sh0bud

@sh0bud@infosec.exchange
13 Followers
148 Following
119 Posts
Day job is figuring out how to maintain or improve infosec as a FTE. Off time is spent figuring out everything else.

AI voice clones have hit the White House AGAIN, now impersonating the Secretary of State, Marco Rubio, to other Government officials to try to steal secrets and access. Here is a video of me live demoing how quick and easy it is to clone a voice to hack and how to catch AI voice clone attacks in action!

It takes me 2 minutes total to set up a AI voice clone social engineering attack.
I need about 10-15 seconds of a person’s voice to clone it well, spoof a phone call (change caller ID to display another number -- available on the App Store!) and initiate a voice clone attack via call.

Governments, organizations and individuals need to know how to verify identity of caller outside of caller ID and voice match, now!

Gone are the days of trusting caller ID. We can no longer rely on “knowing someone’s voice” or “knowing someone’s face on video call”, I can clone those in minutes in a live audio call or video call.

Verify identity using another method of communication before providing sensitive data, codes, money, etc.

If they call, you can chat, email, DM -- any other method of communication to verify that person is who they say they are FIRST.

Stay politely paranoid, folks.

I put together a little generative sea shanty that writes itself in a browser tab, and wrote up some notes about that process https://parkerhiggins.net/2025/06/generating-infinite-sea-shanty-in-the-browser/
Generating an infinite sea shanty in the browser

For a project I’m working on, I wanted to generate an endless looping soundtrack that felt like a sea shanty continuing indefinitely without a fixed melody. This proved to be a fun exercise for both musical and technical reasons, so I thought I’d write up some thoughts on how that came together.

parker higgins dot net

What is infinity, and why it's not trivial to show that 0.9999... is equal to 1:

https://lcamtuf.substack.com/p/09999-1

0.9999... ≊ 1

What is infinity, and why it's hard to show that 0.9999... is (or isn't) equal to 1.

lcamtuf’s thing
The image at the top of the google search page today is a game, and my webfilter blocks "games" . As a result, google search is slow or never, and users have to switch to another search site.
If we mean "passwords", can we just say that rather than using the overly broad term "credentials"? Let's all speak a little more plainly.

In 2012, French beekeepers encountered an unusual phenomenon when they discovered blue and green #honey in their hives. This strange coloration immediately aroused the interest and curiosity of beekeepers, and they went in search of the cause. In their investigations, they found that the bees were collecting colored sugar from a nearby M&M factory.

The factory had left remnants of colored sugar in the candy manufacturing process, and the bees had used this sugar as a food source.

🌹 This weekend, the Grateful Dead will be honored at the Kennedy Center. Join in the celebration by listening to one of the 17,000 #GratefulDead concert recordings preserved at the Internet Archive: https://blog.archive.org/2024/12/05/celebrate-the-grateful-dead-with-the-internet-archive/
Celebrate the Grateful Dead with the Internet Archive | Internet Archive Blogs

Happy 37th anniversary of the Max Headroom Incident, to those who celebrate.
linux is made by boiling linseed oil. the resulting mixture, or 'kernel', is rolled flat, with additives and dyes added to produce various different decorative patterns and finishes called 'distros'