Royce Williams
@tychotithonus.infosec.exchange.ap.brid.gy
Just doing my undue diligence.
ISP vet (was AS7782, now AS8047), password cracker (Team Hashcat), security demi-boffin, YubiKey stan, public-interest […]
🌉 bridged from ⁂ https://infosec.exchange/@tychotithonus, follow @ap.brid.gy to interact
ISP vet (was AS7782, now AS8047), password cracker (Team Hashcat), security demi-boffin, YubiKey stan, public-interest […]
🌉 bridged from ⁂ https://infosec.exchange/@tychotithonus, follow @ap.brid.gy to interact
/me drops a 30-year-old hard drive into a 30-year-old computer
Ontrack Disk Manager. Now that's a name I haven't heard in a long time.
And it turns out ... you can still download it (permission granted by the rights holder!)
https://www.philscomputerlab.com/ontrack-disk-manager.html
Ontrack Disk Manager. Now that's a name I haven't heard in a long time.
And it turns out ... you can still download it (permission granted by the rights holder!)
https://www.philscomputerlab.com/ontrack-disk-manager.html
September 17, 2026 at 2:10 AM
/me drops a 30-year-old hard drive into a 30-year-old computer
Ontrack Disk Manager. Now that's a name I haven't heard in a long time.
And it turns out ... you can still download it (permission granted by the rights holder!)
https://www.philscomputerlab.com/ontrack-disk-manager.html
Ontrack Disk Manager. Now that's a name I haven't heard in a long time.
And it turns out ... you can still download it (permission granted by the rights holder!)
https://www.philscomputerlab.com/ontrack-disk-manager.html
Reposted by Royce Williams
An important, timely reminder:
September 15, 2026 at 9:29 PM
An important, timely reminder:
Reposted by Royce Williams
CISA wants to hire infrastructure security experts who can work broadly across sectors, rather than people specializing in certain sectors, acting CISA Director Nick Andersen told reporters today at Google's Cyber Defense Summit.
My story: www.cybersecuritydive.com/news/cisa-cr...
My story: www.cybersecuritydive.com/news/cisa-cr...
CISA looks to recruit general infrastructure security experts rather than sector-focused advisers
“I need people that can pivot from day to day,” the agency’s acting chief told reporters.
www.cybersecuritydive.com
September 16, 2026 at 4:02 PM
CISA wants to hire infrastructure security experts who can work broadly across sectors, rather than people specializing in certain sectors, acting CISA Director Nick Andersen told reporters today at Google's Cyber Defense Summit.
My story: www.cybersecuritydive.com/news/cisa-cr...
My story: www.cybersecuritydive.com/news/cisa-cr...
Reposted by Royce Williams
being continuously exposed to people saying "sentience" when they mean "sapience" is going to be my villain origin story
September 15, 2026 at 8:47 PM
being continuously exposed to people saying "sentience" when they mean "sapience" is going to be my villain origin story
Reposted by Royce Williams
Did you update to iOS 27? Congratulations! You've now been enrolled in Apple Intelligence, because Apple knows better about what you want than you do.
1. Starting with iOS 27, there is no top-level `Apple Intelligence` setting that you can turn off.
2 […]
[Original post on infosec.exchange]
1. Starting with iOS 27, there is no top-level `Apple Intelligence` setting that you can turn off.
2 […]
[Original post on infosec.exchange]
September 15, 2026 at 1:12 PM
Did you update to iOS 27? Congratulations! You've now been enrolled in Apple Intelligence, because Apple knows better about what you want than you do.
1. Starting with iOS 27, there is no top-level `Apple Intelligence` setting that you can turn off.
2 […]
[Original post on infosec.exchange]
1. Starting with iOS 27, there is no top-level `Apple Intelligence` setting that you can turn off.
2 […]
[Original post on infosec.exchange]
So the Transcend flash-IDE drives (to replace spinning rust in legacy computers) ... pretend they support SMART, but all the values are zero, so you can't tell actual power-on ours, etc.?
September 15, 2026 at 6:48 AM
So the Transcend flash-IDE drives (to replace spinning rust in legacy computers) ... pretend they support SMART, but all the values are zero, so you can't tell actual power-on ours, etc.?
Reposted by Royce Williams
One perk of working for Red Hat was the ability to use a self-managed OS. However, this is coming to an end due to compliance requirements. I'm not comfortable with having my personal private keys on a managed system, so I moved my SSH key, GPG key, and electronic signature certificate to a […]
Original post on social.vivaldi.net
social.vivaldi.net
September 14, 2026 at 3:34 PM
One perk of working for Red Hat was the ability to use a self-managed OS. However, this is coming to an end due to compliance requirements. I'm not comfortable with having my personal private keys on a managed system, so I moved my SSH key, GPG key, and electronic signature certificate to a […]
"I replaced the only part of this item critical to establishing provenance" isn't the pro move you're trying to position it as, eBay seller.
And you know it isn't.
And you know it isn't.
September 14, 2026 at 2:28 PM
"I replaced the only part of this item critical to establishing provenance" isn't the pro move you're trying to position it as, eBay seller.
And you know it isn't.
And you know it isn't.
Sweaty! At the Costco
September 13, 2026 at 9:47 PM
Sweaty! At the Costco
I assume there's been a sharp uptick in requests for API access to commercial grade data / frameworks / engines, but for leaving academic nor commercial use, just "I'm writing this thing for me". It's not, it feels like an interesting middle ground in the licensing space.
September 13, 2026 at 9:36 PM
I assume there's been a sharp uptick in requests for API access to commercial grade data / frameworks / engines, but for leaving academic nor commercial use, just "I'm writing this thing for me". It's not, it feels like an interesting middle ground in the licensing space.
Reposted by Royce Williams
if i rig up a random number generator to a bomb, program it to generate a number between 1 and 20 every five minutes, set the bomb to go off if i roll a 20, begin the random number generator, then leave the room, i am liable for when the bomb goes off. the fact that a deeply stupid […]
Original post on wandering.shop
wandering.shop
September 12, 2026 at 11:53 AM
if i rig up a random number generator to a bomb, program it to generate a number between 1 and 20 every five minutes, set the bomb to go off if i roll a 20, begin the random number generator, then leave the room, i am liable for when the bomb goes off. the fact that a deeply stupid […]
Reposted by Royce Williams
RE: https://social.jpoesen.com/@jpoesen/117252024240675431
Omarchy-as-Linux-distro is a front for Omarchy-as-political-movement. We are watching in real time as this is being established.
Not enough people are aware of what's happening here. Not enough people realize the gravity and weight of […]
Omarchy-as-Linux-distro is a front for Omarchy-as-political-movement. We are watching in real time as this is being established.
Not enough people are aware of what's happening here. Not enough people realize the gravity and weight of […]
Original post on social.lol
social.lol
September 11, 2026 at 11:55 AM
RE: https://social.jpoesen.com/@jpoesen/117252024240675431
Omarchy-as-Linux-distro is a front for Omarchy-as-political-movement. We are watching in real time as this is being established.
Not enough people are aware of what's happening here. Not enough people realize the gravity and weight of […]
Omarchy-as-Linux-distro is a front for Omarchy-as-political-movement. We are watching in real time as this is being established.
Not enough people are aware of what's happening here. Not enough people realize the gravity and weight of […]
See, it's like an Arnold Palmer, but mixing two different kinds of Listerine.
September 12, 2026 at 8:27 AM
See, it's like an Arnold Palmer, but mixing two different kinds of Listerine.
Scratching some retrocomputing itches last weekend, I didn't have "Argon2 memory hardness won't fit politely within this system's total physical RAM, better switch to bcrypt" bingo card ... but it totally makes sense in retrospect.
September 11, 2026 at 5:33 PM
Scratching some retrocomputing itches last weekend, I didn't have "Argon2 memory hardness won't fit politely within this system's total physical RAM, better switch to bcrypt" bingo card ... but it totally makes sense in retrospect.
Reposted by Royce Williams
Last year, a Georgia Tech team won DARPA's AI vulnerability-hunting competition. That team's leader now works for Microsoft. He told me about the shocking success of his multi-agent code scanner that's now reviewing everything Microsoft's developers create.
September 11, 2026 at 3:34 PM
Last year, a Georgia Tech team won DARPA's AI vulnerability-hunting competition. That team's leader now works for Microsoft. He told me about the shocking success of his multi-agent code scanner that's now reviewing everything Microsoft's developers create.
Reposted by Royce Williams
A fun read:
"A Comparative Security Analysis of Four Cloud-based Password Managers", Scarlata, et al.
"After a closer look, we have seen that password managers are far from simple: they have evolved to include complicated protocols for key synchronisation, recovery and rotation, sharing of […]
"A Comparative Security Analysis of Four Cloud-based Password Managers", Scarlata, et al.
"After a closer look, we have seen that password managers are far from simple: they have evolved to include complicated protocols for key synchronisation, recovery and rotation, sharing of […]
Original post on wandering.shop
wandering.shop
September 11, 2026 at 12:51 AM
A fun read:
"A Comparative Security Analysis of Four Cloud-based Password Managers", Scarlata, et al.
"After a closer look, we have seen that password managers are far from simple: they have evolved to include complicated protocols for key synchronisation, recovery and rotation, sharing of […]
"A Comparative Security Analysis of Four Cloud-based Password Managers", Scarlata, et al.
"After a closer look, we have seen that password managers are far from simple: they have evolved to include complicated protocols for key synchronisation, recovery and rotation, sharing of […]
`ddrescue` is one of the Geek Wonders of the World. So deceptively simple, so elegant in its sparseness, so thorough in its understanding of the problem space.
`$times_bacon_saved++;`
`$times_bacon_saved++;`
September 10, 2026 at 11:30 PM
`ddrescue` is one of the Geek Wonders of the World. So deceptively simple, so elegant in its sparseness, so thorough in its understanding of the problem space.
`$times_bacon_saved++;`
`$times_bacon_saved++;`
Hell is other people's web searches.
September 10, 2026 at 3:28 AM
Hell is other people's web searches.
Reposted by Royce Williams
I just learned from a meeting with radio astronomers that AST SpaceMobile is already disrupting GPS signals with only a handful of direct-to-device satellites in orbit. This seems... bad. And like someone in some government somewhere should maybe care about this?
September 9, 2026 at 6:53 PM
I just learned from a meeting with radio astronomers that AST SpaceMobile is already disrupting GPS signals with only a handful of direct-to-device satellites in orbit. This seems... bad. And like someone in some government somewhere should maybe care about this?
Reposted by Royce Williams
The FBI cyber strategy's biggest promise is that the bureau will start doing more frequent takedown operations against hackers' infrastructure.
As part of that increased tempo, the FBI wants to work more closely with a wider range of industry partners that can augment its own capabilities.
As part of that increased tempo, the FBI wants to work more closely with a wider range of industry partners that can augment its own capabilities.
September 9, 2026 at 3:44 PM
The FBI cyber strategy's biggest promise is that the bureau will start doing more frequent takedown operations against hackers' infrastructure.
As part of that increased tempo, the FBI wants to work more closely with a wider range of industry partners that can augment its own capabilities.
As part of that increased tempo, the FBI wants to work more closely with a wider range of industry partners that can augment its own capabilities.
Reposted by Royce Williams
In honor of Star Trek's 60th anniversary, here's my favorite Star Trek story ever. www.npr.org/2011/01/17/1...
Star Trek's Uhura Reflects On MLK Encounter
Nichelle Nichols caused a sensation in the 1960s for her role as Lieutenant Uhura in the classic television series, "Star Trek." It was one of the first times a black woman was cast as a main characte...
www.npr.org
September 8, 2026 at 10:08 PM
In honor of Star Trek's 60th anniversary, here's my favorite Star Trek story ever. www.npr.org/2011/01/17/1...
Wow, and I thought that the "saying goodbye to laptop stickers" problem was hard.
September 8, 2026 at 11:01 PM
Wow, and I thought that the "saying goodbye to laptop stickers" problem was hard.
Reposted by Royce Williams
> Tesla put its breathtakingly ugly Cybercab on Austin streets Thursday: it has no steering wheel, no pedals, and no door handles. Tesla published an emergency guide on its website telling first responders the robotaxi can be pushed to clear a lane, but warns that pushing it over 5mph risks […]
Original post on infosec.exchange
infosec.exchange
September 8, 2026 at 4:29 PM
> Tesla put its breathtakingly ugly Cybercab on Austin streets Thursday: it has no steering wheel, no pedals, and no door handles. Tesla published an emergency guide on its website telling first responders the robotaxi can be pushed to clear a lane, but warns that pushing it over 5mph risks […]