@schrotthaufen https://infosec.place/objects/a0c412dc-b921-4e7d-88c8-df0884ec8ebe

The year is 2026. Literal trillions are spent in the hope to revolutionize the IT industry.

At the same time children have to deal with OAuth flows, One-Time Passwords and consent prompts to play Minecraft.

We really should stop fetishizing new software and stop for a brief moment to think through how software *should* work so it'd make our lives a bit better.

If only search was considered in Mastodons design...

RE: https://infosec.exchange/@cR0w/116953352499158321

#3274 - Arthurian Connector

Today Excel bugged me again to rate it, and when I tried it told me I was ineligible to submit a review.

Once again I am asking for all technology to be cast into the sea immediately or sooner.

New vulnerability report from Talos:

Microsoft Windows NETIO.sys NsipGetAllInformationProviderParameters Information Disclosure Vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2443

CVE-2026-50475,CVE-2026-50475,CVE-2026-50475

New vulnerability report from Talos:

Foxit Foxit Reader Javascript checkbox CBF_Widget code execution vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2420

CVE-2026-57256,CVE-2026-57256

New vulnerability report from Talos:

Microsoft Windows Cloud Files Mini Filter Driver CldiStreamCompleteRequest use-after-free vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2426

CVE-2026-58613,CVE-2023-29361,CVE-2026-58613,CVE-2026-58613

[RSS] Windows AppResolver LPE: From AppContainer to SYSTEM. PoC linked to CVE-2026-50454

https://davidcarliez.github.io/blog/windows-appresolver-lpe-to-system/

[RSS] Defender Internals - AI Assisted EDR Introspection

https://blog.deeb.ch/posts/defender-ai-introspection/

At this point I'm not 100% sure LLMs are not alien psyops against our species (coincidentally I'm in the middle of Three Body Problem)

@schrotthaufen Good news is that Average Joe is probably not interested in hacker blogs or similar "dual-use" content :)

@root The main problem for visibility is mobile. I want a solution where the users don't have to look at domain names at all: how will Aunt Judy know if mybank.foo or my-bank.bar is the right one, esp when even legit providers rely on crappy redirectors for adtech?

@schrotthaufen I like the uBlock idea! I wonder how hard it's to maintain the lists though...

Remember to boost things you like, even if the post is old!

You are the algorithm here 🫵

I've been thinking a lot about securing online transactions for laypeople.

A major issue seems to be that URLs are 1) often not visible 2) not designed for laypeople, so many of us have no idea who they are communicating with.

I'm looking for a reliable browser extension that can block site access based on domain allow-lists, extensible by country.

Any recommendations?

#security #phishing #scam

Hacker Summer Camp Watch Week starts Monday!

We’ll be watching classic hacker documentaries, DEF CON talks, and hacker history live on YouTube & Twitch from my 6TB InfoCon archive before heading to Vegas.

You can grab the same archive free at infocon.org or the Data Duplication Village. #DEFCON #Cybersecurity

Frida 17.16.0 is out! https://frida.re/news/2026/07/17/frida-17-16-0-released/

@Viss I'd trade senseless bootlicking for genuine trolling at any moment :/

only 2 more orders needed to push @joeycastillo’s open hardware & open software ereader over the line!!!

https://www.crowdsupply.com/oddly-specific-objects/open-book-touch