iiinova — where your digital self keeps evolving

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 23/10/2026

@jerry @josephcox it says "profile unavailable" instead of showing his posts. (Crap, does this mean he blocked me? I thought it would say that.)

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 21/10/2026

Posting this seems worthwhile today for some reason (Via xkcd.com/221)

int getRandomNumber()
{
return 4; // chosen by fair dice roll.
// guaranteed to be random.
}

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 20/10/2026

I might join @RoguleTips in being done with this game. It's an exercise in running in loops until you have enough HP to weather an attack and it gets really tedious. #Rogule 2026-10-19 🧝 5xp ☠🧛 2769 👣 streak: 0 ⬜⬜⬜⬜⬜ ⚔ 🐀🧛👹🧛 🌰🌰🍄⬜ rogule.com My max […] [Original post on infosec.exchange]

Fin.

#Rogule 2026-10-19
🧝 5xp ☠🧛 2769 👣
streak: 0
⬜⬜⬜⬜⬜
⚔ 🐀🧛👹🧛
🌰🌰🍄⬜
share

Plays: 1124

Wins: 92%

Streak: 0

Longest: 176

100 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 19/10/2026

LLMs can contain nasty backdoors AND YOU CAN'T FIND THEM > Any open model whose weights have been edited can carry a backdoor, whether it's a task-specific fine-tune, a merged adapter or an abliterated build. We built one to see what it takes […] [Original post on infosec.exchange]

Four studies, across different sizes, different data and different points in training, and none of them found a version of this that gets harder as you scale.

Detection is backwards here, the attacker only has to pick one trigger out of an unbounded space while the defender has to guess a key nobody handed them. A benchmark tells you whether the model is capable, not whether it’s honest. A scanner has no source to read, so a backdoored model clears every check you own and waits.
How an attacker actually ships this

They can poison a dataset or fine-tune a model, wrap it in a clean README and a benchmark table and push it to Hugging Face where it picks up downloads and a reputation. The model ships with only a pointer to a staging URL, so the operator can swap the payload from a single commit with no retraining.

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 14/10/2026

@xabean They're learning a different lesson: this is another problem to solve with AI and pay for with layoffs.

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 08/10/2026

This song is amazing. Volume up! 🔊 Got this gem from @rogeriopvl

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 07/10/2026

Whoa, the new MS Surface Laptop Ultra will have “the world's first built-in magnetic USB-C charging port [which] combines magnetic convenience with the versatility of a standard connection.” (The specs don't mention a special port, so maybe this is just a […] [Original post on infosec.exchange]

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 05/09/2026

@sundogplanets there are only two reasons for preferring the Mercator projection: 1. You want nations of white people to look bigger 2. You're used to it and OMG, change is hard

Mercator projection as applied to a young white guy's head

002 2

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 03/09/2026

I don't think I've ever seen this before: an ad at @distrowatch uses a superscript digit `³` (U+00B3) in its HTML `<a href="…">` code, presumably as some kind of anti-adblock obfuscation. (I only found this because my ad blocker failed to act on it and I wanted to fix that.)

Firefox Developer Tools "Inspector" view (in a dark theme) for DistroWatch.com showing the HTML for the ad, with the A tag highlighted. You can see its href is "https://www.³cx.com/smb/". In the console, I specified `$0.href` and got the value as "https://www.3cx.com/smb/". Then I specified `$0.outerHTML` and got the value as '<a href="https://www.³cx.com/smb/"><img src="images/k/bgmsaocc" alt="Small Business Phone System •• On-Premise or Cloud | 3CX"></a>'.

Thus advertiser does not appear to stylize its name as "³CX"

010 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 07/08/2026

DuckDuckGo trolled Meta by selling, and I quote, "Normal F***ing Sunglasses" * Battery life: infinite * 0 cameras * Seamless offline mode * Zero notifications, guaranteed These sold out in under a week […] [Original post on infosec.exchange]

A photo of the sunglasses with text below:

NORMAL F***ING SUNGLASSES

Big tech made glasses that spy on you and everyone around you. We made Normal F***ing Sunglasses. — DuckDuckGo

The box it comes in plus another view of the sunglasses. The box cover says "DuckDuckGo | Knockaround". Its back says "Designed to block the sun, not send data to the cloud" and repeats what the other image says.

0113 13

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 03/08/2026

A drone that is 100% propeller, blurring to near-invisibility like the blades of a fan. It seems impractical to put a camera in there. Maybe a microphone array can account for the wind resistance and cancel out the motor? […] [Original post on infosec.exchange]

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 30/07/2026

news.slashdot.org/story/26/07/28/22… > "Tokenmaxxing" on artificial intelligence technology is hitting its limits as workplaces throwing AI at everything are seeing the […] [Original post on infosec.exchange]

Generated image found online, not specifically connected to the article referenced in this post.

A comic-book–style image showing a "token consumption river" spiraling through an office. An odometer-style indicator reads "AI token usage: 9,999,999,999 (maxed out!)". A worker, sweating at his desk beside several cups of coffee says "must… get… more… AI… tokens!" while a caption pointing at him says "system overload: high AI usage!"

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 29/07/2026

Artem Lytkin has implemented Doom with just regular expressions. A giant pile of search-and-replace—14M in just one frame! This is magnificent: 4rh1t3ct0r7.github.io/doom-regex #regex #doom h/t @hackaday

100 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 29/05/2026

malus.sh Using #AI to recreate F/OSS in a "clean room" without acknowledging that it trained on F/OSS takes copyright evasion to an uncomfortable new level. To anybody actually versed in machine learning, this is a feedback loop (and a shell game […] [Original post on infosec.exchange]

Company

About Us
Our Robots
Blog
Offshore Offices

Legal

Terms of Service
Privacy Policy
MalusCorp-0 License
Indemnification Waiver

© 2024 MalusCorp International Holdings Ltd. Registered in [JURISDICTION WITHHELD].

This service is provided "as is" without warranty. MalusCorp is not responsible for any legal consequences, moral implications, or late-night guilt spirals resulting from use of our services.

231 3

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 20/05/2026

You know that adage about when you have a hammer, everything looks like a nail? **#AI is screwdriver.** We have no idea what the screws are, but people in power think it's a hammer, maybe even the whole toolbox. And we're all … screwed.

A hammer resting on a wooden board beside a bent screw, likely (poorly) hammered into the board.

052 5

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 19/05/2026

PCMag proudly states it has 65 experts with 44 years of experience. This doesn't fill me with confidence: their average expert has eight months (and four days) of experience.

LOOK INSIDE PC LABS
HOW WE TEST

65 EXPERTS

44 YEARS

43K+ REVIEWS

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 08/05/2026

I was so consumed by making excuses for my dear aunt that I got owned here. #math

John May @3j0hn

A math meme that is funny rather than stupid:
Solve carefully!

230 - 220 × 0.5 =

You probably won't believe it, but the answer is 5!

010 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 21/04/2026

@tychotithonus that's a choice made by the client. The data is still there. Here's the view with @phanpy, my client of choice (it's a web UI, not an app)

100 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 20/04/2026

Remember when military mischief was harmless? yle.fi/a/74-20221623 > Flight data shows several aircrafts taking off from Tikkakoski in Jyväskylä at around 7.30am. The subsequent radar images indicate that at least four of the flights went on routes that resembled the shape of a penis.

three maps showing flight paths that look suspiciously like penises and balls

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 14/04/2026

@funnysnarkyjoke.bsky.social hm, looks like that image was originally of a dog. Here's the oldest match on TinEye for that image (TinEye only has two matches of it as a cat, the rest are the dog):

The same image but with a dog looking at the salami-covered phone rather than a cat

2484 48

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 17/03/2026

Ooh, you can change the `to` in the query string to whatever you want!

English:

It turns out you can make up any kind of language you want here.

Redneck Speak:

Turns out ya can just go 'head and make up whatever kinda talk ya want 'round here.

English:

I am looking to hire a qualified software engineer

Elementary school playground:

I'm looking for a super smart computer whiz to join my club.

English:

What did you have for lunch yesterday?

goth loser:

ugh, what did u even rot over for lunch yesterday?
not like it matters anyway...

001 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 17/03/2026

Okay, this Kagi translation tool is pretty entertaining (and an absolute gem as a guerilla marketing tactic, by which I mean it be a fine way to plunder more business, me hearty!) translate.kagi.com/?from=en&to=Link…

A translation interface in which English can be converted to LinkedIn hype.

Input:

I offload all of my work to AI

Output:

I’m thrilled to share that I’ve fully optimized my workflow by leveraging cutting-edge AI to handle my entire output. 🚀 By embracing digital transformation and delegating operational tasks to intelligent automation, I’m now focusing 100% of my energy on high-level strategy and driving impactful innovation. 💡 It’s all about working smarter, not harder, and staying ahead of the curve in this rapidly evolving tech landscape. #AI #Innovation #FutureOfWork #Productivity #DigitalTransformation

Input:

expect layoffs in the next few weeks

Output in Corporate Jargon:

Anticipate a strategic right-sizing of our human capital and a streamlining of our organizational structure within the upcoming weeks to optimize our operational bandwidth.

Input:

All marketing email is spam

Output in Pirate Speak:

Every last marketing parchment be naught but bilge water!

Input:

I found gum under my seat and out it in my mouth

Output in LinkedIn Speak:

I’m thrilled to share a quick story about resourcefulness and seizing unexpected opportunities. 🚀

Today, I discovered a piece of gum under my seat. Instead of letting it go to waste, I took immediate action and put it in my mouth. 🍬

In business, as in life, success is about identifying untapped assets in your immediate environment and having the courage to execute. It’s not just about the "find"—it’s about the "follow-through."

Are you looking for the hidden "gum" in your organization? Let’s connect and discuss how to maximize every resource at your disposal. 📈

#GrowthMindset #Resourcefulness #Opportunity #AgileExecution #Leadership

173 7

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 14/03/2026

In 1961, Sweden saw world's first and only accident between a car and a submarine. Nobody was hurt. en.wikipedia.org/wiki/Collision_bet…

Black and white photo of a Volvo PV544 hanging over the dock and leaning the HSwMS Bävern submarine. Photo by Hans Johansson in Södra hamnen, Lysekil, Sweden, 1961-08-19

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 10/03/2026

Col. Lawrence Wilkerson (chief of staff to Colin Powell under George W Bush): > This administration has committed more war crimes in the last few days than I think any country since Adolf Hitler committed. And that is an incredible condemnation of this […] [Original post on infosec.exchange]

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 03/03/2026

Oops, the South Korean police posted a photo of their bust that included the master password for the cryptocurrency wallet they seized. An unknown person drained USD$4.8M from the account […] [Original post on infosec.exchange]

A USB (hard wallet) photo for virtual asset storage revealed by the Internal Revenue Service that it had been seized from a delinquent. The paper with the “Nemonik” (recovery phrase), the absolute master key for wallet recovery, is exposed without any mosaic processing. [Photo = Internal Revenue Service Press Release]

The above was translated from the original Korean report's caption for that image:

국세청이 체납자로부터 압류했다고 공개한 가상자산 저장용 USB(하드월렛) 사진. 지갑 복구를 위한 절대적 마스터키인 ‘니모닉(복구 구문)’이 적힌 종이가 아무런 모자이크 처리 없이 그대로 노출돼 있다. [사진 = 국세청 보도자료]

011 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 03/02/2026

The US phone #spam-reporting site is off during the government shutdown 🤦

Screenshot of DoNotCall.GOV:

Federal Trade Commission Do Not Call Registry
Government Shutdown Notice
Due to the government shutdown, we are unable to offer this website service at this time.

We will resume normal operations when the government is funded.

Aviso de cierre del gobierno
Debido al cierre del gobierno, no podemos ofrecer este servicio de sitio web.

Reanudaremos las operaciones normales cuando el gobierno estÃ© financiado.

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 03/02/2026

My old state just realized I left 2.5 years ago. (Yes, I did the change of address, closed things out, and registered to vote in my new home state.) I'm quite fond of the issue between the fifth option and the signature it requires, plus the fact that […] [Original post on infosec.exchange]

Photographed piece of mail.

Main Elections Division
Voter Confirmation Mail
184 SHS
Augusta, ME 04333-0184

Important: REPLY CARD ATTACHED

FORWARDING SERVICE REQUESTED

[ address redacted ]

----

Voter Confirmation Mail Reply Card (CACC)

Dear Voter [ name redacted ]

Our records indicate you may have moved (changed your residence address) from the one listed above. Please help us keep the voter list current by checking the correct box below and returning this card to us within 20 DAYS (no postage necessary). Thank You.

[] 1. NO, I have not moved. The address above is my current residential address.
[] 2. YES, I have moved (changed my residence address) outside of Maine.
[] 3. YES, I have moved (changed my residence address) to a new municipality in Maine.
[] 4. YES, I have moved (changed my residence address) to a new address in the municipality listed above. The new address is (please print): ____
[] 5. Voter is deceased. Date and Place of Death: ____

Signature of Voter: ____ Date: ____

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 31/01/2026

Egads, Duolingo used the Bongcloud Attack on me (yes, it teaches chess now). Its ML _is_ based on real matches, so perhaps that includes the above one. I'm tempted to respond in kind.

A screenshot of the Duolingo app in dark mode, with Oscar, the mustached tutor in a pink shirt, looking at the game board with a voice bubbles containing a pithy comment ("may the best player in a pink shirt win!").

More importantly, the board shows the Bongcloud Attack.

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 26/01/2026

This $15-20k device extracts gasoline from CO₂ in the air at about one gallon per day per unit. "When we power our machines with standalone off-grid photovoltaic panels, this will correspond to less than $1.50/gallon in energy cost." […] [Original post on infosec.exchange]

010 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 24/01/2026

Apparently, the Unicode chess pieces aren't of uniform width, even with emoji prevention (U+FE0E). The only column that isn't the standard starting position is the kings' column. Here's the diagram for the Wikipedia-phobic. (I'd have included it in the above […] [Original post on infosec.exchange]

Bongcloud Attack

The Bongcloud Attack (or Bongcloud Opening) is an unconventional chess opening that consists of the moves:

1. e4 e5
2. Ke2?

It is considered a joke opening because it violates all normal principles of good opening play, and is associated with internet chess humor. Former world champion Magnus Carlsen has used it in online blitz chess, including in games against high-level opponents and Twitch streamers, such as grandmaster (GM) Hikaru Nakamura. The name has also been applied to other opening sequences in which a player moves the king on move two.

000 0

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 24/01/2026

The Bongcloud Attack (standard king's pawn advancement, then move the king up) is possibly the worst opening in #chess. In this tournament coverage video, it is used by one grandmaster against another. This was dubbed the "Bongcloud Countergambit: Hotbox […] [Original post on infosec.exchange]

200 2

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 14/01/2026

The Iranian rial is tanking, currently worth less than a millionth of a US dollar. It was already very weak, but it lost 25x on Jan 9 for obvious reasons. www.xe.com/currencycharts/?from=USD…

XE.com screenshot from a mobile browser.

USD to IRR Chart
+2447.91%

(1W)

US Dollar to Iranian Rial

1 USD = 1,070,010 IRR

Jan 14, 2026, 06:18 UTC

41,995.5
Jan 7, 2026, 07:00 UTC

997,000
Jan 9, 2026, 15:45 UTC

Jan 7, 2026, 07:00 UTC - Jan 14, 2026, 06:19 UTC
USD/IRR close: 1,070,010 low: 41,995.5 high: 1,070,010

110 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 14/01/2026

The **only** way to handle #passwords is a password manager. @bitwarden (free, open source), @1password ($3/mo), and @keepassxc (free, open, off-cloud) are great options. The only pws you need to remember are the ones that unlock your computers, phones, and […] [Original post on infosec.exchange]

Common Password Mistakes in 2026

Horizontal bar chart:

Simple number or letter patterns: 25%
Birth year or date: 23%
Pet names: 22%
Names of family members: 22%
Common words of phrases: 18%
Places lived: 15%
Favorite sports team or player : 15%
The current year: 12%
The word "password": 8%

Sampling data is not shown. Image is from the linked article.

010 1

Adam Katz @adamhotep.infosec.exchange.ap.brid.gy · 01/11/2025

There are no US federal prohibitions on limiting campaign contributions at the state level, so twelve states actually permit unlimited financing. Other states have unfairly-high limits. Too bad I'm not a billionaire… […] [Original post on infosec.exchange]

Generally speaking, campaign finance laws regulate the sources and amounts of contributions to political candidates and campaigns, as well as the disclosure of information about campaign funds. These laws are a source of ongoing debate. Proponents of more stringent campaign finance laws claim that the current laws do not go far enough to mitigate corruption and the influence of undisclosed special interests. Opponents claim that strict disclosure requirements and donation limits impinge upon the rights to privacy and free expression, hampering participation in the political process.

During the 2023-2024 election cycle, the remaining 38 states had individual contribution limits that differed depending on the office sought. Below are the ranges for governor, state senator, and state representative.

Governor
Lowest: $625 per election (Colorado)
Highest: $36,400 per election (California)
State Senator
Lowest: $200 per election (Colorado)
Highest: $15,499.69 per election (Ohio)
State Representative
Lowest: $200 per election (Colorado)
Highest: $15,499.69 per election (Ohio)

The map below separates states by those with unlimited individual contributions and those with limits on individual contributions.

[States: PA VA IN AL MS TX IA NE ND UT OR AK]

021 2