Jernej Simončič �

…

Public Key

npub1vwkz4djct3wewwg2stl7mklj5rknzmm5te43ajmerfnxhxgz7yesdg8ejl

NIP-05 Address

jernej__s@infosec-exchange.mostr.pub

Profile Code

nprofile1qqsx8tp2kev9chvh8y9g9lldm0e2pmf3da69u6c7edu35entnyp0zvcpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0ds7vmxh4

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1vwkz4djct3wewwg2stl7mklj5rknzmm5te43ajmerfnxhxgz7yesdg8ejl

Show more details

Last Notes

2026-08-20 11:54:56 UTC

- reply

@nprofile…ds0l If you hadn't yet:
Windows Settings → System → Notifications → wait for the program list to load → scroll all the way down → Additional settings → uncheck everything in there
still in Settings, go to Privacy and Security → Location → disable Location services if you don't need them, and also disable "Notify when apps request location"
open Windows Security (either through Settings → Privacy and Security, or by double-clicking the icon in notification area) and click Dismiss on all the warnings on the dashboard
That should make Windows 11 less whiny.

2026-08-18 12:51:44 UTC

- reply

@nprofile…ds0l If the medication comes in blister packs, write letters corresponding to day names on the blisters – this is the only way I could be sure to neither forget, nor take too many of my medication.

2026-08-17 11:05:13 UTC

- reply

@nprofile…ds0l Fell in a dark corner, and it took them a few days to notice.

2026-08-14 10:37:01 UTC

- reply

@nprofile…ds0l Weird, because it looks like most (EU) countries don't have the line through: https://commons.wikimedia.org/wiki/Comparison_of_European_road_signs:_Prohibitory

2026-08-14 10:23:39 UTC

- reply

@nprofile…ds0l That sign is pretty clear to anybody who isn't from the US or Ireland…

2026-08-13 10:38:11 UTC

- reply

@nprofile…ds0l Designed solely for people with high-DPI displays? Because I can't imagine that being readable on a regular monitor.

2026-08-10 20:05:26 UTC

- reply

@nprofile…ds0l Have you neglected the Hugs Monster too much today‽

2026-08-09 16:25:37 UTC

- reply

@nprofile…524c @nprofile…3jd4 Gah, kill that regex with fire, it's wrong!

2026-08-05 13:30:57 UTC

- reply

@nprofile…ds0l Ouch.

2026-08-03 10:57:59 UTC

- reply

@nprofile…m7ah This is probably the oldest picture of my computer, from January 2004 (I never cared enough to take pictures of my desktop before that).
I think this is an Athlon XP 2500+, with either 1 or 2 GB RAM, no idea which graphic card (probably GeForce 2MX), Pioneer DVD-ROM, Teac CD-RW, Teac DVD-RW optical drives, 8+40+40GB hard drives (Quantum, IBM, Maxtor), Hansol H530 15″ 1024x768 LCD monitor, Umax Astra 2100 USB scanner (with Via Eden 5000 mini-ITX board resting on it), and yes, the whole computer was built-into the drawers of my desk.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/031/149/929/959/886/original/e57a4bc395214fa3.jpeg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/031/160/614/657/353/original/9ace9c01724b5a61.jpeg
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/031/161/099/612/861/original/ffd96a1840b3f238.jpeg

2026-07-30 19:01:51 UTC

- reply

@nprofile…pcph Hey, @nprofile…yzy8, look at that keyboard!

2026-07-21 17:58:56 UTC

- reply

@nprofile…gu7x Mastodon's UI is a bit annoying – if you have some text already written in the post box, and click Reply on another post, it'll delete the text.

2026-07-10 22:18:10 UTC

- reply

@nprofile…ds0l "Nobody" doesn't include Microsoft – if you install Windows 11 with a local account, and create the password during OOBE, it'll force you to set up security questions (you can avoid them by using a blank password, then changing it once it logs you in).

2026-07-03 13:32:14 UTC

- reply

@nprofile…ds0l
But the customer has found a new way to be even more annoying, to obstruct me doing my job for them even more: putting a limit of two simultaneous RDP logins on a machine allocated to a team of three reviewers.
Sounds like somebody's doesn't have RDS CALs, so they're abusing admin RDP access to a server, which is not licensed for anything else than administering the server (reviewing code definitely doesn't fall in the exceptions for which admin access can be used).

2026-07-02 15:28:50 UTC

- reply

@nprofile…vuvh This is great advice; I'll be sure to let everybody know about it on the next security training!

2026-06-27 18:21:16 UTC

- reply

@nprofile…ds0l If this is a common problem, get an electric trimmer – so much easier to use than scissors, and nearly impossible to cause damage with it.

2026-06-15 13:46:17 UTC

- reply

@nprofile…gu7x @nprofile…c808 It seems that updating the certificates invalidates the PCR measurements, which are used to automatically unlock BitLocker.
Anyway, since this is a virtual machine, BitLocker probably doesn't make any sense, so I suggest you to disable it (easiest by running manage-bde -off c: from an elevated command prompt).

2026-06-11 15:15:49 UTC

- reply

@nprofile…x8t7
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/732/125/454/932/549/original/edcf2b90b55910c3.png

2026-06-10 12:47:07 UTC

- reply

@nprofile…v2v2
It's debatable whether everyone knows that
From yesterday's article on 404 media:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/725/880/609/800/829/original/a535dddce4ad2e3e.png

2026-06-10 10:43:58 UTC

- reply

@nprofile…v2v2 @nprofile…u7p7 Don't forget that Copilot is for entertainment purposes only, too.

2026-06-08 21:17:59 UTC

- reply

@nprofile…0hde Nope, it's quantum time next!

2026-06-03 19:33:20 UTC

- reply

@nprofile…rtl5 I still remember the noises the first computer we had at home made when booting up.
Click … vrrrrrRRR … tick … tick … tick … tick … tick … tick … tick … tick … bzzzt … dr-r-r-r … beep …and finally DOS started booting.

2026-06-02 18:04:57 UTC

- reply

@nprofile…44dh I've been using busybox on Windows since I found it exists.

2026-06-01 14:03:00 UTC

- reply

@nprofile…m7ah @nprofile…vnlz @nprofile…mv7s @nprofile…ec5a Ironically, I can't get more than 1 Gbps at home because I have old active fiber; with GPON I'd be able to get 2.5 Gbps…

2026-05-14 14:00:53 UTC

- reply

@nprofile…ds0l Right Alt on European keyboards usually acts as Ctrl+Alt (eg \ on Slovenian keyboard is AltGr+Q or Ctrl+Alt+Q).

2026-05-14 13:59:28 UTC

- reply

@nprofile…ds0l Right Alt (AltGr) doesn't work?

2026-05-13 19:01:57 UTC

- reply

@nprofile…ds0l Looks like one of the files causes winpeshl.ini on the ramdrive to be deleted, which eventually results in command prompt to be spawned instead of the usual UI.

2026-05-13 15:27:08 UTC

- reply

@nprofile…ds0l There's also about 20 MB of other files.

2026-05-11 15:02:34 UTC

- reply

@nprofile…ds0l My mother's dog goes crazy for cabbage and turnips. She'll often eat the cabbage and leave the meat.
She's also crazy about anything sweet – other dogs will whine near the meats, hers will look at the cakes.

2026-05-02 07:55:46 UTC

- reply

@nprofile…3tsk Hasn't @nprofile…yzy8 done something like this?

2026-04-26 10:25:14 UTC

- reply

@nprofile…3qha

2026-04-04 19:38:28 UTC

- reply

@nprofile…0rz0
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/348/122/488/747/869/original/5dc38989c09fe6a3.png

2026-04-04 13:53:12 UTC

- reply

@nprofile…yzy8 Might be a buggy DP-HDMI adapter, or a problem with the dock (or a combination). If there's a firmware upgrade for the dock, try that first.
I did have a case where TB4 dock with a DP-HDMI cable would take 45 seconds for the monitor to display anything after waking up from sleep. Replacing the cable with HDMI-HDMI fixed that problem.

2026-03-30 15:54:48 UTC

- reply

@nprofile…ds0l @nprofile…z6ge I know Aldi had those here, though I'm not sure if they still do – Lidl's are so much better.
What I really miss from Aldi are the chocolate brownie ice cream popsicles they had years ago…

2026-03-26 16:34:10 UTC

- reply

@nprofile…ds0l Hint: turn on flash when photographing hail, it makes it stand out really well.

2026-03-26 10:35:08 UTC

- reply

@nprofile…ds0l DoorWindow into summer?

2026-03-22 09:28:28 UTC

- reply

@nprofile…aw2f Unfortunately:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/272/114/967/655/320/original/c8084748d0168813.png

2026-03-06 18:37:09 UTC

- reply

@nprofile…ds0l I remember 20 years ago when they were pulling fiber in our street, on house had an A4 piece of paper taped on the street next to the trench with "I hadn't ordered this!!!" written on it.

2026-03-02 11:11:54 UTC

- reply

@nprofile…ds0l @nprofile…73ru Here it's first Saturday of the month. Still better than when it was every Saturday.

2026-03-02 10:01:53 UTC

- reply

@nprofile…ds0l "… creating sparks and fire."

2026-03-01 23:15:49 UTC

- reply

@nprofile…awd8 @nprofile…4zr8 No, it means it's vibecoded, so the quality will likely suffer.

2026-03-01 22:22:39 UTC

- reply

@nprofile…4zr8 @nprofile…awd8 Ouch:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/156/249/926/089/811/original/8f70aaaf852b3549.png

2026-02-28 21:27:30 UTC

- reply

@nprofile…ds0l Wow, any idea what caused the outage?

2026-02-25 22:32:51 UTC

- reply

@nprofile…yzy8 UTF-1 is an actual thing.

2026-02-11 17:04:35 UTC

- reply

@nprofile…v2v2 I don't even care about Cloudflare (and Anubis) checks – those at least rarely last more than a few seconds. What I loathe are the throbbing placeholders that seem to be everywhere now, causing simple text pages to load slower than similarly-looking pages (once the content renders) loaded on dial-up.

2026-02-03 11:33:33 UTC

- reply

@nprofile…p9u9 Don't worry, nobody is stupid enough to put LLM in charge of critical decisions, right?

2026-01-29 12:59:59 UTC

- reply

@nprofile…yzy8 Just use a shader that emulates a CRT, that'll need the extra resolution.

2026-01-25 16:21:07 UTC

- reply

@nprofile…2v4z 30% of slopcode is showing its worth!

2026-01-23 18:49:03 UTC

- reply

@nprofile…ds0l Yeah, the new troubleshooting app is worse than useless. The old troubleshooters at least sometimes worked, this one just insults your intelligence.

2026-01-14 16:37:53 UTC

- reply

@nprofile…ds0l At least in Ljubljana those seem to have photocells at the top, so they presumably aren't dependent on city power at all.

2026-01-10 10:50:04 UTC

- reply

@nprofile…am9t Don't forget that they have to dub red-tailed hawk's calls over bald eagle's, because it sounds like a chicken.

2026-01-06 17:10:21 UTC

- reply

@nprofile…s8xx Doesn't Signal being centralised actually help here – the more people use it, the easier it's to get lost in the crowd?

2026-01-04 14:50:21 UTC

- reply

@nprofile…cen2 @nprofile…gent They also disrupted the concept of sound insulation – having been driven in a Tesla, it was louder on the motorway than my aunt's old Clio.

2026-01-03 13:34:52 UTC

- reply

@nprofile…dey5 @nprofile…wn6p Only uBlock Origin (but I have the same in Vivaldi, and disabling it in Firefox doesn't bring the button back).

2026-01-03 13:15:11 UTC

- reply

@nprofile…dey5 That's interesting, I just tested with Firefox and the button is missing there for me, too (I normally use Vivaldi).

2026-01-03 07:56:03 UTC

- reply

@nprofile…dey5 Sure you can, there's a button in the toolbar:

2025-12-23 16:09:57 UTC

- reply

@nprofile…pkdd @nprofile…scce I replaced a client's Asa with pfSense on Monday. About 3 minutes of downtime, that's how long I needed to ssh in and run arping to announce the new MAC to their upstream.

2025-12-19 20:27:26 UTC

- reply

@nprofile…mrzh Sadly, this also results in devices shipping with a compliant USB-C port, but a power supply with USB-C connector and a warning to never use it with anything other than the device it shipped with (because it doesn't do any PD negotiation, just dumps 12V on the power pins).

2025-12-19 14:40:02 UTC

- reply

@nprofile…mrzh Ouch, that's annoying. I assume your account got locked out, which usually resets after 10 minutes, so maybe try logging in again to see if it'll let you?

2025-12-19 14:32:38 UTC

- reply

@nprofile…mrzh Since it's a work laptop, call your IT, they'll be able to provide you with BitLocker recovery key.

2025-12-13 21:49:00 UTC

- reply

@nprofile…pkdd
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/714/458/005/939/502/original/5482a2a8d9a14423.png

2025-12-10 11:36:18 UTC

- reply

@nprofile…mrzh Referer.

2025-12-08 19:05:25 UTC

- reply

@nprofile…p7lw @nprofile…nydn
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/685/503/019/545/282/original/cb4786dda335fa8a.png

2025-12-07 16:43:52 UTC

- reply

@nprofile…mrzh Well, that makes two of us – I thought it never left technical demo stage.

2025-12-06 14:07:53 UTC

- reply

@nprofile…azj9 I saw this on Discord today:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/673/007/656/860/929/original/7e47e8727d27f455.png

2025-12-04 19:58:12 UTC

- reply

@nprofile…mrzh Is this how I learn your real name? :)
I've had something similar happen on Twitter before I left it – somebody with the same name (and apparently no Twitter presence) was quite good at racing games, and for a while I was getting interview requests from journalists.

2025-12-03 22:15:10 UTC

- reply

@nprofile…uwsg When Microsoft started changing everything to modern UI, they threw out decades of UI/UX design – the colours don't mean anything, they're there to look pretty, nothing else (interestingly enough, in High Contrast mode this is handled a bit better – the default button retains thicker outline from the classic UI, so you at least have visual indication which button will be activated when you press Enter).
In general, it's best not to try using the keyboard with modern UI at all, because it's completely inconsistent what will happen – eg. in Settings some controls are reached by pressing Tab, while others by arrow keys, and there's no rhyme or reason as to which is which, and no visual indication either. They also did away with accelerators, so you have to use Tab and arrows, because who'd want to move through the forms quickly?

2025-12-01 12:43:36 UTC

- reply

@nprofile…mrzh Try https://www.track-trace.com/ – usually works, and it'll link you directly to the tracking page if they can't embed the information.

2025-11-27 16:44:12 UTC

- reply

@nprofile…qev8 @nprofile…nydn Found a slightly nicer version:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/622/658/596/742/443/original/3188d96a90a02b5c.png

2025-11-23 19:12:00 UTC

- reply

@nprofile…mfuv @nprofile…csww I remember security fixes from several vendors (for self-encrypting drives), reliability updates (these were quite important when TLC drives were new), recently there were updates for several WD models that outright didn't work with Win11 24H2, or where 24H2 caused excessive wear.

2025-11-23 18:59:52 UTC

- reply

@nprofile…mfuv @nprofile…csww Because the firmware has to be upgradable.

2025-11-23 18:57:27 UTC

- reply

@nprofile…mfuv @nprofile…csww Of course the firmware's stored in flash (on hard drives it used to be stored on disk itself; I'm not sure if this is still the case).

2025-11-23 18:50:24 UTC

- reply

@nprofile…mfuv @nprofile…csww Depends on whether what's left of the firmware's enough to make the drive visible on the bus.

2025-11-23 14:16:28 UTC

- reply

@nprofile…2y2x I think this is the top post URL: https://www.threads.com/@barrettpall/post/DRYI5j6ksz-
I also tried archiving the URL, but archive.is misses most of the images, and archive.org just shows the logo.

2025-11-23 09:26:50 UTC

- reply

@nprofile…mfuv @nprofile…csww There are descriptors stored in flash, and if those become unreadable, there's no way for the controller to know what it's working with; I remember when somebody read raw flash chips from some SSD that the descriptor page was repeated 512 times to minimise the risk of it being completely unreadable, but it still happens.

2025-11-17 21:00:15 UTC

- reply

@nprofile…ufkc @nprofile…scce Even more surprisingly, the hull breach warning system worked, they just decided to ignore it.

2025-11-15 22:19:36 UTC

- reply

@nprofile…mrzh You'll need a bigger bed.

2025-11-15 17:21:30 UTC

- reply

@nprofile…mrzh Windows updates usually download at speeds you'd have expected from analog modems…

2025-11-13 17:28:01 UTC

- reply

@nprofile…p7lw TIL.

2025-11-12 19:56:35 UTC

- reply

@nprofile…mrzh And thinking a bit more about this, when using the verb "is" and counting, 5-100 uses the singular form:
Je eno jabolko. (There is one apple.)
Sta dve jabolki. (There are two apples.)
So tri/štiri jabolka. (There are three/four apples.)
Je pet/sto jabolk. (There are five/hundred apples.)

2025-11-12 19:49:56 UTC

- reply

@nprofile…mrzh In Slovenian you use the same suffix for 0 things as for 5-100 things (and we use singular for 1, 101, 201…, dual for 2, 102, 202…, plural for 3-4, 103-104, 203-204…; and 0, 5-100, 105-200, 205-300… you use a different form).

2025-11-11 18:45:52 UTC

- reply

@nprofile…59g0 Just be happy it's not Teams.

2025-10-25 19:55:30 UTC

- reply

@nprofile…ppe2 I saw this linked on Discord:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/436/549/242/206/342/original/e563d28f39c3b54d.png

2025-10-24 20:28:04 UTC

- reply

@nprofile…2war Instead of using EXIF in JPEG, how about using tEXt chunk in a PNG? It can be much larger (up to 2 GB IIRC), and a conveniently-placed nul byte will similarly hide the content from normal viewers.

2025-10-17 17:10:27 UTC

- reply

@nprofile…2war You're absolutely right.

2025-10-15 10:42:07 UTC

- reply

@nprofile…2nlz @nprofile…mz9k
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/377/754/461/921/767/original/3f3b6a72f421b45e.mp4

2025-10-09 21:51:02 UTC

- reply

@nprofile…7q7j Look what Windows 11 took from us:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/346/415/193/474/528/original/37c75ab0b5e59413.png

2025-10-09 18:48:20 UTC

- reply

@nprofile…r0kn Was there a problem with Vivaldi specifically? (if so, I never noticed)

2025-10-06 17:50:43 UTC

- reply

@nprofile…4fn8 I have a feeling that since most software switched to subscription, the companies are trying to excuse the subscription costs by constantly adding new features, then abandoning them as soon as they works halfway. Nobody cares about quality fixes, only the shiny new things.

2025-10-06 08:32:14 UTC

- reply

@nprofile…rqac Reminds me of the OVH fire – a popular local pirate site went down due to it, because while they had backups, they were stored on a nearby server, and fire got them both.

2025-10-04 15:12:56 UTC

- reply

@nprofile…qwua At least they resurrected https://packages-prod.broadcom.com/tools/releases/ so you can download VMWare Tools without trying to get your Broadcom account approved (I've been trying for a year, and still hadn't managed to).

2025-10-01 16:31:45 UTC

- reply

@nprofile…skc4 Somebody in the McAfee thread claims they got the same ad without the third hand…

2025-06-16 17:04:44 UTC

- reply

@nprofile…gqp6 Ctrl+P, save as PDF; basically every modern browser supports this natively.

2025-06-15 19:30:04 UTC

- reply

@nprofile…wwe7 What happens if each mouse tries to resize (or move) its own window?

2025-06-15 18:45:57 UTC

- reply

@nprofile…wwe7 @nprofile…f2ps Now I'm interested in how many mice you can physically connect to a single computer.

2025-06-10 15:53:03 UTC

- reply

@nprofile…t3wn @nprofile…rmmx I successfully enabled Aero Glass on a 533 MHz Via C3 CPU with Radeon X600 connected through a PCI-to-PCIe adapter. It was surprisingly snappy.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/659/868/644/590/568/original/c87e6c58e2205516.png

2025-06-07 18:07:36 UTC

- reply

@nprofile…cl5w @nprofile…7mte Technically, "regular" numerals are upper-case; there's no provision in Unicode for lower-case numerals, but some fonts (eg. Georgia) use them anyway.

2025-05-26 20:35:55 UTC

- reply

@nprofile…aam2 How long did the USB stick survive?

2025-05-23 16:51:11 UTC

- reply

@nprofile…lst5 Note that by default Windows 11 won't let you associate anything with the good Notepad. You need to delete this Registry entry:
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Applications\notepad.exe]
"NoOpenWith"=-
(.reg file of the above)

2025-05-18 19:15:44 UTC

- reply

@nprofile…8nj8 @nprofile…kxpq Isn't it the simplest to just use Group Policy?