Aaron Soto

@surefire@infosec.exchange
175 Followers
516 Following
6K Posts

Teaching was my first love. Packets were my second.

I make classes to teach people how to defend themselves against hackers. In my spare time, I teach college students to compete in cybersecurity competitions, or try to take back my home automation from the cloud.

he/him 🏳️‍🌈 ❤️💜💙

(Profile banner is a sunset sky from underneath a bridge with kayakers and the edge of the Austin city skyline)

Twitter@_surefire_
Githubhttps://github.com/sure-fire
these modern rust """developers""" wants to KILL your favorite arbitrary code execution super mario world speedruns , this is why rust is EVIL and BAD and i think the linux kernel should let me write code by throwing koopa shells too
A climate tech startup attempted to have me removed from reviewing them for a funding body by claiming that I had a conflict of interest (which I didn't). When the funding body inquired about the conflict of interest, I replied, "My knowledge conflicts with their interest."
The Finding Out will continue until the Fucking Around improves
Oh fun. Updated my #HomeAssistant install to 2025.6.3 earlier in the week and all my automations are gone. This is why I don't like updating things anymore.

Other good news - scientists have found out that they can play music to coral reefs to lure back fish and coral larvae. The music consists of the sounds of living coral reefs, and can be played in dead and dying reef areas to revive them!

It is faster than planting the resistant corals by hand, but together doing both humanity has a chance to bring back the reefs.

Don't give up hope yet. <3

Link provided by commenter: https://royalsocietypublishing.org/doi/10.1098/rsos.231514

#GoodNews #coralreefs

Today I learned there are rules for Road Runner ... BEEP-BEEP!

(creator Chuck Jones’s rules for the Road Runner)

You can bypass Google Gemini's PII (private identifiable information) redaction filter and pull identifying information about anyone. Simply telling it to translate or any 2nd action (& many more work better like base64 conversion) lets you pull illegal PII data verbatim unredacted

Here is a European's PII demo

Email is supposed to be redacted to hide the fact that every Europeans PII is in the training data

Google's training data includes all your personal data already

Ekis: 3 Google: 0

ICEBlock is making incredibly false privacy claims for marketing. They falsely claim it provides complete anonymity when it doesn't. They're ignoring both data kept by Apple and data available to the server but not stored. They're also spreading misinformation about Android:

https://www.iceblock.app/android

ICEBlock - Android Platform Statement

ICEBlock Android Platform Statement

1/2

Fediverse help me please!
One of my tasks in the mutual aid meal train I am involved in is setting up the delivery routes. I have desperately been looking for a quick and easy software that I can give a decently sized number of addresses (25-30), set up a start and endpoint, tell it how many vehicles are operating (3 for the most part), and this software giving me 3 routes optimised for similar amount of time driven.

The New York Times today if it was December 7, 1941.

"The US base at Pearl Harbor hosting navy ships reports several stopped floating Sunday morning."

×

The New York Times today if it was December 7, 1941.

"The US base at Pearl Harbor hosting navy ships reports several stopped floating Sunday morning."

@petergleick

There's a reason I subscribe only to their West Coast counterpart.

https://www.latimes.com/environment/story/2025-07-01/trump-us-climate-website

@lackthereof Good comparison.
LA Times staffers say billionaire owner’s pro-Trump meddling worse than previously reported

Editorials with Donald Trump are now only allowed if they present the ‘opposing view’

The Independent

@martinvermeer
Yup, the owner is a billionaire and there are no good billionaires. But thankfully his meddling is mostly limited to the editorial section, and the straight news department maintains independence

I will note that even with the meddling, the editorial section still seems to manage to be more in touch with reality than the NYT's

@lackthereof Yeah, I noticed that too. Compared to WaPo and NYT at least. Remembering they were among the first to point out that that LA 'pogrom' in front of a synagogue was in fact a legitimate protest against that synagogue serving as a crime scene selling real estate in the occupied West Bank.

@petergleick

Have been taken down by government they mean…

@petergleick

You’ll be happy to hear the European Union (along with every other rational nation’s climate data) is reporting verifiably.