TC Fox 💻

I’m still in awe at how absolutely *brutal* this response is. It conveys so much tone in such a succinct manner, as someone who has to write a *lot* of technical reports I am genuinely impressed. God, I love a good root CA drama sesh 🍿

Bring back DANE for HTTPS, for *fucks* sake No system with this much power should have such trivial fuckups with such incredibly high impacts and a blast radius of *everything on the internet*. Trusting the private sector to “pinky swearsies” they’re doing the right thing here isn’t viable anymore

The performance difference between 7zip and Window’s own built-in extractor is pretty astounding 😳

Aww, IPv6 is turning 30 years old in a few months! 🥰 In unrelated, Azure App Service news: azure.microsoft.com/en-us/update...

This might actually be the lamest vendor response I’ve ever seen: www.theregister.com/2025/04/10/o...

Is anyone able to explain to me what parts of Microsoft is a 365, what a Copilot is, and what Windows does? Because I’m finding examples where 365 is sometimes not a cloud thing, Copilot is sometimes not an AI thing, and Windows sometimes is not an OS, and I’m thoroughly fucking confused

this haptic display absolutely rocks. basketball is for everyone.

Sorry I’ve been so quiet on this account lately! There’s so much I want to talk about and 99% of it is “oops that’s related to a pentesting client for work, can’t talk about that” 😒

Definitely been taking a while to get the Wellington OWASP meets back up again, but ducks are now in a row and only thing left is to present something! Currently making progress on my presso to get the ball rolling, should be ready for a (tentatively!) February meetup! Watch this space!

Interviewer: Can you explain this gap in your resume? Pentester: It’s called time-based blind SQL injection.

Looking forward to seeing lots of you at #chcon tomorrow!

Something ingrained, that I realize now others do not have, is knowing the solution to failure is offering a better solution. I have tried shame I have endured compliance. I ground this axe years. You need the market to decide you've won. I sold modern policy baselines to fix user experience. I won.

So glad that Apple moved away from that weird arse design pattern where windows could not be maximised and toolboxes were just floating there and just appeared/disappeared depending on which window had focus, was a pain in the arse 😅

A developer conference running in parallel with a furry convention is pure comedy

HL7: The healthcare “standard” that people “follow”

Had a good time at OWASP New Zealand Day this year! Had a lot of awesome conversations with many interesting people, and definitely inspired to get another talk done soon! Also working through the initial plans for an interesting contribution to the AppSec scene, watch this space!

It's only a one-time pad if it comes from the Padua region of Italy. Otherwise, it's just sparkling preshared key.

If I got a dollar for every time someone launched a training VM for a workshop on a t2/t3/t4 EC2 instance, I would have some dollars 🤦 I wonder why all the exercises suddenly perform like arse 2-3 hours into the workshop, hmmmmm

TIL: you can straight up just add a Windows node to a Kubernetes cluster, and use it to run Windows containers? kubernetes.io/docs/concept...

Hatchery xkcd.com/2958

While VMWare seem to go out of their way to make this as hard as possible to discover, VMWare Workstation Pro is in fact free for Personal Use! Came real in handy when a friend of mine had troubles with VMWare Player while doing labs for his PJPT, got him all upgrades to use the better networking 😁

Overcoming the incentive to dunk on “users” behavior is an important element in maturing your security understanding. You have a set of levers to pull. Human nature is not one of them. Deal with that or be a righteous failure.

Kinda feel guilty that I haven’t subbed to AppSec New Zealand Day 2024, but I am definitely lacking the energy at the moment. *Maybe* I can pull myself together enough to get to CHCon this year, will see.

I shouldn’t have to say this: 👏KALI👏IS👏NOT👏A👏DAILY👏USE👏OS👏 Fuck’s sake, it’s not even all that secure, *by design*. For example, theres no limits on listening on ports <1024 by default. Kernel logs are also readable by any user. Its just a disposable, pre-built VM for pentesting, nothing more 🙄

The pamphlet: “Hacking is such an awe-inspiring and exciting career!” My imagination: *Matrix noises* My career as a consultant 5 years later:

yes it's called uwubernetes, yes i did it to pander to terminally online furries and to make rich old white guys have to say uwu. yw

"Enshittification", except it describes the inevitable misuse of neologisms such that they entirely lose their original meaning and actually just become synonyms for an existing term (in this case, "change I don't like")