A friendly reminder to never trust manufacturers privacy protections.

I was recently attempting to get an external camera functioning, so I started polling various video devices sequentially to find out where it appeared and stumbled across a previously unknown (to me at least) camera device, right next to the regular camera that is not affected by the intentional privacy flap or "camera active" LED that comes built in.

I had always assumed this was just a light sensor and didn't think any further about it.

The bandwidth seems to drop dramatically when the other camera is activated by opening the privacy flap, causing more flickering.
This was visible IRL and wasn't just an artifact of recording it on my phone.
I deliberately put my finger over each camera one at a time to confirm the sources being projected.

A friend of mine suggested this may be related to Windows Hello functionality at a guess but still seems weird to not be affected by the privacy flap when its clearly capable of recording video.

dmidecode tells me this is a LENOVO Yoga 9 2-in-1 14ILL10 (P/N:83LC)

Command I used for anyone to replicate the finding. (I was on bog standard Kali, but I'm sure you'll figure out your device names if they change under other distros):
vlc v4l2:///dev/video0 -vv --v4l2-width=320 --v4l2-height=240 & vlc v4l2:///dev/video2 -vv --v4l2-width=320 --v4l2-height=240

#Cyber #Security #Infosec #Lenovo #Privacy #Hacking

A friendly reminder to never trust manufacturers privacy protections.

I was recently attempting to get an external camera functioning, so I started polling various video devices sequentially to find out where it appeared and stumbled across a previously unknown (to me at least) camera device, right next to the regular camera that is not affected by the intentional privacy flap or "camera active" LED that comes built in.

I had always assumed this was just a light sensor and didn't think any further about it.

The bandwidth seems to drop dramatically when the other camera is activated by opening the privacy flap, causing more flickering.
This was visible IRL and wasn't just an artifact of recording it on my phone.
I deliberately put my finger over each camera one at a time to confirm the sources being projected.

A friend of mine suggested this may be related to Windows Hello functionality at a guess but still seems weird to not be affected by the privacy flap when its clearly capable of recording video.

dmidecode tells me this is a LENOVO Yoga 9 2-in-1 14ILL10 (P/N:83LC)

Command I used for anyone to replicate the finding. (I was on bog standard Kali, but I'm sure you'll figure out your device names if they change under other distros):
vlc v4l2:///dev/video0 -vv --v4l2-width=320 --v4l2-height=240 & vlc v4l2:///dev/video2 -vv --v4l2-width=320 --v4l2-height=240

#Cyber #Security #Infosec #Lenovo #Privacy #Hacking

You know, when I first read LOTR I didn't understand the bit about how elves die from despair. Then I started working in infosec professionally.

#lotr #infosec

You know, when I first read LOTR I didn't understand the bit about how elves die from despair. Then I started working in infosec professionally.

#lotr #infosec

Stuck in an industry being obliterated by AI like coding? Aside from the trades (a solid choice)....INFOSEC might just be a good target for re-skilling. AI Agents are so hackable it's laughable #infosec

Evil-doers are using a Zendesk email domains to phish. My catch-all email address got a wave of emails overnight "from" organizations who have not implemented SPF, DKIM, and DMARC.

Shame on:
alltrails.zendesk .com
arc .net
bang-olufsen.zendesk .com
community .com
findingfocus.zendesk .com
fivebelow.zendesk .com
gamerhash.zendesk .com
migrationwiz .com
nowgg.zendesk .com
resilio .com
revenue1.zendesk .com
thehunter.zendesk .com
webtoon .com

https://support.zendesk.com/hc/en-us/articles/9833274501786-Important-notice-about-recent-spam-emails-via-Zendesk?ref=activitypub

#security #infosec

Stuck in an industry being obliterated by AI like coding? Aside from the trades (a solid choice)....INFOSEC might just be a good target for re-skilling. AI Agents are so hackable it's laughable #infosec

Holy shit. TIL that Janet Jackson is the only Grammy-winning artist with a CVE.

CVE-2022-38392 indicates that playing Rhythm Nation near certain hard drives will cause a crash, because the song contains a resonate frequency with a 5400RPM spinning disk of a certain diameter and construction.

Neat.

#music #infosec

This dumb password rule is from Virgin Media.

Your password needs to be between 8 and 10 characters long, with no
spaces, and must contain only numbers and letters. The first character
must be a letter.

Feb 2020 Update: policy remains the same but the description is hidden
leaving you to guess the acceptable length/chars. Users are now lef...

https://dumbpasswordrules.com/sites/virgin-media/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

This dumb password rule is from Virgin Media.

Your password needs to be between 8 and 10 characters long, with no
spaces, and must contain only numbers and letters. The first character
must be a letter.

Feb 2020 Update: policy remains the same but the description is hidden
leaving you to guess the acceptable length/chars. Users are now lef...

https://dumbpasswordrules.com/sites/virgin-media/

#password #passwords #infosec #cybersecurity #dumbpasswordrules

起因是看本站的联合实例，发现3个实例不可用，其中两个实例已经死了，另一个是网络安全大站 #infosec.exchange ，我曾经申请过并且有账户。

查看了了infosec.exchange的status https://status.infosec.exchange ，非常良好，前往https://infosec.exchange/about 找了找线索，发现infosec隐藏/封禁了上百个实例，几个大的实例也被隐藏了，比如：misskey.io mstdn.jp mastodon.cloud lemmy.ml……

大部分是不给出原因，偶尔也会给出隐藏原因，比如：
Unmoderated racism
appears to be dead. will remove block after database is purged
Racism promoted by admin
Appears to be unmaintained
iftas:tvec;disinformation;hate-speech
iftas:troll;online-harassment
Highly offensive content
哭了，管理员真的在为他们的用户筛选信息来源（可能是用户善用举报？）管理很勤劳

几个小细节：
相当一部分是NSFW/日语/ #Misskey 实例（防治二次元转发机器人？）
没有中文大实例被隐藏/封禁（可能是中文区和英文安全区不太沟通）

也没有找到我自己的实例，尝试恢复连接，然后执行了尝试连接：admin 恢复了向域名 infosec.exchange 的投递 2026年2月4日 03:24，然后本来是在请求中的账户，取消请求再关注无需同意了，而且可以正常访问infosec站用户&内容

可能是我的实例，时间不对/证书配置有问题而 #infosec 开启了#签名验证（不太可能，肯定不止infosec开启了，但是只有infosec和我的实例联合失败，排除死掉的）
或者#Sidekiq 积压（发现sidekiq失败率为5%）
或者由于连续多次遇到 5xx错误超时，进入退避协议（想起前几天我迁移实例宕机了两小时，而且#hostdzire 网络不太稳定，大概是失败太多，进入退避协议了吧）

对了，查看sidekiq的计划和重试列表，发现主要是三个站：dev.bgme.me（bgme试验站，已主动停止）、mstdn-dev.feddit.social（我的实验站，已主动停止）、dica.natsume.nohost.me（是因为#cloudcone 事故而宕机吗），好像因为三个站都有followers，然后在反复推送我的帖子给他们，嗯好像是这样（…）
还有两个是找不到服务器地址和timeout
已停滞里：
https://fedi.cpluspatch.com 这个站好像死了
https://kitsunes.club 死了
https://geeknews.chat 证书过期，是mastohost托管的，可能是取消续费了，死了
https://bodybag.zip 没死，但是图片全坏了，所以拉取不下来图片
https://pont-bl.eu.org 死了
等等等等

#mastodon #sysadmin #moderation #fediverse

起因是看本站的联合实例，发现3个实例不可用，其中两个实例已经死了，另一个是网络安全大站 #infosec.exchange ，我曾经申请过并且有账户。

查看了了infosec.exchange的status https://status.infosec.exchange ，非常良好，前往https://infosec.exchange/about 找了找线索，发现infosec隐藏/封禁了上百个实例，几个大的实例也被隐藏了，比如：misskey.io mstdn.jp mastodon.cloud lemmy.ml……

大部分是不给出原因，偶尔也会给出隐藏原因，比如：
Unmoderated racism
appears to be dead. will remove block after database is purged
Racism promoted by admin
Appears to be unmaintained
iftas:tvec;disinformation;hate-speech
iftas:troll;online-harassment
Highly offensive content
哭了，管理员真的在为他们的用户筛选信息来源（可能是用户善用举报？）管理很勤劳

几个小细节：
相当一部分是NSFW/日语/ #Misskey 实例（防治二次元转发机器人？）
没有中文大实例被隐藏/封禁（可能是中文区和英文安全区不太沟通）

也没有找到我自己的实例，尝试恢复连接，然后执行了尝试连接：admin 恢复了向域名 infosec.exchange 的投递 2026年2月4日 03:24，然后本来是在请求中的账户，取消请求再关注无需同意了，而且可以正常访问infosec站用户&内容

可能是我的实例，时间不对/证书配置有问题而 #infosec 开启了#签名验证（不太可能，肯定不止infosec开启了，但是只有infosec和我的实例联合失败，排除死掉的）
或者#Sidekiq 积压（发现sidekiq失败率为5%）
或者由于连续多次遇到 5xx错误超时，进入退避协议（想起前几天我迁移实例宕机了两小时，而且#hostdzire 网络不太稳定，大概是失败太多，进入退避协议了吧）

对了，查看sidekiq的计划和重试列表，发现主要是三个站：dev.bgme.me（bgme试验站，已主动停止）、mstdn-dev.feddit.social（我的实验站，已主动停止）、dica.natsume.nohost.me（是因为#cloudcone 事故而宕机吗），好像因为三个站都有followers，然后在反复推送我的帖子给他们，嗯好像是这样（…）
还有两个是找不到服务器地址和timeout
已停滞里：
https://fedi.cpluspatch.com 这个站好像死了
https://kitsunes.club 死了
https://geeknews.chat 证书过期，是mastohost托管的，可能是取消续费了，死了
https://bodybag.zip 没死，但是图片全坏了，所以拉取不下来图片
https://pont-bl.eu.org 死了
等等等等

#mastodon #sysadmin #moderation #fediverse

whenever i do security audit work on site, there are two tools that always come with me these days, such are the times in which we live:

1) modified orbic hotspot running eff’s rayhunter, to flag stingray devices in proximity

2) tiny little esp32 running flock-you, the flock camera detector, so i can let folks know they are close by

https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying

https://github.com/colonelpanichacks/flock-you

two little bits of gear running great open source projects that can expose the unseen risks that may be floating around out there

#infosec

once again, @InfobloxThreatIntel out here doing mindblowing research on ultra-sophisticated badness. This actually makes sense out of one mystery I've had lingering in my head.

Compromised Routers, DNS, and a TDS Hidden in Aeza Networks

#infosec #threatintel

https://www.infoblox.com/blog/threat-intelligence/compromised-routers-dns-and-a-tds-hidden-in-aeza-networks/

#LabPlot, the popular open-source data visualization and analysis tool, has just rolled out a new feature: support for importing #Unix and #Windows timestamps.

Try it now:
1️⃣ Download #LabPlot (dev): https://
labplot.org/download.
2️⃣ File > Import > From File.

Check out the merge request for more details:
👉 https://invent.kde.org/education/labplot/-/merge_requests/828

#Data #OpenSource #FreeSoftware #FOSS #DataViz #DataScience #SysAdmin #Infosec #CyberSecurity #DigitalSovereignty