Five minutes of fun: Hack the Net

https://mr-r3b00t.github.io/attack_the_net/

I'm... not sure Microsoft have thought through the consequences of bolting cloud authentication into the Windows authentication stack.

Have a compromised cloud account password -> user (or attacker) enables passwordless -> keep logging in with compromised password via RDP forever, no MFA
https://infosec.exchange/@wdormann/114433140605981140

Strings Just Got Faster – Inside.java

*This improvement will benefit any immutable Map<String, V> with Strings"

https://inside.java/2025/05/01/strings-just-got-faster/

#jvm #java #scala

In response to customer confusion over the multitude of Copilot-branded products and features, on Wednesday Microsoft announced Copilot Copilot.

This new AI companion will help knowledge workers and consumers navigate the hundreds of other Copilots released by Microsoft. Copilot Copilot can draft prompts to other Copilots and summarize other Copilots' output.

In a disclaimer, Microsoft cautions users that Copilot Copilot may occasionally hallucinate other Copilots.

Copilot Copilot replaces the existing Copilot for Copilot product, but is not to be confused with Copilot for Copilot 365, which will still be offered to enterprise customers who are also, themselves, Copilots.

I remain impressed with all of the people who deal with the physics required to let me pretend that everything in computers is nice and digital.

A few years ago, after grumbling that my Xbox download speeds were low (rarely above 100 Mb/s, even with FTTP and GigE to the router), I discovered that one of the wires in one of the twisted pairs in the cable had snapped a little bit back from the connector. Cutting the end of the cable and popping on a new plug fixed it completely.

With one of the twisted pairs out of action, the endpoints still managed to negotiate a working 100Mb/s connection.

As someone who remembers immense struggles to get 10 Mb/s ethernet working reliably (with coax or twisted pair) in the '90s, this was simply not a failure mode I'd expected. A cable that broken should just stop working, not give me a connection that, for almost all purposes, is completely fine.

ASN: AS15895
Location: Kryvyy Rih, UA
Added: 2025-04-24T00:06

#shodansafari #infosec