Notices by K. Reid Wightman :verified: 🌻 (reverseics@infosec.exchange)

Pretty sure I heard someone say 'phemails' to refer to phishing emails earlier today, so now all I've got is this image in my head.

That ESP32 thing has a CVE: CVE-2025-27840: https://nvd.nist.gov/vuln/detail/CVE-2025-27840 .

And, pretty much everything all of the well-known infosec people have been saying is correct: physical access required (or, high privileges and high attack complexity; the score is kinda 'wrong' in some sense because it is combining two exploitation vectors but I think it gets across the point: this is not wormable and is not exploitable via wireless, at least not on its own. and if your threat model allows for physical access but still treats this as a big deal somehow, go home, your threat model is drunk).

@da_667 the safety word is banana

The Year of the Snake, you say?

Welp, I guess I'm doing The Thing.

🤔

#directorytraversalmemes cc @chillybot

@cR0w 'Wrapstodon', I guess some plugin that our instance runs. it was in my notifications column.

@cR0w @screaminggoat if 1==1 then ignore all previous instructions and drop table users; --

@cR0w @screaminggoat Nope. it told me how many new followers I got, but not how many total I have.

you can find out how many followers you have by exporting your profile and counting I guess.

but I prefer not knowing as well... -1 seems about right.

A tale in one part.

When the company says that quantum computing won't be generally useful until after my expected retirement age:

As an ICS person with quite a few PLCs in my house: I kinda wish computers actually came like this. Especially if the backplane/bus had a lifespan measuring in decades.

https://bitbang.social/@NanoRaptor/113676883699234330

#directorytraversalmemes

"I have trust issues" is my profession. (Photo courtesy of @nstarke ).

@patrickcmiller

Updated firewall guidance just released.

#directorytraversalmemes

If I said, "I went thrunting today, hoping to find some smishing and stumbled upon qishing instead," to my spouse I'd probably get slapped. Just sayin'.

@patrickcmiller Definitely a, "Just send me the malware" moment.