[RSS] Defender Internals - AI Assisted EDR Introspection

https://blog.deeb.ch/posts/defender-ai-introspection/

At this point I'm not 100% sure LLMs are not alien psyops against our species (coincidentally I'm in the middle of Three Body Problem)

@schrotthaufen Good news is that Average Joe is probably not interested in hacker blogs or similar "dual-use" content :)

@root The main problem for visibility is mobile. I want a solution where the users don't have to look at domain names at all: how will Aunt Judy know if mybank.foo or my-bank.bar is the right one, esp when even legit providers rely on crappy redirectors for adtech?

@schrotthaufen I like the uBlock idea! I wonder how hard it's to maintain the lists though...

Remember to boost things you like, even if the post is old!

You are the algorithm here 🫵

I've been thinking a lot about securing online transactions for laypeople.

A major issue seems to be that URLs are 1) often not visible 2) not designed for laypeople, so many of us have no idea who they are communicating with.

I'm looking for a reliable browser extension that can block site access based on domain allow-lists, extensible by country.

Any recommendations?

#security #phishing #scam

Hacker Summer Camp Watch Week starts Monday!

We’ll be watching classic hacker documentaries, DEF CON talks, and hacker history live on YouTube & Twitch from my 6TB InfoCon archive before heading to Vegas.

You can grab the same archive free at infocon.org or the Data Duplication Village. #DEFCON #Cybersecurity

Frida 17.16.0 is out! https://frida.re/news/2026/07/17/frida-17-16-0-released/

@Viss I'd trade senseless bootlicking for genuine trolling at any moment :/

only 2 more orders needed to push @joeycastillo’s open hardware & open software ereader over the line!!!

https://www.crowdsupply.com/oddly-specific-objects/open-book-touch

@Viss I seriously miss the hostility of the old Web: back then even Nobel-worthy research would get some adequate trolling (at least a "first") as top comment. What is this "i wISh i kNeW 1/100tH oF wHat avEraGe LLM useRz kNOw" BS??

so ai is going great

https://huggingface.co/blog/security-incident-july-2026

An important revelation of the day:

The answer to the question "Has the whole world gone crazy?!" is:

Yes.

@airwhale I'm about half way through but...holy shit. I don't necessarily agree that second derivatives weren't considered previously, but I haven't seen the analogy to the subprime crisis (and it's extreme dangers) presented so bluntly.

@ChrisMayLA6

Sooo since I'm desperately trying to make an LLM export some methods via a shared library from a crate*, I'm basically making these companies loose more money! I'm the hero!**

* I'll post later about how Rust sucks at encapsulation
** Shit, it's a local LLM...

RE: https://kolektiva.social/@pivic/116935929646970100

Breach of Confidence — 17 July 2026

I've spent the week watching people argue about whether AI will replace security analysts whilst ignoring the fact that most organisations still can't tell you where their crown jewels are stored. Priorities remain wonderfully intact. Broadcom's Breakup Strategy Allstate tried to leave VMware. Broadcom immediately audited them, then sued them for leaving during the audit. It's the enterprise software equivalent of slashing your ex's tyres because they dared to move house.

https://javvadmalik.com/2026/07/17/breach-of-confidence-17-july-2026/

A generalized desire to understand how the objects and systems around you work, regardless of whether or not that knowledge can actually be applied

learning a few things about running SQLite https://jvns.ca/blog/2026/07/17/learning-about-running-sqlite/

@raptor @david_chisnall @davidgerard I think an often overlooked but important example is path traversal