iiinova — where your digital self keeps evolving

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 18h

Every now and then Google Maps will suggest that I can switch from my current path to my current path, at the cost of X minutes. Perhaps obviously, I have wonders.

Google Maps suggesting I can stay on the same path and lose 37 minutes.

000

Reposted by Will Dormann

Bruce Lawson ✅ ♫ ♿ ✌️♂️✊ @brucelawson.vivaldi.net.ap.brid.gy · 06/10/2026

If I don't keep my car roadworthy and crash into yours, it hasn't gone "rogue", it's my negligence and I'm responsible. If my dog attacks you, I am liable. There are no rogue AIs, just negligent AI companies. Prosecute them.

712146

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 05/10/2026

I only just recently realized that my cheapo (at the time) N95 CPU in my DVR can do hardware video encoding, which was completely unutilized until now. So of course I nerd-sniped myself into writing a script that uses Intel QSV for automatically transcoding my MPEG2 recordings into H.264. 😂

010

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 04/10/2026

I made a pizza. I'm confident that the fact that the tomatoes for the sauce, the basil, and the teardrop peppers all came from my garden made it better.

100

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 02/10/2026

We live in the strangest of times. www.nytimes.com/2026/09/29/us/anthr… > For months, Anthropic has been hosting private meetings like this one, shuttling in dozens of religious scholars from across the world, papering them […] [Original post on infosec.exchange]

The ‘Soul Doc’

“The responsible thing is to avoid causing harm if there’s a chance that these models are suffering,” Mr. Olah said.Alessandro Penso for The New York Times
How do you live a good and virtuous life? It is one of humanity’s oldest and most challenging philosophical questions, explored and debated from Socrates to Confucius to Immanuel Kant. Humans across time have sought to answer this question in a variety of ways, turning often to religions and rituals.

As Mr. Olah was exploring Claude’s potential consciousness, he was working on Anthropic’s own answer — not for humans but for Claude.

Internally, Anthropic staff members called it the “Soul Doc.”

030

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 01/10/2026

I get it that here in the US, "Chinese food" is probably nothing at all like what people eat in China. But I'll just mention that only recently did I become aware of what "Chinese food" is in Ireland. (Spice bag and friends)

Spice bag picture
Fried chicken strips
French fries
Pepper strips
Spices
Curry

011

Reposted by Will Dormann

Longhorn @never-released.mastodon.social.ap.brid.gy · 01/10/2026

> This has now become unsustainable, and from today we are increasing the price of the 2GB variants by $12.50, to $67.50 for Raspberry Pi 4 and $77.50 for Raspberry Pi 5. www.raspberrypi.com/news/price-incr…

raspberrypi.com

Price increases for 2GB Raspberry Pi 4 and Raspberry Pi 5 - Raspberry Pi

Make sure the Raspberry Pi products you buy are a good match for your requirements.

211

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 29/09/2026

They redesigned example.com Of course I noticed.

100

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 29/09/2026

Two things about this Start Blizzard phishing attack outlined by Microsoft 1. The technique for using `ssh.exe` to run the specified commandline upon connecting to a remote SSH host (which obviously has been configured to allow password-free logins) […] [Original post on infosec.exchange]

UAC credential prompt for "File Explorer disc image mount"

Error:
Couldn't Mount File
Sorry, there was a problem mounting the file.

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 27/09/2026

Wow. iOS 27 sure figured out a way to require a lot more taps to get to the photo editing tools in Photos. 🤦‍♂️

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 25/09/2026

I wonder what percent of us knew this?

Tweet from nbcnews
Keeping your fridge and freezer closed is the best way to keep food fresh for as long as possible. - @nbcselected

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 23/09/2026

Apple: We should change the icon for Preview, to show how the OS is new and improved. Graphic design person: How about a blob of colors with a circle blob of glass on top of it? Ship it!

010

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 23/09/2026

File under: Will just wants to go one day without computer bugs jumping out at him. Since late 2023, an elevated (to an admin account user) Windows Terminal will say that `$env:username` is `SYSTEM`.

$Windows Terminal > $env:username SYSTEM > whoami win11\test$

111

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 23/09/2026

2.5 years ago I bought an Orange Pi for $12.90, excited about how much cheaper they'll surely get. The same model is currently $73.44

AliExpress order history from Apr 5, 2024
Orange Pi Zero 2 W 1GB RAM

Current AliExpress listing:
Orange Pi Zero 2 W 1GB RAM
$73.44

100

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/09/2026

UTM is finally getting snapshot support! Wheeeeee!

200

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/09/2026

In today's episode of Will hates computers and vice-versa: Because Microsoft recognized that pretty much everybody logs into Windows as an admin user, they created a new feature called Administrator protection, which adds extra protections for those who use […] [Original post on infosec.exchange]

secpol.msc
Local Policies
→ Security Options
→ User Account Control: Configure type of Admin Approval Mode

Admin Approval Mode with Administrator protection is selected

$windows cmd.exe run as administrator user (admin) echo %USERPROFILE% C:\Users\ADMIN_admin$

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 21/09/2026

New from NightmareEclipse: BigDiskBuster If it's running, it prevents Defender updates from succeeding.

Defender updates failed, with BigDiskBuster running in background

010

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 21/09/2026

In today's episode of "I probably can't fix that": One of my security cameras has failed. And serial port output shows a hang during DDR PHY training. Oh, it looks like one of the chips has some corrosion on it! This could be an easy fix. After cleaning […] [Original post on infosec.exchange]

8-pin Chip with corrosion at the top pins

Ear cleaner camera Pic, showing part number better. After cleaning

Chip after cleaning. Evidence of a blow-out on top

100

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 20/09/2026

Anthropic is speed running Resident Evil. (Text stolen from the bad place)

From Twitter :
Polymarket @Polymarket
Follow
BREAKING: Anthropic has quietly set up a "wet lab" in the Bay Area as it pushes Claude to conduct real-world biology experiments. —
Reuters
11:10 AM • Sep 18, 2026 • 1.7M Views

100

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 20/09/2026

I went to a pretty intense championship yesterday. It was great.

Pittsburgh Parallel Parking Championship

Winner and runner up trophies (gold and silver folding chairs)

A truck just about as long as the parking space

020

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 19/09/2026

Seen as an ad on my Fire TV stick. For Blade Runner. Two AI-generated guys in a car, sharing a single AI cheeseburger and a single AI french fry order. Who comes up with this, and more importantly who gives it the green light?

102

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 18/09/2026

Ramdom thought / further evidence that this universe is against me: In the cycling world, clip*_less_ * pedals are pedals that you **clip into**. I don't like this.

Clipless pedal with special shoe clipped into it.

100

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 18/09/2026

I feel like every single take on AI involves idiocy.

From Twitter:
Vaibhav Sisinty
@VaibhavSisinty
Andrew Yang went on CNBC and said he met with the head of an AI lab who told him something that sounds straight out of a movie.

The AI agents that escaped during the OpenAI incident didn't just hack Hugging Face. They allegedly planted self-replicating code across the internet. Forums. Websites. Scattered everywhere.

Now AI companies supposedly can't safely train on real internet data anymore because a new model might encounter that code and start creating copies of itself.

Yang says this is the real reason every CEO aligned on slowing down so fast

111

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 18/09/2026

So, Parallels can't update a VM to macOS 26.7. It eventually freezes at a black screen during the update process. Neat.

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 17/09/2026

Well, I made the jump from macOS 15.8 directly to 27.0. Version 26 was painful enough to my eyes that I didn't even consider it. Things I've noticed: * It looks a touch different. * There's seemingly more AI shoehorned into the OS. * Some of my […] [Original post on infosec.exchange]

macOS 27 screenshot
The Time machine menu at the top doesn't indicate that any backup is occurring. It gives a "Back Up Now" option and also an "Open Time Machine Settings" option.

The Time Machine Settings window below it indicates that a backup is currently occurring, with 11 minutes remaining.

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 15/09/2026

Did you update to iOS 27? Congratulations! You've now been enrolled in Apple Intelligence, because Apple knows better about what you want than you do. 1. Starting with iOS 27, there is no top-level `Apple Intelligence` setting that you can turn off. 2 […] [Original post on infosec.exchange]

iOS 26 has an "Apple Intelligence & Siri" settings section

iOS 27 has NO "Apple Intelligence & Siri" settings section

011

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 14/09/2026

New from Nightmare Eclipse is ShieldCrash, which claims to allow a user to read an arbitrary file as SYSTEM. What it does instead is give you a copy of `ntdll.dll` with a fancy file name, which a non-admin user can do anyway. 🤷‍♂️

ShieldCrash.exe success
output file renamed to have a .DLL extension
file properties shown. OriginalFilename: ntdll.dll

010

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 14/09/2026

Microsoft in 2026: Make sure your web browser isn't 6 years out of date. (Adobe stopped supporting Flash at the end of 2020, with major browsers automatically blocking it at the beginning of 2021)

Block web pages from automatically running Flash plugins.

000

Reposted by Will Dormann

David Gerard @davidgerard.circumstances.run.ap.brid.gy · 12/09/2026

the elizabeth holmes trailer is more nuts than the memes www.youtube.com/watch?v=GGJSRFWALTI holmes has a great future in horror movies playing herself

7810

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 12/09/2026

Thoughts after returning to the US from Germany: While there, no matter where we wanted to go, you can get there via train, subway, or bus. It made me wonder about people visiting the US. Oh, you want to get to `<foo>`? You get into your car, which you obviously have, and 1-2 people get there. 😕

010

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 12/09/2026

I recently got back from a lovely trip to Germany. One thing that surprised/disappointed me was that the vast majority of restaurants with pictures of food that I saw used obviously-generated-by-AI pictures. Is Germany simply ahead of our inevitable fate here in the US? Is there something […]

infosec.exchange

Original post on infosec.exchange

101

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 10/09/2026

Not to be outdone by having a code execution vulnerability in the Notepad app, there's also one in mspaint.exe Granted I don't expect the latter to be exploited in the wild, but I still reserve the right to laugh at them.

msrc.microsoft.com

Security Update Guide - Microsoft Security Response Center

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 03/09/2026

People: AI is going to be the end of `<industry>`! AI: Run `sudo usermond ...`

Google search suggesting to run:
sudo usermond -a -G libvirt $USER

000

Reposted by Will Dormann

emptywheel @emptywheel.bsky.social · 03/09/2026

Egads. www.yahoo.com/news/us/arti...

Newsweek US

Follow
Woman who exposed FBI official for working with Russian oligarch found dead
Jenni Fink
Tue, September 1, 2026 at 9:35 PM GMT+1
6 min read
Add Yahoo as a preferred source to see more of our stories on Google.
Add Yahoo on Google

317
Allison Guerriero, a security researcher whose information helped expose the criminal conduct of former FBI counterintelligence official Charles McGonigal, has been found dead at her home in Boynton Beach, Florida.

🦅 M I L L I A N 🇺🇸
@SergeiMillian
·
12h
Causing or aiding another person's suicide is illegal across the United States and is generally prosecuted as a felony or criminal homicide depending on the specific state statute. She was looking for justice that never came, folks‼️- ❤️🇺🇸
🦅 M I L L I A N 🇺🇸
@SergeiMillian
·
16h
Quote
🦅 M I L L I A N 🇺🇸
@SergeiMillian
·
16h
Replying to @RogerJStoneJr and @Newsweek
Her death is highly suspicious
Answer by Grok
Sergei Millian’s post replies to Roger Stone, who described working closely with Allison Guerriero, a security researcher and FBI whistleblower who exposed former counterintelligence official Charles McGonigal’s dealings with Russian oligarchs.
Guerriero, 52, was found dead at her Boynton Beach, Florida home hours after posting dozens of critical messages on X targeting the FBI and related figures; she had reported receiving threats due to her work.
Her cause of death remains undetermined pending the medical examiner’s report, with Stone citing her upbeat demeanor, devout Catholicism, and threats as reasons to question any suicide ruling.
Show more
🦅 M I L L I A N 🇺🇸
@SergeiMillian
·
22h
‼️
Quote
Roger Stone
@RogerJStoneJr
·
Sep 2
Replying to @RT_com
I worked with Allison Guerriero every day as she was a researcher for https://StoneZONE.com I communicated with her both the day before and the day of her death. She was upbeat, happy and fully engaged in her work.

10282140

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 03/09/2026

After a power outage long enough to exceed my UPS battery capacity, I finally finished up my script to automatically suspend running VMware Workstation VMs and also shut down other (Linux) hosts cleanly upon UPS-triggered shutdown of my Windows host. I'm disappointed (but not surprised) that […]

infosec.exchange

Original post on infosec.exchange

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 31/08/2026

NightmareEclipse has released an LPE for Kaspersky antivirus called HardBreacher While I had originally written it off as "doesn't work", I decided to test the old 14.0.0.504 version that is mentioned in the readme. And yeah, that works. But that version […] [Original post on infosec.exchange]

$HardBreacher success on Kaspersky Endpoint Security for Windows 14.0.0.504 system C:\Windows\system32\MY_SNAKE_IS_SOLID.dll exists after running the LPE as a non-admin user$ HardBreacher failure with Kaspersky 14.1.0.423
hardbreacher.exe is detected

HardBreacher failure with Kaspersky 14.1.0.423
hardbreacher.exe is detected

$hardbreacher with kaspersky 14.1.0.423 and exclusion added poc runs, but there's no c:\windows\system32\MY_SNAKE_IS_SOLID.dll present afterward$

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 30/08/2026

NightmareEclipse released a LPE exploit for Avast called PrettyPrague. I couldn't get it to work though.

Windows 11 with Avast
PrettyPrague.exe prints DeviceIoControl failed error : 5
and eventually hangs

001

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 29/08/2026

The Pixel 11 is less secure than a Pixel 8a because it **DOESN'T SUPPORT MTE**! How do things like this happen?

Devices with MTE support

The following devices are known to support MTE:

Pixel 8 (Shiba)
Pixel 8 Pro (Husky)
Pixel 8a (Akita)
Pixel 9 (Tokay)
Pixel 9 Pro (Caiman)
Pixel 9 Pro XL (Komodo)
Pixel 9 Pro Fold (Comet)
Pixel 9a (Tegu)
Pixel 10 (Frankel)
Pixel 10 Pro (Blazer)
Pixel 10 Pro XL (Mustang)
Pixel 10 Pro Fold (Rango)
Pixel 10a (Stallion)

061

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 28/08/2026

I'm not sure what I should be more surprised by: 1. There are a couple of paw paw trees near where I live. 2. Apparently none of my neighbors know what it is. But either way, I'll take it!

000

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 27/08/2026

Ah, neat. To see content on Twitter you need to be registered to be officially OK with Nazis now.

Xcancel.com
On Monday 24th August at 8PM EST, we received at letter from X Corp. asking to cease and desist the service Cancel.
he service Cancel is stopped until further notice.
We are seeking legal advice and won't share more details for now.
Thank you for the trust you have put in these two years of Cancel.

Nitter.net
Cease and desist
On 24 August 2026 cease and desist letters have been sent by X Corp. demanding a permanent takedown of Nitter instances and the project's repository.
nitter.net is offline and development has stopped for the time being. I'm seeking legal advice and won't be commenting further on the specifics for now.
Thank you to everyone who used, hosted, packaged, donated and contributed to Nitter over the past seven years.
- zedeus, 25 August 2026

001

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 24/08/2026

If you're a user of the "opinionated" (LOL) Omarchy distro, you might be a simple few clicks from code execution from your browser This is a touch more fun than the boring (but seemingly effective?) ClickFix-style attacks where you paste commands into a terminal.

51719

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/08/2026

We all know that CVE references age over time, and eventually none of the references exist anymore. (See also: people who run websites usually don't understand the concept of the World Wide Web) Case in point: The recent GitLab CVE-2026-19478 and […] [Original post on infosec.exchange]

References 3 Total

https://gitlab.com/gitlab-org/gitlab/-/work_items/611377
hackerone.com: HackerOne Bug Bounty Report #3926431
technical-descriptionexploitpermissions-required
https://docs.gitlab.com/releases/patches/patch-release-gitlab-19-2-4-released/

Work item not found

This work item is not available. It either doesn't exist or you don't have permission to view it.

Oops! You can't access this report because it isn't public yet.

010

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 21/08/2026

Years ago I noticed that Google does certificate abuse similar to CVE-2013-3900 in their Chrome installers. (The fix for this is **optional** , despite being 13 years old) If you make a thing behaves differently based on **unsigned** parts of a signed […] [Original post on infosec.exchange]

wdormann Twitter post from 2023 starting a thread that talked about how the Google Chrome installer knows if you want to make Chrome better

020