Posted by jpluimers on 2026/09/23
HashtopolisHashtopolis is a distributed password recovery tool working with hashcat
Via:
–jeroen
Posted in .NET, C#, Development, Encryption, Hashing, HTML, JavaScript/ECMAScript, Passwords/manages, Pen Testing, PHP, Power User, Python, Scripting, Security, Software Development, TypeScript, Web Development | Leave a Comment »
Posted by jpluimers on 2026/09/11
De beste podcast voor angry nerds (met onder meer veel infosec content):
[WaybackSave/Archive] Jeroen Wiert Pluimers @wiert@mastodon.social on X: “@ngrynerds en via de RSS feeds in je favoriete podcast app of feed-processor vind je hier de Angry Nerds Podcast en Specials terug: – Podcast: … – Specials: … (dacht ik ooit via @CrazyA99nl gekregen, waarvoor eeuwige dank)” / X
- Podcast: [Wayback/Archive] angrynerdspodcast.nl/media/feed.rss
- Specials: [Wayback/Archive] angrynerdspodcast.nl/specials/feed.rss
Deze feeds bevatten helaas GEEN shownotes.
Van onderstaande YouTube kanalen heeft de audio-versie geen shownotes:
Posted in Infosec (Information Security), PodCast, Power User, Security, SocialMedia | Leave a Comment »
Posted by jpluimers on 2026/09/03
About 2 years ago, Authy ceased desktop support (see September 2024 – Agust Tell HN: Twilio quietly removes Authy iOS app from Mac App Store, stops updates | Hacker News); back then I didn’t have time to look for a proper replacement as I was still recovering from the truckload of work moving to a new place and finishing the new place took.
Now I did have some more time and a friend mentioned the open source Ente Auth to me.
So below are some links about it, with the remark that I am also looking for a Stocard replacement which in a sense is structured similarly:
Posted in 2FA/MFA, Authentication, Authy, Ente, LifeHacker, Loyalty Cards, Power User, Security, Stocard | Leave a Comment »
Posted by jpluimers on 2026/08/05
Posted in Bitwarden, Passwords/manages, Security | Leave a Comment »
Posted by jpluimers on 2026/06/03
Interesting, but be aware that using it outside a shielded environment likekly is illegal: [Wayback/Archive] Osmo-fl2k – osmo-fl2k – Open Source Mobile Communications
- osmo-fl2k allows to use USB 3.0 to VGA adapters based on the Fresco Logic FL2000 chip, which are available for around $5, as general purpose DACs and SDR transmitter generating a continuous stream of samples by avoiding the HSYNC and VSYNC blanking intervals.
…
- Operating a transmitter with the unfiltered FL2000 DAC output attached to an antenna outside a RF shielding chamber is dangerous. Don’t do it!
Posted in Development, Hardware Development, Infosec (Information Security), Pen Testing, Power User, Red team, Security | Leave a Comment »
Posted by jpluimers on 2026/05/25
On my list of things to try out when more readily available [Wayback/Archive] Flipper Zero: Amazon.de: Garden
Demos:
Via
–jeroen
Posted in Infosec (Information Security), Pen Testing, Power User, Red team, Security | Leave a Comment »
Posted by jpluimers on 2026/05/19
15 minute important read: [Wayback/Archive] the 90 day disclosure policy is dead :: Himanshu Anand :: Threat Notes
TL;DR: (not sugar coated; read the full post and their follow-ups on the why and how)
Posted in AI and ML; Artificial Intelligence & Machine Learning, Blue team, Development, LLM, Power User, Red team, Security, Software Development | Leave a Comment »
Posted by jpluimers on 2026/05/07
A few years back this trick was shown to screw up %windir%\system32 [Wayback/Archive] Patrick Doyle on Twitter: “@SwiftOnSecurity @RoseAreaZero Delete any file in three easy steps: > takeown /F "example.ext" > icacls "example.ext" /grant "%USERNAME%":F > del "example.ext"“.
Like [Wayback/Archive] SwiftOnSecurity (@SwiftOnSecurity) / Twitter (see the long thread further below), I was expecting that Windows would either prevent you from doing this at all, or allow for easy recovery with System File Protection (now Source: Windows File Protection).
That didn’t prevent or recover it back then.
I wonder if that has been changed by now.
From the above Tweet:
Delete any file in three easy steps:> takeown /F "example.ext" > icacls "example.ext" /grant "%USERNAME%":F > del "example.ext"
Posted in Batch-Files, Development, Power User, Scripting, Security, Software Development, Windows, Windows 10, Windows 11, Windows Development | Leave a Comment »
Posted by jpluimers on 2026/05/04
Ook vandaag even een herinnering aan de NLUUG voorjaarsconferentie 2026 van (komende) donderdag 7 2026 mei in het Van der Valk Hotel Utrecht¹.
Deze keer omdat een goede vriend van me daar spreekt. Arjen Lentz heeft het over A Wizard’s Guide to Foreseeing the Unseen.
Dat klinkt misschien vaag, het concrete resultaat is dat je met analyse van CVE’s veel te weten komt over hun echte root cause. Die blijkt verrassend voorspelbaar, is fixbaar, en kennis daarover is niet alleen nuttig voor adversaries. Het kan jou namelijk helpen bij de development en selectie van wat je zelf gebruikt.
Het volledige programma staat hieronder², eerst de aankondiging van [Wayback/Archive] L⭕️rd Quux RCX CCX: “Over een week is het zover! De enige NLUUG conferentie van 2026. …” – Mastodon
Posted in Blue team, Development, DVCS - Distributed Version Control, git, Infosec (Information Security), Power User, Red team, Security, Software Development, Source Code Management, Systems Architecture | 1 Comment »
Posted by jpluimers on 2026/04/10
Cool: [Wayback/Archive] scr.im « Share your email in a safe way. Get less spam.
Bumped into this via [Wayback/Archive] Mary Branscombe (@marypcbuk) / Twitter.
At the time of writing, it had an invalid TLS certificate, so you would get red warnings when accessing it over HTTPS.
Hopefully that has been fixed by now.
It’s not exactly security through obscurity, but it allows people to access your email after solving a captcha so it is not 100% secure but a lot more secure than otherwise.
I found it 5 years after mailhide got discontinued by Google. I used it on my [Wayback/Archive] Contact form through mailhide.recaptcha.net which Google slowly killed without me noticing likely because Google didn’t want to upgrade it from using reCAPTCHA v1 into v2 or v3.:
Posted in LifeHacker, Power User, Security | Leave a Comment »
