Nostr notes by burritosec :donor: :red_panda:

GDPR was supposed to be this revolutionary privacy legislation ...

2026-08-01T00:49:50Z

GDPR was supposed to be this revolutionary privacy legislation and instead we got "uwu we need you to accept 400 tracking cookies to use this website" popups and "redacted for privacy" WHOIS records

This image is incredible

2026-07-23T16:26:15Z

In reply to nevent1q…dqrd
_________________________

This image is incredible

there's still time to delete this

2026-07-14T16:34:39Z

In reply to nevent1q…m9v7
_________________________

there's still time to delete this

undisciplined engineering is just figuring out different ways to ...

2026-07-13T17:37:55Z

undisciplined engineering is just figuring out different ways to set stuff on fire and vibe coding is undisciplined engineering at scale

duuuuuumb question but does anyone have any empirical evidence ...

2026-06-30T15:39:43Z

duuuuuumb question but does anyone have any empirical evidence that tools like ublock origin will mitigate/kill/prevent clickfix pop ups? pretty sure I saw a blog about this but I cannot find it

Nostr event nevent1qqsz39he3lfdaqn3xuv958q7py8ywkxutam4sa48pztlm462239av2czyz3qaprxkdgn7pttzg6w72l83ty4ykw0ayhkqcnqjxxh6h2uku72ylxjsm0

2026-06-17T20:26:10Z

what fortinet doin'

I love watching when people re-learn known concepts such as ...

2026-06-10T23:55:05Z

I love watching when people re-learn known concepts such as "adding complexity to a system increases the attack surface of that system" and "introducing non-deterministic components into a system will result in unexpected outputs and/or failure modes."

I just kinda operate on the principle that everything is ...

2026-06-10T23:49:16Z

In reply to nevent1q…ymgp
_________________________

I just kinda operate on the principle that everything is temporary including the things on my hard drives

I was referencing the SMART attributes that apparently are all ...

2026-06-10T22:33:02Z

In reply to nevent1q…ny6y
_________________________

I was referencing the SMART attributes that apparently are all only known through reverse engineering, because of course https://en.wikipedia.org/wiki/Self-Monitoring,_Analysis_and_Reporting_Technology#Known_NVMe_S.M.A.R.T._attributes

don't SSDs kinda sorta do this internally

2026-06-10T22:24:35Z

In reply to nevent1q…rujq
_________________________

don't SSDs kinda sorta do this internally

got a little nitpicky with someone about a summary they wrote ...

2026-06-09T21:03:10Z

got a little nitpicky with someone about a summary they wrote that I had to review and at the first question they went "yeah I wondered about that when the AI wrote it" and I screamed AND THAT'S WHY YOU DON'T LET THE FUCKING LYING ROBOT WRITE SHIT FOR YOU

the big wild party at the big club that we all aren't in is ...

2026-06-08T22:14:32Z

the big wild party at the big club that we all aren't in is getting ready to end (IPO) and as usual the already-wealthy revelers are expecting your retirement account to pick up their bar tab

Nostr event nevent1qqsrts32u2aag62xjxj7elf7wgnr7dw099yc8dvar3sqjl9j3j39ghczyz3qaprxkdgn7pttzg6w72l83ty4ykw0ayhkqcnqjxxh6h2uku72yqmq4w9

2026-06-05T16:08:27Z

sssllleeeuuuttthhhcccooonnnn

:blobcatsipsweat:

2026-05-22T22:28:24Z

In reply to nevent1q…wsvy
_________________________

:blobcatsipsweat:

look, if you don't fuck it up from the jump, you don't ...

2026-05-19T17:23:51Z

In reply to nevent1q…lsxf
_________________________

look, if you don't fuck it up from the jump, you don't have to undo the fuckup later

Inattentiveness and lacking attention to detail gets people into ...

2026-05-19T17:13:52Z

Inattentiveness and lacking attention to detail gets people into trouble quickly, and then they have an arduous day untangling all of the trouble to right things.

the burritosec is on PTO and having steaks and beers to ...

2026-05-13T00:05:22Z

the burritosec is on PTO and having steaks and beers to celebrate. the burritosec is in full duplex mode

the power of spheal compels ...

2026-04-30T23:11:11Z

the power of spheal compels

see you at RSA next year!

2026-04-14T21:44:11Z

In reply to nevent1q…u76r
_________________________

see you at RSA next year!

follow malware and you get malware authors and malware payloads. ...

2026-03-16T18:19:30Z

follow malware and you get malware authors and malware payloads. follow the infrastructure and you don't know where the fuck it's gonna take you.

Nostr event nevent1qqs0c6xyq2k9r9spttnvqcry0ehyc50m9zw6j2vnxn2xfs8r4f3yswqzyz3qaprxkdgn7pttzg6w72l83ty4ykw0ayhkqcnqjxxh6h2uku72yzc9em0

2026-02-03T05:30:16Z

In reply to nevent1q…y9xr
_________________________

give "Aesthetica" by Liturgy and "Sunbather" by ...

2025-09-28T20:41:19Z

In reply to nevent1q…ngea
_________________________

give "Aesthetica" by Liturgy and "Sunbather" by Deafheaven some spins - blackened shoegaze is where it's at for me

my crimes are only ever disorganized, due to the incompetency of ...

2025-09-23T19:06:55Z

In reply to nevent1q…5mm2
_________________________

my crimes are only ever disorganized, due to the incompetency of my lackeys and hired muscle

if you are not ready to have your opinion or hypothesis changed ...

2025-09-23T18:21:34Z

if you are not ready to have your opinion or hypothesis changed or overturned by the introduction of new information, maybe a career in information security isn't for you

100k SIM cards racked and stacked in a random apartment in New ...

2025-09-23T16:50:00Z

100k SIM cards racked and stacked in a random apartment in New York state but I can't buy a box of cold medicine that actually works without a photo ID and the pharmacy retaining my info for years after the purchase.

110% MITRE coverage bro. Gartner Magic Quadrant leader dude. #1 ...

2025-07-18T18:02:04Z

110% MITRE coverage bro. Gartner Magic Quadrant leader dude. #1 in a Forrester category that we paid them to create and tailored exactly to the thing we claim our product does, man.

quit hand wringing about nation-state genAI-powered threats and ...

2025-02-28T03:42:31Z

quit hand wringing about nation-state genAI-powered threats and go fix your group policy

think my hottest current take might be most EDRs give just enough ...

2024-07-25T21:43:46Z

think my hottest current take might be most EDRs give just enough telemetry info to system administrators to scare them into calling the company to activate an incident response, and not enough info for in-house investigators to prove or disprove literal malicious activity

it's just fuckin infostealers man that's it that's ...

2024-07-24T03:06:59Z

it's just fuckin infostealers man that's it that's all anything is anymore

we are at the point where anytime anyone says "enhancing the ...

2024-06-25T18:42:50Z

we are at the point where anytime anyone says "enhancing the $x experience" I automatically know they're making a change no one asked for to support a quarterly KPI

Threat intel folks loooooove to talk about threat actors with ...

2024-05-26T01:51:18Z

Threat intel folks loooooove to talk about threat actors with other threat intel folks.

That's cool, but it's a closed loop.

If you are not talking with your sysops team, your GRC team, your c-suite, you are just blowing hot air into the desert.

[sniffling between choked sobs] listen... I just sniff I need ...

2024-05-15T23:01:55Z

[sniffling between choked sobs] listen... I just *sniff* I need you to click the AI summary button *sob*; we made it glow and spin when you mouse over it, and...and it will just...help you understand the content of the web page, that you clearly don't have time to read *hitched breath*, and my promotion from director to senior director is 1:1 correlated to how many times the button gets clicked this quarter, please just use the AI we just need this so badly my spouse already left and took the kids [full on sobbing]

this industry has a funny way of giving weight to shit opinions ...

2024-03-21T23:45:47Z

this industry has a funny way of giving weight to shit opinions when someone who's "made their bones" spouts them.

Nostr event nevent1qqsxn7tzmcrdk8rzhedmvy545s345583dvppf2pgpqsr5f9vwwgatlszyz3qaprxkdgn7pttzg6w72l83ty4ykw0ayhkqcnqjxxh6h2uku72yfgqq9y

2023-09-19T17:12:27Z

oh my god, BEC-y, look at her DMARC. It is so bad.

now class, say it with me: policy controls that dictate technical ...

2023-08-02T15:06:12Z

now class, say it with me:

policy controls that dictate technical controls are not substitutes for actual implementation of technical controls.