roachy

Pro tip: Don't edit DNS zone files drunk...... 😳

We've created a 'links' page for our website! On there you will find links to: - All the current UK BSides events - Community focused UK events - London focused community groups You can find it here: bsides.london/links #Security #BSides #London #BSidesLDN2026 #Links

🚨July Speaker Update🚨 We've got a couple of brilliant talks lined up for July thanks to Harvey Baxter and @TomNomNom Meeting on the 8th July at the usual place and time - all details in the link: dc151.org/posts/july-202…

Had to update the meme for Claude Fable 5.

🚨Update for the meetup on the 10th of June🚨 This month we have @ScottMcGready delivering a talk about the strange things he's found in buckets, and @matthewwilkes discussing cookie recipes...... or something. Hope to see as many of you as possible dc151.org/posts/june-202…

Getting "spiders on drugs vibes from this" youtube.com/watch?v=sHzdsF…

@TracketPacer Props to you for finding the only bag of soft cage nuts in the known universe...... 30 years of this shit and I can't feel my fingertips

i found some cage nuts

@_Freakyclown_ I can also add a "shutdown -h now" in the wrong terminal at 4pm on a Friday on a box with dysfunctional IPMI 200 miles away.

If you have never done this, your not messing around enough. It’s a rite of passage, it supposed to happen!

Oh shit. Is it that time already? Bugger. We'd better get a social media post out....... Sorry for the late announcement this month folks. We've got a couple of great speakers though! Details in the link: dc151.org/april-2026-mee…

🎮 LAST CALL, PLAYERS 🎮 The clock is ticking… The BSides Leeds CFP closes TODAY! This is your chance to press START on your talk, share your knowledge, and level up the community. Whether you're a first-time speaker or a seasoned pro, we want to hear your ideas!

We’re excited to launch our Call for Sponsors for BSides London 2026. BSides London is entirely community-driven and funded only through sponsorship, it's your support that makes this event possible! Info pack: bsides.london/s/ponsorship20… #BSidesLDN2026 #BSides #London #Sponsors

@Teddybreath @UK_Daniel_Card I mean, it's a huge improvement on the Palo Alto booth strategy....... bbc.co.uk/news/articles/…

@UK_Daniel_Card Putting vulnerabilities in wrist locks until they’re no longer dangerous!

that is so weird........

@_RobbieMoore Not wanting to be partisan @_RobbieMoore , but do you not think that slashing public services might have created a significant strain on resources that we're still feeling the impact of now?

The shocking footage of a ram raid at Colin Appleyard Motorcycles is another example of the organised mafia-style gangs still infecting our area. In Parliament, I asked the Minister for Policing and Crime what the government is doing to clamp down on these criminals If you have any information, dashcam footage from the Coney Lane area, or have seen these bikes listed online, please contact West Yorkshire Police via 101 or use the live chat options at westyorkshire.police.uk/livechat quoting reference 13260141649. Information can also be given anonymously via Crimestoppers on 0800 555 111 We need to get these criminals off our streets for good.

The use of the word “limited” is a great way of skewing statistics, especially when you consider millions of customers. My wife’s work includes looking for evidence of domestic violence. She said this bank incident would trigger a lot of cases. People don’t think of wider issue

@myexploit2600 The "no harm, no foul" response to this has been absolutely shocking. I'd not thought about the DV impact (which is terrifying) but was thinking more about fraud that could occur as a result of knowlege of historical transactions.....

@_Freakyclown_ Oh look. A whole cluster of "nopes" 😱

By Merlin’s Merkin this is a nope from me! Even though I have no problem with them, this is just Indiana Jones levels of things that nothing should be allowed to do. #burnitall

🎖️ BSides London 2026 🎬'No REST 'til Hammersmith' 📅 12th December 2026 🏛️ Novotel London West 📜CFP open 1 Aug-30 Sept 🎟️Tickets available on the 1st of Sept, Oct & Nov 😍Sponsor info pack available in April 🌏BSides.London #BSidesLDN2026 #Security #BSides #London

Slightly late announcing this one - apologies! This month (11th March) we've got John Follin presenting his talk "Making Shor: cryptography in a post-quantum world". All are welcome. Full details in the link: dc151.org/march-2026-mee…

#BSidesLDN2025 videos are now live on our YouTube channel. Don’t forget to like and subscribe, we only publish once a year, your support makes a real difference! @SecuritybsidesOrgUk" target="_blank" rel="nofollow noopener">youtube.com/@Securitybside… Huge thanks to @Ministraitor & all our presenters for sharing their time and expertise!

@UK_Daniel_Card Some poor soul just trying to get back home from a party….. and then he encountered Nadhim Zahawi. That’s nightmare fuel

WTF this guy is a fucking l00ny tun3

Yeah, so pretty much that whole Windows 11 Notepad RCE thing was ridiculously stupid. Like, it was so dumb it kind of hurts. Windows 11 Notepad, with the fancy Copilot AI slop, now possesses the ability to handle mark up, or markdown, ... It's mark something, the stuff used in ReadMes. Whatever. Anyway, a security researcher realized that if you used markup in Notepad and instead of a hyperlink to a website with https:// you put file:// (the protocol on Windows for files, like in file explorer), it will arbitrarily execute it. It won't prompt you. Furthermore, he realized you could specify a remote host to execute it from using a different Microsoft specific protocol used for app installation. In other words, if you user clicked the hyperlink in Notepad it would download and run a program from any website ... without alerting the user. Normally, any sort of hyperlink that leads to a different domain, or tries to execute a file, is supposed to prompt you with an alert message, ... or something. However, Microsoft software engineers seemingly forgot to implement this notification Window. With this attack vector which has been present for AT LEAST 9 months, a malicious actor could send a .txt file and if the user clicked the link inside the .txt file it would automatically execute and run anything specified in the hyperlink. Even more silly, forensically under the hood, the logs on Windows, or to an anti malware service, it would look like Notepad was downloading something and then running a program. This is a very unique scenario which (to the best of my knowledge) no security product has encountered before. This could hypothetically result in files being downloaded and executed and being completely ignored by anti malware services because Notepad is a known and trusted program. Why would an anti malware service question Notepad? Basically, the point I'm trying to get to here is that I don't understand why Microsoft has introduced so many new features into Notepad. With new features means a new attack landscape (more stuff to abuse). Whatever man