem is that everyone is treating it like an enterprise customer solution. I think the problem is that everyone is trying to play the “capture user credentials to lock them into our ecosystem” game. That’s why 1Password, Chrome, and Apple all want my passkey every single time.
jenn schiffer 🙂↔️@jennschiffer.com · 4mo agopasskey is imho one of the most important security developments that touch consumers and also one of the worst consumer rollouts i ever witnessed because every company involved treats everything like an enterprise customer solution
The Obsidian team is growing from three engineers to four engineers. Competitive SF salary. Fully remote, live anywhere. Apply below.
Anyone with a unifi network setup figure out how to tell what remote hosts / ports / whatever the different "applications" represent? Kind of insane that I can't seem to look inside an application definition to understand what would be blocked by enabling it...
The single goofiest scene from Hackers is, without debate, Plague getting out of a car to ride a skateboard down a menacingly foggy alleyway to snatch a floppy drive from Dade without stopping, then grab the car again to continue down the alleyway before disappearing into the fog.
I’ve been seeing a lot of people complaining about Linux projects introducing a field for age in user profiles, as a result of recent California laws. The laws are dumb, but the age field is performative. Linux has asked for your phone number when creating a new user for decades. It goes nowhere.
Yeah of course I can't get RFC2549 as a license plate in California. Buncha nerds in this state.
OMG Tonight's NCIS opening makes fun of the "two idiots one keyboard" scene from much earlier in the show, which is made even better by it being written by McGee. Honestly hilarious.
You can tell how much power my ADHD has over me at any given time based on how deeply nested my parentheticals get (and how many I forget to close because I forgot I was in more than one (not that I would ever forget something like that).
Interesting thing I just thought about. LLMs are non-deterministic, but people keep inventing new ways of saying “a markdown file” to help create consistency. What I’d like to explore is two completely separate accounts interacting the exact same way with the same inputs, at scale.
I’ve been researching a lot about metrics as I’m now responsible for tracking metrics for our enterprise security function. My historical take on security metrics is that they are all bad, because the metrics people default to are basically contingent on your ability to get other people to do work.
In classic dade fashion, I hadn’t posted a blog post since April. Published 4 in a row over the last few days, mostly about self hosting and my pursuit of the ideal server. But most recently: don’t use infra-as-code to manage user access. It’s not worth it. 0xda.de/blog/2026/02...
Joiners, Movers, Leavers - An IaC Problem
I’m a huge proponent of infrastructure as code. What I mean when I say this is mostly Terraform – and for an important reason (and when I say Terraform, I mostly mean OpenTofu, for another important r...
0xda.de
His build is ready, nodes weak, pods are heavy There’s lagging in the cluster already, Kubernetes
Yoz Grahame@yoz.bsky.social · 6mo agoyou said you wanted kubernetty. mum spent ages making it for you and you’ve barely touched it
I’m at @wildwesthackinfest.bsky.social in Denver and we’re looking to hire for a wide variety of roles across IT and Security. Did I mention we build Satellites? It’s pretty cool stuff. If you’re here and looking for work, let’s chat. #WWHF #MileHigh2026
Just had a moment of realization for my feelings about the push by VC-backed AI sycophants to "vibe code business apps" They have not yet learned that lines of code go in the liability column, not the asset column. And they may never learn, because they've forfeited cognition to the machine.
