Aaron Soto

@surefire@infosec.exchange
177 Followers
527 Following
6.2K Posts

Teaching was my first love. Packets were my second.

I make classes to teach people how to defend themselves against hackers. In my spare time, I teach college students to compete in cybersecurity competitions, or try to take back my home automation from the cloud.

he/him ๐Ÿณ๏ธโ€๐ŸŒˆ โค๏ธ๐Ÿ’œ๐Ÿ’™

(Profile banner is a sunset sky from underneath a bridge with kayakers and the edge of the Austin city skyline)

Twitter@_surefire_
Githubhttps://github.com/sure-fire

Did you know you can do voice input in Windows by pressing WIN + H? ๐Ÿ‘€

Based on feedback, we're currently rolling out the ability to turn off the profanity filter to those on the latest version of Windows 11 - I hope you **** like it

https://support.microsoft.com/topic/may-28-2025-kb5058499-os-build-26100-4202-preview-d4c2f1ee-8138-4038-b705-546945076f92

Weโ€™re proud to welcome to the Observer masthead @candicequestions and Mary Tuma as special investigative correspondents, joining @stevanzetti as freelance reporters helping us tackle the #environment, reproductive rights, and #extremism respectively: https://www.texasobserver.org/home/staff/

#ReproductiveRights #abortion #healthcare #ClimateChange #news #fascism #journalism #nonprofit #media #environment

Exposing the Unseen: Mapping MCP Servers Across the Internet

"We identified a total of 1,862 MCP servers exposed to the internet. From this set, we manually verified a sample of 119. All 119 servers granted access to internal tool listings without authentication."

this is why I keep a very watchful eye on Knostic about AI stuff, they know the tech, the risks, *and* how human behavior will interact with them.

#infosec #cybersecurity #genai

https://www.knostic.ai/blog/mapping-mcp-servers-study

Exposing the Unseen: Mapping MCP Servers Across the Internet

Knostic mapped 1,862 internet-exposed MCP servers via Shodan. 100 % lacked auth, revealing immature and risky GenAI endpoints.

My objections to use of LLMs, genAI, etc, in descendiing order.

1. Environmental damage.

2. Inaccuracy.

3. Encouraging learned helplessness.

4. Regressing access to websites to that of the era of dial-up modems.

This is what I think of every time I see Microsoft Co-Pilot mentioned:

I have started using uBlock Origin's "Element picker mode" to block every unwanted menu item related to AI tools that keep showing up in my work browser tools, and it is working like a charm.

Don't want the AI summary that pops up every now and then in Jira? Element picker mode.
A small window telling you to use AI to enhance that Confluence page you're trying to put together? Element picker mode.
The icon in the corner of the page to access the chat with the AI agent? You damn well know it's going to be blasted into Element picker mode hell.

I'll be participating in The Subnet Music Project, a new event from @cannibal_goat! During my DJ sets, there will be an SSID being broadcast that you can connect to and download an exclusive mini mix from!

Many DEF CON artists are participating, so be sure to check the official page and watch out for the legit SSID!

https://thesubnetmusicproject.github.io/TheSubnet/

To follow me and all of my sets, check out the list on my website!

https://mvh.dev/dj.html

#DEFCON #DEFCON33 #Hackers

The Subnet

Friendly reminder that when you find something that reinforces your position/worldview, those are the times when it's MOST important to remember to check the source.

Fact checking comes naturally to us when we are trying to disprove something. But we have a huge bias towards accepting things we agree with.

And if someone asks you for a source, don't assume they are trying to contradict / undermine you. If you've done your homework, you already know the source and replying should be easy.

ร—

@VeroniqueB99

ask and you shall receive..

@felis_catus_domesticus @VeroniqueB99

Wow, had one of these when I was a kid (and that is a long time ago...)