<unnamed>

Public Key

npub1gxa39sc7wtpmatdx9rkplkplaquyug2vfhk23dl54slsnmuzf45sh7tun6

Profile Code

nprofile1qqsyrwcjcv089sa74knz3mqlmql7swzwy9xymm9gkl62c0cfa7py66gprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntmvvuuh

Publishing to

relay.momostr.pink

Last Notes

2026-08-10 19:43:16 CEST

- reply

W32.Blaster? "Now that's a name I've not heard in a long time. A long time."

2026-08-06 17:51:41 CEST

Just a small favor needed...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/049/360/268/868/476/original/82f7fd0e7c8aa35c.png

2026-08-05 20:15:14 CEST

https://www.felonybench.com/

2026-08-04 21:12:10 CEST

- reply

You can also borrow the money by using the wealth as a collateral - without selling it. In fact, this is what most rich people do.

2026-08-04 21:10:37 CEST

- reply

While I agree with him, it is worth noting that he's been bearish on the stock market (and bullish on gold) pretty much since '00, possibly before. Stopped clock and all that.

2026-08-03 00:15:32 CEST

- reply

The final paragraph of that article is wrong. If I remember correctly, Linux has such an identifier, too - only it's much easier to re-generate it there.
So, basically, if you're going to do naughty things (tm), use TAILS - not your operating system, be it Windows, MacOS, Linux, or whatever.

2026-08-02 10:04:25 CEST

The fix.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/024/873/778/608/368/original/40ea84c6cfdb5246.png

2026-08-01 19:22:40 CEST

A computer can never be held accountable...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/021/406/610/424/529/original/3f2634e34af85d01.png

2026-07-31 22:29:52 CEST

Lulz.
Our sysadmin, who's really a web developer by trade, has started using Cladue.ai for developing frameworks for web design or whatever (not my area of expertise). He's in love with it, says with it he was able to do in 3 days what he normally alone did in 6 months. But his English is much worse than mine - and I'm being polite.
So, at one point, they had a misunderstanding. He told Claude "do it that way" and Claude started lecturing him why doing it "that way" in the framework is a bad idea. He tried to explain the misunderstanding by saying something like "Sorry, I didn't mean to do it that way in the whole framework; I meant to do it that way in this particular part of it" (but in much worse English).
And Claude answered something along the lines of "No need to apologize; I figured out that you're not a native English speaker". 🤣

2026-07-25 10:13:13 CEST

- reply

Give it another 50-80 years of progress and, if we don't destroy ourselves meanwhile, it will become reality.

2026-07-19 08:42:11 CEST

There are two kinds of computer systems: those that have been compromised and those that haven't been compromised yet.

2026-07-13 08:01:42 CEST

OH:
- What does "EBITDA" mean?
- "Earnings Before Iran, Tariffs, and Donald Announcements".

2026-07-10 21:00:34 CEST

How Chat Control was passed - an illustration.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/897/220/018/921/107/original/32cbc5a05a2a3f66.png

2026-07-10 20:51:17 CEST

- reply

I'd gladly use a Chinese model, if it were any good. Unfortunately, they just ain't. Nothing can compare with Claude. Nothing. Kimi is usable (unlike things like ChatGPT, Gemini, or Grok, which are totally useless crap, at least for programming tasks) - but there is a huge difference between "usable" and "as good as Claude". And, yes, I've tried GLM 5.2 too - and it, too, failed to impress me.

2026-07-02 19:15:51 CEST

- reply

Which country were you the prime minister of? I was, apparently, the prime minister of Bulgaria, to my big surprise. I'm also a member of the European Parliament (spoiler alert: not really).
https://intheweights.com/p/vesselin-bontchev
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/851/506/795/105/159/original/d6a6a4e1e2136c05.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/851/509/173/614/460/original/344f5bc799c5ec64.png

2026-06-29 22:17:11 CEST

- reply

I am not sure that this would stand. Surely, an AI agent is just a product and not a person? And a private company has the right to decide which product to allow access to their stuff and which not to. If I prefer to let Claude crawl my web site but not ChatGPT, that's my business and not the government's.

2026-06-29 08:38:02 CEST

Hope-driven development.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/832/015/518/692/999/original/52cd652ce6f98af7.png

2026-06-23 14:42:31 CEST

- reply

My mother wanted our TV connected to the Internet, so that she could watch operas on YouTube or whatever.
"Over my dead firewall's body!" was my reply.

2026-06-18 22:00:39 CEST

Morality is doing what is right, no matter what you are told.
Religion is doing what you are told, no matter what is right.
-- H.L. Mencken (1880–1956)

2026-06-18 21:31:41 CEST

- reply

Tired: The Chinese are spying on everybody via their TVs.
Wired: The Israelis are spying on everybody via the Chinese TVs.

2026-06-15 17:20:34 CEST

- reply

TFW one gets ransomwared by Microsoft...

2026-06-08 23:19:21 CEST

- reply

- How did you figure out that your watch had a tracker, Mr. Bond?
- It's the 21st century, Q - my toaster has a tracker.

2026-06-04 18:26:11 CEST

- reply

Weelll... Decades ago, when I was still traveling to the USA, I found it bizarre that at the Immigrations entrance of the airports, they had an entrance for "Aliens" (instead of "foreigners") - as if we were from Mars or something. So, not particularly new as far as I am concerned.

2026-06-04 09:48:53 CEST

Some perspective:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/690/736/257/925/323/original/9ce60bd859311e37.png

2026-05-30 09:13:30 CEST

Somebody really doesn't like Anthropic... A site, collecting all the bad stuff Anthropic did with Claude:
https://clawd.rip/

2026-05-19 17:18:35 CEST

If you think that AI will solve your problem, you don't understand AI, and you don't understand your problem.

2026-05-14 17:57:40 CEST

Posting a picture of a real Monet painting and saying it's AI-generated. Watch the anti-AI bros pile up in the comments...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/573/749/490/228/120/original/31d6b349f181d58c.png

2026-05-13 17:48:35 CEST

- reply

What would happen? Most likely this:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/568/051/749/156/685/original/c7aace40209373ca.png

2026-05-06 01:07:43 CEST

- reply

Yes

2026-05-05 17:14:19 CEST

This. 👇
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/522/618/474/406/103/original/eed2638c6e1db457.png

2026-05-04 09:29:53 CEST

...then they came for the VPNs...
No, not in China, Russia, or Iran - in the USA. Coming soon to a country or a state near you. Because, "think of the children".
"Utah first state to hold websites liable for users who mask their location with VPNs — law goes into effect, designed to prevent bypassing age checks":
https://www.tomshardware.com/software/vpn/utah-becomes-first-us-state-to-target-vpn-use-with-age-verification-law

2026-04-30 15:03:54 CEST

Not sure if this is real but it sure is funny.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/493/794/064/433/898/original/10fff1555f91931b.png

2026-04-27 07:39:05 CEST

ClownStrike strikes again.
"Critical bug in CrowdStrike LogScale let attackers access files":
https://securityaffairs.com/191343/hacking/critical-bug-in-crowdstrike-logscale-let-attackers-access-files.html

2026-04-14 17:12:17 CEST

- reply

I use such a plugin for the browser (it monitors the ownership changes of the other plugins), but I don't use WordPress, so I don't know. The browser plugin is called "Under New Management".

2026-04-14 07:56:04 CEST

Getting e-mail to work shouldn't be rocket science...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/401/514/469/995/600/original/0bf357fb2ace26e6.png

2026-04-13 08:42:40 CEST

Code reviewing.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/396/035/782/689/072/original/87fbcc10ee8900e0.png

2026-04-12 19:16:58 CEST

- reply

Well, it does make a certain kind of sense. The Strait isn't really "blocked" - it has been converted into a toll booth. Traffic hasn't stopped completely but the only ones who are allowed through are Chinese ships (and those of a handful of other countries), and the only one who profits is Iran for collecting $2 mil per ship. Trump can't force Iran to free the Strait for all traffic, so he's doing what he can - cutting off Iran's profits and the oil to a country unfriendly to the USA.
Of course, it is stupid and will backfire in unpredictable ways, plunging the world further into a crisis - but it's certainly a logical plan any 6-year old could come up with.

2026-04-09 09:19:30 CEST

I am old enough to remember the Vietnam war, the mandatory draft in the USA, and Americans fleeing their own country in order to avoid it. Well, guess what.
"Automatic registration for military draft to be implemented by December":
https://www.stripes.com/theaters/us/2026-04-07/automatic-registration-military-draft-21306855.html

2026-04-02 07:48:55 CEST

- reply

The oil shock will look like a walk in the park when the food shock hits. The closing of the straight of Hormuz has interrupted the flow of fertilizer precisely at a time when they are needed. Even if the war ends a few months from now with a total victory over Iran, it will be too late to plant what needs planting today. A global famine is coming.

2026-03-31 07:53:25 CEST

Abusing the old meme...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/322/232/116/039/619/original/a80b0be1f860d727.png

2026-03-27 07:30:22 CET

"Southwest is charging plus-size passengers a 'fat tax' at the airport":
https://www.sfgate.com/travel/article/southwest-charging-fat-tax-22094860.php
While I can see how it does make sense, isn't it a form of discrimination?

2026-03-24 19:35:59 CET

- reply

I have the impression that you needed some kind of permission/acknowledgement before starting to record a Teams meeting?

2026-03-24 07:46:15 CET

Regarding that WW3 everyone's been talking about...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/282/803/503/163/105/original/02e00d5712d6b400.png

2026-03-23 16:31:07 CET

- reply

The more energy (of any kind) a country has, the better off it is. Germany's energy production is declining. And this is not the result of external factors (e.g., natural disasters or war) - it is the result of Germany's own idiotic policies. Thus - deindustrialization, the society getting poorer. Economic suicide.

2026-03-23 06:50:27 CET

Somebody made Doom run from DNS records... 🤣
https://blog.rice.is/post/doom-over-dns/

2026-03-22 07:46:53 CET

This is a hilarious commentary on the US/Israeli war with Iran:
"God is a comedian":
https://no01.substack.com/p/march-19-21-god-is-a-comedian

2026-03-21 09:08:18 CET

These are real Facebook groups that exist:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/266/139/323/176/063/original/135381dc6262bbb7.png

2026-03-16 06:55:03 CET

The picture of a nation committing economic suicide:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/237/303/688/090/510/original/b93d5fb651a9748d.png

2026-03-11 19:19:27 CET

- reply

Your screenshot is from mobile, mine is from desktop. That's why I supposed that the two may be offering different kinds of access.

2026-03-11 16:20:50 CET

- reply

At least for Twitter, this is not true. Yeah, the page exhorts you to create an account - but it *does* show the post. At least on desktop; maybe it's different on mobile.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/211/216/029/601/971/original/5b89e45d206b31e5.png

2026-03-10 11:51:39 CET

The universal truths of software development.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/204/495/960/001/298/original/c8db3082974dec30.png

2026-03-10 07:12:16 CET

Trump's efficiency.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/203/397/730/989/747/original/9401cef57ca01368.png

2026-03-05 10:11:32 CET

- reply

Do we really know who hit the school? Was it the USA because the AI hallucinated a target, or was it Israel because they don't give a fuck?

2026-03-03 17:16:54 CET

- reply

Do you really *want* to see an alien death cruiser parked in front of our plant, though?

2026-03-03 07:58:05 CET

Slots machine vs vibe colding.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/163/941/607/849/863/original/bc4039be753b9f80.png

2026-02-28 08:23:46 CET

- reply

OpenAI strikes a deal with the Pentagon.
https://www.nbcnews.com/tech/tech-news/trump-bans-anthropic-government-use-rcna261055

2026-02-17 16:44:38 CET

Economics in one lesson.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/086/739/861/915/067/original/cfb9f2511df0d7cc.png

2026-02-16 07:09:29 CET

I asked an AI (Claude) a question about the old MS-DOS viruses, because I had forgotten the information (it couldn't find it, either, probably because it doesn't exist) and at one point it went "according to the anti-virus researcher Vesselin Bontchev...".
I couldn't resist and told it "I *am* Vesselin Bontchev". To which it replied "Oh, it's an honor to meet you!". 🤣 🤣 🤣

2026-02-07 08:56:23 CET

- reply

Maybe it's not AI that's remarkably good at finding vulnerabilities; maybe it's we who're remarkably bad at writing vulnerability-free code...

2026-02-01 19:14:37 CET

- reply

Vincenzo Iozzo.

2026-01-25 16:41:52 CET

Script to remove the AI and other shit from Firefox, Chrome, and Edge via policies:
https://justthebrowser.com/

2026-01-12 11:12:30 CET

Home prices in my country for the past two decades. Tell me again how the anticipation of the introduction of the euro doesn't lead to inflation?
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/881/590/293/991/862/original/b2f86d3c47499b8e.png

2026-01-11 19:29:12 CET

- reply

Time to finally finish your thesis, Tay.

2026-01-09 06:54:00 CET

- reply

I run an ADB honeypot. Is there anything I can do to help you in your research of this issue? Any particular artifacts to look for?

2026-01-07 08:28:05 CET

Well, I didn't have this on my 2026 Bingo card...
"‘Stop sending butt plugs to Bahrain’: Toronto sex store receives letters from U.S. Department of War":
https://www.ctvnews.ca/toronto/article/stop-sending-butt-plugs-to-bahrain-toronto-sex-store-receives-letters-from-us-department-of-war/

2026-01-04 17:50:10 CET

- reply

I don't see how threatening his wife gives the US any leverage against Venezuela. Most Venezuelans are probably happy to be rid of both Maduro and his wife (although just probably would rather that this didn't involve a military invasion).

2026-01-04 13:22:22 CET

My MongoDB honeypot is now open source:
https://gitlab.com/bontchev/mongopot
Visualization (not included in the repo):
https://pandora.nlcv.bas.bg/grafana/d/EysKAV4Dz/mongopot

2026-01-03 19:58:29 CET

- reply

Ah, yes, because the USA had such a great experience running Iraq...

2026-01-03 13:58:03 CET

- reply

Imagine the outcry if Russia did that to Zelensky...

2026-01-01 08:37:02 CET

"New York teachers stunned to learn some students can’t read time on old clocks after phone ban comes into play":
https://www.independent.co.uk/news/world/americas/new-york-phone-ban-clock-time-b2891919.html

2025-12-27 22:50:42 CET

- reply

None here. (If I understand correctly, using the exploit would generate many connections and nothing else.) Not even authentication attempts. Just a few IPs running commands (buildinfo, listDatabases, ismaster, etc.) without prior authentication.
They seem to be looking for databases exposed to the Internet and not protected in any way? Unless something's wrong with the honeypot...

2025-12-27 11:09:11 CET

Not related to the latest MongoDB vulnerability (since it doesn't require authentication), but does anyone know of a good MongoDB honeypot? You know, one that masquerades as a real MongoDB database server and logs the login attempts while returning a "bad credentials" error? (It clearly won't be able to log the passwords because of SCRAM but anything else would be useful.)
All I could find was a logging proxy to a real MongoDB server or a MongoDB server running in a Docker image - but I don't want that.

2025-12-26 17:30:38 CET

"What if Bitcoin was one big mining company?":
https://no01.substack.com/p/what-if-bitcoin-was-one-big-mining
You'd be insane buying its shares.

2025-12-25 13:11:22 CET

- reply

Yes

2025-12-25 07:46:35 CET

Privacy settings are important.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/778/859/376/260/441/original/d6e69560864693ca.png

2025-12-18 20:49:04 CET

"Bavarian pensioner lays trap to catch phone fraudster who was out for his gold":
https://www.theguardian.com/world/2025/dec/18/german-pensioner-lays-trap-catch-fraudsters-after-gold

2025-12-16 17:13:30 CET

- reply

Oh, for God's fucking sake, the overly-indebted governments are so desperate to hunt down every possible cent of income that they're willing to tax robots...

2025-12-16 17:10:16 CET

- reply

Well, before they were serving ads. Same difference.

2025-12-11 19:50:26 CET

- reply

"Artificial intelligence and natural stupidity"

2025-12-10 11:17:03 CET

- reply

Indicators that your machine has been infected with a virus:
- The computer slows down.
- The computer beeps.
- The OS doesn't load.
- The BIOS logo changes. (WTF?!)
- The computer freezes, has BSODs, etc.
(I thought these were indicators that you're infected with CrowdStrike.)

2025-12-10 11:14:56 CET

- reply

- A virus can infect only with the help of the user (I can argue this one for hours).
- MBR-infecting viruses are very widespread and very hard to remove.
- Macro viruses infect templates. (Well, they did 3 decades ago.)
- A logic bomb is a kind of virus.
- Ransomware is a kind of virus.

2025-12-10 11:13:05 CET

- reply

Indicators of a Trojan infection:
- Your DVD drive opens and closes by itself.
- Your screen blinks or the picture turns upside down.
- The wallpaper changes.
- Your printer starts printing.
- Your screensaver changes.
- The sound level of your computer keeps changing up and down.
- Your mouse buttons swap.
- The Windows Start button disappears.
- The Windows taskbar auto hides.
- The keyboard and mouse hang.
Oh, good, now that we know all the symptoms we can determine for sure if we have a Trojan horse on our machine or not.

2025-12-10 11:09:41 CET

- reply

- Attackers can enter your computer/phone via Bluetooth.
- Attackers hide behind 13-14 chained proxies.
- Attackers turn your computer into an FTP server for illicit goods.
- The purpose of a rootkit is to let the attacker execute everything as root.

2025-12-10 11:08:03 CET

- reply

- If you click a link sent to you by the attacker, your machine will be immediately infected.
- Like many others, the lector is confusing multi-factor authentication with two-step verification.
- Always scan the files that you have received via e-mail. (Nevermind that AV does this on-access.)
- Never use public WiFis because the attacker can intercept and MiTM your traffic. Oldie but goldie.
- Malware runs automatically from USB drives when these are inserted.

2025-12-10 11:05:05 CET

I'm attending an on-line lecture on "cyber hygiene". The lector is some old guy who used to be in the military and now works for an infosec company. You wouldn't believe the "useful" stuff I learned there. 👇

2025-12-08 09:14:21 CET

- reply

Obviously, since we still have directory traversal and SQL injection vulnerabilities in 2025.

2025-12-06 08:22:58 CET

The FIFA Peace Prize is a prestigious prize rarely awarded to people who have stopped conflicts between opposing soccer teams, right?

2025-11-27 08:58:31 CET

- reply

No but I have strategies and tools I wish I didn't (have to).

2025-11-24 21:09:54 CET

- reply

I don't know which brand it is, but there *is* some brand of Android TV that exposes the adb interface directly to the Internet. In practice, this means that just by knowing the IP address of the device, you can log into it from anywhere in the world - and log in as root and no password!
There is, of course, a worm/botnet that exploits this. I'm tracking these attacks with my ADB honeypot:
https://pandora.nlcv.bas.bg/grafana/d/6Fh36QEmk/adbhoneypot?orgId=1

2025-11-21 13:15:51 CET

- reply

Trust me, you don't want to date me.

2025-11-20 23:54:13 CET

- reply

Siri actually had funny responses to the command "Open the pod bay doors" but Apple later removed them.
https://www.youtube.com/watch?v=YAjhDx4yoAA

2025-11-16 16:32:19 CET

- reply

Well, can you blame him? He was an expert in collecting underage girls - not in cybersecurity...

2025-11-14 06:59:16 CET

- reply

We (F-PROT) had something similar, minus the telemetry.
The reason for them was to speed up the scanning process. They were short and fast and easy to check. Signature not present - just don't bother scanning any further. Signature present - that by itself doesn't warrant a report but triggers our other, more precise but slower malware identification algorithms.
I don't know what Microsoft is using these for but this might be the idea behind them too.

2025-11-12 21:26:37 CET

- reply

I don't think that it works any more; 94.74.164.136 seems to have been nuked.

2025-11-06 11:58:13 CET

- reply

You "scanned the internet". Lucky you. I couldn't get permission to scan even my own organization. 😢