Sign in

Stijn 👨🏽‍💻

@sequr.be
90 followers 104 following 365 posts

💻 Application Security / IT Security 🦦 Home automation (Home Assistant) 🦜 he/him 🦣 @TerraGloba@mastodon-belgium.be 🐦 @DezeStijn 🌐 sequr.be

PostsRepliesMedia
Stijn 👨🏽‍💻 @sequr.be · 04/01/2026
Ocean's 11/12/13
Brad Pitt as Robert "Rusty" Ryan in Ocean's 11. He's wearing a white striped shirt, a light grey / faux white jacket, and black sunglasses.
120
Stijn 👨🏽‍💻 @sequr.be · 25/12/2025
A current-day adaptation of the Grinch?
A modern adaptation of the Grinch but with the face of Donald J. Trump. Make it photorealistic.
000
Stijn 👨🏽‍💻 @sequr.be · 30/11/2025
Weet iemand of de NMBS ook dit principe hanteert? Treinen aan 80% van de maximumsnelheid laten rijden zodat je die 20% buffer kunt gebruiken om vertragingen in te halen. Zo verhoog je de betrouwbaarheid van de timing voor een kleine kost in reistijd. toot.yosh.is/@yosh/115636...
I didn't realize that Swiss trains apparently also adhere to the "schedule for 80% of capacity rule".

Apparently trains in Switzerland go around 80% of the top speed possible on the track. The 20% overhead is used to make up time in the case of delays.

The thinking is: stable and predictable operation is more important than going faster. Because the cost of passengers regularly missing layovers is much higher than the benefits of trains being 20% faster.

By @yosh@toot.yosh.is
120
Stijn 👨🏽‍💻 @sequr.be · 21/11/2025
Image your head of state being such a grifter. They even had to add a whole disclaimer trying to deflect any obvious comments on his grifting.
Trump watches offered by TheBestWatchesonEarth LLC who uses the "Trump" name, likeness and image under paid license from CIC Digital LLC, which license may be terminated or revoked according to its term. Trump watches are not designed, owned, managed or controlled by Donald J. Trump, The Trump Organization, CIC Digital LLC or any of their respective principals or affiliates. Trump Watches are intended as collectible items for individual enjoyment only, not for investment purposes. Trump watches are not political and have nothing to do with any political campaign.
000
Stijn 👨🏽‍💻 @sequr.be · 14/10/2025
AI generated image based on the following prompt:
It's nighttime. We're looking outside through the bedroom window. Mr. Big, the green Duolingo owl, sits on the window sill. He's peering through the window into our room. He's looking very menacing.
soft glow, dramatic lighting
020
Stijn 👨🏽‍💻 @sequr.be · 14/10/2025
AI generated image based on the following prompt:
Mr. Big, the green Duolingo owl, is standing outside a house. It's nighttime and the street is dimly lit via a street lantern. The owl looks very menacing and is holder a butcher's knife.
220
Stijn 👨🏽‍💻 @sequr.be · 06/10/2025
😬
‪Nature‬ (@nature.com‬) · 3m
BREAKING: The Nobel Prize in Physiology or Medicine has been awarded jointly to Mary E. Brunkow, Fred Ramsdell, and Shimon Sakaguchi "for their discoveries concerning peripheral immune tolerance"

Stay tuned for more.
#NobelPrize
A photo of a Nobel medal

‪

Relmans‬ ‪(@krisremels.bsky.social‬) · 5m
Sowieso Donald Trump voor zijn grensverleggend werk op het domein van autisme en vaccinaties. Anders krijgt Zweden morgen handelstarieven van 200% opgelegd.
110
Stijn 👨🏽‍💻 @sequr.be · 16/09/2025
They already rate-limited their webhook Any other paths they might use for exfil?
Webhook.site Error
Request limit exceeded. Sign up to unlock more requests.

You have been rate limited due to too many requests to this URL. This is either because you have not purchased a Webhook.site subscription, or the endpoint has a rate limit.

To remove the request limit limit, you can upgrade to a Webhook.site subscription.

If you are already subscribed and getting this error, please contact Webhook.site Support.
000
Stijn 👨🏽‍💻 @sequr.be · 27/08/2025
Just a friendly reminder to any followers from the UK. This is what your ISP sees in the network traffic of a fictional household. Be wary that using a VPN makes you stand out from the crowd. And metadata can still tell a lot about you.
- 00:00-06:00 barely any network traffic
- 06:00-09:00 mostly HTTP(S) traffic to social media sites and news sites
- 09:00-17:00 drop in network traffic
- 17:00-22:00 mostly HTTP(S) traffic to social media, YouTube, streaming, some more random sites
- 22:00-22:15 VPN traffic, unreadable destinations, streaming-like bandwidth usage
- 22:15-00:00 mostly HTTP(S) traffic to social media but dropping network usage
010
Stijn 👨🏽‍💻 @sequr.be · 19/08/2025
Gevonden! x.com/dieworkwear/...
010
Stijn 👨🏽‍💻 @sequr.be · 19/08/2025
Zoals de meme: belangrijke presentatie waar je mee aan moet werken, en pas last-minute aan begint, om dan gegroet te worden met volgend scherm. En de owner van de presentatie is uw manager...
Google Slides presentatie waar gebruiker nog geen toegang tot heeft.
Venster laat toe om toegang te vragen tot het document.
080
Stijn 👨🏽‍💻 @sequr.be · 25/07/2025
This is also great news. Time to update the FAQ on the order page?
Tariffs

Tariff cost for US orders is around $10 per Core 2 Duo. Non-US orders do not have any US tariffs since we ship direct from Hong Kong to all non-US addresses. We are shipping 'customs and duties prepaid' (DDP) You will be charged your country's tariffs/taxes/duties/VAT during order confirmation, then when you receive your package you will not owe any additional money.
120
Stijn 👨🏽‍💻 @sequr.be · 11/07/2025
110
Stijn 👨🏽‍💻 @sequr.be · 18/06/2025
So simple, yet so awesome. Tactile and braille map of the toilet so that someone with a visual impairment can more easily find their way. Public bathrooms are all designed differently, making it challenging to find the correct stall, sink, dryer, etc. This map is a total game changer!
A sign next to the Female and Ambulant toilet. In the grey part sign on top you can see symbols for a female person and a person with crutches, below it the text "Female Ambulant Toilet" and its braille translation below it.
The black sign below it has a tactile and braille map of the toilet with symbols and braille descriptions for the stalls, dryer, sinks, and soap dispenser. Above it there's an explanation in braille on the map and the acronyms used on it.Molly Burke, holding her cane and wearing a bright jacket standing at the door of the female/ambulant toilet. Next to the door of the toilet, you can see the tactile map.
The captions at the bottom read "(that) public bathrooms are all designed differently".
000
Stijn 👨🏽‍💻 @sequr.be · 11/06/2025
Pretty extensive robots.txt so far `DisallowAITraining` is also a newer option, again only for cooperative robots www.ietf.org/archive/id/d...
Contents of a robots.txt file:

User-Agent: AI2Bot
User-Agent: AI2Bot-Dolma
User-Agent: Amazonbot
User-Agent: anthropic-ai
User-Agent: Applebot
User-Agent: Applebot-Extended
User-Agent: AwarioBot
User-Agent: AwarioRssBot
User-Agent: AwarioSmartBot
User-Agent: Bytespider
User-Agent: CCBot
User-Agent: ChatGPT-User
User-Agent: Claude-Web
User-Agent: ClaudeBot
User-Agent: cohere-ai
User-Agent: cohere-training-data-crawler
User-Agent: DataForSeoBot
User-Agent: diffbot
# User-Agent: DuckAssistBot
User-Agent: FacebookBot
User-Agent: Google-CloudVertexBot
User-Agent: Google-Extended
User-Agent: Googlebot-Extended
User-Agent: GPTBot
User-Agent: ICC-Crawler
User-Agent: ImagesiftBot
User-Agent: img2dataset
User-Agent: Kangaroo Bot
User-Agent: Meltwater
User-Agent: Meta-ExternalAgent
User-Agent: Meta-ExternalFetcher
User-Agent: OAI-SearchBot
User-Agent: Omgili
User-Agent: Omgilibot
User-Agent: PanguBot
User-Agent: peer39_crawler
User-Agent: Perplexity
User-Agent: PerplexityBot
User-Agent: Petalbot
User-Agent: Scrapy
User-Agent: Seekr
User-Agent: SemrushBot-OCOB
User-Agent: Sentibot
User-Agent: Timpibot
User-Agent: TurnitinBot
User-Agent: VelenPublicWebCrawler
User-Agent: webzio-extended
User-Agent: YouBot
Disallow: /
DisallowAITraining: /
021
Stijn 👨🏽‍💻 @sequr.be · 10/04/2025
030
Stijn 👨🏽‍💻 @sequr.be · 19/03/2025
Even ABRP gechecked. Met meest ideaal laden of laden voor de Franse grens. Antwerpen > Parijs Ingesteld op EQB 300, 100% batterij bij vertrek, 10% bij aankomst, zo weinig mogelijk stops. Houdt rekening met meer realistisch verbruik.
Route van Antwerpen naar Parijs met laadstop in Kortrijk.
3u40 over 350km, met 20 minuten laadstop.
100% batterij bij vertrek, 10% bij aankomst.Route van Antwerpen naar Parijs met laadstop in Hauts-de-France Ouest.
3u27 over 345km, met 13 minuten laadstop.
100% batterij bij vertrek, 10% bij aankomst.
110
Stijn 👨🏽‍💻 @sequr.be · 11/03/2025
Overheid toont pop-up op louche sites. Iemand inzage in hoe ze dit effectief doen? Verplichten ze ISPs om content injectie te doen, of om sites te redirecten via een landingspagina? DNS "hijack"?
Naming en shaming
De duizend meldingen vormen slechts het topje van de ijsberg. Veel gedupeerden dingen uit schaamte geen klacht in, vooral als ze al betaald hebben. Maar zonder meldingen kan de overheidsdienst Economie niet ingrijpen. Daarom hanteert het nu een nieuwe aanpak bij aanhoudende klachten over een bedrijf: "naming en shaming". «Bezoekers van websites waarvoor we ernstige klachten ontvangen die zich niet in regel stellen, zien nu een pop-up die waarschuwt voor mogelijke illegale praktijken. De sites zijn daardoor niet meer toegankelijk en zo voorkomen we nieuwe slachtoffers», licht Meurisse toe. Deze aanpak is ook toegepast op de schoorsteenvegers waarover HLN in december berichtte: Peeters Daktechniek, Dieter Dakwerken en Lambert Daktechniek. «Al deze websites blijken van één Nederlands bedrijf: Service Compleet Int. B.V., onder leiding van Rida Chartit», vervolgt Meurisse. «We maken zijn naam bewust openbaar. Inmiddels heeft zijn bedrijf zelf zijn websites offline gehaald», aldus Meurisse. Vorig jaar controleerde de Economische Inspectie 93 hersteldiensten. Dit resulteerde in 32 waarschuwingen en 18 processen-verbaal.Na recordaantal klachten over oplichters.
Overheid plaatst waarschuwingen op louche websites
De overheid gaat een waarschuwing tonen op websites van gekende oplichters. Vorig jaar kreeg de federale overheidsdienst Economie een recordaantal van 1.068 klachten over hersteldiensten. Om meer slachtoffers te voorkomen, zullen pop-ups waarschuwen voor mogelijke illegale praktijken.
120
Stijn 👨🏽‍💻 @sequr.be · 10/03/2025
Europa komt met digitale identiteitskaart. Smartphone afgeven aan agent voor identiteitscontrole ≠ toestemming tot doorzoeken smartphone.
Quote van Lydia Protut (Sien Eggers) uit het Eiland: "Willen we dat zo afspreken?"
020
Stijn 👨🏽‍💻 @sequr.be · 05/03/2025
Timeline was on point
000
Stijn 👨🏽‍💻 @sequr.be · 24/01/2025
4-part comic/meme
The first image shows the Episcopal bishop of Washington, Mariann E. Budde.
The next 3 images show an (edited) scene from Good Omens:
- Person1: What was it she said that got everyone so upset?
- Person2: "Be kind to each other."
- Person1: Oh, yeah. That'll do it.
091
Stijn 👨🏽‍💻 @sequr.be · 11/12/2024
Update to the WordPress drama From the court case "WPENGINE, INC. v. AUTOMATTIC INC." storage.courtlistener.com/recap/gov.us... Automattic needs to restore the ACF plugin and the ownership by WPEngine. It also needs to remove login restrictions to WPE affiliates and cease interference with WPE.
Quote from Case 3:24-cv-06917-AMO at the United States District Court Northern District of California.
Part 1 of 3

Defendants, and Defendants’ officers, agents, servants, employees, and attorneys, and other persons who are in active concert or participation with them are hereby RESTRAINED AND ENJOINED, from:
(a) blocking, disabling, or interfering with WPEngine’s and/or its employees’, users’, customers’, or partners’ (hereinafter “WPEngine and Related Entities”) access to wordpress.org;
(b) interfering with WPEngine’s control over, or access to, plugins or extensions (and their respective directory listings) hosted on wordpress.org that were developed, published, or maintained by WPEngine, including those that had been published, developed, or maintained by WPEngine as of September 20, 2024; and
(c) interfering with WPEngine’s and Related Entities’ WordPress installations (i.e., websites built with WordPress software) by using auto-migrate or auto-update commands to delete, overwrite, disable, or modify any WPEngine plugin without the express request by or consent of WPEngine and/or its users, customers, or partners (as applicable).
The above, however, does not preclude wordpress.org’s ability to ensure the security and operability of its site consistent with procedures and policies in place as of September 20, 2024.Part 2 of 3

Within 72 hours, Defendants are ORDERED to:
(a) remove the purported list of WPEngine customers contained in the “domains.csv” file linked to Defendants’ wordpressenginetracker.com website (which was launched on or about November 7, 2024) and stored in the associated GitHub repository located at https://github.com/wordpressenginetracker/wordpressenginetracker.github.io.
(b) restore WPEngine’s and Related Entities’ access to wordpress.org as it existed as of September 20, 2024, including:
 (i) reactivating and restoring all WPEngine employee login credentials to wordpress.org resources (including login credentials to login.wordpress.org) as they existed as of September 20, 2024;
 (ii) disabling any technological blocking of WPEngine’s and Related Entities’ access to wordpress.org that occurred on or around September 25, 2024, including IP address blocking or other blocking mechanisms; and
 (iii) restoring WPEngine’s and Related Entities’ access to wordpress.org in the manner that such access existed as of September 20, 2024, including:Part 3 of 3

 (iii) restoring WPEngine’s and Related Entities’ access to wordpress.org in the manner that such access existed as of September 20, 2024, including:
  (1) functionality and development resources (api.wordpress.org, core.svn.wordpress.org, plugins.svn.wordpress.org, themes.svn.wordpress.org, i18n.svn.wordpress.org, downloads.wordpress.org, make.wordpress.org, and translate.wordpress.org);
  (2) data resources (WordPress Plugin, Theme, and Block Directories, repositories, listings, and other password-protected resources within wordpress.org);
  (3) security resources (login.wordpress.org); and
  (4) support resources (trac.wordpress.org and slack.wordpress.org); and
 (iv) removing the checkbox at login.wordpress.org that Defendants added on or about October 8, 2024 asking users to confirm that they are “not affiliated with WP Engine in any way, financially or otherwise”; and
 (v) returning and restoring WPEngine’s access to and control of its AdvancedCustom Fields (“ACF”) plugin directory listing at https://wordpress.org/plugins/advanced-custom-fields, as it existed as of September 20, 2024. This Preliminary Injunction is immediately effective upon its entry and shall remain in full force and effect through the date on which judgment is entered following the trial of this action.

IV. CONCLUSION
For the reasons set forth above, WPEngine’s motion for a preliminary injunction is GRANTED.
IT IS SO ORDERED.
Dated: December 10, 2024
Signed: ARACELI MARTÍNEZ-OLGUÍN, United States District Judge
010
Stijn 👨🏽‍💻 @sequr.be · 03/12/2024
Like, what is this even 🤷‍♂️
Over 20 Chrome tabs showing the LastPass favicon
000
Stijn 👨🏽‍💻 @sequr.be · 21/11/2024
Dit soort verhalen, doet me altijd denken aan deze clip van @adamconover.net : www.youtube.com/watch?v=Dw5k...
Different news articles regarding the sale of the duct-taped banana artwork for $6.2 million
000
Stijn 👨🏽‍💻 @sequr.be · 19/11/2024
🥳🥳🥳
110
Stijn 👨🏽‍💻 @sequr.be · 19/11/2024
Almost there... 20,000,000 vqv.app/stats/
Counter displaying amount of users on Bluesky, currently reading 19,996,166. Other datapoints are also shown: 599,493,376 total posts, 886,348,672 total follows, 2,536,370,432 total likes, 56 seconds until the next data update, and 6.28 users/second growth ratio.
260