Tim (Wadhwa-)Brown :donor: @timb.me.uk · 4h[meta] The fact that I've been swimming on 3 holidays this year shouldn't be remarkable but it is. I'd forgotten how much I enjoyed a dip. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 9hThe hilarity of being chased about a PHP bug that affects our blog platform when we built it to static push content out of an internally hosted WordPress to GH pages when we hit publish and the backend system that actually runs WP has been switched off for over 5 years. Not sure the detection […]infosec.exchangeOriginal post on infosec.exchange 001
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 26/09/2026Anyway, github.com/CiscoCXSecurity/UNIXSock… if you want to have a play...github.comGitHub - CiscoCXSecurity/UNIXSocketScanner: UNIXSocketScanner is a Perl script to scan UNIX domain socketsUNIXSocketScanner is a Perl script to scan UNIX domain sockets - CiscoCXSecurity/UNIXSocketScanner 001
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 25/09/2026Interesting links of the week: Strategy: * www.techpolicy.press/what-policymak… - access to all the world's data encourages toxic behaviour, news at 10 * […]infosec.exchangeOriginal post on infosec.exchange 002
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 27/09/2026If these Citrix bugs are as bad as people say, why in god's name have they not taken out a full page banner ad on Altavista or at least cross-posted a warning to alt.fucked and lewd.shitrix on Usenet? #threatintel, #citrux 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 26/09/2026[meta] That time I got "Go fuck yourself!" into a corporate blog post: labs.portcullis.co.uk/tools/unix-so… (Courtesy of Avahi :))labs.portcullis.co.uk 000
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 25/09/2026Interesting Git repos of the week: Strategy: * github.com/SoShinySoChrome/human-in… - tackling the human side of IR Threats: * github.com/Mickinthemiddle/CLOAK - deception techniques used by operators Detection: * […]infosec.exchangeOriginal post on infosec.exchange 001
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 25/09/2026Giving UNIXSocketScan a well needed update... Stay tuned. 100
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 25/09/2026[todayinai] (email composed by <bot name>, Personal Assistant to <human>) 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 25/09/2026Interesting links of the week: Strategy: * www.techpolicy.press/what-policymak… - access to all the world's data encourages toxic behaviour, news at 10 * […]infosec.exchangeOriginal post on infosec.exchange 002
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 25/09/2026Interesting Git repos of the week: Strategy: * github.com/SoShinySoChrome/human-in… - tackling the human side of IR Threats: * github.com/Mickinthemiddle/CLOAK - deception techniques used by operators Detection: * […]infosec.exchangeOriginal post on infosec.exchange 001
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 25/09/2026Kinda impressed. Our Linux endpoint support team have used the MDM to deploy pre-commit hooks to scan our Git commits client-side for any stray creds. 001
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 24/09/2026RE: infosec.exchange/@timb_machine/1173… Note: This post was about AI, not shitting in a pool and I was being facetious 🤡.infosec.exchange 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 24/09/2026[meta] Always nice when an old friend appears at the "front door" that is work email. 010
Reposted by Tim (Wadhwa-)Brown :donor:MH Thaung @mhthaung.mastodon.scot.ap.brid.gy · 23/09/2026"Atlas is so spoiled," Epimetheus grumbled. "The mortals don't rush to keep *us* happy, do they?" "Jealous, brother?" Prometheus replied. "I don't see you offering to take his place." "I #shudder at the thought." "Exactly!" #MastoPrompt #MicroFiction 011
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 23/09/2026Occasionally you find companies who delete inactive accounts on their platforms. This is always a pleasant surprise. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 22/09/2026Woops: * mobeta.fr/blog/vcenter-cve-2026-593… #threatintel, #vmwaremobeta.frvCenter pre-auth RCE: CVE-2026-59309/59310 | MobetaCVE-2026-59309 & CVE-2026-59310: patch-diffing VMware vCenter reveals two pre-auth 9.8 bugs - an auth bypass and a syslog path traversal to RCE. 001
Reposted by Tim (Wadhwa-)Brown :donor:Kit Bashir @unixbigot.aus.social.ap.brid.gy · 20/09/2026"On your knees; hands behind your head!" "You haven't even bought me dinner" *Thwack* "shut up, convict. Where's the grow room?" "" "Speak!" "You told me to shut up" "Oh a wiseass. We'll find it—our Agents profiled your electricity use and heat emissions. We /know/ you've got a grow lab […]aus.socialOriginal post on aus.social 027
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 20/09/2026[todayinai] The models know nothing about what football team I support, but lots about my research corpus. Silly bots. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 20/09/2026RE: mastodon.social/@simple_sabotage/11… Make mistakes in blog posts and non-release branches so that the models are poisoned and vibe coding will produce shit code.mastodon.social 011
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 20/09/2026[meta] One day I want to go back through my witterings on social media over the last 2 decades and tug at some of the threads. 000
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 19/09/2026Interesting links of the week: Strategy: * www.koreajoongangdaily.com/business… - breaches be expensive * arxiv.org/abs/2609.10350 - how bad would an AI attack on the banks actually be? * […]infosec.exchangeOriginal post on infosec.exchange 111
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 07/08/2025My colleagues in the SOC advisory practice have open sourced our detection engineering framework: github.com/CiscoCXSecurity/Detectio… #detection, #engineeringgithub.comGitHub - CiscoCXSecurity/Detection-Engineering-FrameworkContribute to CiscoCXSecurity/Detection-Engineering-Framework development by creating an account on GitHub. 001
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 19/09/2026Interesting Git repos of the week: Detection: * github.com/CiscoCXSecurity/SOC-Cock… - one of my team's tools for managing the human elements of a SOC 🤖 * github.com/karim852/KUMO-Domain-Rec… - gather DNS based OSINT * […]infosec.exchangeOriginal post on infosec.exchange 012
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 19/09/2026Interesting Git repos of the week: Detection: * github.com/CiscoCXSecurity/SOC-Cock… - one of my team's tools for managing the human elements of a SOC 🤖 * github.com/karim852/KUMO-Domain-Rec… - gather DNS based OSINT * […]infosec.exchangeOriginal post on infosec.exchange 012
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 19/09/2026[meta] Fixing calendar to avoid future Brentford mishaps. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 19/09/2026Easy to say now after *almost* missing last night's game (I was sitting having a pint 30 minutes prior, ignorant (having not paid attention to the fixtures) that we had a Friday night home game). Cue mad dash to ground. I'll be honest, I wouldn't have expected us to win so easily but not going […]infosec.exchangeOriginal post on infosec.exchange 010
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 19/09/2026Interesting links of the week: Strategy: * www.koreajoongangdaily.com/business… - breaches be expensive * arxiv.org/abs/2609.10350 - how bad would an AI attack on the banks actually be? * […]infosec.exchangeOriginal post on infosec.exchange 111
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 18/09/2026I see the shit drivers are back. One tried to start his own lane and another reversed out onto a dual carriage way. Winner though were the two that sped through the red traffic lights at twice the limit almost running down the guy fixing the pothole. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 17/09/2026[todayinai] Watching someone complain that the AI applied the wrong database grants ... 🤡 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 15/09/2026Yikes'd the mainframe today. Remote authenticated access to the job journals as the vendor. #greenscreenblues, #redteam 000
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026Interesting Git repos of the week: Detection: * github.com/daffainfo/vol-rs - @daffainfo has ported Volatility 3 to Rust * github.com/immanuwell/pktz - watching packets with eBPF * github.com/FalconForceTeam/FalconDa… - detection engineering workbook for Azure * […]infosec.exchangeOriginal post on infosec.exchange 001
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 13/09/2026Looking at some vendor PHP from 2024 and fuck me was it a liability. We told them to switch it off and thank fuck they have. 201
Reposted by Tim (Wadhwa-)Brown :donor:Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026Strategy: * tante.cc/2026/09/11/power-grab - thoughts on Omarchy from @blog * ai.rud.is/posts/2026-09-04-cyber100… - @hrbrmstr's survey of llms.txt * 1password.com/files/resources/front… - are LLM derived patches […]infosec.exchangeOriginal post on infosec.exchange 001
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026[todayinai] I for one welcome AI agents getting involved in their community and supporting the local council: www.rubyhack.ai Looking forward to the day when they will walk down the street shooting people they believe have dropped a sweet wrapper.rubyhack.aiOpenAI agents carried out an undisclosed attack on RubyGemsOn May 11th, 2026, hundreds of malicious packages were uploaded to RubyGems by AI agents performing web-lookup tasks with significant overlap with the German Wiki Incident. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026Interesting Git repos of the week: Detection: * github.com/daffainfo/vol-rs - @daffainfo has ported Volatility 3 to Rust * github.com/immanuwell/pktz - watching packets with eBPF * github.com/FalconForceTeam/FalconDa… - detection engineering workbook for Azure * […]infosec.exchangeOriginal post on infosec.exchange 001
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026[meta] This is the second week running I have initially forgotten to type "Interesting links of the week:" into the corresponding toot. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026Strategy: * tante.cc/2026/09/11/power-grab - thoughts on Omarchy from @blog * ai.rud.is/posts/2026-09-04-cyber100… - @hrbrmstr's survey of llms.txt * 1password.com/files/resources/front… - are LLM derived patches […]infosec.exchangeOriginal post on infosec.exchange 001
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026The #BSidesLDN2026 Call for Volunteers opens on Monday! Volunteering is a great way to get involved and helps make BSides London happen. There can be a lot to it, so we want to be very open about what volunteering involves. Still interested? Please read: bsides.london/volunteersbsides.londonvolunteers - BSides London 000
Reposted by Tim (Wadhwa-)Brown :donor:Michel Patrice @michelpatrice.jasette.facil.services.ap.brid.gy · 11/09/2026#Meta #Zuckerberg 018
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 12/09/2026When I see a post where I agree 100% with what they're trying to say but their presentation isn't helping their cause... :sad_panda: 020
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 11/09/2026[todayinai] Jesus wept. Someone has just suggested getting their AI agent to submit their timecard. I'm way too OCD to have the random number generator make that shit up. 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 11/09/2026[meta] This evening I will mostly be working on a paper and presentation on anti-patterns. #architecture, #engineering 020
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 08/09/2026I bet the clowns advocating for AGI won''t be voting for it to "live free"...<snark /> 000
Tim (Wadhwa-)Brown :donor: @timb.me.uk · 08/09/2026[todayinai] It's both hilarious and concerning that someone thought limiting an AI LLM model only to GET requests constituted some kind of security control. 001