Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

Dave Weinstein

@dhw.infosec.exchange.ap.brid.gy
9 followers 1 following 35 posts

Recovering Game Developer turned Security Professional. Sometime musician, potter, player (and occasional author) of games. Not a speaker for my employer. He/Him […] [bridged from infosec.exchange/@dhw on the fediverse by fed.brid.gy ]

PostsRepliesMedia
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 26/09/2026
43 years ago, Stanislavs Petrov saved the world.
000 0
Reposted by Dave Weinstein
David August ❌👑 @davidaugust.mastodon.online.ap.brid.gy · 10/09/2026
😲😝
screenshot of a post by bjsiemon: 

If I wanted something pricey from Apple that folds easily I'd look to its CEO.
0229 29
Reposted by Dave Weinstein
Andrew Weinstein @andrewjweinstein.com · 09/09/2026
You know who actually did show up at Ground Zero? Canadian emergency rescue crews.
390309737716 31K
Reposted by Dave Weinstein
Mitch Wagner @mitch.hachyderm.io.ap.brid.gy · 03/09/2026
002 2
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 03/09/2026
This is an unusual networking request. I'm helping someone look for roles as a trainer/instructor. They have a long professional history of creating and delivering training in a field where mistakes in training or student understanding can easily result in fatalities (of the students, or of […]
infosec.exchange
Original post on infosec.exchange
001 1
Reposted by Dave Weinstein
Dan Wentzel 🏳️‍🌈 @danwentzel.urbanists.social.ap.brid.gy · 07/08/2026
“Stop making me choose between far-right and far-left” - “Centrists” We don’t really have a “far-left” in this country as compared to the rest of the world. But, if the choice for you between prison camps and universal access to healthcare in the USA is a difficult one, then you already side […]
urbanists.social
Original post on urbanists.social
001 1
Reposted by Dave Weinstein
Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/07/2026
From a SharePoint vulnerability perspective, this is the most trivial exploit I think I've ever seen. The exploit is a **single** web request to `SERVERNAME/_trust/default.aspx` In the request to this endpoint, there's a `<t:RequestSecurityTokenResponse> <t:RequestedSecurityToken> <sc […]
infosec.exchange
Original post on infosec.exchange
021 2
Reposted by Dave Weinstein
Evil Jim O’Donnell @eatyourgreens.mastodon.social.ap.brid.gy · 18/07/2026
Having now seen Christopher Nolan’s adaptation, I must say that Super Mario Odyssey took major liberties with the original text.
035 5
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 10/07/2026
So, if past is prologue, England will beat Norway but then lose to France. Mind you, Spain, Switzerland, and especially Argentina sat that one out.
000 0
Reposted by Dave Weinstein
René Mayrhofer :verified: 🇺🇦 🇵🇸 @rene-mobile.infosec.exchange.ap.brid.gy · 09/06/2026
I'm leaving #Google: www.mayrhofer.eu.org/post/leaving-g… While I believe that I have been able to do some good with my continuing (part-time) engagement in the Android security and privacy team since returning to Austria a couple of years ago, the deal with the US #DoW is […]
infosec.exchange
Original post on infosec.exchange
2125 25
Reposted by Dave Weinstein
Mx. Aria Stewart @aredridel.kolektiva.social.ap.brid.gy · 10/05/2026
Periodic reminder that “rate your pain on a scale from 1 to 10" is bullshit without reference points. People with chronic pain, tough guys, people with intense periods, and people who struggle with interoception all struggle when the endpoints are nebulous. Let me introduce you to the DVPRS […]
kolektiva.social
Original post on kolektiva.social
91066 66
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 01/04/2026
Reminder that tomorrow you should distrust everything you see on the Internet. In this, it is no different than any other day.
000 0
Reposted by Dave Weinstein
Adam Shostack :donor: :rebelverified: @adamshostack.infosec.exchange.ap.brid.gy · 22/03/2026
There sure do seem to be a lot of ways to not say "The United States is threatening to commit war crimes."
Screen grab of text: "According to the International Committee of the Red Cross (ICRC), under the Geneva Conventions of 1949, power plants are considered civilian infrastructure and should not be attacked because doing so "may cause the release of dangerous forces and consequent severe losses among the civilian population."

The ICRC notes that an exception could be made only if the plants provide "regular, significant and direct support of military operations and if such attack is the only feasible way to terminate such support."
101 1
Reposted by Dave Weinstein
Cassandrich @dalias.hachyderm.io.ap.brid.gy · 26/02/2026
PSA: The Amazon wishlist doxing threat is much greater and more immediate than folks might realize. Attack works like this: Stalker who wants your address opens an Amazon seller account and lists themselves as a third party seller for any item on your public wishlist. Then, they order the item […]
hachyderm.io
Original post on hachyderm.io
834225 225
Reposted by Dave Weinstein
Missing The Point @missingthept.mastodon.social.ap.brid.gy · 22/02/2026
Breaking: The U.S. dispatches health insurance claim denial ship to Greenland.
11865 65
Reposted by Dave Weinstein
abadidea @0xabad1dea.infosec.exchange.ap.brid.gy · 12/02/2026
I can't stop thinking about the LLM-generated compiler that passes all the unit tests but emits inner loops that benchmark over 150,000x slower than a gcc debug build. I couldn't possibly have intentionally come up with such a funny demonstration of the point of genuine expertise […]
infosec.exchange
Original post on infosec.exchange
32767 67
Reposted by Dave Weinstein
Mitch Wagner @mitch.hachyderm.io.ap.brid.gy · 31/01/2026
"It is the misfortune of Minnesota's ICE contingent to have invaded the state with the second-highest levels of social trust, trailing only Utah.... stop spreading despair and nihilism. stop buying into the idea that nonviolent activism is useless, rather than (by far) the most effective form of […]
hachyderm.io
Original post on hachyderm.io
001 1
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 28/01/2026
I don't know that I even knew a launch was scheduled for that day. They had become commonplace. We didn't watch them in science classes, or have announcements. I remember one of my classmates going around asking people "Did you remember to place the bomb?", and no one even bothered to ask what […]
infosec.exchange
Original post on infosec.exchange
000 0
Reposted by Dave Weinstein
Matt Blaze @mattblaze.federate.social.ap.brid.gy · 27/01/2026
Bondi's extortionary demand for the Minnesota voter rolls is curious. Minnesota's voter rolls, like those of most states, are essentially public, including name, address, phone number (if given), and elections voted in. The only information redacted (by law) is DoB, SSN (etc) and which party's […]
federate.social
Original post on federate.social
2618 18
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 21/01/2026
For those old enough to remember, there was a time when television programs were almost entirely episodic. The events of an episode were largely confined to it, in part so that viewers could watch them out of order as reruns. I remember watching "The Coming of Shadows" (and due to an error by […]
infosec.exchange
Original post on infosec.exchange
000 0
Reposted by Dave Weinstein
The Tennessee Holler @thetnholler.bsky.social · 09/01/2026
Stephen Miller’s cousin 👇🏽
474322038745 32.2K
Reposted by Dave Weinstein
Indio Gringo ® @paninid.mastodon.world.ap.brid.gy · 07/01/2026
Sherman’s #MarchToTheSea has entered the chat.
000 0
Reposted by Dave Weinstein
Mike Masnick @masnick.com · 07/01/2026
So @tobymorton.bsky.social is a national treasure and Hilton is fucking up royally with this nonsense. www.hiltonice.com cc: @kenwhite.bsky.social
A satirical website for HiltonICE.com: "Experience Compliance at Its Finest."About Us
Our Story

Hilton ICE is a premium hospitality experience built on discretion, compliance, and selective compassion. Located wherever federal enforcement requires dependable accommodations, we deliver polished rooms, streamlined coordination, and an operating environment free from unnecessary complications.

​

Our properties provide the full range of services expected of a global hospitality brand, including thoughtfully designed accommodations, attentive service, and a formal commitment to cooperation. By aligning comfort with authority, we support continuity of operations and ensure expectations are met without interruption.

​

At Hilton ICE, hospitality is not a reflection of values. It is an operational standard.Unauthorized Use of Hilton
Trademark
To the Owner and Operator of the Website
https://www.hiltonice.com/,
Please be advised that the use of the Hilton name, including its incorporation within your domain name and its use in connection with a hotel-branded website, constitutes unauthorized use of a protected trademark and raises significant legal concerns.Thank you for your note.

The use of the Hilton name on HiltonICE.com is intentional and expressive. The website is a work of political commentary and parody addressing Hilton's publicly reported cooperation with ICE, presented in the visual language of a hotel brand to critique that decision. No affiliation, sponsorship, or endorsement by Hilton is claimed or implied.

The site does not offer lodging, accept reservations, or engage in commercial activity, and is protected as expressive speech. The purpose is commentary, not confusion.

That said, I appreciate you reaching out and will review your concerns with counsel (a Ouija board and the ghost of the First Amendment).

Dog Bless,

Tobes
252408692 2.4K
Reposted by Dave Weinstein
Koree A. Smith :stl_blues: @koree.mastodon.ameth.org.ap.brid.gy · 07/01/2026
No more Hilton brands for me! They dropped the hotel that refused ICE agents.
001 1
Reposted by Dave Weinstein
Dean Betz @deanbetz.newsie.social.ap.brid.gy · 07/01/2026
Here is a list of Hilton branded properties to boycott. Waldorf Astoria Hotels & Resorts Conrad Hotels Signia by Hilton The NoMad Canopy by Hilton Graduate Hotels Hilton Hotels & Resorts DoubleTree Curio Embassy Suites by Hilton Homewood Suites by Hilton Home2 Suites by Hilton Hilton Garden Inn […]
newsie.social
Original post on newsie.social
021 2
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 07/01/2026
Now, to be fair, the odds of my going to a “local” SF convention are insanely low anyway, but they’ve functionally converged on zero, with the combination of the recent actions by the Hilton corporation, and the fact that most of the conventions are held in Hilton owned chains.
010 1
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 24/12/2025
Is it ok if I just Jingle until someone asks "are we there yet" and then turn the car around?
000 0
Reposted by Dave Weinstein
Vee @veroniqueb99.mastodon.social.ap.brid.gy · 03/12/2025
A Nativity display at a church in Massachusetts is sparking a debate after swapping Mary, Joseph and baby Jesus for a sign that reads "ICE was here." www.wpri.com/new-england/massachuse…
4453 53
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 30/11/2025
It is Sunday, the last day of our Thanksgiving week. It is time to return home. And it does not seem to matter whether we are returning by plane, train, or automobile, the answer is the same. Everyone else is ahead of us, and they are doing it wrong. And on the off chance that we were the […]
infosec.exchange
Original post on infosec.exchange
000 0
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 29/11/2025
It is Saturday of Thanksgiving Week. We have eaten. And eaten. We have shopped. Depending on how Monday went, we may have done a bit more. Today is the day dedicated to the Deadly Sin of Sloth. No need to put on hardpants, just find a comfortable chair or couch, and kick back. 6/7
100 1
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 28/11/2025
It is Friday of Thanksgiving Week. Black Friday (we'll ignore that Black Friday has become a month long event, and stick to the older definition). Today is the day dedicated to the Deadly Sin of Avarice. You can get amazing deals on things you don't actually need, right now! 5/7
100 1
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 27/11/2025
Today is Thanksgiving day. It should come as no surprise that this day is dedicated to the Deadly Sin of Gluttony. But it is still a holiday, so make sure you wear your good (or at least clean) stretchy pants! 4/7
100 1
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 26/11/2025
Wednesday of Thanksgiving Week. A day for the Deadly Sin of Envy. "Their house is so neat and clean and tidy!"
100 1
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 25/11/2025
And now is Tuesday of Thanksgiving week in America, the day dedicated tot he Deadly Sin of Pride. "We will make our house look like it is neat and clean and tidy and organized all the time." 2/7
100 1
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 24/11/2025
It is Thanksgiving week in America, so this is your reminder that you can map all Seven of the Seven Deadly Sins to this week. We start with Lust. Between travel, and family all crammed together, if any Lust is happening, it is probably happening today. 1/7
100 1
Reposted by Dave Weinstein
M.S. Bellows, Jr. @msbellows.c.im.ap.brid.gy · 13/11/2025
Damn, I love being more literate than they are.
0418 18
Reposted by Dave Weinstein
Popehat @kenwhite.bsky.social · 13/11/2025
New York Times social media guidelines prohibit expression suggesting partiality on things like ICE, execution of foreigners in fishing boats, or whether law is a thing. However, tipping off notorious serial pedophiles about other reporters is absolutely fine.
2842691120 4.3K
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 09/11/2025
@briankrebs Pickle them. belegaer.com/blog/?m=202009
belegaer.com
000 0
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 31/10/2025
I'm low-key working on my pitch for @pancakescon next year (which I can't talk about because the submissions are judged blind), and I realized... If you want to talk at #PancakesCon multiple years, you need to have multiple hobbies. Which is something of the point of the conference, I think.
000 0
Reposted by Dave Weinstein
Kevin Marks @kevinmarks.xoxo.zone.ap.brid.gy · 22/10/2025
Key findings: 45% of all AI answers had at least one significant issue. 31% of responses showed serious sourcing problems – missing, misleading, or incorrect attributions. 20% contained major accuracy issues, including hallucinated details and outdated information. Gemini performed worst with […]
xoxo.zone
Original post on xoxo.zone
512106 106
Reposted by Dave Weinstein
M.S. Bellows, Jr. @msbellows.c.im.ap.brid.gy · 03/10/2025
Every writer about #resistance has noted that #fascism asks us to comply in small increments, none of which seems so terrible that it's worth losing our job or social standing over – so that once we finally reach the line we cannot cross, it's too late for noncompliance […] [Original post on c.im]
Screenshot of the Housing and Urban development website, which is blocked by a popup reading "The Radical Left in Congress shut down the government. HUD will use available resources to help Americans in need."Screenshot of the US Forest Service website, blocked by a popup reading "The Radical Left Democrats shut down the government. This government website will be updated periodically during the funding lapse for mission critical functions. President Trump has made it clear he wants to keep the government open and support those who feed, fuel, and clothe the American people."
014 4
Reposted by Dave Weinstein
Steve Herman @w7voa.journa.host.ap.brid.gy · 03/10/2025
Wired - Out-of-office messages of US Department of Education employees, after the government shutdown began, were altered to contain partisan language without their consent […]
journa.host
Original post on journa.host
2138 38
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 26/09/2025
This is your reminder that on this date, in 1983, Stanislav Petrov saved the world.
1011 11
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 21/09/2025
@praxiscode @pancakescon I could have worded that a little less starkly, but I stand by the content of it. Unless you are a generational technical talent, your career is going to need social skills just as much as it needs technical skills. If you wouldn't let yourself get away with "learning […]
infosec.exchange
Original post on infosec.exchange
020 2
Dave Weinstein @dhw.infosec.exchange.ap.brid.gy · 21/09/2025
In a few hours I'll be talking about Career Planning in an Era of Layoffs, and Storygames, at #pancakescon Stream: www.youtube.com/@PancakesCon/live Schedule: pancakescon.com/2025-conference-inf…
pancakescon.com
2025 Conference Information
PancakesCon 6 will be streamed on 9/21/2025, and streaming links will be available on this page at the start of the conference. Recordings of talks are available on our YouTube, starting **approximately one month after the conference.** **All Times US Central – Chicago**| **Track 1**| **Speaker**| **Track 2**| **Speaker** ---|---|---|---|--- 0600-0610| OPENING REMARKS / TRANSITION FROM COMFYCON TEAM| Lesley Carhart| ——-| ——- 0610-0700| KEYNOTE 1| Bruce Large| ——-| ——- 0700-0740| Good Cyberz for Small Business and Swimming is Life| Jodie Miners| Whoa, Black Basta (Bam Ba Lam)| Dan Banker 0740-0820| Medical Device Security and Misty Mountains of Victoria| Simon C| Know the Deck, Know the Threat: TTPs and Threat Intel through Magic the Gathering| John Stoner 0820-0900| How to focus on the important stuff: Triaging in DFIR and Photography| Lisa Lobmeyer| Just tell them not to do it! / These are a few of my favourite Cons!| John Scott 0900-0940| PKI and Powerlifting!| Jake Hildreth / horse | Cyber Insurance and Spinning Yarn| Amanda / Tindra 0940-1020| What Hiking Taught Me About Building Privacy Programs| Amristar Wickramaratna| Structured Note-Taking for Effective Incident Response And Indonesia for the Solo Traveler| Daniel Suryanata 1020-1100| Domain Intelligence, Investigative Journalism, and the Importance of Play| Ian Campbell / Neurovagrant| Plan ahead: Reap rewards: cyber planning and potroast in the slow cooker| Dr. Meg Layton 1100-1140| Career Planning in an Era of Layoffs and Storygames| Dave Weinstein| From Terry to Telemetry, Security to Sweets: Doing What You Love| Micheal Cottingham 1140-1220| Patient Craftsmanship – Finding Malicious Users and Embroidery| Kris Hardy | A Primer on Windows Access Control & Creating a Compelling D&D Villain| WinterKnight 1220-1300| One-liners and One Needle: Bash and Needlebinding| Brianna / Dio9sys| Reverse Engineering Surveillance Infrastructure and Feeding Your Neighbors| Ryan O’Horo 1300-1340| Hacking the OSCP & the Practice of Zen Meditation| Keith Hoodlet| From Threat Models to Wealth Models: The Peculiar Parallels of Offensive Security & Financial Planning| Kyle Smith 1340-1430| KEYNOTE 2| Alyssa Miller| ——-| ——- 1430-1500| CLOSING REMARKS / AWARDS| Lesley Carhart| ——-| ——- ### Share this: * Click to share on X (Opens in new window) X * Click to share on Facebook (Opens in new window) Facebook * Like Loading...
000 0
Reposted by Dave Weinstein
Popehat @kenwhite.bsky.social · 20/09/2025
As far as I can tell the Trump Administration’s stance is that he took $50,000 in cash for totally innocent reasons and that thinking otherwise is deep state nonsense. No, it’s not plausible.
912789568 2.8K