Sign in

JRT

@jrt.infosec.exchange.ap.brid.gy
15 followers 1 following 224 posts

Average nmap enjoyer, destroyer of IoT worlds and embedded universes. Chief #Passkey Advocate "Experte für Nischenthemen" - unnamed "Intel Gott" - @brahms "ernährt […] 🌉 bridged from ⁂ infosec.exchange/@jrt, follow @ap.brid.gy to interact

PostsRepliesMedia
JRT @jrt.infosec.exchange.ap.brid.gy · 09/10/2026
An die #BahnBubble : Zugbindung aufgehoben heißt ja ich kann beliebige Zuge nehmen um ans Ziel zu kommen. Aufgrund von einem Deutschlandticket ist das aber nur des ICE Ticket nach Bamberg mit Zwischenhalt in Erfurt. Danach wollte ich mit Region ans eigentliche Ziel. Muss ich bei Alternativen […]
infosec.exchange
Original post on infosec.exchange
001
JRT @jrt.infosec.exchange.ap.brid.gy · 08/10/2026
Schon wieder Hausdurchsuchung gegenüber. Ab wie vielen Malen spricht man von Tradition?
000
Reposted by JRT
daniel:// stenberg:// @bagder.mastodon.social.ap.brid.gy · 05/10/2026
Meat proxy as a service. hackerone.com/reports/4064040
hackerone.com
curl disclosed on HackerOne: Use-after-free read of the freed...
(CWE-416 → CWE-908/CWE-200) ## Aset yang terdampak (Affected Asset) - **Component:** libcurl — `lib/setopt.c`, `CURLOPT_REFERER` handler (`curl_easy_setopt` API) - **Related code paths:**...
4126
Reposted by JRT
Hacker Memes @i0null.infosec.exchange.ap.brid.gy · 04/03/2026
#directoryTraversalMemes
Famous meme template from Arnold Lobel's children's book series Frog and Toad.

Caption: Frog put the [../] in [the WAF]. "There," he said. "Now we will not [get pwned in production]". "But we can [%2e%2e%2f]," said the Toad. "That is true," said Frog.
11337
JRT @jrt.infosec.exchange.ap.brid.gy · 04/10/2026
"officials using it [Element] aren't impressed, with one describing the tool as "absolute shit."" Well I understand the Element hate, but they use MS Teams. As someone who is forced to use MS Teams on a daily basis I can get behind "absolute shit" for that tool as well :D
mastodon.cloud
010
Reposted by JRT
Prof Heino Falcke @hfalcke.mastodon.social.ap.brid.gy · 03/10/2026
RE: idf.social/@arjen/117364443241316215 So, number of first year computer science students has halved (!) at some universities within two years - likely due to being scared by AI. (We don’t see this in physics and astronomy).
5125
JRT @jrt.infosec.exchange.ap.brid.gy · 02/10/2026
@drakulix I hate that kde connect is not in the image and that the desktop integration isn't good right now. I had to use WayVR to get a decent setup. I think the big win is that we can use WayVR and do what we want with it. Let's see what the community and valve will do with it. Exciting times!
000
JRT @jrt.infosec.exchange.ap.brid.gy · 02/10/2026
Others: uhh new steam frame let's play the whole weekend. Me: lets play with varlink on a virtual desktop in VR! Pls send help
Steam VR with plasma desktop showing man varlink and Describe output of io.systemd.Hostname
100
Reposted by JRT
Kris @isotopp.infosec.exchange.ap.brid.gy · 02/10/2026
RE: mastodon.social/@arstechnica/117366… > Seventy-five percent of Micron’s memory output for 2027 is already accounted for, and most of the company’s current memory sales discussions are about 2028, the CEO said. Additionally, demand for HBM is surpassing demand for Micron’s […]
infosec.exchange
Original post on infosec.exchange
106
JRT @jrt.infosec.exchange.ap.brid.gy · 02/10/2026
Seems #SteamOS on the #SteamFrame lacks @kde connect. Guess I have to build a systemd-sysext.. :(
000
Reposted by JRT
Jan Penfrat @ilumium.eupolicy.social.ap.brid.gy · 01/10/2026
So, the @EUCommission has rolled out @element chat as a backup system to their default #Teams for the 33k officials. One official defended the new #Matrix-based system on an internal chat, according to Politico, by saying Teams wasn't as secure because "all we have is a guarantee that […]
eupolicy.social
Original post on eupolicy.social
012
JRT @jrt.infosec.exchange.ap.brid.gy · 22/09/2026
Super cooler neue Features in #systemd via @amutable : Mehr Visibility für die eigene Systemlandschaft ohne Drittanbieterwerkzeuge mit zentraler Datensammlung und kryptographischer Verifikation des Ursprungssystems. amutable.com/blog/it-starts-upstrea…
amutable.com
It Starts Upstream: systemd’s New Report Subsystem
systemd-report gathers metrics and facts from a node into one signed JSON document, with TPM and CoCo attestation, for secure fleet reporting.
001
Reposted by JRT
Marcus Richter @monoxyd.mastodon.social.ap.brid.gy · 20/09/2026
WIESO IST DIE SCHLAGZEILE "++ AfD erreicht wohl bisher bestes Ergebnis in Berlin ++" @tagesschau??? Die Linke hat auch ihr "bisher bestes Ergebnis in Berlin" erreicht und ist fucking Wahlsieger. Himmelherrgottsakra. (Screenshot Stand 20.09.2026 18:15) […] [Original post on mastodon.social]
Text im Screenshot (zusätzlich zu einem Bild mit blauen AfD-Ballons): 
"LIVEBLOG
Berlin-Wahl
++ AfD erreicht wohl bisher bestes Ergebnis in Berlin ++

Stand: 20.09.2026 • 18:09 Uhr

Die AfD erreicht laut ARD-Prognose 16 Prozent und damit ihr bisher bestes Ergebnis bei einer Abgeordnetenhauswahl. Im Vergleich zur vergangenen Wahl zeichnet sich eine höhere Beteiligung ab.
Spürbar höhere Wahlbeteiligung
AfD erreicht wohl bisher bestes Ergebnis in Berlin"
13960
JRT @jrt.infosec.exchange.ap.brid.gy · 20/09/2026
Dieses Kanzlerstatement war auch so eine Nullnummer. Hatte ein bisschen was von "niemand redet heute über mich. Mimimi"
000
JRT @jrt.infosec.exchange.ap.brid.gy · 20/09/2026
edu.casio.com/de/forteachers/er/fon… TIL: es gibt die Buttons der Casio Taschenrechner aus der Schule als offizielle TrueType Font
000
JRT @jrt.infosec.exchange.ap.brid.gy · 20/09/2026
Bzgl. Crowdstrike Einsatz in Berlin: die Bezirke wurden vor die Wahl gestellt, ob sie Crowdstrike ausrollen oder eine Netztrennung erfolgt die den Ausfall von Sozialhilfen herbeigeführt hätte. Also effektiv keine Wahl. Der Betrieb mehrerer Landes ITen in einer Stadt ist sowieso mega wild, wenn […]
infosec.exchange
Original post on infosec.exchange
001
JRT @jrt.infosec.exchange.ap.brid.gy · 20/09/2026
Wählen ✅
001
Reposted by JRT
Marcus Richter @monoxyd.mastodon.social.ap.brid.gy · 20/09/2026
#Berlin: Geht wählen! Falls ihr schon habt: Danke!
117
Reposted by JRT
Ivan Ožić Bebek @obivan.infosec.exchange.ap.brid.gy · 18/09/2026
PoC for CUPS LPE on Linux github.com/v12-security/pocs/tree/m…
github.com
pocs/cups/cups2root at main · v12-security/pocs
poc it like it's hot. Contribute to v12-security/pocs development by creating an account on GitHub.
003
Reposted by JRT
dra!_kulix @drakulix.de · 13/09/2026
So my talk about Wayland, MicroVMs, Vulkan and OSX is now online for everybody, who missed it: media.ccc.de/v/2026-638-of-wayland-… #mrmcd Thanks for the wonderful feedback so far, it seems to have found it's niche. (A second reminder […]
social.dreampi.es
Original post on social.dreampi.es
047
Reposted by JRT
dra!_kulix @drakulix.de · 17/09/2026
[Essen; unkomfortable Wahrheit] Es tut mir leid, aber vegane Leberwurst auf Knoblauch Naan ist überraschend gut.
001
JRT @jrt.infosec.exchange.ap.brid.gy · 17/09/2026
TIL: "Security by design" kann man mit Updates nachreichen.
000
JRT @jrt.infosec.exchange.ap.brid.gy · 17/09/2026
waitlisted :( #steamframe
000
JRT @jrt.infosec.exchange.ap.brid.gy · 10/09/2026
RE: wisskomm.social/@tuberlin/117247020… Apropos digitaler Zwilling: Ist das Gebäude schon auf dem TU Bingo?
wisskomm.social
000
Reposted by JRT
:privTri: Volpeon :areonNSmol: @volpeon.at.icy.wyvern.rip · 10/09/2026
Just an ordinary hand
Photo of Apple's keynote where they show the iPhone Duo held in one hand in its folded and its unfolded form. The right hand would never be able to hold it as shown, so below is an edit of what the hand would have to look like.
42451
Reposted by JRT
Hacker Memes @i0null.infosec.exchange.ap.brid.gy · 10/09/2026
#directoryTraversalMemes
Gru's Plan meme from Despicable Me.

Panel 1:  "state of the art firewall"
Panel 2: "nextgen features"
Panel 3:  ../
Panel 4: a dump of /etc/passwd
0214
JRT @jrt.infosec.exchange.ap.brid.gy · 10/09/2026
#ServiceToot: Es ist bundesweiter #Warntag. Gegen 11 Uhr erfolgt eine Probealarmierung über die üblichen Warnkanäle wie bspw. Cell-Boradcast und Infotafeln. Mehr Infos beim @bbk: www.bbk.bund.de/DE/Warnung-Vorsorge… Das BBK freut sich […]
infosec.exchange
Original post on infosec.exchange
001
Reposted by JRT
TheEvilSkeleton 🇮🇳 🏳️‍⚧️ @theevilskeleton.social.treehouse.systems.ap.brid.gy · 06/09/2026
In case you're not aware, there is a fork of Nitter, the superior frontend to Twitter, called Shitter (awesome name) which is hosted on Codeberg. The repository also contains a list of instances: codeberg.org/mv12star/shitter/wiki/… Finally, it contains boilerplates for […]
social.treehouse.systems
Original post on social.treehouse.systems
001
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
I think this meme captures the essence of all AI startups
Same picture as above.
PR person label: "The Teleoperator"
AI Bros label: "Elon Musk PR Stunt"
Triceratops label: "Tesla Robot"Same picture as above.
PR person label: "Clickworker on the other side of the world"
Phone held by the PR person label: "AI Food Delivery Company"
AI Bros label: "Marketing Campagin"
Triceratops label: "Self Driving Delivery Robots"
000
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
This shot from #IFA2026 is such a good AI company meme. Ai Company: Showing a robotic AI Triceratops AI Bro: OMG AI DINO AI Company Reality: Teleoperation
Employee of an AI robotics company holding an x-box controller behind the back and filming the robotic Triceratops on the IFA show floor while a few people look and point at it.
100
Reposted by JRT
Manuel 'HonkHase' Atug @honkhase.chaos.social.ap.brid.gy · 04/09/2026
#KRITIS Sektor #Staat und #Verwaltung ca. 15.35 Uhr ist das Ultimatum der Erpresser von Berlin abgelaufen, gezahlt wurde nicht. Was kopiert wurde? ca 6 TB an Daten inkl. #Geheimschutz relevanter #Verschlußsachen! 🔥 Nebenbei: Darf ein US Konzern (Crowdstrike) […] [Original post on chaos.social]
001
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
I've tried around 12 different AI Smart Glasses. All of them had the same swipe/tap gestures for navigating the UI. They feel a bit more clunky than google glass from 12 years ago. The booth staff insisted multiple times that I should try the voice control. Every task took twice as long as with […]
infosec.exchange
Original post on infosec.exchange
000
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
So viele humanoide Roboter beim Kochen "on break". Ich dachte der ganze Witz an denen ist, dass er nie müde wird? Der Gerät konnte das besser! #IFA2026
000
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
Company tries to sell a mini greenhouse for herbs and salads. "it's just like a printer. You can put a cartridge in here. It lasts for one month. A new one is 60€ and it needs Internet " Are you trying to sell stuff or what? You lost me at "printer" #IFA2026
000
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
Trying the TCL smart glasses at #IFA2026 is super strange. I've played a fair bit with the OS. I own the og Google Glasses and apart from the display being 3D they suffer in the same ways google glass did. They don't really feel like a major improvement despite being 12 years newer. Apparently […]
infosec.exchange
Original post on infosec.exchange
000
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
Bundeswehr Stand in der Content Creation "IFA Playbox" ist auch irgendwie Galgenhumor. #IFA2026
000
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
Immer wenn irgendwas hier nicht funktioniert wie vorgesehen sagen #IFA2026 Besucher: "Das ist bestimmt KI gestützt". Das Thema scheint langsam echt durch zu sein auch außerhalb meiner Bubble
001
JRT @jrt.infosec.exchange.ap.brid.gy · 04/09/2026
Seit Jahren mal wieder auf der #IFA2026 Die letzten Jahre waren mir etwas zu langweilig. Immer das gleiche. Als Pentester direkt am Eingang abgeholt:D
Levense Stand auf der IFA
000
Reposted by JRT
MikroTik @mikrotik.social · 03/09/2026
🚨 We have released a critical security update in all RouterOS release channels. Even though the fixed issue does not affect most home users with default configuration, we still suggest to treat this seriously and upgrade your MikroTik routers and inform other users. To give time to update your […]
mikrotik.social
Original post on mikrotik.social
1720
Reposted by JRT
emily, professional edge case @emily.fedi.uni.horse.ap.brid.gy · 01/09/2026
announcing Emily's Discount Dotfiles want to buy some dotfiles but don't have six-digit amounts of money to spare? fear not, for i will sell you only the dotfiles you need, straight out of my homedir, for the low price of $1K per file act now and i'll throw in some symlinks for free
113
JRT @jrt.infosec.exchange.ap.brid.gy · 29/08/2026
Feuerwehreinsatz am #RathausSteglitz mit Helikopter und vielen Fahrzeugen: - #U9 fährt nicht nach Steglitz - Busse werden über die Autobahn vorbeigeleitet und halten nirgends auf der Schloßstraße. #Berlin
000
JRT @jrt.infosec.exchange.ap.brid.gy · 23/08/2026
Gerade aus Interesse mal geschaut was der Laktosegehalt von Quark ist. AI Overview: "Quark ist ein laktosefreies Milchprodukt, das aus sauer gewordener Milch hergestellt wird." Gleiche Frage nochmal eingeben: "Quark enthält in der Regel etwa 2,7 bis 4,5 Gramm Laktose pro 100 Gramm, was für […]
infosec.exchange
Original post on infosec.exchange
000
Reposted by JRT
852dude @852dude.bsky.social · 13/08/2026
Bro. People are cool as fuck.
274164212321
JRT @jrt.infosec.exchange.ap.brid.gy · 10/08/2026
A #valve contractor (CEVA Logistics) has been compromised between July 29 2026 and August 1, 2026 with the following information in regards to shipping physical products: - name - street address, postal code and city - country - phone number - email address […] [Original post on infosec.exchange]
Hello ,Between July 29 2026 and August 1, 2026, a cyberattack hit CEVA Logistics, the company that ships Steam hardware to customers in Europe. CEVA is still investigating this attack, but as Valve learned on August 7, certain information about Steam customers, including you, was likely compromised.

CEVA receives specific delivery-related information from Steam to be able to ship physical hardware to customers in Europe, and told us these are the details the attacker likely took. Because CEVA retains this information for up to 90 days after that order, we are sending this message to all customers we can assume were impacted.

For you, that means the following information related to your hardware purchase may have been compromised:

your name

your street address, postal code and city

your country

your phone number

your email address — the same one your Steam account uses

the type and price of the ordered product

Additional information related to your Steam account or other purchases was not impacted. CEVA does not have access to your payment information, passwords, Steam Guard codes or other information.
002
Reposted by JRT
Rairii :win3_progman: :win3: @rairii.labyrinth.zone.ap.brid.gy · 04/08/2026
i didn’t think it was physically possible, but there’s finally something worse than `curl | sh`
Install with an AI agent (recommended)

The fastest way to get ghidrasql running end-to-end is to point an AI coding agent (Claude Code, Cursor, Codex, Aider, etc.) at the bundled installer prompt:

(link to install-prompt.md)
16245280
JRT @jrt.infosec.exchange.ap.brid.gy · 02/08/2026
Hat jemand eine Empfehlung für einen #valetudo fähigen Saugroboter der mit 4 cm hohen Schwellen klar kommt? #askfedi
000
Reposted by JRT
bontchev.infosec.exchange.ap.brid.gy @bontchev.infosec.exchange.ap.brid.gy · 31/07/2026
Vibe coding.
001
JRT @jrt.infosec.exchange.ap.brid.gy · 14/07/2026
RE: literatur.social/@viennawriter/1169… The return of the #glasshole
literatur.social
000