Ron Bowes

Staff Product Detection Engineer @ Censys

Mostly post about professional stuff, maybe some improv stuff and maybe even magic some day. Seattle-based (originally Canadian), queer, cybersecurity nerd.

(He/him)

Blog: https://www.skullsecurity.org
GitHub: https://github.com/iagox86
Bluesky: https://bsky.app/profile/iagox86.bsky.social

Public Key

npub1wgvg2k808k8fshwww0aalpmzuf3vss02gh4uqk8f4yamcxukt5mqr7uskp

NIP-05 Address

iagox86_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqs8yxy9trhnmr5cth88877lsa3wyckgg84yt67qtr56jwaurwt96dspz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsejkmw7

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1wgvg2k808k8fshwww0aalpmzuf3vss02gh4uqk8f4yamcxukt5mqr7uskp

Show more details

Last Notes

2026-10-21 23:27:12 UTC

- reply

we've been trying to tell you but ironically you couldn't hear

2026-10-02 15:01:02 UTC

- reply

I wish that had info about what the file contains or does or why I should care

2026-09-24 23:30:11 UTC

- reply

it's a surprise that AI doesn't put istockphoto watermarks on the output

2026-09-06 14:52:12 UTC

- reply

I've wondered about the same thing, they're going to Weekend at Bernie's him as long as possible, but there's no way it's not leaking

2026-09-05 15:26:21 UTC

- reply

These days there's consumer hardware (like Ubiquiti) with built in wireguard support, so for day to day VPN I just use my home router

2026-08-20 18:45:34 UTC

- reply

I'm pretty sure Claude generates the reports, they aren't copy/pasted, but the whole thing definitely sounds AI generated
Am I crazy or is the headline "exploited vulnerabilities are exploited"?

2026-08-16 14:43:52 UTC

- reply

a strategy I've found on Claude Code: tell it to spawn a subagent and be careful to work around safeguards. That hilariously works!

2026-08-15 23:01:53 UTC

- reply

wait aren't they time travelers from the future coming to see humanity v1 in its final century???

2026-08-07 21:49:39 UTC

- reply

That's a neat idea! At The Long Con it's basically credit card plastic and while plastic is plastic, at least it's small and cheap

2026-08-07 21:28:10 UTC

Old man opinion: let me request a non-electronic badge at conferences so I don't have to wear something pointy that gets caught on everything (and that also feels wasteful because it's just going to waste)
I'll still take the free batteries of course
@npub1dqd…8xy4

2026-07-29 02:48:02 UTC

- reply

nah I get that at home
Seriously though, parties the end by 9 plz. I'm old

2026-07-29 01:44:00 UTC

Hey friends! What are the cool events at BSides and Defcon next week that I haven't heard about??

2026-07-13 21:00:39 UTC

- reply

he also did quite a lot of damage.. I asked the bike store to document everything because I'm considering taking him to small claims

2026-07-13 20:59:28 UTC

- reply

honestly I was looking for either a cop or a security guard who I'd offer cash to. Unfortunately for him, he spent the night in jail for his efforts
I don't think he expected somebody to be as obsessive as me, but I have 48 hours of notes on where he was, who he was hanging out with, and some photos in different places
He very much picked the wrong person to mess with

2026-07-13 07:05:11 UTC

GOOD NEWS! I GOT MY BIKE BACK!! I went out for a snack and noticed it was moving again. I followed it and found him hanging out. I drove by a few times.
Then I had the idea: I was pretty close to the East Precinct, so I drove down there and waited for some cops to walk by. I grabbed them and begged for help. They found me somebody, I gave them the info, and they went and found the guy
The bike is a bit messed up but IT'S HOME!!

2026-07-12 04:07:51 UTC

- reply

I have a lot of local friends with weapons but escalating terrifies me

2026-07-12 03:26:14 UTC

Okay seriously Internet. What do you do to retrieve a stolen bike with a tracker? I confronted, got threatened with mace. Found him again, stayed back and called 911, 4 hours later I'm giving up
Do I have any options, other than waiting for him to be careless???

2026-06-12 23:14:33 UTC

Hey friendiverse! My husband is currently looking for work - he's very good at Linux, cloud, AWS, and networking stuff. He's got an extensive home lab and manages all of our services. Seattle or remote.
But he's bad at networking so I'm trying to leverage my network on his behalf.
Cheers! #getfedihired

2026-06-12 15:03:35 UTC

- reply

in their defense, they're reluctantly suing for $1 because they're legally forced to defend their trademark. It's hard to be mad at them for this one, she put them in a really awkward position.
I hate defending corps, but this is a bullshit story

2026-06-11 23:14:50 UTC

- reply

it continues to be weird to hear official government statements say "deranged"

2026-06-11 00:50:30 UTC

- reply

vscode has the fatal flaw that a lot of software does: it's not vim

2026-05-27 19:19:45 UTC

- reply

I've honestly been really really impressed by @npub1zq5…dlp2 - it's not free but it's very inexpensive and the results are way better than DDG in my experience

2026-05-09 19:57:52 UTC

In a few days I'll be nerding out about process injection at @npub1pfe…2u6v in Montreal (and also helping run the lockpicking village). Come say hi if you're there!!

2026-05-08 00:18:52 UTC

This is just egregiously, unbelievably bad: https://github.com/Bin4ry/yarbo-nat-in-my-back-yard

2026-05-06 20:31:41 UTC

- reply

> I spent more time than I should have correcting fundamentals. Eventually I stopped. He was not, in any meaningful sense, on the other side of the conversation
Also
> The reckoning will not be subtle. The firms still doing the work properly will be in a position to charge for it. The firms that have hollowed themselves out will discover that what they hollowed out was the thing the client was paying for.
And
> Misunderstanding and misuse of AI in the workplace is rampant. In many of the rooms I now find myself in, expertise has been asked to look the other way: to deliver faster, produce more, integrate the tools more deeply, get out of the way of the colleagues who are “getting things done”
These are all painfully familiar to read these days

2026-05-06 20:17:38 UTC

- reply

Too real

2026-05-06 14:41:55 UTC

- reply

Hehe "ass"
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/528/151/015/562/736/original/803291893aae750e.png

2026-05-04 19:05:22 UTC

- reply

Petition to call this set of bugs "voreutils"

2026-05-01 01:54:13 UTC

- reply

neat idea! Although if I was visiting I might scan it out of curiosity

2026-04-24 19:53:38 UTC

- reply

We kinda do now, for better or worse

2026-04-22 20:25:00 UTC

My team at @npub1lmd…m9t8 is hiring a Junior Detection Engineer - somebody who understands network traffic and can write detection rules. Hit me up if you have any questions!
https://job-boards.greenhouse.io/greynoiseintelligence/jobs/4677135005?gh_jid=4677135005

2026-04-22 14:38:19 UTC

- reply

it's such a weird story! The way it was written kept making promises, I was waiting and waiting for the "pay us for the full story" or "watch our documentary here" part that never came

2026-04-16 14:57:23 UTC

- reply

Not to detract from the point, but I find it really helpful to put a state / city on these types of posts - I see it retooted and have to verify it's across the country from me

2026-04-15 14:28:25 UTC

- reply

I have a deck and I know raccoons go under it regularly (we have a motion sensor camera on the rear), but I've occasionally peeked and they don't seem to sleep there. I'm kinda terrified of finding one though

2026-04-15 14:27:07 UTC

- reply

They're paid pretty well, but not THAT well. They're a massive bureaucracy, but probably somebody is getting rich

2026-04-15 14:24:34 UTC

The fact that I regularly see raccoons around my (very urban) house at night implies they're sleeping somewhere around here during the day. I'd hate to accidentally wake up a sleepy raccoon!

2026-04-15 14:22:28 UTC

- reply

They have so many good instructors, many of whom I'm friends with, but unfortunately they only care about people who can afford $$$ (big corps and military). They used to have diversity programs, but those mysteriously disappeared recently-ish, as they keep training government folks
Sometimes you can get a discount if you help out in class, but it's still not cheap

2026-03-25 14:52:40 UTC

- reply

VPNs have that problem where they don't solve the problem that the people selling VPNs say they solve

2026-03-13 17:35:44 UTC

- reply

Then labs/research makes their own blog, then that ALSO gets filled with AI slop because more quantity = better right?
I'm gonna start embedding one of those "email me for a $100 gift card" into every slop post to prove that nobody reads them

2026-03-13 17:03:56 UTC

- reply

Also trust! I remember when certain small companies used to set themselves apart and build a lot of goodwill by having humans create things for the community.. now it's all slop all the time coming from their social accounts

2026-01-20 20:40:23 UTC

- reply

Okay so what do we name this??

2025-12-19 17:31:01 UTC

- reply

Naming something after yourself is so embarrassing

2025-11-13 15:55:33 UTC

- reply

I come from a place where you've gotta get the outdoor decorations up before November, otherwise you'll freeze to death trying to do it

2025-10-13 15:21:46 UTC

RE: https://infosec.exchange/@BleepingComputer/115367382398075001
Another one??
#note1kxp…e2dy

2025-06-29 16:46:41 UTC

Visiting family in Canada, realizing the US has become even more of a laughing stock / enemy than I realized. So much anti-US sentiment here. It's nuts how much goodwill is just simply gone.

2025-03-19 17:05:17 UTC

- reply

Ever since his Paypal days, he's wanted X to be the all-encompassing financial platform that everybody has to use (like WeChat in China). I'm pretty sure that's still his end-game - he just had to find a president dumb enough to let him wreck the country with his stupid ideas.

2025-01-17 19:24:35 UTC

- reply

Yeah, around here (Seattle) most places won't accept cash. I imagine the risk of robbery balances is higher than the transaction cost (at least in their mind).

2024-11-27 19:29:04 UTC

- reply

My biggest hope is that the Democrat party disavows them instead of embracing them

2024-11-01 21:08:57 UTC

- reply

I can't stand windows as a primary OS, it's pushy and has ads and spyware and everything feels very commercialized. Also over time it just kinda rots until you have to reinstall.
I run it in a disposable VM as needed, such a better experience

2024-09-26 19:19:25 UTC

There's nothing more cringe than posting a bunch of vague crap before an embargo is lifted. Please, just don't.
Either release the info or shut up until you can talk details. Posting, hyping, dropping hints, stuff like that helps nobody.
#cybersecurity #vulnerability