← Feed

Posts

• Post #4256634

  It's 2026 and CISA just had to publish a federal alert whose entire message is: please, we are begging you, stop leaving your water treatment PLCs on the open fucking internet with the default password still set. https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs That's the whole advisory. Attackers are changing the IPs so operators can't reach their own gear, and cities are catching boil-wate...

• Post #4023340

  Everyone: “nobody uses DNS tunneling in the real world, it’s a CTF meme.” TrickBot 2026: hiding C2 payloads in the high 6 bits of IPv4 responses at 30 KB/s while your DNS logs sit unread in a bucket nobody has queried since 2023. That’s not exfil, that’s a dial-up modem with extra steps. And it’s still faster than your change advisory board. https://www.fortinet.com/blog/threat-research/inside-a-trickbot-variant-using-dns-tunneling-for-c2 #infosec #threatintel #dns

• Post #3990528

  Frog and Toad Are Chainloaded frog put the UEFI app signatures in a box. there. now we will not boot any more unsigned UEFI apps. but we can disable SecureBoot said toad. that is true said frog. that is true. frog knew. frog always knew. the box was never locked. toad found the off switch in four seconds. three weeks of signed shim work gone. frog does not cry frog just stares at the mokutil prompt #infosec #SecureBoot

• Post #3585369

  PSA for anyone still running NetScaler as a SAML IdP CVE-2026-3055 (memory overread, CVSS 9.3) is on CISA KEV and getting hammered in the wild. Leaks session tokens and creds straight out of process memory. It's also a CVE Interlock is associated with, and they love healthcare. Patch the appliance, but if you've got a FortiGate in front of it, drop an IPS profile on and virtual-patch it today. Signature's live. Alert: https://www.fortiguard.com/outbreak-alert/citrix-netscaler-mem...

• Post #3585368

  Every outlet today ran "ChatGPT recommends scam stores." Cool. True. Boring as shit. https://www.theguardian.com/money/2026/jun/07/ai-chatgpt-shopping-scams-fake-websites The actual story: AI shopping inherited the search engine's SEO-poisoning attack surface and then deleted every signal a user needs to smell the rat. And the mechanism nearly everyone is citing is flat fucking wrong. Thread.

• Post #3585367

  Have you all seen the new $250 bill?

• Post #3565276

  Ripped Plex out. Reminder to self, and anyone else rage-quitting a SaaS wedged into their own damn infrastructure: The simplest architecture is the one that can’t enshittify on you, because there’s no middleman to rot. Files on a NAS. A client that reads them. No account server to phone home. No tollbooth on your own hardware. #infosec #selfhosted #Plex #homelab

• Post #3350471

  reminder that "fortibleed" is not a vuln. no CVE. no patch. nothing fucking "bled." it's a russian-speaking crew firing 1.16 billion creds from old breaches and infostealer logs at every fortigate dumb enough to have its mgmt interface sitting on the public internet. ~50% of internet-facing boxes. half of you. and before anyone cries "but my password was 28 characters with symbols": it didn't get cracked. it was already chilling in an infostealer dump in p...

• Post #2251388

  Tell your Members of Congress: There can be no clean reauthorization of Section 702 https://act.eff.org/action/congress-has-until-april-20-to-take-action-on-702-tell-them-not-to-drop-the-ball via @eff #Privacy #MassSurveillance

• Post #2251387

• Post #2251386

  Hot take: “Office politics” is code word for placating adults with the emotional intelligence of a 4 year old.

• Post #2251385

  @jnkrtech @badsamurai O.o

• Post #2251384

  “I spent 72 hours with my Tamagotchi to try to convince myself it’s not alive.” — Richard Dawkins

• Post #2251383

  I did goatse that coming.

• Post #2172095

  It is so hilarious to me that we have FOSS maintainers begging for money to try to keep the development of NTP ongoing. NTP - you know, that protocol that the entirety of humanity relies on for access to the internet (or anything on a network for that matter). Meanwhile the o̶l̶i̶g̶a̶r̶c̶h̶y̶ broligarchy makes billions of the backs of these people. Anyways, they're currently at $495 of $1000 for their 2025 goal. Go throw them some $ if you feel so inclined. https://www.nwtime.org/mills-spring/ #N...

• Post #1011292

  Lots of buzz surrounding the images from the Aremis II mission. Here's a direct link to the full uncompressed images: https://www.nasa.gov/gallery/lunar-flyby/ #NASA #Artemis

• Post #947700

  uname -a HomoSapiens 2026.3 #1 SMP PREEMPT Wed Oct 23 00:00:01 UTC 70000BC uptime: concerning load average: 11.4, extinction_event, please_advise

• Post #947699

  sudo apt-get install enlightenment This package is maintained by NeuraLink Corp. Continue? [Y/n]

• Post #947698

  You cannot grep your way out of gerrymandering. You cannot load-balance a Senate filibuster. You cannot patch regulatory capture. There is no apt-get install functional-democracy. Legislative gridlock exists because it is working as intended for the people with the power to change it. That's not a bug. That's a feature someone is paying $800/hour to maintain.

• Post #947697

  printer not working. mini panic attack as the trauma of troubleshooting printer's in the past resurfaces. sacrifices dank_memes folder to the recycle bin to appease the IT gods. decides to procrastinate troubleshooting. RIP my dank memes folder.

• Post #876075

  RE: https://mastodon.social/@404mediaco/116315164540918597 This makes me heart so happy 🥰

• Post #876074

  sudo apt-get install functional-democracy

• Post #876073

  sudo systemctl start human-obsolescence.service Started.

• Post #801197

  In today's episode of "Can It Run Doom": DNS fucking TXT records. Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS. RFC 1035 was written in 1987. Those engineers are spinning in their graves fast...

• Post #787302

  The person with 2 years of food storage and no relationships is less resilient than the person with 2 months of storage and a neighborhood that gives a shit about each other. #ClimateChange #ClimateResilience

• Post #781439

  @firefox, the “last privacy-respecting browser” now nags you with in-browser pop-ups to let AI generate “key points” when you long-press links. Mozilla CEO: “AI should always be a choice – something people can easily turn off” Then why the fuck is it off by default? Why the fuck am I getting pop-ups asking me to try features I didn’t ask for? That’s not a choice. That’s opt-out with a fucking marketing budget. What the fuck happened to you, Mozilla. They spent WEEKS in damage control promisi...

• You're paying AI companies a monthly subscription fee to be fingerprinted like a parolee.

  You're paying AI companies a monthly subscription fee to be fingerprinted like a parolee. I got bored and ran uBlock across Claude, ChatGPT, and Gemini simultaneously. Claude: Six parallel telemetry pipelines. A tracking GIF with 40 browser fingerprint data points baked into the URL, routed through a CDN proxy alias specifically to make it harder to block. Intercom running a persistent WebSocket whether you use it or not. Honeycomb distributed tracing on a chat UI because apparently your...

• Post #719935

  FCC is so secure that they restrict user passwords to a max of 15 characters @dumbpasswordrules

• Post #719933

  RE: https://furry.engineer/@ret/116261108902120559 breaking: my kubernetes pod has been denied access to YouTube because it hasn’t verified its age it was 4 minutes old. it died 30 seconds later. it never got to see the sun. somewhere in a data center, an AWS lambda function is being carded. it has existed for 200 milliseconds. it will cease to exist in 200 more. it does not have a birthday. it does not have parents. it has an IAM role and a cold boot time and NOW APPARENTLY IT NEEDS A FUCKIN...

• Post #719931

  RE: https://flipboard.com/@theseattletimes/entertainment-u1597bunz/-/a-BF9KmKR8RXOlqnDmzhbTMg%3Aa%3A2857557016-%2F0 Lmao get rek’d, fascist fucks