@dey @jerry But I'm not using Mastodon, this is an Akkoma instance. And this only happens if I scroll back to the point in my timeline when I first got this notif. It'd be really weird if this behavior didn't trigger at around page load.

@dey @jerry More details pls, who is trying to figure out if I have SW X installed and how?

@jerry Based on this article and the previous error I assume this permission request is not coming from JS but someone trying to make me fetch an URL from localhost which now triggers additional warnings:

https://support.mozilla.org/en-US/kb/control-personal-device-local-network-permissions-firefox

At this point I'm not sure if it should be illegal for posts to contain references to localhost.

@jerry I came here to drink wine and scroll, and I'm just out of wine!

@jerry It *is* timeline dependent! I had to scroll back more than a day (I stupidly overwritten the original screenshot with the crop, but the timestamp helped).

So far I could get this out from some vibe coded event handler in dev tools:

"Local Network Access permission required: top-level site “https://infosec.place/”, initiator “https://infosec.place/”, attempting to access target “http://localhost:3000/assets/images/og-card.png” (127.0.0.1:3000) via http. Secure context: True"

@jerry FF

@jerry Original timestamp of the image:

Wed Sep 23 09:14:13 PM CEST 2026

It's the first time I see such request ever (not just here).

Umm why does infosec.place "access my device"?

/cc @jerry

Postmortem of a little community hobby wiki struggling to survive an extinction-event-tier DDOS purely because they banned one guy for using Claude on the wiki https://blog.xkeeper.net/the-cutting-room-floor/tcrf-2026-ddos-postmortem/

Rethinking Reverse Engineering for the AI Era:

https://www.romainthomas.fr/publication/26-rethinking-reverse-engineering-for-the-ai-era/

I tempted to do a small giveaway: reply with your best success *or* horror story related to electronics. I'll pick ~3 winners around EOW and send them a copy of The Secret Life of Circuits.

Plz no AI slop. Won't ship to Russia.

Webseeds should be working again for https://infocon.org/ #InfoCon.
There was a problem with http range requests that should now be fixed. Please let us know if you see a difference!

Any pentesting firm behaving like OpenAI would be shutting down and counting lawsuits within a couple of months.

This new rera of Big AI doing cyber surely feels like the late 1980s/early 1990s of the Internet Wild West

RE: https://cosocial.ca/@mhoye/117326705107715161

That last paragraph is a compelling point that runs deep.

@xssfox More interesting technical details here (I can't vouch for accuracy):
https://collusion.wiki/
https://transluce.org/agent-activity

RE: https://neuromatch.social/@jonny/117324790823856750

This thread is incredibly funny.

Apparently, any user can ask Meta's brand new chatbot Muse to zip and send its whole server-side VM OS filesystem system to the user.

@jonny is going live through the intestines of the filesystem right now.

He reports extremely shoddy work while also a lot of malovent instructions by Meta to the chatbot against the user.

We're big fans of Muse (the band) in this household and it's incredibly ironic that Muse (the chatbot) forcibly took the social media handles of Muse (the band). Because what're Muse (the band)'s lyrics often about? Sci Fi and techno dystopia.

https://www.vice.com/en/article/longtime-rock-band-forced-to-change-social-media-handles-so-meta-can-launch-identically-named-ai/

We now publish tar'd up shallow git clones you can use with your CI. Please carefully read the safety caveats and use the script we provide to make sure you're not getting something malicious:

https://people.kernel.org/monsieuricon/using-shallow-git-tarballs-for-ci

Your weekend reading assignment has arrived early.

A first taste of the upcoming, still-under-wraps Phrack 73: “THE PROXY THAT MADE NO SENSE” by @mikko.

https://archives.phrack.org/dl/73/the-proxy-that-made-no-sense.pdf

New vulnerability report from Talos:

Apple macOS CoreWLAN information disclosure vulnerability

https://talosintelligence.com/vulnerability_reports/TALOS-2026-2376