Sign in

Dave Weinstein

@dhw.infosec.exchange.ap.brid.gy
9 followers 1 following 35 posts

Recovering Game Developer turned Security Professional. Sometime musician, potter, player (and occasional author) of games. Not a speaker for my employer. He/Him […] [bridged from infosec.exchange/@dhw on the fediverse by fed.brid.gy ]

PostsRepliesMedia
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 26/09/2026
43 years ago, Stanislavs Petrov saved the world.
000
Reposted by Dave Weinstein
David August ❌👑 @davidaugust.mastodon.online.ap.brid.gy · 10/09/2026
😲😝
screenshot of a post by bjsiemon: 

If I wanted something pricey from Apple that folds easily I'd look to its CEO.
0230
Reposted by Dave Weinstein
Andrew Weinstein @andrewjweinstein.com · 09/09/2026
You know who actually did show up at Ground Zero? Canadian emergency rescue crews.
391309797719
Reposted by Dave Weinstein
Mitch Wagner @mitch.hachyderm.io.ap.brid.gy · 03/09/2026
002
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 03/09/2026
This is an unusual networking request. I'm helping someone look for roles as a trainer/instructor. They have a long professional history of creating and delivering training in a field where mistakes in training or student understanding can easily result in fatalities (of the students, or of […]
infosec.exchange
Original post on infosec.exchange
002
Reposted by Dave Weinstein
Dan Wentzel 🏳️‍🌈 @danwentzel.urbanists.social.ap.brid.gy · 07/08/2026
“Stop making me choose between far-right and far-left” - “Centrists” We don’t really have a “far-left” in this country as compared to the rest of the world. But, if the choice for you between prison camps and universal access to healthcare in the USA is a difficult one, then you already side […]
urbanists.social
Original post on urbanists.social
001
Reposted by Dave Weinstein
Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/07/2026
From a SharePoint vulnerability perspective, this is the most trivial exploit I think I've ever seen. The exploit is a **single** web request to `SERVERNAME/_trust/default.aspx` In the request to this endpoint, there's a `<t:RequestSecurityTokenResponse> <t:RequestedSecurityToken> <sc […]
infosec.exchange
Original post on infosec.exchange
021
Reposted by Dave Weinstein
Evil Jim O’Donnell @eatyourgreens.mastodon.social.ap.brid.gy · 18/07/2026
Having now seen Christopher Nolan’s adaptation, I must say that Super Mario Odyssey took major liberties with the original text.
035
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 10/07/2026
So, if past is prologue, England will beat Norway but then lose to France. Mind you, Spain, Switzerland, and especially Argentina sat that one out.
000
Reposted by Dave Weinstein
René Mayrhofer :verified: 🇺🇦 🇵🇸 @rene-mobile.infosec.exchange.ap.brid.gy · 09/06/2026
I'm leaving #Google: www.mayrhofer.eu.org/post/leaving-g… While I believe that I have been able to do some good with my continuing (part-time) engagement in the Android security and privacy team since returning to Austria a couple of years ago, the deal with the US #DoW is […]
infosec.exchange
Original post on infosec.exchange
2125
Reposted by Dave Weinstein
Mx. Aria Stewart @aredridel.kolektiva.social.ap.brid.gy · 10/05/2026
Periodic reminder that “rate your pain on a scale from 1 to 10" is bullshit without reference points. People with chronic pain, tough guys, people with intense periods, and people who struggle with interoception all struggle when the endpoints are nebulous. Let me introduce you to the DVPRS […]
kolektiva.social
Original post on kolektiva.social
91066
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 01/04/2026
Reminder that tomorrow you should distrust everything you see on the Internet. In this, it is no different than any other day.
000
Reposted by Dave Weinstein
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 22/03/2026
There sure do seem to be a lot of ways to not say "The United States is threatening to commit war crimes."
Screen grab of text: "According to the International Committee of the Red Cross (ICRC), under the Geneva Conventions of 1949, power plants are considered civilian infrastructure and should not be attacked because doing so "may cause the release of dangerous forces and consequent severe losses among the civilian population."

The ICRC notes that an exception could be made only if the plants provide "regular, significant and direct support of military operations and if such attack is the only feasible way to terminate such support."
101
Reposted by Dave Weinstein
Cassandrich @dalias.hachyderm.io.ap.brid.gy · 26/02/2026
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this: Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item […]
hachyderm.io
Original post on hachyderm.io
834225
Reposted by Dave Weinstein
Missing The Point @missingthept.mastodon.social.ap.brid.gy · 22/02/2026
Breaking: The U.S. dispatches health insurance claim denial ship to Greenland.
11865
Reposted by Dave Weinstein
abadidea @0xabad1dea.infosec.exchange.ap.brid.gy · 12/02/2026
I can't stop thinking about the LLM-generated compiler that passes all the unit tests but emits inner loops that benchmark over 150,000x slower than a gcc debug build. I couldn't possibly have intentionally come up with such a funny demonstration of the point of genuine expertise […]
infosec.exchange
Original post on infosec.exchange
32767
Reposted by Dave Weinstein
Mitch Wagner @mitch.hachyderm.io.ap.brid.gy · 31/01/2026
"It is the misfortune of Minnesota's ICE contingent to have invaded the state with the second-highest levels of social trust, trailing only Utah.... stop spreading despair and nihilism. stop buying into the idea that nonviolent activism is useless, rather than (by far) the most effective form of […]
hachyderm.io
Original post on hachyderm.io
001
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 28/01/2026
I don't know that I even knew a launch was scheduled for that day. They had become commonplace. We didn't watch them in science classes, or have announcements. I remember one of my classmates going around asking people "Did you remember to place the bomb?", and no one even bothered to ask what […]
infosec.exchange
Original post on infosec.exchange
000
Reposted by Dave Weinstein
Matt Blaze @mattblaze.federate.social.ap.brid.gy · 27/01/2026
Bondi's extortionary demand for the Minnesota voter rolls is curious. Minnesota's voter rolls, like those of most states, are essentially public, including name, address, phone number (if given), and elections voted in. The only information redacted (by law) is DoB, SSN (etc) and which party's […]
federate.social
Original post on federate.social
2618
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 21/01/2026
For those old enough to remember, there was a time when television programs were almost entirely episodic. The events of an episode were largely confined to it, in part so that viewers could watch them out of order as reruns. I remember watching "The Coming of Shadows" (and due to an error by […]
infosec.exchange
Original post on infosec.exchange
000
Reposted by Dave Weinstein
The Tennessee Holler @thetnholler.bsky.social · 09/01/2026
Stephen Miller’s cousin 👇🏽
475322108746
Reposted by Dave Weinstein
Indio Gringo ® @paninid.mastodon.world.ap.brid.gy · 07/01/2026
Sherman’s #MarchToTheSea has entered the chat.
000
Reposted by Dave Weinstein
Mike Masnick @masnick.com · 07/01/2026
So @tobymorton.bsky.social is a national treasure and Hilton is fucking up royally with this nonsense. www.hiltonice.com cc: @kenwhite.bsky.social
A satirical website for HiltonICE.com: "Experience Compliance at Its Finest."About Us
Our Story

Hilton ICE is a premium hospitality experience built on discretion, compliance, and selective compassion. Located wherever federal enforcement requires dependable accommodations, we deliver polished rooms, streamlined coordination, and an operating environment free from unnecessary complications.

​

Our properties provide the full range of services expected of a global hospitality brand, including thoughtfully designed accommodations, attentive service, and a formal commitment to cooperation. By aligning comfort with authority, we support continuity of operations and ensure expectations are met without interruption.

​

At Hilton ICE, hospitality is not a reflection of values. It is an operational standard.Unauthorized Use of Hilton
Trademark
To the Owner and Operator of the Website
https://www.hiltonice.com/,
Please be advised that the use of the Hilton name, including its incorporation within your domain name and its use in connection with a hotel-branded website, constitutes unauthorized use of a protected trademark and raises significant legal concerns.Thank you for your note.

The use of the Hilton name on HiltonICE.com is intentional and expressive. The website is a work of political commentary and parody addressing Hilton's publicly reported cooperation with ICE, presented in the visual language of a hotel brand to critique that decision. No affiliation, sponsorship, or endorsement by Hilton is claimed or implied.

The site does not offer lodging, accept reservations, or engage in commercial activity, and is protected as expressive speech. The purpose is commentary, not confusion.

That said, I appreciate you reaching out and will review your concerns with counsel (a Ouija board and the ghost of the First Amendment).

Dog Bless,

Tobes
252408692
Reposted by Dave Weinstein
Koree A. Smith :stl_blues: @koree.mastodon.ameth.org.ap.brid.gy · 07/01/2026
No more Hilton brands for me! They dropped the hotel that refused ICE agents.
001
Reposted by Dave Weinstein
Dean Betz @deanbetz.newsie.social.ap.brid.gy · 07/01/2026
Here is a list of Hilton branded properties to boycott. Waldorf Astoria Hotels & Resorts Conrad Hotels Signia by Hilton The NoMad Canopy by Hilton Graduate Hotels Hilton Hotels & Resorts DoubleTree Curio Embassy Suites by Hilton Homewood Suites by Hilton Home2 Suites by Hilton Hilton Garden Inn […]
newsie.social
Original post on newsie.social
021
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 07/01/2026
Now, to be fair, the odds of my going to a “local” SF convention are insanely low anyway, but they’ve functionally converged on zero, with the combination of the recent actions by the Hilton corporation, and the fact that most of the conventions are held in Hilton owned chains.
010
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 24/12/2025
Is it ok if I just Jingle until someone asks "are we there yet" and then turn the car around?
000
Reposted by Dave Weinstein
Vee @veroniqueb99.mastodon.social.ap.brid.gy · 03/12/2025
A Nativity display at a church in Massachusetts is sparking a debate after swapping Mary, Joseph and baby Jesus for a sign that reads "ICE was here." www.wpri.com/new-england/massachuse…
4454
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 24/11/2025
It is Thanksgiving week in America, so this is your reminder that you can map all Seven of the Seven Deadly Sins to this week. We start with Lust. Between travel, and family all crammed together, if any Lust is happening, it is probably happening today. 1/7
100
Reposted by Dave Weinstein
M.S. Bellows, Jr. @msbellows.c.im.ap.brid.gy · 13/11/2025
Damn, I love being more literate than they are.
0418
Reposted by Dave Weinstein
Popehat @kenwhite.bsky.social · 13/11/2025
New York Times social media guidelines prohibit expression suggesting partiality on things like ICE, execution of foreigners in fishing boats, or whether law is a thing. However, tipping off notorious serial pedophiles about other reporters is absolutely fine.
2842701121
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 31/10/2025
I'm low-key working on my pitch for @pancakescon next year (which I can't talk about because the submissions are judged blind), and I realized... If you want to talk at #PancakesCon multiple years, you need to have multiple hobbies. Which is something of the point of the conference, I think.
000
Reposted by Dave Weinstein
Kevin Marks @kevinmarks.xoxo.zone.ap.brid.gy · 22/10/2025
Key findings: 45% of all AI answers had at least one significant issue. 31% of responses showed serious sourcing problems – missing, misleading, or incorrect attributions. 20% contained major accuracy issues, including hallucinated details and outdated information. Gemini performed worst with […]
xoxo.zone
Original post on xoxo.zone
512106
Reposted by Dave Weinstein
M.S. Bellows, Jr. @msbellows.c.im.ap.brid.gy · 03/10/2025
Every writer about #resistance has noted that #fascism asks us to comply in small increments, none of which seems so terrible that it's worth losing our job or social standing over – so that once we finally reach the line we cannot cross, it's too late for noncompliance […] [Original post on c.im]
Screenshot of the Housing and Urban development website, which is blocked by a popup reading "The Radical Left in Congress shut down the government. HUD will use available resources to help Americans in need."Screenshot of the US Forest Service website, blocked by a popup reading "The Radical Left Democrats shut down the government. This government website will be updated periodically during the funding lapse for mission critical functions. President Trump has made it clear he wants to keep the government open and support those who feed, fuel, and clothe the American people."
014
Reposted by Dave Weinstein
Steve Herman @w7voa.journa.host.ap.brid.gy · 03/10/2025
Wired - Out-of-office messages of US Department of Education employees, after the government shutdown began, were altered to contain partisan language without their consent […]
journa.host
Original post on journa.host
2138
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 26/09/2025
This is your reminder that on this date, in 1983, Stanislav Petrov saved the world.
1011
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 21/09/2025
In a few hours I'll be talking about Career Planning in an Era of Layoffs, and Storygames, at #pancakescon Stream: www.youtube.com/@PancakesCon/live Schedule: pancakescon.com/2025-conference-inf…
pancakescon.com
2025 Conference Information
PancakesCon 6 will be streamed on 9/21/2025, and streaming links will be available on this page at the start of the conference. Recordings of talks are available on our YouTube, starting **approximately one month after the conference.** **All Times US Central – Chicago**| **Track 1**| **Speaker**| **Track 2**| **Speaker** ---|---|---|---|--- 0600-0610| OPENING REMARKS / TRANSITION FROM COMFYCON TEAM| Lesley Carhart| ——-| ——- 0610-0700| KEYNOTE 1| Bruce Large| ——-| ——- 0700-0740| Good Cyberz for Small Business and Swimming is Life| Jodie Miners| Whoa, Black Basta (Bam Ba Lam)| Dan Banker 0740-0820| Medical Device Security and Misty Mountains of Victoria| Simon C| Know the Deck, Know the Threat: TTPs and Threat Intel through Magic the Gathering| John Stoner 0820-0900| How to focus on the important stuff: Triaging in DFIR and Photography| Lisa Lobmeyer| Just tell them not to do it! / These are a few of my favourite Cons!| John Scott 0900-0940| PKI and Powerlifting!| Jake Hildreth / horse | Cyber Insurance and Spinning Yarn| Amanda / Tindra 0940-1020| What Hiking Taught Me About Building Privacy Programs| Amristar Wickramaratna| Structured Note-Taking for Effective Incident Response And Indonesia for the Solo Traveler| Daniel Suryanata 1020-1100| Domain Intelligence, Investigative Journalism, and the Importance of Play| Ian Campbell / Neurovagrant| Plan ahead: Reap rewards: cyber planning and potroast in the slow cooker| Dr. Meg Layton 1100-1140| Career Planning in an Era of Layoffs and Storygames| Dave Weinstein| From Terry to Telemetry, Security to Sweets: Doing What You Love| Micheal Cottingham 1140-1220| Patient Craftsmanship – Finding Malicious Users and Embroidery| Kris Hardy | A Primer on Windows Access Control & Creating a Compelling D&D Villain| WinterKnight 1220-1300| One-liners and One Needle: Bash and Needlebinding| Brianna / Dio9sys| Reverse Engineering Surveillance Infrastructure and Feeding Your Neighbors| Ryan O’Horo 1300-1340| Hacking the OSCP & the Practice of Zen Meditation| Keith Hoodlet| From Threat Models to Wealth Models: The Peculiar Parallels of Offensive Security & Financial Planning| Kyle Smith 1340-1430| KEYNOTE 2| Alyssa Miller| ——-| ——- 1430-1500| CLOSING REMARKS / AWARDS| Lesley Carhart| ——-| ——- ### Share this: * Click to share on X (Opens in new window) X * Click to share on Facebook (Opens in new window) Facebook * Like Loading...
000
Reposted by Dave Weinstein
Popehat @kenwhite.bsky.social · 20/09/2025
As far as I can tell the Trump Administration’s stance is that he took $50,000 in cash for totally innocent reasons and that thinking otherwise is deep state nonsense. No, it’s not plausible.
912790568
Reposted by Dave Weinstein
Adam Schwarz @adamjschwarz.bsky.social · 18/09/2025
Trump says he specifically requested that Sadiq Khan be excluded from the UK state banquet: "On immigration, he's a disaster." As mayor of London, Khan has no powers over immigration.
1381388365
Reposted by Dave Weinstein
Adam Schwarz @adamjschwarz.bsky.social · 18/09/2025
Trump: "When you have a network, and you have evening shows, and all they do is hit Trump... They're not allowed to do that."
7432763891
Reposted by Dave Weinstein
dave@yourcomputer​ #:cursor: @dave.basilisk.gallery.ap.brid.gy · 17/09/2025
Digging through some CDC data - VAERS specifically - I see this. “We have to do it, but we’re going to make it very clear whose fault it is.” Rock on.
“CDC’s website is being modified to comply with President Trump’s Executive Orders”
001
Reposted by Dave Weinstein
Lesley Carhart :unverified: @hacks4pancakes.infosec.exchange.ap.brid.gy · 17/09/2025
I do not know another way to express to people that trying to appease fascists by “being a good minority” or totally deferring to them publicly has saved absolutely no marginalized group or profession in human history. They are coming after us anyway. Even if you l scold peers for not being nice.
1103
Reposted by Dave Weinstein
Jahred Bruno @wxdtv.mstdn.social.ap.brid.gy · 13/09/2025
lol archive.is/1t1rm
4595
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 12/09/2025
Capsule Review: If you have never seen "This is Spinal Tap", watch that first. Partly, because if you didn't like it, you won't like the sequel. But mostly because the sequel really requires you to have seen the original to appreciate it. With that said, Spinal Tap 2 is *joyful*, and absolutely […]
infosec.exchange
Original post on infosec.exchange
001
Reposted by Dave Weinstein
Radley Balko @radleybalko.bsky.social · 12/09/2025
Kirk didn't serve in the military or hold office. The war hero treatment -- half-mast flags, military guard, Air Force Two escort, calls for a statue at the Capitol or to lie in the Rotunda -- shows that for MAGA, service to Trump has become the highest, most honorable form of service.
23899032770
Reposted by Dave Weinstein
Popehat @kenwhite.bsky.social · 10/09/2025
Meanwhile AI is still a great advancement, congrats techbrahs
913475595