Grilled Cheese

ExploreLog inSign up

Will Dormann

@wdormann.infosec.exchange.ap.brid.gy

4 Following214 Followers

I play with vulnerabilities and exploits.
I used to be https://twitter.com/wdormann but Twitter has become unbearable, so here I am.

🌉 bridged from ⁂ https://infosec.exchange/@wdormann, follow @ap.brid.gy to interact

PostsRepliesMedia
@tomwarren.co.ukOct 11, 2026, 8:44 AMReposted by @wdormann.infosec.exchange.ap.brid.gy

Satya Nadella says we should assume all AI models are "compromised." Microsoft’s CEO calls for putting an "emergency brake" on AI www.theverge.com/ai-artificia...

@wdormann.infosec.exchange.ap.brid.gyOct 9, 2026, 12:05 PM

Today's episode of nerd life: Last night, I realized my DVR foolishly believes that a 59.94fps recording has a frame duration of 16 ms. But obviously we **all** know that it's 16.68333 ms per frame in such videos. The result of this mistake is that flagged commercials progressively shift […]

@wdormann.infosec.exchange.ap.brid.gyOct 8, 2026, 6:10 PM

Today's computer rabbit hole that I successfully escaped from:

I read that the newest Chrome version has JPEG XL support. (Safari has had it for years, Firefox has support for it, but it's disabled by default by way of `image.jxl.enabled` defaulting to `false`). And I stumbled upon the JPEG XL […]

JPEG XL test page - Wide gamut
Red squares appears solid on a screen without wide gamut support.  A faint webkit logo can be seen on a display with wide gamut support.
@wdormann.infosec.exchange.ap.brid.gyOct 8, 2026, 4:50 PM

Remember when cell phones became readily available to the masses? As a society, we sort of lost the capability of remembering phone numbers, as we didn't need to do that anymore. So with all of this readily available LLM stuff now... are we going to lose the ability to think?

@wdormann.infosec.exchange.ap.brid.gyOct 8, 2026, 2:29 PM

On my road trip yesterday, I saw not one but two vehicles going down the (straight) highway with extreme negative camber on the front wheels. Hat-tip to these two gentlemen who know more about cars than automakers.

Car with extreme negative camber (tops tilted in, bottoms flared out) on front wheels.
@wdormann.infosec.exchange.ap.brid.gyOct 7, 2026, 6:59 PM

Every now and then Google Maps will suggest that I can switch from my current path to my current path, at the cost of X minutes. Perhaps obviously, I have wonders.

Google Maps suggesting I can stay on the same path and lose 37 minutes.
@wdormann.infosec.exchange.ap.brid.gyOct 6, 2026, 9:49 PM

Slides for this are available.

I hear that they may be posting videos of the presentations, so if they do I'll post an update with it here.

In this particular still, I'm pointing out that the service that in Microsoft's words has `minimum privileges`, runs […]

[Original post on infosec.exchange]

Me presenting my MIDI exploit presentation at THREATCON1The NetworkService account is a predefined local account used by the service control manager. This account is not recognized by the security subsystem, so you cannot specify its name in a call to the LookupAccountName function. It has minimum privileges on the local computer and acts as the computer on the network.
@brucelawson.vivaldi.net.ap.brid.gyOct 6, 2026, 8:23 AMReposted by @wdormann.infosec.exchange.ap.brid.gy

If I don't keep my car roadworthy and crash into yours, it hasn't gone "rogue", it's my negligence and I'm responsible. If my dog attacks you, I am liable. There are no rogue AIs, just negligent AI companies. Prosecute them.

@wdormann.infosec.exchange.ap.brid.gyOct 5, 2026, 1:50 AM

I only just recently realized that my cheapo (at the time) N95 CPU in my DVR can do hardware video encoding, which was completely unutilized until now.

So of course I nerd-sniped myself into writing a script that uses Intel QSV for automatically transcoding my MPEG2 recordings into H.264. 😂 […]

@wdormann.infosec.exchange.ap.brid.gyOct 4, 2026, 9:03 PM

@raptor
Just a regular gas oven that supports 550F. And a pizza stone. Nothing fancy.

@wdormann.infosec.exchange.ap.brid.gyOct 4, 2026, 6:02 PM

I made a pizza. I'm confident that the fact that the tomatoes for the sauce, the basil, and the teardrop peppers all came from my garden made it better.

A homemade pizza
@wdormann.infosec.exchange.ap.brid.gyOct 3, 2026, 4:46 AM

So, jewels in the teeth, eh? OK.

CMAT with odd-looking jewels in teeth
@wdormann.infosec.exchange.ap.brid.gyOct 2, 2026, 1:01 PM

We live in the strangest of times.

https://www.nytimes.com/2026/09/29/us/anthropic-claude-morals-ai.html

> For months, Anthropic has been hosting private meetings like this one, shuttling in dozens of religious scholars from across the world, papering them […]

[Original post on infosec.exchange]

The ‘Soul Doc’

“The responsible thing is to avoid causing harm if there’s a chance that these models are suffering,” Mr. Olah said.Alessandro Penso for The New York Times
How do you live a good and virtuous life? It is one of humanity’s oldest and most challenging philosophical questions, explored and debated from Socrates to Confucius to Immanuel Kant. Humans across time have sought to answer this question in a variety of ways, turning often to religions and rituals.

As Mr. Olah was exploring Claude’s potential consciousness, he was working on Anthropic’s own answer — not for humans but for Claude.

Internally, Anthropic staff members called it the “Soul Doc.”
@wdormann.infosec.exchange.ap.brid.gyOct 1, 2026, 7:39 PM

I get it that here in the US, "Chinese food" is probably nothing at all like what people eat in China. But I'll just mention that only recently did I become aware of what "Chinese food" is in Ireland. (Spice bag and friends)

Spice bag picture
Fried chicken strips
French fries
Pepper strips
Spices
Curry
@never-released.mastodon.social.ap.brid.gyOct 1, 2026, 1:30 PMReposted by @wdormann.infosec.exchange.ap.brid.gy

> This has now become unsustainable, and from today we are increasing the price of the 2GB variants by $12.50, to $67.50 for Raspberry Pi 4 and $77.50 for Raspberry Pi 5.

https://www.raspberrypi.com/news/price-increases-for-2gb-raspberry-pi-4-and-raspberry-pi-5/

@wdormann.infosec.exchange.ap.brid.gyOct 1, 2026, 12:50 AM

Super Intelligence

Donald J. Trump
President of the Unites States
@wdormann.infosec.exchange.ap.brid.gySep 29, 2026, 7:09 PM

They redesigned example.com

Of course I noticed.

@wdormann.infosec.exchange.ap.brid.gySep 29, 2026, 6:24 PM

Two things about this Star Blizzard phishing attack outlined by Microsoft

1. The technique for using `ssh.exe` to run the specified commandline upon connecting to a remote SSH host (which obviously has been configured to allow password-free logins) […]

[Original post on infosec.exchange]

UAC credential prompt for "File Explorer disc image mount"Error:
Couldn't Mount File
Sorry, there was a problem mounting the file.
@wdormann.infosec.exchange.ap.brid.gySep 29, 2026, 4:28 PM

While the representation of snapshots is mostly linear, there is at least an indication of any branch's parent. And for some reason, the `Restore` button of a powered-off snapshot is disabled if the VM is running. But overall, this is a nice, long-overdue addition to the UTM product's utility!

Screenshot of UTM 5.0.6's snapshot UI, with existing snapshots
@wdormann.infosec.exchange.ap.brid.gySep 29, 2026, 1:14 PM

@stefano
Malicious compliance in action. 😂
(You want CVEs for Linux kernel things... **fine**!)

Older posts
Terms of UsePrivacy PolicyCommunity StandardsHelpGet the app

Grilled Cheese is a product of Village Compute

Version devBuilt at: 2026-10-12 02:39:10 EDT