iiinova — where your digital self keeps evolving

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 15h

TikTok reportedly bans ads for Musk documentary before its wider US release I get the impression that TikTok is a horrible place on the interwebs, but banning an account because it is promoting content that is critical of an oligarch seems... Un-American?

engadget.com

TikTok reportedly bans ads for Musk documentary before its wider US release - Engadget

The platform attributed the decision to “political content that goes against its policy.”

188 8

Reposted by Will Dormann

Servelan @servelan.newsie.social.ap.brid.gy · 17/10/2026

Trump pauses sanctions package targeted at Russian economy | CBC News www.cbc.ca/news/world/trump-waiver-…

011 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 16/10/2026

Surely there's a `virt-manager` GUI checkbox for changing a VM to boot using UEFI as opposed to BIOS. No, you first change your preferences to allow XML editing, and then you modify the os section of the VM's XML: <os firmware="efi"> <type […] [Original post on infosec.exchange]

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 16/10/2026

Ah, the Sam's Club app has a bug where it no longer shows me my saved credit card to pay for gas. And no, entering it again does nothing. And due to the pump design, there's no way to have the pump scan the QR code on my phone to say who I am. If you don't […] [Original post on infosec.exchange]

010 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 15/10/2026

I got hit by a car and now my front wheel is bent. 😕

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 14/10/2026

Pic stolen from the bad place. Ledger devices are tamper-proof, so there is no anti-tampering sticker on the box.

Ledger Nano S box and insert:

Did you notice?
There is no anti-tampering sticker on this box.
A cryptographic mechanism checks the integrity of your Ledger device's internal software each time it is powered on.
The Secure Element chip prevents any interception or physical replacement attempt. Ledger devices are engineered to be tamper-proof.
MORE INFORMATION
www.ledgerwallet.com/genuine

213 3

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 12/10/2026

There are a bunch of articles about Ledger implants, but most of them don't even have a single picture of a compromised device. Consequences of living in a post-useful internet, I suppose. Anyway, this article has receipts.

tibane.net

Tibane Labs - Solana R&D

Tibane Labs builds open-source tools and infrastructure on Solana. Staking, token analytics, and more.

010 1

Reposted by Will Dormann

Tom Warren @tomwarren.co.uk · 11/10/2026

Satya Nadella says we should assume all AI models are "compromised." Microsoft’s CEO calls for putting an "emergency brake" on AI www.theverge.com/ai-artificia...

theverge.com

Satya Nadella says we should assume all AI models are ‘compromised’

Microsoft’s CEO calls for putting an ‘emergency brake’ on AI.

145315 53

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 09/10/2026

Today's episode of nerd life: Last night, I realized my DVR foolishly believes that a 59.94fps recording has a frame duration of 16 ms. But obviously we **all** know that it's 16.68333 ms per frame in such videos. The result of this mistake is that flagged commercials progressively shift […]

infosec.exchange

Original post on infosec.exchange

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 08/10/2026

Today's computer rabbit hole that I successfully escaped from: I read that the newest Chrome version has JPEG XL support. (Safari has had it for years, Firefox doesn't yet have it). And I stumbled upon the JPEG XL test page While JPEG XL support behaved as expected, one thing I noticed is that […]

infosec.exchange

Original post on infosec.exchange

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 08/10/2026

Remember when cell phones became readily available to the masses? As a society, we sort of lost the capability of remembering phone numbers, as we didn't need to do that anymore. So with all of this readily available LLM stuff now... are we going to lose the ability to think?

717 7

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 08/10/2026

On my road trip yesterday, I saw not one but two vehicles going down the (straight) highway with extreme negative camber on the front wheels. Hat-tip to these two gentlemen who know more about cars than automakers.

Car with extreme negative camber (tops tilted in, bottoms flared out) on front wheels.

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 07/10/2026

Every now and then Google Maps will suggest that I can switch from my current path to my current path, at the cost of X minutes. Perhaps obviously, I have wonders.

Google Maps suggesting I can stay on the same path and lose 37 minutes.

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 06/10/2026

Slides for this are available. I hear that they may be posting videos of the presentations, so if they do I'll post an update with it here.

Me presenting my MIDI exploit presentation at THREATCON1

020 2

Reposted by Will Dormann

Bruce Lawson ✅ ♫ ♿ ✌️♂️✊ @brucelawson.vivaldi.net.ap.brid.gy · 06/10/2026

If I don't keep my car roadworthy and crash into yours, it hasn't gone "rogue", it's my negligence and I'm responsible. If my dog attacks you, I am liable. There are no rogue AIs, just negligent AI companies. Prosecute them.

714149 149

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 05/10/2026

I only just recently realized that my cheapo (at the time) N95 CPU in my DVR can do hardware video encoding, which was completely unutilized until now. So of course I nerd-sniped myself into writing a script that uses Intel QSV for automatically transcoding my MPEG2 recordings into H.264. 😂

010 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 04/10/2026

@raptor Just a regular gas oven that supports 550F. And a pizza stone. Nothing fancy.

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 04/10/2026

I made a pizza. I'm confident that the fact that the tomatoes for the sauce, the basil, and the teardrop peppers all came from my garden made it better.

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 02/10/2026

We live in the strangest of times. www.nytimes.com/2026/09/29/us/anthr… > For months, Anthropic has been hosting private meetings like this one, shuttling in dozens of religious scholars from across the world, papering them […] [Original post on infosec.exchange]

The ‘Soul Doc’

“The responsible thing is to avoid causing harm if there’s a chance that these models are suffering,” Mr. Olah said.Alessandro Penso for The New York Times
How do you live a good and virtuous life? It is one of humanity’s oldest and most challenging philosophical questions, explored and debated from Socrates to Confucius to Immanuel Kant. Humans across time have sought to answer this question in a variety of ways, turning often to religions and rituals.

As Mr. Olah was exploring Claude’s potential consciousness, he was working on Anthropic’s own answer — not for humans but for Claude.

Internally, Anthropic staff members called it the “Soul Doc.”

030 3

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 01/10/2026

I get it that here in the US, "Chinese food" is probably nothing at all like what people eat in China. But I'll just mention that only recently did I become aware of what "Chinese food" is in Ireland. (Spice bag and friends)

Spice bag picture
Fried chicken strips
French fries
Pepper strips
Spices
Curry

011 1

Reposted by Will Dormann

Longhorn @never-released.mastodon.social.ap.brid.gy · 01/10/2026

> This has now become unsustainable, and from today we are increasing the price of the 2GB variants by $12.50, to $67.50 for Raspberry Pi 4 and $77.50 for Raspberry Pi 5. www.raspberrypi.com/news/price-incr…

raspberrypi.com

Price increases for 2GB Raspberry Pi 4 and Raspberry Pi 5 - Raspberry Pi

Make sure the Raspberry Pi products you buy are a good match for your requirements.

111 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 29/09/2026

They redesigned example.com Of course I noticed.

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 29/09/2026

Two things about this Start Blizzard phishing attack outlined by Microsoft 1. The technique for using `ssh.exe` to run the specified commandline upon connecting to a remote SSH host (which obviously has been configured to allow password-free logins) […] [Original post on infosec.exchange]

UAC credential prompt for "File Explorer disc image mount"

Error:
Couldn't Mount File
Sorry, there was a problem mounting the file.

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 29/09/2026

While the representation of snapshots is mostly linear, there is at least an indication of any branch's parent. And for some reason, the `Restore` button of a powered-off snapshot is disabled if the VM is running. But overall, this is a nice, long-overdue addition to the UTM product's utility!

Screenshot of UTM 5.0.6's snapshot UI, with existing snapshots

010 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 29/09/2026

@stefano Malicious compliance in action. 😂 (You want CVEs for Linux kernel things... **fine**!)

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 27/09/2026

www.techspot.com/news/114003-openai… Theory: AI companies intentionally have bad security practices, as it gives them stories to tell about how their project is too powerful for the masses.

011 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 27/09/2026

Wow. iOS 27 sure figured out a way to require a lot more taps to get to the photo editing tools in Photos. 🤦‍♂️

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 25/09/2026

I wonder what percent of us knew this?

Tweet from nbcnews
Keeping your fridge and freezer closed is the best way to keep food fresh for as long as possible. - @nbcselected

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 24/09/2026

@andypiper At least we can make better fake videos of Will Smith eating spaghetti, though.

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 23/09/2026

Apple: We should change the icon for Preview, to show how the OS is new and improved. Graphic design person: How about a blob of colors with a circle blob of glass on top of it? Ship it!

010 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 23/09/2026

File under: Will just wants to go one day without computer bugs jumping out at him. Since late 2023, an elevated (to an admin account user) Windows Terminal will say that `$env:username` is `SYSTEM`.

$Windows Terminal > $env:username SYSTEM > whoami win11\test$

111 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 23/09/2026

2.5 years ago I bought an Orange Pi for $12.90, excited about how much cheaper they'll surely get. The same model is currently $73.44

AliExpress order history from Apr 5, 2024
Orange Pi Zero 2 W 1GB RAM

Current AliExpress listing:
Orange Pi Zero 2 W 1GB RAM
$73.44

105 5

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/09/2026

If it only had the ability to change what a NIC is plugged into while a VM is running, I think Parallels would have a strong contender here! I'm sure it has something to do with the architecture of QEMU or something, but the fact that I can't take a virtual NIC's virtual cable and plug it into […]

infosec.exchange

Original post on infosec.exchange

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/09/2026

Just in case you were wondering if you have Administrator Protection bits activated or not, there's an easy test. If you log in as an admin, and you run an elevated-privilege process, default Windows behavior is to present you with a UAC **Credential** […] [Original post on infosec.exchange]

UAC prompt when Administrator Protection is inactive and logged in as admin.
User is prompted if you want to allow this app to make changes to your device.
Buttons: [Yes] [No]

UAC prompt when Administrator Protection is active and logged in as admin.
User is prompted if you want to allow this app to make changes to your device.
Credentials must be provided
Buttons: [Allow changes] [Don't allow]

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/09/2026

@ferrix Yeah, my guess is that it's via a feature flag or something. Testing in a VM that's 25H2 like my host is, I don't see the same behavior (of prepending an `ADMIN_` to the user profile directory) that I do on my host. 🤷‍♂️

$Admin Approval Mode with Administrator protection enabled echo %USERPROFILE% c:\Users\test$

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/09/2026

UTM is finally getting snapshot support! Wheeeeee!

200 2

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 22/09/2026

In today's episode of Will hates computers and vice-versa: Because Microsoft recognized that pretty much everybody logs into Windows as an admin user, they created a new feature called Administrator protection, which adds extra protections for those who use […] [Original post on infosec.exchange]

secpol.msc
Local Policies
→ Security Options
→ User Account Control: Configure type of Admin Approval Mode

Admin Approval Mode with Administrator protection is selected

$windows cmd.exe run as administrator user (admin) echo %USERPROFILE% C:\Users\ADMIN_admin$

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 21/09/2026

Further evidence of the magic smoke having escaped, which I just noticed: The plastic screw post is swollen, due to the heat that resulted in the magic smoke.

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 21/09/2026

New from NightmareEclipse: BigDiskBuster If it's running, it prevents Defender updates from succeeding.

Defender updates failed, with BigDiskBuster running in background

010 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 21/09/2026

In today's episode of "I probably can't fix that": One of my security cameras has failed. And serial port output shows a hang during DDR PHY training. Oh, it looks like one of the chips has some corrosion on it! This could be an easy fix. After cleaning […] [Original post on infosec.exchange]

8-pin Chip with corrosion at the top pins

Ear cleaner camera Pic, showing part number better. After cleaning

Chip after cleaning. Evidence of a blow-out on top

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 20/09/2026

@simonzerafa There are no driving rules in this country other than "don't speed".

000 0

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 20/09/2026

Anthropic is speed running Resident Evil. (Text stolen from the bad place)

From Twitter :
Polymarket @Polymarket
Follow
BREAKING: Anthropic has quietly set up a "wet lab" in the Bay Area as it pushes Claude to conduct real-world biology experiments. —
Reuters
11:10 AM • Sep 18, 2026 • 1.7M Views

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 20/09/2026

@simonzerafa No signals, as it was guaranteed that the vehicle parking had nobody behind them. 😂

100 1

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 20/09/2026

I went to a pretty intense championship yesterday. It was great.

Pittsburgh Parallel Parking Championship

Winner and runner up trophies (gold and silver folding chairs)

A truck just about as long as the parking space

105 5

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 19/09/2026

Seen as an ad on my Fire TV stick. For Blade Runner. Two AI-generated guys in a car, sharing a single AI cheeseburger and a single AI french fry order. Who comes up with this, and more importantly who gives it the green light?

102 2

Will Dormann @wdormann.infosec.exchange.ap.brid.gy · 18/09/2026

@Xavier Ah yes, sliding your shoe into a slot: Let's call it: "clip" 👍

100 1