Scott reshared this.

The media in this post is not displayed to visitors. To view it, please go to the original post.

When returning your work laptop, don't forget to leave IT a little stroopwafel... as a treat!


"For the love of god, wipe down your work laptop before returning it to the IT team" - a memoir.

Scott reshared this.

โœˆ๏ธ New Blog Post: Your Boarding Pass Is a Skeleton Key. Frontier Airlines Doesn't Care.

Frontier's mobile API returns full passport numbers, home addresses, children's DOB, credit card details, and KTNs for any booking. The only auth? A PNR and last name. Printed on every boarding pass.

Reported March 3rd. 105 days later, still live. They fixed the least important vuln and ghosted me on the rest. They also updated the website code and somehow made the leaks worse.

Full writeup: bobdahacker.com/blog/frontier-โ€ฆ

#InfoSec #BugBounty #ResponsibleDisclosure #FrontierAirlines #Security #CyberSecurity #Privacy #Aviation #PCIDSS #DataExposure

reshared this

in reply to BobDaHacker ๐Ÿณ๏ธโ€โšง๏ธ

Whoa. I sorta thought most airlines would have addressed the massive info leaks in their boarding passes, but I guess not. Looks like my advice from years past -- shred your boarding pass and don't post them on social media -- is still sound.

krebsonsecurity.com/2017/08/whโ€ฆ

Scott reshared this.

I continue to track research and am concerned we're taking infections much too lightly. There is a growing body of evidence about all viral infections, including COVID, and its relationship to cancer.

โ€œResearchers caution the evidence is preliminary but say the findings underscore a familiar message for cancer survivors and others at risk: avoid severe viral infections, using vaccines and other reasonable precautions.โ€

latimes.com/science/story/2026โ€ฆ

1/3

Scott reshared this.

in reply to Augie Ray

It takes years or decades to uncover the impact of a viral infection and cancer, but early research on COVID is concerning. Data from the UK Biobank showed cancer survivors who contracted COVID in 2020 were significantly more likely to die of recurring cancer. A different analysis of a US breast cancer database found that breast cancer patients in remission who got COVID were significantly more likely to develop metastatic lung tumors than patients who did not contract the virus. 2/3
in reply to Augie Ray

โ€œWe think that these virus infections can be almost like fuel for the fire.โ€

No doctor will tell you that your cancer is due to your past COVID or other viral infections. Nevertheless, we'd be wise to take those โ€œminorโ€ little colds with a lot more care. Get vaccinated. Take some care during winter when respiratory infections are high. Stay home when you're sick.

The answer isn't fear or isolation; it's knowledge and common sense. 3/3

latimes.com/science/story/2026โ€ฆ

in reply to Augie Ray

Coincidentally, the very next research study I read after posting this suggests that viral infections are a trigger or accelerant for Alzheimer's Disease. "Converging epidemiological, mechanistic, and translational evidence supports a conceptual framework in which infections act as upstream triggers of neuroinflammatory cascades that may accelerate AD pathology."

A cold is not just a cold. COVID is not "just the flu." And influenza isn't just an acute illness.

nature.com/articles/s41380-026โ€ฆ

Scott reshared this.

Just masked for 7 hours in a jury assembly room and courtroom. So, why mask when I keep posting how #COVID19 is near record lows?

1) It's not just about COVID but other viral threats.

2) In a situation like this, the cost/benefit assessment is damn easy. I'm sitting silently in a crowded roomโ€”the cost to wear a mask in that situation is negligible. I just ask myself, โ€œIf I get sick from this, was it worth it?โ€ Clearly, sitting silently in a roomful of strangers would NOT be worth an illness.

Scott reshared this.

in reply to Pete Prodoehl ๐Ÿ•

@rasterweb You might try one with a valve. Early in COVID, people opposed masks with valves, since they tended to protect the wearer and not others. Nowadays, with risks lower and almost no one taking care, I don't think wearing a mask with a valve is problematic. That might help to prevent your glass-fogging problem.
Scott reshared this.

A history of #COVID19 levels in US wastewater to highlight how low it is today.

12/27/2023: COVID's highest ever point: 1089 N Gene:PMMoV

7/30/24: The next surge hits 645 (40% lower)

1/6/25: The next surge peaks at 384 (40% lower)

9/1/25: Surge peaks at 341 (11% lower)

12/29/25: Surge peaks at 160 (53% lower)

Today: COVID's at 11 (93% lower than the last peak).

All told, COVID is now 99% lower than our 2023 peak and 77% lower than our LOWEST LULL in 4 years.)

data.wastewaterscan.org/trackeโ€ฆ

Scott reshared this.

Scott reshared this.

There is little reason for adults to be concerned about BA.3.2, but the same isn't true for kids.

STUDY: "We found that both cohorts of children had lower geometric mean titers against BA.3.2.2 than adults, even though all tested age groups had similar titers against dominant strains NB.1.8.1 and XFG."

Kids are undervaccinated and have been infected by different variants than adults. As of May, just 10% of US children had been jabbed in 2025โ”€26. Get your kids vaxxed!

biorxiv.org/content/10.64898/2โ€ฆ

Scott reshared this.

Question for the #fediverse #admin community. I have a few tiny instances -- #pixelfed, #friendica, and #peertube -- mostly for friends and family, but I've let a few random strangers join (mostly before I started getting lots of obvious spam accounts). I've noticed that these accounts have no posts, no activity, but don't have the obvious hallmarks of spam accounts (no get-rich-quick links in their bio).

Is there another angle here that I should be aware of? I'd hate to find out a year from now that there's some common scam or attack vector that I'm enabling that I'm not aware of.

in reply to ARGVMI~1.PIF

depends on your definition of noisy I guess :P I really like the whirring and clicking of old IBM PC/AT era machines and their peripherals..

.. but I promise you that the datacenter I work in is quite a bit louder. Nvidia in their infinite wisdom for example is using like multiple kilowatts worth fans to cool their HGX trays; absolutely ear-splitting loud and reaching well above 100dB+ in many cases. We're approaching the point normal hearing protection is not enough :woozy_sob:

Scott reshared this.

something I'm finding frustrating recently is

a) I feel like LLMs have helped me learn some programming things that were hard for me to learn previously
b) I'm tired of LLMs being relentlessly pushed on us and do not want to participate in that by talking about my positive experiences
c) there are also lots of hazards associated with using LLMs to generate code that are not that easy to avoid

reshared this

in reply to Cat ๐Ÿˆ๐Ÿฅ— (D.Burch)

I spent a few months in Salt Lake City (visiting the university) and it was weird, but surprisingly enjoyable. The people were very friendly, some were borderline creepy (please join our religion, look how nice we are!) but a lot were just genuinely nice people. I missed the skiing season, but some things I remember:

The library had just won the 'best library in the USA' award a year or so earlier. Absolutely amazing place and there was a fantastic coffee place next door (not sure if it's still open).

This place had the biggest beer list of any place I'd visited (I have since been to Delirium Tremens in Brussels, which has a bit more). Fantastic selection of beer. Their FAQ on the licensing law is fun. Their 50/50 sweet potato fries were great. Deep fried Twinkies are a thing.

The university also had the most successful catering I've seen. They made businesses (a mix of chains and local providers) bit on what they could deliver for $5. The winning bids got space in the food court for free. I ate better food for about half the price of anything in my home institution.

Scott reshared this.

The media in this post is not displayed to visitors. To view it, please go to the original post.

New, by me: A number of high-profile and/or valuable Instagram accounts, including those of the Obama White House and the Chief Master Sergeant for the U.S. Space Force, got hacked and defaced with pro-Iran messaging in the past 24h after people figured out that Meta's AI support assistant could be tricked into resetting account passwords.

From the story:

"A video released on Telegram by pro-Iran hackers claimed to document a remarkably simple exploit that appears to have involved using a VPN connection with an IP address that is in or near the target's usual hometown, requesting a password reset for the account, and then choosing to chat with Meta's AI support assistant. From there, the video shows the attacker told the bot to link the account in question to a new email address, after which the bot dutifully sent that address a one-time code that allowed a password reset."

krebsonsecurity.com/2026/06/haโ€ฆ

#meta #instagram #hack #ai #security

reshared this

in reply to BrianKrebs

Am I the only one who can't understand why some sites only send the "we've gotten a request to change your email" message to the _NEW_ address?? Just did a bunch of changing of emails and this was surprisingly common. Best procedure used was: ask the old email if you requested a change, then verify the new one, then make the change. Worse, send the message to both emails. But this...ยฏ\_(ใƒ„)_/ยฏ
Scott reshared this.

The U.S. FDA has approved XOCOVAยฎ (ensitrelvir), an oral antiviral, for post-exposure prophylaxis (PEP) of #COVID19 in adults and adolescents 12 years of age and older following contact with an individual who has COVID-19. XOCOVA significantly reduced the risk of symptomatic COVID-19 by 67% in uninfected individuals following exposure to an infected individual through Day 10 compared with placebo.

shionogi.com/global/en/news/20โ€ฆ

Scott reshared this.

Scott reshared this.

STUDY: Among people with Long #COVID19: "The pooled prevalence of brain fog was 30%, while cognitive impairment was 25%). Unvaccinated individuals had a greater burden than vaccinated ones. Temporal analyses indicated that prevalence increased with longer follow-up, suggesting symptom persistence or late manifestation."

journals.lww.com/md-journal/fuโ€ฆ

Scott reshared this.

โ‡ง