Allan Que
@allan.run
InfoSec worker. Husband. Tech junkie. Learns something every day.
GPG key: https://github.com/aque.gpg
GPG key: https://github.com/aque.gpg
Reposted by Allan Que
Earth at night viewed from space (watch fullscreen).
August 6, 2025 at 10:45 PM
Earth at night viewed from space (watch fullscreen).
More applications should implement this mechanism to protect user data against Microsoft Recall.
We're ready for Microsoft Recall and the automatic screenshots it takes of everything on your desktop.
Signal Desktop on Windows now includes support for a new "Screen security" feature designed to block screenshots of your Signal chats.
signal.org/blog/signal-...
Signal Desktop on Windows now includes support for a new "Screen security" feature designed to block screenshots of your Signal chats.
signal.org/blog/signal-...
By Default, Signal Doesn't Recall
Signal Desktop now includes support for a new “Screen security” setting that is designed to help prevent your own computer from capturing screenshots of your Signal chats on Windows. This setting is a...
signal.org
June 8, 2025 at 6:03 AM
More applications should implement this mechanism to protect user data against Microsoft Recall.
Malware now hides behind fake CAPTCHAs not just fake ads and search results. www.pcmag.com/news/microso...
Microsoft Finds Password-Stealing Lumma Malware on 394,000 Windows PCs
The malware often hides behind fake CAPTCHAs and has been used to commit financial fraud. Microsoft took down 2,300 domains that ran it and updated Defender to identify it.
www.pcmag.com
May 24, 2025 at 7:39 PM
Malware now hides behind fake CAPTCHAs not just fake ads and search results. www.pcmag.com/news/microso...
Reposted by Allan Que
Hacking US crosswalks to talk like Zuck is as easy as 1234
Hacking US crosswalks to talk like Zuck is as easy as 1234
AI-spoofed Mark joins fellow billionaires as the voice of the street – here's how it was probably done
Video Crosswalk buttons in various US cities were hijacked over the past week or so to – rather than robotically tell people it's safe to walk or wait – instead emit the AI-spoofed voices of Jeff Bezos, Elon Musk, and Mark Zuckerberg.…
dlvr.it
April 19, 2025 at 1:06 PM
Hacking US crosswalks to talk like Zuck is as easy as 1234
Monday could into another long day for a lot of admins.
Widespread Microsoft Entra lockouts tied to new security feature rollout
Widespread Microsoft Entra lockouts tied to new security feature rollout
Windows administrators from numerous organizations report widespread account lockouts triggered by false positives in the rollout of a new Microsoft Entra ID's "leaked credentials" detection app called MACE.
www.bleepingcomputer.com
April 20, 2025 at 4:23 AM
Monday could into another long day for a lot of admins.
Attacks like this have been around for some time but AI is the latest way to entice unsuspecting victims.
www.msn.com/en-us/news/t...
www.msn.com/en-us/news/t...
MSN
www.msn.com
March 16, 2025 at 8:34 PM
Attacks like this have been around for some time but AI is the latest way to entice unsuspecting victims.
www.msn.com/en-us/news/t...
www.msn.com/en-us/news/t...
O365 Outlook and Teams outage today. I was seeing redirect loops and did not make it to my Inbox. Seems to be fixed now.
March 1, 2025 at 10:34 PM
O365 Outlook and Teams outage today. I was seeing redirect loops and did not make it to my Inbox. Seems to be fixed now.
Reposted by Allan Que
New: Cold Weather Advisory
Very cold temperatures in the single digits and wind chills as low as 5 below expected.
From 6 PM Sunday to noon Monday.
The cold wind chills as low as 5 below zero could result in hypothermia if precautions are not taken.
Wear appropriate clothing, a hat, and gloves.
Very cold temperatures in the single digits and wind chills as low as 5 below expected.
From 6 PM Sunday to noon Monday.
The cold wind chills as low as 5 below zero could result in hypothermia if precautions are not taken.
Wear appropriate clothing, a hat, and gloves.
January 18, 2025 at 6:00 PM
New: Cold Weather Advisory
Very cold temperatures in the single digits and wind chills as low as 5 below expected.
From 6 PM Sunday to noon Monday.
The cold wind chills as low as 5 below zero could result in hypothermia if precautions are not taken.
Wear appropriate clothing, a hat, and gloves.
Very cold temperatures in the single digits and wind chills as low as 5 below expected.
From 6 PM Sunday to noon Monday.
The cold wind chills as low as 5 below zero could result in hypothermia if precautions are not taken.
Wear appropriate clothing, a hat, and gloves.
Reposted by Allan Que
If you can't make it to HOPE but still want to participate and support the conference, we also have virtual tickets! store.2600.com/products/tic...
TICKETS TO HOPE_16 (VIRTUAL ATTENDEE)
If you want to participate in HOPE_16 but aren't able to attend in person, you can be a virtual attendee! It's also a great way to support HOPE and ensure future conferences. More tickets sold means a...
store.2600.com
January 16, 2025 at 6:06 PM
If you can't make it to HOPE but still want to participate and support the conference, we also have virtual tickets! store.2600.com/products/tic...
Our first snow event for 2025!
January 11, 2025 at 12:51 AM
Our first snow event for 2025!
Wishing all a happy, healthy, and peaceful new year! 🎉
January 1, 2025 at 6:56 AM
Wishing all a happy, healthy, and peaceful new year! 🎉
Machine Games made a great and fun game with Indiana Jones and the Great Circle. I can't put this down and I'm taking my time doing all the side quests. Use of the journal and camera for puzzles and hints just fits. It can get challenging but doesn't feel tedious.
December 25, 2024 at 7:02 PM
Machine Games made a great and fun game with Indiana Jones and the Great Circle. I can't put this down and I'm taking my time doing all the side quests. Use of the journal and camera for puzzles and hints just fits. It can get challenging but doesn't feel tedious.
I hope they let him keep it in the end!
December 23, 2024 at 11:32 PM
I hope they let him keep it in the end!
Skipping Bot Fight Mode is not possible since it is not part of their Ruleset Engine. The only option is to disable it.
Ref: developers.cloudflare.com/bots/get-sta...
Ref: developers.cloudflare.com/bots/get-sta...
December 22, 2024 at 9:11 PM
Skipping Bot Fight Mode is not possible since it is not part of their Ruleset Engine. The only option is to disable it.
Ref: developers.cloudflare.com/bots/get-sta...
Ref: developers.cloudflare.com/bots/get-sta...
Chat "resolve iss did" errors were not from my PDS but relayed from proxy. Data path is Client > PDS > api[.]bsky[.]chat (proxy) > PDS (did.json). This error was due to Cloudflare WAF blocking the api proxy lookup to /.well-known/did.json due to Bot Fight Mode.
December 22, 2024 at 8:52 PM
Chat "resolve iss did" errors were not from my PDS but relayed from proxy. Data path is Client > PDS > api[.]bsky[.]chat (proxy) > PDS (did.json). This error was due to Cloudflare WAF blocking the api proxy lookup to /.well-known/did.json due to Bot Fight Mode.
Thanks. I'll check those out. It's hard to put this down knowing how close I am to getting things to work.
December 15, 2024 at 11:10 PM
Thanks. I'll check those out. It's hard to put this down knowing how close I am to getting things to work.
I tried that and switched to Private Browser too. No CORS message in the console - just 401s. I'm wondering if the old did:plc is cached since I am using the same handle. If I may ask, which Discord did you happen to see it-API Touchers or PDS Admin? I'll try scrolling thru them.
December 15, 2024 at 11:03 PM
I tried that and switched to Private Browser too. No CORS message in the console - just 401s. I'm wondering if the old did:plc is cached since I am using the same handle. If I may ask, which Discord did you happen to see it-API Touchers or PDS Admin? I'll try scrolling thru them.
I get notifications that contain the DM message so that part is working.
December 15, 2024 at 10:54 PM
I get notifications that contain the DM message so that part is working.
That's interesting. I added that header to the response but there is no change. Here is the log from docker:
{"level":50,...,"name":"xrpc-server","status":401,"message":"could not resolve iss did","name":"AuthenticationRequired","msg":"error in xrpc"}
{"level":50,...,"name":"xrpc-server","status":401,"message":"could not resolve iss did","name":"AuthenticationRequired","msg":"error in xrpc"}
December 15, 2024 at 10:41 PM
That's interesting. I added that header to the response but there is no change. Here is the log from docker:
{"level":50,...,"name":"xrpc-server","status":401,"message":"could not resolve iss did","name":"AuthenticationRequired","msg":"error in xrpc"}
{"level":50,...,"name":"xrpc-server","status":401,"message":"could not resolve iss did","name":"AuthenticationRequired","msg":"error in xrpc"}
Migrated to using did:web as identifier. All but DMs seem to work. I am getting a "could not resolve iss did" error.
December 15, 2024 at 9:19 PM
Migrated to using did:web as identifier. All but DMs seem to work. I am getting a "could not resolve iss did" error.