Nostr notes by Bill

That is a work of art. Remember when Americans made stuff that ...

2026-07-10T03:16:17Z

In reply to nevent1q…s58d
_________________________

That is a work of art. Remember when Americans made stuff that compelling?

Anyone ready for a HUGE non-sequitur? Anyone know why Rhino from ...

2026-06-24T00:03:21Z

Anyone ready for a HUGE non-sequitur?

Anyone know why Rhino from Spider-Man is nicknamed "Santa Claus"?

That's a violation of federal law. Kids play mailbox golf out ...

2026-06-09T15:33:59Z

In reply to nevent1q…a8vy
_________________________

That's a violation of federal law. Kids play mailbox golf out here, and someone built one of those looks-flimsy-but-isnt mailboxes to show them a lesson. Killed a kid, homeowner went to prison.

You know what? Mornings suck. Is this just a getting old thing? I ...

2026-06-09T13:37:46Z

You know what? Mornings suck. Is this just a getting old thing? I used to love mornings. I'd wake up and hop out of bed. Now I'm damn lucky to be ready for primetime in two hours. It's terrible.

I don't know, man. I kind of like the silly British dude.

2026-06-05T13:55:04Z

In reply to nevent1q…6r7a
_________________________

I don't know, man. I kind of like the silly British dude.

imstealingthismeme.png

2026-06-05T13:54:01Z

In reply to nevent1q…ula8
_________________________

imstealingthismeme.png

No, it's UNIX.

2026-05-22T23:14:16Z

In reply to nevent1q…ywcv
_________________________

No, it's UNIX.

I got to say testing on a Mac with its crappy Windows management ...

2026-05-22T19:44:46Z

I got to say testing on a Mac with its crappy Windows management really makes you look like a hacker. You have little teeny halves of Windows sitting all over your screens and they're all moving most of the time. It looks like a movie hacker honestly.

The GitHub breach last night was worse than reported. 4000 or so ...

2026-05-21T03:41:48Z

The GitHub breach last night was worse than reported. 4000 or so private repos for sale on Tor. LAPSUS$ is claiming it's for sale already but it isn't on their release site.

https://thehackernews.com/2026/05/github-investigating-teampcp-claimed.html?m=1

#github #breach

Damn this is well written.

2026-05-13T11:21:14Z

In reply to nevent1q…yh79
_________________________

Damn this is well written.

AI Agents are not programs. They are digital workers. Discuss ...

2026-05-12T03:48:38Z

AI Agents are not programs. They are digital workers.

Discuss amongst yourselves.

https://stateofsecurity.com/ai-agents-are-already-working-for-you-whos-managing-them/

#agenticai #identity

Woo. Don't call AI agents "cron jobs" in a meeting of ...

2026-05-11T14:27:47Z

Woo. Don't call AI agents "cron jobs" in a meeting of AO bros. They will throw you out the window like on that one web comic meme.

Nostr event nevent1qqs2wrumzge4856pvrkd954xew008vky82nje6uukh6eyn3fp5a8a8czyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8duuwhaxs

2026-05-05T14:48:12Z

#copyfail

Nostr event nevent1qqs8wgg4ej8ukvf75dauwspe4rwde558nfgn2yqh005lunna3f5gy0gzyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8dujxdw0w

2026-05-04T03:11:25Z

My township makes announcements and whatnot on Facebook. If it is ...

2026-05-02T14:13:18Z

My township makes announcements and whatnot on Facebook. If it is a long post, you can only see so much before logging in. So, if I want to get information about my local government, I have to ask Mark Zuckerberg.

Something is very, very wrong with that.

I know a guy.

2026-05-02T13:55:39Z

In reply to nevent1q…vfym
_________________________

I know a guy.

You know it is gonna be a good day when it starts off with a hot ...

2026-05-02T13:53:42Z

You know it is gonna be a good day when it starts off with a hot steaming mug of sudo apt update -y && sudo apt upgrade -y

Hell yeah. 4:19 check-in, 4:20 check out.

2026-05-01T20:23:14Z

In reply to nevent1q…7d8p
_________________________

Hell yeah. 4:19 check-in, 4:20 check out.

I think it is less malice and more disorganization.

2026-04-30T12:27:32Z

In reply to nevent1q…feh5
_________________________

I think it is less malice and more disorganization.

Any appsec people looking for a BIG job? Fidelity Investments is ...

2026-04-27T19:28:58Z

Any appsec people looking for a BIG job? Fidelity Investments is looking for an appsec lead. If anyone is interested, I can shoot you their email.

#getfedihired

In other news, Amazon Music has a builtin playlist called ...

2026-04-23T18:54:35Z

In other news, Amazon Music has a builtin playlist called "Intense angry rock music to fuel your rage." No, not kidding.

Baratza Encore. Only way to fly.

2026-04-23T02:14:41Z

In reply to nevent1q…c9ft
_________________________

Baratza Encore. Only way to fly.

finger -m gayint

2026-04-22T20:39:29Z

In reply to nevent1q…jevs
_________________________

finger -m gayint

Does anyone know if what CISA is putting out post-Jen is worth ...

2026-04-22T02:40:56Z

Does anyone know if what CISA is putting out post-Jen is worth looking or is just like the rest of the anal flem this administration produces? I mean, for realz inside knowledge?

https://thehackernews.com/2026/04/cisa-adds-8-exploited-flaws-to-kev-sets.html

#cisa #kev

Ermagerd. That's a name I haven't heard in a long long ...

2026-04-20T15:24:31Z

In reply to nevent1q…sy0p
_________________________

Ermagerd. That's a name I haven't heard in a long long time.

Hey, at least you spelled meathead right.

2026-04-18T13:28:41Z

In reply to nevent1q…wjga
_________________________

Hey, at least you spelled meathead right.

It's been nice knowing you.

2026-04-17T18:05:22Z

In reply to nevent1q…55wp
_________________________

It's been nice knowing you.

Nostr event nevent1qqs2k0npfrrwh7shfl8tqc0e79yagjx2xaftr972df86gah9svaa3rczyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8du3gcwgp

2026-04-17T15:56:08Z

In reply to nevent1q…eu9v
_________________________

My daughter just came home with a strawberry plant. We don't ...

2026-04-16T16:46:54Z

My daughter just came home with a strawberry plant. We don't have terraces set up or anything. Anyone got any quick n dirty tricks? #gardening

A design flaw in the MCP protocol. Whoda thunk. Honestly even ...

2026-04-16T03:46:41Z

A design flaw in the MCP protocol. Whoda thunk. Honestly even back when they were first discussing MCP in 2024 I worried about that. Supply chain is enough of a mess, now this?

https://www.securityweek.com/by-design-flaw-in-mcp-could-enable-widespread-ai-supply-chain-attacks/

#mcp #vulnerability

Bloomberg is covering Mythos. The journalists are VERY skeptical, ...

2026-04-13T15:14:44Z

Bloomberg is covering Mythos. The journalists are VERY skeptical, and the AIBros are all like "THIS SHOULD BE A GLOBAL LAW EVERYONE SHOULD TEST WITH THIS AAAH WE ARE ALL GONNA DIE."

OH man they have Kara Sprague on and she is speaking truth. THANK goodness.

And now it's kreiger "OH NOT THIS IS REALLY GOOD YOU SHOULD USE IT YOU DON'T WANNA GET HACKED DO YOU?"

Kara: "Um, that's not how any of this works."

God I'm loving this. And she's just so polite.

I would not be so polite. That's probably why I am not on Bloomberg. Or a CEO. Or, well, yeah.

And that begs the question as to whether the problem is with the ...

2026-04-10T17:42:20Z

In reply to nevent1q…5yfd
_________________________

And that begs the question as to whether the problem is with the technology or the problem is with the shitty way that people use it. I think we both agree that the latter is a more significant problem.

Nostr event nevent1qqsy6c3hm5cklzq52jpywdxawykwtvr7zy5kpv3m2f4hykeu4ggudggzyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8duyqunm9

2026-04-10T16:15:02Z

In reply to nevent1q…xl00
_________________________

https://www.lindau-nobel.org/blog-nobel-prize-in-chemistry-2024-protein-folding-and-ai/

"spices"

2026-04-10T14:40:57Z

In reply to nevent1q…a0fw
_________________________

"spices"

But out of curiosity, are you getting questions from your ...

2026-04-09T18:47:44Z

In reply to nevent1q…23e9
_________________________

But out of curiosity, are you getting questions from your management? None of my clients have said a word one, and several of them are very AI focused.

I believe that is exactly correct. As I mentioned somewhere, open ...

2026-04-09T18:45:29Z

In reply to nevent1q…u74t
_________________________

I believe that is exactly correct. As I mentioned somewhere, open up a developer console on any browser on any website of any size and significance, and you'll see 7,000 vulnerabilities in the JavaScript. Absolutely none of them are exploitable for anything useful at all. They don't really matter, and I would imagine that 99.997% of the things that are showing up in this magic report are going to be exactly like that.

You should start a blog. Oh, wait.

2026-04-09T18:42:04Z

In reply to nevent1q…6408
_________________________

You should start a blog. Oh, wait.

When you say your risk models remain unchanged, does that mean ...

2026-04-09T18:28:36Z

In reply to nevent1q…7m3e
_________________________

When you say your risk models remain unchanged, does that mean you are not receiving pressure from management to change them due to Glass Wing, or that you already have and you're not changing them back?

For those getting questions about Glasswing from their ...

2026-04-09T18:11:07Z

For those getting questions about Glasswing from their executives, give them this article.

https://tryaether.ai/blog/anthropic-glasswing-frontier-attack

A microwave. A microwave deletes the messages. Or a 38. That ...

2026-04-09T16:49:45Z

In reply to nevent1q…qchf
_________________________

A microwave. A microwave deletes the messages.

Or a 38. That works ok too.

/me peeks in the door.

2026-04-09T01:27:06Z

In reply to nevent1q…3v78
_________________________

/me peeks in the door.

Nostr event nevent1qqst68lmdtr7pka5sswtfulfadvl7ets27rul8e5xdm8s66f8h7kjkczyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8du67fnq3

2026-04-08T14:16:07Z

Oh look. I need to not be on social media today.

Good writeup on @npub12xh…zxeq's recent efforts. ...

2026-04-08T03:10:08Z

Good writeup on Will Dormann (npub12xh…zxeq)'s recent efforts.

https://securityaffairs.com/190400/breaking-news/experts-published-unpatched-windows-zero-day-bluehammer.html

#0day #microsoft

“”::

2026-04-07T19:45:46Z

In reply to nevent1q…kldz
_________________________

“”::

Nostr event nevent1qqsqsjq5uvq6yv3dpsvjnk49949huce9cgln8vr0gc6v0yszcmn7q6qzyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8du8a0z5z

2026-04-03T02:30:46Z

Anyone feel the under boomer in the bay area?

Let me guess. It was vibe coded, right?

2026-04-02T15:31:39Z

In reply to nevent1q…ed3u
_________________________

Let me guess. It was vibe coded, right?

All you can do now is share the joy.

2026-04-01T19:18:07Z

In reply to nevent1q…ulqk
_________________________

All you can do now is share the joy.

Well, if you wanna be really picky sure. Honestly find me a mail ...

2026-03-26T20:45:42Z

In reply to nevent1q…lhvy
_________________________

Well, if you wanna be really picky sure. Honestly find me a mail app that doesn't fit that, broadly.

But outlook actively prevents the user from doing good work, and that's inexcusable. I don't think you can say THAT about Eudora or Thunderbird. Outlook just tries to do too much.

Nostr event nevent1qqsqz6l8vl9ndtpl0kly0j6tdjt9fdsqpg4hlzh5x7xqud32fryumnqzyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8duj3vthw

2026-03-26T19:33:25Z

Outlook needs to die in a fire. It has become unusable.

You can do that? With a partial string match like that? Zesty.

2026-03-24T20:08:36Z

In reply to nevent1q…4hp6
_________________________

You can do that? With a partial string match like that? Zesty.

Oh look, the creator of OpenClaw is going to speak at Microsoft ...

2026-03-17T19:53:30Z

Oh look, the creator of OpenClaw is going to speak at Microsoft Build!

Not often they feature malware authors but there ya go.

With @npub1tnw…dc6y at Fan Expo. Looking at some fandom ...

2026-03-14T21:25:04Z

With Effin' Birds (npub1tnw…dc6y) at Fan Expo. Looking at some fandom knockoffs. Funnier than hell.

Tank, I need an exit. ...

2026-03-07T17:42:00Z

Tank, I need an exit.

Uhyup #claude #orly h/t @npub19tz…epzc ...

2026-03-06T22:13:30Z

Uhyup

#claude #orly

h/t Tanya Janca | SheHacksPurple :verified: :verified: (npub19tz…epzc)

moldy ... cumbubble ... ?

2026-02-25T16:42:55Z

In reply to nevent1q…j0e3
_________________________

moldy ...

cumbubble ... ?

Well stated.

2026-02-18T17:29:57Z

In reply to nevent1q…h43r
_________________________

Well stated.

It is far easier to write junk than write good code with AI ...

2026-02-18T16:54:12Z

In reply to nevent1q…kawt
_________________________

It is far easier to write junk than write good code with AI consoles. I'm not sure what's gonna happen with that. But remember VB4? How EASY it was to just generate unmaintainable shit? Now we have that on a logarithmic scale. Yay?

Bring out yer path traversal memes!! ...

2026-02-17T04:48:05Z

Bring out yer path traversal memes!!

https://seclists.org/fulldisclosure/2026/Feb/10

#linksys #vulnerability

that is really nice! Did you build the store, or is it an open ...

2026-02-16T19:33:57Z

In reply to nevent1q…dcm7
_________________________

that is really nice! Did you build the store, or is it an open source product? It's very easy to use.

The @npub1m24…d9a3 is setting up a push for e2e encryption. ...

2026-01-30T04:41:01Z

The Electronic Frontier Foundation (npub1m24…d9a3) is setting up a push for e2e encryption. Worth doing.

https://encryptitalready.org/

#eff #privacy

Mr. Schneier has a salient reminder from the Hackers' ...

2026-01-14T03:46:41Z

Mr. Schneier has a salient reminder from the Hackers' Manifesto.

https://www.schneier.com/blog/archives/2026/01/1980s-hacker-manifesto.html

#hacking #philosophy

At the time, I knew @npub1nrx…m4fy was right to leave the US. I ...

2026-01-10T13:29:55Z

At the time, I knew Lesley Carhart :unverified: (npub1nrx…m4fy) was right to leave the US. I did not, however, expect the turning point showing how right she was to be this swift, egregious, and devastating.

You know when you have that one piece of firewood that you ...

2026-01-02T22:56:30Z

You know when you have that one piece of firewood that you can't get a grip on? This one took me a while to get right.

And she isn't wrong. But things are moving at a remarkable ...

2025-12-29T14:39:56Z

In reply to nevent1q…jul4
_________________________

And she isn't wrong. But things are moving at a remarkable pace, and sometimes what goes around, comes around.

In general, I love the idea of "parental controls" are ...

2025-12-29T14:37:31Z

In reply to nevent1q…0q42
_________________________

In general, I love the idea of "parental controls" are for the mid-aged to control what their parents can see online.

"Bringing back LimeWire to illegally rip copies of reporting ...

2025-12-24T05:07:58Z

"Bringing back LimeWire to illegally rip copies of reporting suppressed by the government is definitely some cyberpunk shit."

https://arstechnica.com/tech-policy/2025/12/yo-what-limewire-re-emerges-in-online-rush-to-share-pulled-60-minutes-segment/

#censorship #uspol

I just got a recipe from my stepmom. Vanilla strips, they are ...

2025-12-18T03:47:56Z

I just got a recipe from my stepmom. Vanilla strips, they are good, maybe I'll post it if she's OK with it.

It is an emailed photo of a laptop screen with a facebook post that has an image which is a photo of the index card it was written on in '62.

Archeologists are gonna be so confused when they open the vault.

You are glad you aren't watching. President Yamtits is there.

2025-12-13T21:47:50Z

In reply to nevent1q…y5f9
_________________________

You are glad you aren't watching. President Yamtits is there.

Are you watching the game? You gotta see the uniforms. I mean ...

2025-12-13T21:36:55Z

In reply to nevent1q…lu9r
_________________________

Are you watching the game? You gotta see the uniforms. I mean they are amazing and cool as art but SCREAM 1939 Germany.

Someone posted a funny meme about the department of defense ...

2025-12-13T21:27:04Z

Someone posted a funny meme about the department of defense following Marco of times new Roman fame and changing the font to some ornate gothic font.

And then I see the army uniforms for the army navy game.

#cfb

Nostr event nevent1qqsx7szsh874eqzqg366uljqgtn2cctvlyu36nvr0vgvcrejx4v30sczyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8duwrq0uc

2025-12-10T22:11:13Z

🏈 Goddammit Michigan #cfb

Sorry, slow morning.

2025-12-08T13:00:27Z

In reply to nevent1q…czcx
_________________________

Sorry, slow morning.

Nostr event nevent1qqs9v43myz47rh8d2vuqvnf3c50qafwg0j6gz08szvq8vrvn5lwe0sczyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8duve0rwg

2025-12-01T03:43:43Z

Threat intel is utterly impossible. Look at this. All from a fake ...

2025-11-27T04:42:30Z

Threat intel is utterly impossible. Look at this. All from a fake browser update. One person, just clicking on a website causes all of this. How do you create a threat model for this shit?

https://thehackernews.com/2025/11/romcom-uses-socgholish-fake-update.html?m=1

#threatintel #blueteam

Saw that. I don't even know what we are going to do.

2025-11-24T19:25:47Z

In reply to nevent1q…wf06
_________________________

Saw that. I don't even know what we are going to do.

My father in law has one of those. I'll go sniff traffic and ...

2025-11-24T19:24:17Z

In reply to nevent1q…drj7
_________________________

My father in law has one of those. I'll go sniff traffic and report back.

Can we not catch a break ANYWHERE?

Bruce stretches his anthropology chops. The Role of Humans in an ...

2025-11-15T04:41:19Z

Bruce stretches his anthropology chops.

The Role of Humans in an AI-Powered World

https://www.schneier.com/blog/archives/2025/11/the-role-of-humans-in-an-ai-powered-world.html

#ai #philosophy

Old farts of mastodon, unite. I'm looking for replacements ...

2025-11-09T16:11:53Z

Old farts of mastodon, unite. I'm looking for replacements for my Merrills. Their quality has just gone to shit. I need something that slides on, has the same toughness as Merrills, I can fit my orthotics in them, and that are still fairly warm.

#shoes

🏈 I just saw an ad on the local news for the OSU - Penn State ...

2025-11-05T03:45:52Z

🏈 I just saw an ad on the local news for the OSU - Penn State game on the Fox Big Noon Game this weekend.

#cfb #gobucks

Google's developer registration program is fucking ...

2025-11-04T04:46:37Z

Google's developer registration program is fucking terrifying. I wonder if GrapheneOS (npub1kwa…e0nj) minus Google services would make a phone live outside this insanity.

https://www.eff.org/deeplinks/2025/11/application-gatekeeping-ever-expanding-pathway-internet-censorship

If you are in a privacy supporting country, LinkedIn won a court ...

2025-10-28T03:55:18Z

If you are in a privacy supporting country, LinkedIn won a court case so they still gonna scrape your data to train copilot unless you opt out right meow. Settings/Data Privacy

#privacy #linkedin

Sheesh I think this has been the first time I've been able to ...

2025-10-28T02:31:22Z

Sheesh I think this has been the first time I've been able to sit down with a laptop and check in for forever! Has the Internet burned down yet? Are all of you agentic AI now?

Sorry @npub1vc3…axsh and ...

2025-10-22T18:46:20Z

Sorry BrianKrebs (npub1vc3…axsh) and [@jack_daniel](https://mastodon.social/@jack_daniel ) but it's that time of the year again. #fall #woodheat

The servers are protected by Cloudflare for DDOS and like that - ...

2025-10-13T15:45:57Z

In reply to nevent1q…kh72
_________________________

The servers are protected by Cloudflare for DDOS and like that - all of the relevant ports respond as usual. CDN means something else to me - a place to put static content.

So I guess I'd ask what tool would you have in mind?

Ok, nmap people. When I scan a site that is covered by ...

2025-10-13T15:29:55Z

Ok, nmap people.

When I scan a site that is covered by CloudFront, how much of my scan is eaten by CF and how much is making it to the server? Or do I have to go look for myself? Might be hard question, I dunno yet.

#nmap

I haven't been able to connect to their onion in days.

2025-10-09T22:49:55Z

In reply to nevent1q…dazt
_________________________

I haven't been able to connect to their onion in days.

I heard there was a resurgent pawpaw crop in central Ohio because ...

2025-10-04T15:34:29Z

I heard there was a resurgent pawpaw crop in central Ohio because of the particular weather we've had and how warm it is how late in the season. Mine are all packed in for the season, but the yearlings are looking great! #gardening

One can do almost everything in a browser app as one can do in a ...

2025-10-03T02:36:23Z

In reply to nevent1q…jv9t
_________________________

One can do almost everything in a browser app as one can do in a native app. Collectively, we just need to get together a team and build a web app that does that. Well, and then put on our asbestos underwear.

as it turns out, I've been waiting for this moment all my ...

2025-10-03T02:33:19Z

In reply to nevent1q…909d
_________________________

as it turns out, I've been waiting for this moment all my life.

We are glad you do what you do. You are needed now, more than ...

2025-09-30T20:36:35Z

In reply to nevent1q…um4j
_________________________

We are glad you do what you do. You are needed now, more than perhaps ever.

The older I get, the more I understand why roosters just scream ...

2025-09-27T12:44:44Z

The older I get, the more I understand why roosters just scream to start their day.

Nostr event nevent1qqswzw56antys7n27k2q9z26wj2x2vem3a89erkm7g2u49ertxsnsegzyq5ztlhuf36qn2t9q5kd57llm54saudnczt04rlk9rf24xlrzx8duna96k9

2025-09-18T19:43:23Z

Testing please ignore.

You all appear to be correct, thanks everyone for your ...

2025-09-08T15:48:57Z

In reply to nevent1q…ql2c
_________________________

You all appear to be correct, thanks everyone for your experience! It does indeed appear to be powdery mildew. I'm removing the worst leaves and spraying the rest with a baking soda mix. (Milk is expensive!) There's always something new to learn. #gardening

Hey #gardening. I have this white powder all over my zucchini ...

2025-09-08T14:28:40Z

Hey #gardening. I have this white powder all over my zucchini leaves. I thought it was Canadian wildfire smoke leavings. My car is covered in that. But this is getting worse and we've had no more rain. Has anyone seen anything like it?

And look, the "encryptedId" is a base64 encoded unsigned ...

2025-09-05T17:46:47Z

In reply to nevent1q…enr3
_________________________

And look, the "encryptedId" is a base64 encoded unsigned JWT. What fun.

Saw something on a pen test today I haven't seen before. The ...

2025-09-05T17:38:18Z

Saw something on a pen test today I haven't seen before. The application loads the session information from the session storage in the browser rather than from the cookies collection and then adds it as a header to every request. I'm not sure if that's better or worse or what.

I have the Alpha card deck of the most recent rendition of Set. ...

2025-09-04T18:47:36Z

In reply to nevent1q…pah4
_________________________

I have the Alpha card deck of the most recent rendition of Set. Met the developer at Origins a billion years ago.

Sunrise would like to know why I am interrupting her sunbeam. ...

2025-09-02T17:00:45Z

Sunrise would like to know why I am interrupting her sunbeam.

Lotta manly tears. #cfb @npub1855…lucs

2025-08-30T13:50:47Z

Lotta manly tears. #cfb cfb group (npub1855…lucs)

Looks like the baristas have been at it already, and drained that ...

2025-08-24T22:10:50Z

In reply to nevent1q…5aau
_________________________

Looks like the baristas have been at it already, and drained that pumpkin of spice.