Fritz Adalis

@FritzAdalis@infosec.exchange
598 Followers
564 Following
28.3K Posts

Infosec Lurker | Technical Debt Collector

It's not for fun, or any sense of community.
It's just trying to dull the pain.

I have friends everywhere.

Pronounshe/him

the UNIX v4 tape reminded me of this story by Ali Akurgal about Turkish bureaucracy:

Do you know what the unit of software is? A meter! Do you know why? In 1992, we did our first software export at Netaş. We wrote the software, pressed a button, and via the satellite dish on the roof, at the incredible speed of 128 kb/s, we sent it to England. We sent the invoice by postal mail. $2M arrived at the bank. 3-4 months passed, and tax inspectors came. They said, “You sent an invoice for $2M?” “Yes,” we said. “This money has been paid?” they asked. “Yes,” we said. “But there is no goods export; this is fictitious export,” they said! So we took the tax inspectors to R&D and sat them in front of a computer. “Would you press this ‘Enter’ key?” we asked. One of them pressed it, then asked, “What happened?” “You just made a $300k export, and we’ll send its invoice too, and that will be paid as well,” we said. The man felt terrible because he had become an accomplice! Then we explained how software is written, what a satellite connection is, and how much this is worth. They said, “We understand, but there has to be a physical goods export; that’s what the regulations require.” So we said: “Let’s record this software onto tape (there were no CDs back then—nor cassettes; we used ½-inch tapes) and send that.” Happy to have found a solution, they said, “Okay, record it and send it.” The software filled two reels, which were handed to a customs broker, who took them to customs and started the export procedure. The customs officer processed things and at one point asked, “Where are the trucks?” The broker said, “There are no trucks—this is all there is,” and pointed to the tape reels on the desk. The customs officer said, “These two envelopes can’t be worth $2M; I can’t process this.” We went to court, an expert committee examined whether the two reels were worth $2M. Fortunately, they ruled that they were, and we were saved from the charge of fictitious export. The same broker took the same two reels to the same customs officer, with the court ruling, and restarted the procedure. However, during the process, the unit price, quantity, and total price of the exported goods had to be entered—as per the regulations. To avoid dragging things out further, they looked at the envelope, saw that it contained tape, estimated how many meters of tape there are on one reel, and concluded that we had exported 1k to 2k meters of software. So the unit of software became the meter.

The FDA is sending warnings to companies that sell breast binders, saying they are medical devices that are regulated. (If you're not familiar with them, they basically help minimize the visual impact of breasts by squishing them, like a sports bra from hell, which is probably pretty nice for folks who have breast tissue and don't want to.)

https://www.fda.gov/inspections-compliance-enforcement-and-criminal-investigations/warning-letters/trans-missie-bv-720852-12162025

Trans-Missie B.V. - 720852 - 12/16/2025

Failure to Register and List/Misbranded

U.S. Food and Drug Administration
Myrrh maid

Pennsylvania Supreme Court rules that the police don’t need a search warrant to request your Google search records because “it is common knowledge that websites, internet-based applications, and internet service providers collect, and then sell, user data.”

🤦🏾‍♂️

https://therecord.media/google-searches-police-access-without-warrant-pennsylvania-court-ruling

Pa. high court rules that police can access Google searches without a warrant

In a decision that only affects Pennsylvanians but could have privacy implications elsewhere, the state's Supreme Court ruled that police did not need a warrant to access a rape suspect's Google searches.

Edit: An apology is in order here. RunZero didn't look up my boss' boss and call them, my boss' boss contacted RunZero and mentioned me. My rant is completely unwarranted. So if you were turned off of RunZero by my mistaken tirade, please reconsider.

I will say it did a great job of inventorying my homelab, better than any other network inventory product I've used (mostly Device42 and some open-source tools) and found gaps I didn't think of.

<rant>
About a month ago I signed up for a trial of Run Zero to evaluate it for my personal systems. It looked like an interesting product, but I didn't think it met my home-lab needs:
* It has a maximum of 100 devices, and I'm already at 88
* It's a closed-source product and I've been bitten before when they rugpull the free version
* It's SaaS-only

Naturally their sales guys emailed me a bunch of times, and I ignored them since I'm not really in the market to purchase the product.

Apparently no lead is safe. Their "account manager" apparently dug up who I worked for and emailed my boss' boss looking for a sale. At no point did their product touch any of my company's systems.

I apparently am dirty on opsec. @runZeroInc , nobody likes these kinds of tactics. Do they ever work? The only other company I've encountered with these kinds of tactics when you download a free trial was Rapid7 with Metasploit, and... oh, they do have someone in common.
</rant>

What do you call a traditional Indian flatbread divided into zero pieces?

NaaN

What do you call it when you order a pizza that's completely naked on one side, beef on the other, and it triggers a divide-by-zero in the ordering website?

NaN pizza with left beef.

North pole dancers
Love how my brand new LG TV forgoes a "mute" button on the remote to instead give me an AI button. Great, really useful stuff.