Notices by :rainbowCrow: (cr0w@infosec.exchange)

@ryanc Still not convincing me to like Palo Alto Networks. Nice try.

@ryanc ew, gross

RE: https://functional.cafe/@aabh/116975727365722504

This point applies to most tech companies and the occasional reminder is probably a good thing for most of us.

Trying to navigate life in America these days.

HIGHLY ISOLATED WITH GUARDRAILS

hugging face security strategy

using an mcp

tech marketing 2026

Remember kids: If you are doing incident response, the first step on every run book should be to ensure business continuity with Payroll. Everything else comes second.

"Oh, sorry, my metasploit server went rogue and hacked your shit. LOL, computers, am I right? Guess it's too powerful. LOL. Time to sell more of it."

Please stop trying to give AI agents autonomy. That whole idea is an attempt to deflect responsibility from the corpos to an entity that cannot be held responsible. They are computer programs, doing what they were programmed to do.

Human who intentionally runs over another human with their car: Goes to prison.

Tech bro whose car is programmed to run over a human: Free marketing.

Human who intentionally breaches a competitor's network: Goes to prison.

Tech bro whose computers are programmed to breach a competitor's network: Free marketing.

:brdThink:

RE: https://infosec.exchange/@patrickcmiller/116963915911110345

Computers don't "act on their own." That's a statement by someone who either doesn't understand how their shit works, is trying to deny responsibility, or likely in this case, both.

Holy shit, State is Wordpress too?

Hold up. There was a perfect 10 in WordPress Core the other day and I have heard nothing about anyone popping the White House website. That seems... huh.

Gotta love how my EDR changed "Alerts" and "Incidents" to "Issues" and "Cases" with no heads-up but they are "unable" to change "Blacklist" and "Whitelist" to "Block list" and "Allow list."

SMDH don't the ransomware nerds know not to fuck with cats on the Internet?

#ransomware

Scrolling through my history to find a specific toot.

RE: https://infosec.exchange/@nyanbinary/116952670917734805

And that is the story on how JavaScript was invented.

RE: https://defcon.social/@infosec/116942473843157209

Honest question that will probably sound like I'm trying to dunk on them but I'm not: Is this something anyone actually cares about? What's the theoretical concern? AitM SSH sessions? Decrypting past SSH sessions? Cracking private keys?

I honestly don't understand how whether the SSH config is PQC capable is a concern when these are already Internet-facing OT and medical devices.