Security Writer

Security Adviser. Architect. Technical Auditor. Speaker. Author.
  I specialise in organisational and operational security. I help people do better.   #Infosec #ADHD #Privacy #MediaPreservation  GNU Terry Pratchett

Public Key

npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9

NIP-05 Address

SecurityWriter@infosec-exchange.mostr.pub

Profile Code

nprofile1qqsrlz3s5dpxye27367zce98qk3zkq8qdr89hs950h2wkjzd93g5q9qpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsz0shcc

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1879rpg6zvfj4ar4u93j2wpdz9vqwq6xwt0qtglw5adyy6tz3gq2q4aawd9

Show more details

Last Notes

2026-10-16 21:13:29 UTC

Hello. What wakes me from my slumber, you ask?
This raging bullshit is what:
https://github.com/home-assistant/home-assistant.io/issues/49314
“What we thought we’d do is just syphon off your secrets without your permission to make sure they’re… not compromised. Don’t worry… *Cloudflare* (the benevolent one, not the threat actor) guarantees their privacy”
McFuckinScuseMe?!
#homeassistant

2026-04-22 12:01:55 UTC

- reply

@nprofile…2zfv oh excellent! Things start to get interesting soon, I’m excited for you!
There appear to be a number of systems to unlock, and knowing Poncle there will be lots more on the roadmap! I have 2 achievements left in Vampire Survivors, but only like 60% of the in-game unlocks!

2026-04-22 11:53:40 UTC

- reply

@nprofile…2zfv I played the demo a lot, starting the game proper ended up with MANY achievements popping!

2026-04-22 11:48:32 UTC

Vampire Crawlers released last night. I assume you’ve all bought it.

2026-04-21 20:56:14 UTC

Can I bring your attention to one of the best security write-ups I’ve read in a long while.
Bravo, Davi.
@nprofile…44dh flagged this one to me.

2026-04-21 17:19:58 UTC

- reply

@nprofile…kyn9 anything is possible in 2026

2026-04-21 17:17:38 UTC

- reply

@nprofile…vs6a 100%

2026-04-21 17:15:33 UTC

Shame, that. Anyway…
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/443/815/209/284/363/original/53822f1433711a70.jpeg

2026-04-21 16:25:10 UTC

- reply

@nprofile…u96g I’m not getting smarter in that time!

2026-04-21 15:23:11 UTC

- reply

@nprofile…vs6a the only known way to get intelligence.

2026-04-21 15:08:00 UTC

- reply

@nprofile…gmuw let’s just give it a chance. Can’t be any worse than this, can it?

2026-04-21 15:05:45 UTC

- reply

@nprofile…rh4q subterranean now.

2026-04-21 15:04:04 UTC

- reply

@nprofile…u96g well, there’s also me, I don’t fit those categories 🤭

2026-04-21 15:03:38 UTC

Sigh. It’s exhausting isn’t it?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/443/295/715/155/798/original/72fd2aeb4e779d9d.jpeg

2026-04-21 14:57:34 UTC

- reply

@nprofile…qzxu had to look this up, and the subsequent story.
Yikes.

2026-04-21 13:22:33 UTC

- reply

@nprofile…fvzs it’s a fair point. Why do we have to leave?
They love building rockets, maybe we should let them ‘colonise mars’ and just send em all packing.

2026-04-21 12:58:26 UTC

- reply

@nprofile…muuv 1000%!
I drew parallels to Big Data in the early days. Another marketing hype term.
In most of our minds, I think we saw Big data for the most part was just marketing discovering that parallel processing, unified query language, and scale-up/scale-out on demand was possible with ever-decreasing costs of storage, memory, and compute.
Supported by the hyperconverged salespeople, as if tiered storage offload was somehow new.
I had a heated debate with board a decade or so ago that “we already do this”, but it didn’t have the shiny new sticker on it, so they tripled the operating cost for the same output
I see ‘AI’ the same way. Most users don’t want a large language model, they want small language models, machine learning, or basic automation.
I reckon if you stuck ‘chat bot’ in front of some IF/THEN statements, 99.999% of users wouldn’t know or care.
You can’t sell that as visionary I suppose. I have a personal conspiracy theory that as compute demands plateaued chip makers and cloud providers piggybacked a little known technology that seemed like magic to the uninitiated.

2026-04-21 12:37:32 UTC

- reply

@nprofile…79s7 such a way with words, the Finns!
I was looking for something to engrave in the talharpa I’m building, maybe this is it!

2026-04-21 12:34:40 UTC

- reply

@nprofile…8376 same, around 2014 I think. This is my recon account :)

2026-04-21 12:31:47 UTC

Good lord, I hate security conferences these days. Save me.

2026-04-21 09:51:08 UTC

- reply

@nprofile…fdch I mean… with 20 years working and tech, I fee seen haha.
Where would I be without copy and paste?
*shudders*
I might borrow this analogy, thank you.

2026-04-21 07:35:14 UTC

- reply

@nprofile…52xc that’s kind of the opposite of how disembarking works… unless you’re getting on, and I wouldn’t recommend it.
But also questioning how many other aliens are on the fediverse.
If you are getting off, I don’t have a plan for that either.

2026-04-21 07:27:09 UTC

I’ve just witnessed a horrific LinkedIn trend in person.
There’s an increasing contingent of cultists saying:
“We should refer to the field of IT as ‘AI’ because that’s what the future is”
I’m not sure what podcast they heard it on, but some guy just said to me:
“You work in AI, don’t you?”
Um… no? Security and IT
“Yeah, AI”
Stop the planet, I’m disembarking.

2026-04-21 07:19:40 UTC

- reply

@nprofile…qaxz was a mail shot yesterday for me.

2026-04-21 06:54:33 UTC

- reply

@nprofile…z3lm I’ll have a look.
I’d rather not look at this god awful software longer than I have to, but I need to get this testing over the line.
Not me complaining about it being broken while I’m breaking it

2026-04-20 23:18:17 UTC

- reply

@nprofile…z3lm just whatever the web version is presenting right now I think

2026-04-20 22:55:59 UTC

Has ChatGPT just got reaaaaaly dumb in the last week or so?
The already painful testing I’ve been doing makes last week’s version look like superintelligence

2026-04-20 22:39:47 UTC

- reply

@nprofile…vnlz I adore absolutely neurotic sounding tech translations. Museum worthy this one.

2026-04-20 22:22:41 UTC

- reply

@nprofile…z3lm oh I know him now.
Apple lifer from the looks. Still no idea if good or bad.

2026-04-20 22:20:53 UTC

- reply

@nprofile…z3lm I feel this is to wash off the grime Cook has accumulated cosying up to this administration. Exactly the sort of focus testing they run. Optics are everything.
Nothing changes, is my bet, perhaps a renewed message of hope and inclusivity in the coming months. I’ll need to look up the new guy.

2026-04-20 22:17:54 UTC

- reply

@nprofile…pecq thank you! I appreciate it too.

2026-04-20 21:43:31 UTC

- reply

@nprofile…5876 @nprofile…5pam Ill probably leave this exchange here, as I won’t be able to add anything of value-and I don’t want to waste your time arguing with strangers on the internet.
In my defence, I’m deeply involved with neurodiversity support services, and interpersonal exchanges are one of the most difficult across the board. Language matters deeply, but our own output is not always screened in the way we micro-analyse others’. This is particularly prevalent with those with low inhibition control or impulsivity. Online or via a messaging app, this is amplified. I’m not being defensive, just as I’ve not attacked anyone.
The conversation is important, and I’m not straw-manning or deflecting, but perhaps I can occasionally be militant in terms of voicing my views.
My tone and intent was clearly not received as intended, and that is a learning point for me. I harbour no ill will to either of you, and will continue to be deeply interested in the work you do.
I also know whom I replied to, and the material you reference, as I own it, a great read. Perhaps as we haven’t had prior direct exchanges, my tone was mistaken away from the typically jovial/cynical/stating-the-obvious nature it normally holds.
Arrogance on my part perhaps, but also a testament to circles I’d never really drifted into on the fediverse more than observing from afar. I’m passionate about what I do, and often just want to jump into conversation with like-mind folks.
I don’t think that hard and fast rules about how to interact with a thread are particularly useful to someone hard-wired to resisting instruction, and pathologically forgetful, but I’ll take your point, and try to do better.
No harm intended, and I’m not here to burn bridges, only build them.

2026-04-20 20:59:51 UTC

- reply

@nprofile…5pam

2026-04-20 19:57:24 UTC

Appreciate my cute new Daruma doll.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/438/794/581/860/369/original/3f5ad63480e74341.jpeg

2026-04-20 16:56:23 UTC

Sony:
“You’ll still be able to download 18+ video games, but don’t point that out because that makes the whole thing look as performative as it is”
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/438/080/024/644/687/original/f15359223ebc9b83.jpeg

2026-04-20 15:54:40 UTC

- reply

@nprofile…5876 @nprofile…5pam I wouldn’t want to add to that, and I am very supportive of your work.
I will say, it gives off very mixed messages if a post on a public forum carries rules of which way is the acceptable way to reply to it, especially for neurodivergent folks. I’m used to this, but I could have worded my allegedly supportive message of your position better, maybe even braved a quote tweet.
I’m not here to argue, and you leaving would be a significant loss.

2026-04-20 14:53:15 UTC

- reply

@nprofile…5876 @nprofile…5pam possibly, certainly wasn’t the intent, but there’s a lot of it around.
I still find quote toots a bit ‘twittery’ in that they’re used to insidiously inject an agenda or narrative, rather than add to the current discussion thread. Maybe it’s just me.
Perhaps I should adjust that perception somewhat and embrace it.

2026-04-20 14:33:22 UTC

- reply

@nprofile…fxpc this does look good, was looking earlier today. I’m moving from completely in house to whatever I can get my hands on in my new roles.

2026-04-20 14:32:14 UTC

- reply

@nprofile…5876 @nprofile…5pam forgive me, my rant wasn’t at you, it was just *shakes fist at clouds*

2026-04-20 14:27:45 UTC

- reply

@nprofile…5876 @nprofile…5pam once again promoting my campaign to stop calling it ‘hallucination’ and start calling it what it is, ‘erroneous output.’
What software error rate is acceptable? 0.1% is a good starting point, 1% a bright red line for a PoC, negligence in the real world.
10%? Don’t be silly. 20%? It’s just working by accident at this point.
Real world tests put the average at 45% last month.
Correct output just over half the time. A coin flip.
The starry-eyed, hopeful, technology-loving childhood me did not want any of this.

2026-04-20 12:59:08 UTC

What are you guys using for Architecture-as-Code these days?

2026-04-20 07:33:18 UTC

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/435/861/393/575/542/original/a9420ddd9333090d.jpeg

2026-04-19 18:22:00 UTC

- reply

@nprofile…2hrz @nprofile…l9z3 can live to 30 years as well with proper care!

2026-04-19 17:28:29 UTC

- reply

@nprofile…l9z3 depending on where it is… it’s not totally out of the question for some contractors 😂

2026-04-19 17:27:30 UTC

- reply

@nprofile…l9z3
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/432/542/948/635/661/original/0099004b77444799.jpeg

2026-04-18 23:24:33 UTC

Ok. Put a good shift into Lords of the Fallen (2023). I’m about 7 or 8 bosses deep.
It’s really good. I’m a bit Soulsborne fan, I’ve finished pretty much every FROM game made, even their other franchises, and this is probably as close to it as you’re going to get to that Dark Souls feeling.
Has some interesting mechanics, like your first death not being ‘final’, but results in an increasingly hostile world until recovery, and switching between the current and a darker, more decayed version of the same world.
Boss fights feel looser, and on regular difficulty it’s not particularly difficult, but there’s lots of tweaks you can make to the game from the menu, including the sorts of things you’d usually get with mods, like enemy randomisers, iron man, hardcore mode etc.
But that looser combat paves the way for an enormous amount of viable builds, with an impressive array of weapons, magic, armour and other loot, with many weapons giving unique movesets. Even ranged is viable.
It also incorporates some of the great features Sekiro and Bloodborne had which encouraged aggressive, or just engaged play. Such as no damage being 100% ‘blockable’ but lost health being recoverable unless you’re hit again before counter attacking, so great if you like a parry… or don’t.

2026-04-18 13:03:14 UTC

- reply

Oh no. It’s UE5

2026-04-18 13:01:43 UTC

- reply

@nprofile…j9vd grease works better at the lower speeds and lower temps, I find.

2026-04-18 13:00:19 UTC

Spent 30 minutes trying to get Lords of the Fallen updated to 2.5 yesterday.
Turns out they remade the game with the same name, basically the same theme and environments 9 years later, and just didn’t say anything.
Purchased now, but feeling a bit silly.

2026-04-18 12:56:40 UTC

Gonna defrag this SSD to make sure the transistors are aligned.

2026-04-18 11:51:00 UTC

Folks in the UK reading this like “where do I sign up for cheap rail travel?!”
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/425/544/411/895/275/original/d53dad5d41166798.jpeg

2026-04-18 08:54:56 UTC

I’m at ‘just typed the time into a search engine’ levels of tired.

2026-04-17 07:37:47 UTC

- reply

@nprofile…erhh oh good lord. This broke me a bit.

2026-04-16 18:49:21 UTC

- reply

@nprofile…2dj0 which effectively means Apple have backdoored our DNS.
Every query leaks your request elsewhere, in an unknown location.

2026-04-16 17:28:58 UTC

- reply

@nprofile…34l4 The best browser I’ve used by some margin. Thank you.

2026-04-16 17:13:40 UTC

I’m just a boy standing in front of any Microsoft management portal asking it not to show me the fucking welcome tour any time I sign in, regardless of whether I’ve completed it or not.

2026-04-16 15:42:42 UTC

- reply

@nprofile…sstl Return Point Objective and Business Continuity and Disaster Recovery.

2026-04-16 15:25:40 UTC

- reply

@nprofile…ktq5 @nprofile…gu7x Patio grout.

2026-04-16 15:18:57 UTC

- reply

@nprofile…ah0n I’m on my third!

2026-04-16 15:15:40 UTC

- reply

@nprofile…ah0n should be some discount Herman Millers on eBay in the next 24 months!

2026-04-16 15:07:20 UTC

- reply

@nprofile…44dh @nprofile…vs6a nope this is a fiction. None of it makes sense.
It basically amounts to IP over DNS… go figure. ‘ARP8’ made me lol.
Maybe someone should let them know people are spamming slop RFCs. Although they probably know already.

2026-04-16 15:03:02 UTC

- reply

@nprofile…44dh @nprofile…vs6a all of which doesn’t exist
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/414/990/133/795/981/original/40c71da58d19f01d.jpeg

2026-04-16 14:47:32 UTC

- reply

@nprofile…44dh @nprofile…vs6a oh good… there’s more
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/414/928/573/653/380/original/c57b5d826e4cf65d.jpeg

2026-04-16 14:43:02 UTC

- reply

@nprofile…44dh @nprofile…vs6a brb just gonna back port patches for all my layer 3 kit so it can support DHCP8, DNS8, NTP8, NetLog8, OAuth8, WHOIS8, ACL8, XLATE8 via UPDATE8.
Also getting irrationally annoyed at it relying on auxiliary tech like OAuth. Then rename OAuth 2.0 to OAuth8. Which isn’t a thing. Which to me is what calls it out as slop.
Ask LLMs to do anything and it’ll stuff JWTs in as it’s high on the powdered remnants of StackOverflow.
Maybe an OSI security layer like everyone has been asking for since the dawn of time? Anything. But not this.

2026-04-16 13:55:48 UTC

- reply

@nprofile…44dh @nprofile…vs6a why?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/414/725/640/409/008/original/cd06db8c950ff12e.jpeg

2026-04-15 22:18:45 UTC

Sooo question on age restriction on Apple devices.
Non-age-verified people will get blocklist messages on any 18+ website on, right? This also happens if you have custom DNS, DoH/DoT, or VPN with DNS resolution on the other end...
So Apple intercepts the DNS request, checks against their blocklists before anything else happens?

2026-04-15 21:28:33 UTC

- reply

@nprofile…nv3t "Test your backups or your backups will test you"
Maybe one for @nprofile…5u3l :ablobowo:

2026-04-15 21:25:10 UTC

Colleagues asking for opinion on absolutely any vendor:
"Do you trust..."
No.

2026-04-15 20:47:17 UTC

Won AI bingo today. Was experimenting with generating text for some documents on our corporate systems.
"Wait, this is actually really good. It's normally shit"
The references: My previous reporting

2026-04-15 18:52:17 UTC

- reply

@nprofile…dlc3 plot twist, the IP is dynamic

2026-04-15 18:51:55 UTC

- reply

@nprofile…dlc3 every bit as useful, if not more so, than some I’ve seen.

2026-04-15 18:30:17 UTC

I just thought I’d make the server naming convention the least human readable possible. Because I can.

2026-04-15 18:15:50 UTC

- reply

“Didn’t you say this a couple of months back?”
Yeah. It’s never a bad day to test your backups.
Well, almost never. When you actually need them might not be optimal.
That’s my point.

2026-04-15 18:13:47 UTC

It’s international test your backups day!
Go test your backups, don’t just check they exist.
Do they restore? Is the RPO expected? Do they reintegrate? Is data integrity preserved?
HA is not BCDR. You’ve been warned.

2026-04-15 18:02:56 UTC

- reply

@nprofile…zwds same in UK per litre yesterday.

2026-04-15 17:47:49 UTC

- reply

@nprofile…a8rk a whole Gallon (US) allegedly.

2026-04-15 17:47:23 UTC

- reply

@nprofile…a8rk vapours.

2026-04-15 17:41:51 UTC

- reply

Don’t worry you’re getting $3 fuel any time now. 🙄

2026-04-15 17:29:08 UTC

Not sure why I watch these pressers.
They talk about financial literacy, anyone with any level of financial literacy can see every number is a lie.
Not even sure how this is legal, they’re even giving advice.

2026-04-14 22:29:01 UTC

If your security controls aren’t enforceable, you’re just asking nicely, but in a stern tone of voice.
#whyioughtta

2026-04-10 07:51:33 UTC

- reply

@nprofile…s0vs I mean… it probably doesn’t matter. I have 50kg on him, 30 years of martial arts training, and a stint in semi pro boxing.
Oh, and I’m really, really angry. 😂

2026-04-10 07:41:55 UTC

- reply

And if I reaaaaly have to. I’ll wear 16oz gloves, with 2 minute rounds.
Only if you can’t make it though.

2026-04-10 07:23:25 UTC

If Hunter Biden needs a substitute for his cage match with the Trump kids, I’ll reluctantly stand in.
Honestly, it’s no problem at all. No really, I insist.
Last minute injury, food poisoning, flu. I’m your guy, if I really have to be.
Don’t forget I offered.

2026-04-07 22:49:31 UTC

Captain Climbdown appears to have done us a favour for once.
No nukes tonight at least.

2026-04-07 18:51:48 UTC

- reply

Shit wrong chat.

2026-04-07 18:51:36 UTC

Just getting ready to do a genocide.

2026-04-07 18:50:51 UTC

- reply

@nprofile…52nj oh I’m a goner, we’re on the target list.
I’m at peace with that 🤷

2026-04-07 17:44:54 UTC

- reply

@nprofile…kem6 I’d generally agree, but they were already saying the bad things out loud, the clever part was to get them to either confess to crimes they didn’t think were crimes, or show their fragility in front of women.

2026-04-07 17:43:07 UTC

Daylight savings time is getting in the way of me quickly calibrating my nuclear war clock today.
Usually it doesn’t matter, but we’re on short notice lately.

2026-04-07 11:44:28 UTC

- reply

@nprofile…p0fq ohhh you…

2026-04-07 07:53:54 UTC

- reply

@nprofile…f9cw Surviving! But otherwise ok!

2026-04-07 06:35:51 UTC

- reply

@nprofile…tczk 💯

2026-04-07 06:33:59 UTC

- reply

@nprofile…d9df it truly demonstrates what sets a real journalist and documentarian apart from hopping on another stream with their hive mind.
Louis is utterly disarming and unthreatening, but can make things uncomfortable in a heartbeat.
I especially liked him calling out their bullshit in front of women and seeing the insecurity set in.

2026-04-07 06:26:56 UTC

- reply

@nprofile…y9gt it sort of is. I think the exercise is a worthwhile one, though.
It really helps that they have (somehow) absolutely no idea who he is because they are woefully unprepared, and their arrogance is staggering.

2026-04-06 23:12:26 UTC

- reply

I didn’t mean it. Was just a reply to a friend 😂

2026-04-06 23:11:43 UTC

- reply

@nprofile…e965 I mean there’s a clear loophole here… it says nothing about not *telling them* why they’re wrong on the internet…
But I agree, I failed quickly.

2026-04-06 23:02:34 UTC

- reply

@nprofile…k5tv thank you for asking!
I guess just *gestures broadly*!

2026-04-06 22:59:12 UTC

Boost for echo effect

2026-04-06 22:57:30 UTC

Louis Theroux’s ‘Inside the Manosphere’ was an exceptional demonstration in how someone humble and secure within themselves and their position can demolish someone’s twisted world view in seconds.
Do your research and ask the right questions in the right way and without fear, and anything built on sand will crumble.
Watching these ‘alpha males’ shrink sustains me.
I think my favourite line is the ‘gotcha’ from one of the asshats “how’s your mate Jimmy Saville?” to which Theroux retorts “I helped expose him while he was still alive. He’s dead now”.
Referring to the investigative journalism he did in 2000 around the claims of pedophilia, while Saville was *still employed* by the BBC. Claims that weren’t fully investigated until nearly 15 years later.
Masterclass.

2026-04-06 22:10:44 UTC

How’s my echo chamber doing this fine evening?