Remote

ADHDruid

@ADHDruid@infosec.exchange

Professional Security Curmudgeon. Breaker of things. Writer of questionable quality. Neuro-bonfire. Retro-futurist. Terminalcore connoisseur. Digital Nomad. Reactive AuDHDslave.

I preserve media. Make off-grid networks. Write software for humans.

Award winning, for some reason. Foremost security professional in my field, against my will. Alleged thought leader, for crimes in a previous life.

0 Followers

0 Following

50 Posts

Joined July 07, 2026

Github:

https://github.com/ADHDruid

Posts

ADHDruid @ADHDruid@infosec.exchange · Aug 07, 2026

Replying to @neurovagrant@masto.deoan.org

@neurovagrant@masto.deoan.org @da_667@infosec.exchange @cR0w@infosec.exchange @krypt3ia@infosec.exchange I really need to try again one day.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Aug 07, 2026

Replying to @da_667@infosec.exchange

@da_667@infosec.exchange @cR0w@infosec.exchange @krypt3ia@infosec.exchange Don't say that out loud, it attracts wild @neurovagrant@masto.deoan.org s

2

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Aug 03, 2026

Replying to @j-g00da@donotsta.re

@j-g00da@donotsta.re I really enjoyed your most recent work. If I get time I will try to tonight.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Aug 03, 2026

There is an irony in the current POTUS *fixing* the Reflecting Pool, by removing its ability to reflect.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to on mastodon.social

@Viss@mastodon.social @theorangetheme@en.osm.town @tati@eldritch.cafe @cR0w@infosec.exchange but didn’t you read it? They’re ‘at the ready’, waiting for the pro fpv pilot teachers to successfully evacuate the building with the equipment, set up a base at safe distance, and get dronin’

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @theorangetheme@en.osm.town

@theorangetheme@en.osm.town @Viss@mastodon.social @tati@eldritch.cafe @cR0w@infosec.exchange exactly this, the model space shuttles alone will be the downfall of this.

1

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to on mastodon.social

@Viss@mastodon.social @theorangetheme@en.osm.town @tati@eldritch.cafe @cR0w@infosec.exchange there’s places we don’t even do that, just 4ft lengths a few inches apart over any large opening in buildings. Completely invisible to drones. Event the cheap stuff would hold a hefty boi. Area denial. Super common in conflict zones, just with higher test. You’d be amazed how little line stops someone making progress

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to on mastodon.social

@Viss@mastodon.social @theorangetheme@en.osm.town @tati@eldritch.cafe @cR0w@infosec.exchange braided fishing line. 2lb test is all you need

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @cR0w@infosec.exchange

@cR0w@infosec.exchange @GossiTheDog@cyberplace.social yeaaaah same, but that could just as well be the idiots putting them in Dropbox. Just another SaaS product

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @GossiTheDog@cyberplace.social

@GossiTheDog@cyberplace.social Zero.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @mttaggart@infosec.exchange

@mttaggart@infosec.exchange I think I’m partly responsible for the sheer quantity of my writing it’s ingested—which has a lot of em dashes in!

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @cR0w@infosec.exchange

@cR0w@infosec.exchange i dunno, but BMW’s are done by Hans Zimmer and they sound pretty great haha.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @ADHDruid@infosec.exchange

In practice:

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

In policy:

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @ADHDruid@infosec.exchange

Vulnerabilities will always exist. But we do get a choice in where they live, whether you believe it or not.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @ADHDruid@infosec.exchange

What we should be pursuing is undoing the harms of everything being always online, subscription-based, and hosted in someone else’s shed. We should focus on the availability of compute resources, our ownership of them, and sharing the technology and means to create and control it. Enforcing stricter defaults expectations, with minimal extraneous remote resources. We’re past the SaaS threshold, the cloud is dated. Everything will still work exactly as it has. Only safer, leaner, cleaner, and without being beholden to organisations deeply entrenched in defence contracting and resource (and human) exploitation. Only then will be guarantee our collective national security, and resilient systems. Cont.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @ADHDruid@infosec.exchange

So where will this leave us? I don’t have the answers. But I do know what future we should be pushing for The Infosec industry is slated to hit a market cap of $1T by 2030. Optimistic, I reckon, but for other reasons. They are banking on vulnerabilities being rampant, literally. But they also know this spike will end. You can’t say a word to convince me that a trillion dollar industry dedicated to ‘protecting’ (loosely) against threats won’t have a hand in ensuring there’s enough threats to justify their existence. Cont…

0

2

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @ADHDruid@infosec.exchange

This wave will end, and end abruptly. But probably not until after your organisation has been scared into buying some AI security product or another. But this does mean that systems are being hardened in real time. In 12 months, your OS will be orders of magnitude more secure than it is today. Slopware will continue to be slung, but anything appearing on a public repo will be torn apart in seconds, meaning it wouldn’t survive in production. But when all the systems are getting more and more airtight, we will see metrics dwindle. Cont…

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @ADHDruid@infosec.exchange

All of these vulnerabilities would eventually be found. But, I’m going to say something controversial here… I think it’s a good thing they’ve found them. First, it’s made people sit up and listen. There is political capital to cash in here if you’re a defender. But second, they’ve shown their hand and the jig is up. I can’t say how long this transition period will be, but we will very quickly hit the realms of diminishing returns. Think of this phase as all of the ‘quick wins’ being won in one go. We can proceed to concentrate on things that matter. Cont…

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @ADHDruid@infosec.exchange

We are not witnessing a new age of AI being able to hack anything. We are witnessing a new age of tech companies being able to disregard labour laws and human rights, because it extracted *some* of the skills and knowledge of experienced professionals before laying them off. At a basic level, they are exchanging healthy, socially enriching, tax-paying people, for dirty, deregulated, inefficient, and polluting energy and rare earth resource exploitation—which is handily tax deductible or subsidised. There’s probably more to dwell on here, but I’m not an expert. AI security testing isn’t performing anything humans couldn’t do. It’s just performing the analysis faster because laws seemingly don’t apply. Cont…

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Here’s the thing the AI companies, the security companies, and the misc tech vendors don’t tell you about the current vulnerability wave. Yes, coordinated disclosure is essentially dead. Yes, time to exploit is so small it is an irrelevant measure. But no, this will not persist. It can’t. At the very fundamental level, nearly all vulnerabilities can and will be fixed. Cont…

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 29, 2026

Replying to @da_667@infosec.exchange

@da_667@infosec.exchange ‼️ Improper airgap detected, Druid has entered the chat. The Industry is being ‘led’ by fucking morons. We all know this, but their hope is that we miss details like this. The more time goes on, the more people won’t even acknowledge the importance of the words used.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 28, 2026

Can’t get over the hilarity of KDE Plasma’s implementation of the shake-to-locate-cursor feature… the cursor just keeps inflating if you keep shaking the mouse.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 27, 2026

Replying to @bagder@mastodon.social

@bagder@mastodon.social this is a fascinating development, thank you for the write up.

1

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 26, 2026

Replying to @johntimaeus@infosec.exchange

@johntimaeus@infosec.exchange @briankrebs@infosec.exchange Don’t say it out loud!

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 26, 2026

Replying to @ADHDruid@infosec.exchange

@briankrebs@infosec.exchange also… I would assume, while I cringe in my toes, that BYOD is a factor in some segments of their ‘required install-base’. With or without Mobile Application Management, I could guess, but it’s even uglier.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 26, 2026

Replying to @briankrebs@infosec.exchange

@briankrebs@infosec.exchange Really dumb, but I believe most IDE > publish pipelines drop this in as Huawei isn’t permitted to use the same push notification infrastructure as most other Android versions. Not a defence, and it’s lazy development. But playing devils advocate you could argue Firebase is probably as risky if not more so, given what is on the other side of it. Might as well be “GitHub[dot]com/*”, it always makes me nervous. Still, the evergreen statement that SBoMs and people that care about them are a dying breed.

0

2

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 24, 2026

Um.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 23, 2026

Replying to @cR0w@infosec.exchange

@cR0w@infosec.exchange on fire today fella

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 23, 2026

Replying to @Epic_Null@infosec.exchange

@Epic_Null@infosec.exchange see this was my line of thinking for a long time. But at some point, governments will be on their knees due to unemployment. Whether warranted or not. I think, and this is purely anecdotal, that it assumes that people don’t want to work. I have no data, but so many people do good work because they want to, or to give them purpose, companionship etc. So I think it’ll be a little Column A, a little Column B.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 23, 2026

@cR0w@infosec.exchange the sandbox:

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 23, 2026

It’s interesting how different fedi instances alter image time metadata. Some instances appear to remove it all, replacing with the posted date and time, others appear to retain the original date and time. I’m pretty sure the latter isn’t standard behaviour.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 22, 2026

I’m not saying the tech bros want slavery back. BUT their primary objective is making subservient things do everything for them and not having any right to recourse, or considering their societal impact, whilst being able to absolve themselves of all accountability. “AI is crashing so back to robot butlers I guess, but slap the half arsed chatbot on it too, execs will lose their shit. Who cares if it murders the olds?” I’ve seen cleaning and delivery bots in supermarkets, we’ve got robot lawn mowers, vacuum cleaners, computers answering calls and processing requests. I wager we’re going to see universal basic income raise its head shortly, and the Definitely Not Slave Owners Brigade is going to embrace it this time… so long as they own everything the UBI is spent on. They’ll then claim victory that we live in an automated utopia.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 19, 2026

Replying to @SecureOwl@infosec.exchange

@SecureOwl@infosec.exchange I’m very grateful for the Ryobi one battery system for home and garden power tools.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 19, 2026

Thank the Old Ones that the World Cup half time “mandatory” fun is over. Quite possibly the worst spectacle ever committed to film. No idea how it was allowed given that it’s against regulation either, with good reason.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 18, 2026

Never easy watching England. But well played. Great performance by France, also. Clean, courteous, and skilled. #france #england #FRAvENG

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 18, 2026

I believe my header image is AI generated. It is a stock image of some sort that I snipped to fit. Going to fix that.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 18, 2026

Replying to @cR0w@infosec.exchange

@cR0w@infosec.exchange well, it limits the potential for you to be compared against absurd, unachievable, artificial benchmarks and limits the potential for you to be used and exploited, with the Sword of Damocles of “you can just be replaced if you don’t put the puppy in the puppy mashing machine”. I’d say it limits their ability to hire high-functioning professional operators with integrity and a moral compass. And if they don’t want to hire those people, I don’t want to work with the people they have hired.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 17, 2026

Replying to @ADHDruid@infosec.exchange

So they made traditional computing far less efficient, made you pay for the hardware to support this new performance baseline. The chip manufacturers double dipping on AI and spiked consumer prices thank you! Obviously the ads won't work as smoothly as they'd like, and legally it will be a nightmare, so they're going to start requiring payment for even the most basic of AI features. That is to say, they're going to charge you a license fee to access the internet. Suuuuure, the internet is easily accessible, but if you want to use any of the entry points to current information... you better lock in, friend. Oh, it's just going to be £1.99, then £2.49, then up, up, up.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 17, 2026

Replying to @ADHDruid@infosec.exchange

There another unintended side effect of this, which is a result of the boom being followed far too quickly by a bust. The control of the web as we know it. See, I think the tech bros thought they could string this grift out a bit longer, get more entrenched before people realised it could do none of the things promised, so they had to pivot, and fast. What's the only pivot available to you when you've spent billions stealing information? Make a new Google, a new World Wide Web. Then gate keep the fuck out of it. Except it's the old World Wide Web. In a dusty bottle. It has dementia. And it's going to start serving you ads, because it doesn't know any better.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 17, 2026

Replying to @ADHDruid@infosec.exchange

That's it. That's the whole reason. The 'arms race' is manufactured FOMO by tech bros with media connections. And they fooled a lot of people. The panic buying started, then the energy shortages, and the water shortages, then the hardware shortages followed. It's the new grift. The same happened on a smaller scale with Big Data, Hyperconverged systems, The Cloud™, and now 'AI'. Now look where we are. a Raspberry Pi is nearly £400. But...

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 17, 2026

Replying to @ADHDruid@infosec.exchange

The Cloud™ failed to achieve what it set out to. That was to seize the means of computing by engaging in a war of attrition with consumers and business. Just before the big AI push, you'll have noticed that the majority of businesses has noticed that the cost of computing locally had fallen to its lowest in history. Cheap storage, cheap compute. That simply wouldn't do. Additionally, in essentially every area but rendering, compute had reached levels of headroom it would never fill as things were just so efficient, and actual demands by businesses plateaued a decade ago.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 17, 2026

If you're wondering why AI is still being forced into every facet of technology and society, it's simple. Let me walk you through it. First though, you should note that something doesn't need to be a conspiracy to make the end outcome the same. ...

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 16, 2026

Replying to @gooba42@mastodon.social

@gooba42@mastodon.social @noodlemaz@mstdn.games @eff@mastodon.social don’t disagree!

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 15, 2026

Replying to @caten@mathstodon.xyz

@caten@mathstodon.xyz Gawwwwd. I only discovered it this week!

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 15, 2026

Replying to @gooba42@mastodon.social

@gooba42@mastodon.social @noodlemaz@mstdn.games @eff@mastodon.social I think that strays into a very different legal area. I don’t disagree btw. And I am very pro-ownership. But the mechanism for second hand digital video games just doesn’t exist, and I don’t think there’s any appetite for it among publishers, they act in the interest of copyright holders. I don’t buy my games to sell, though, but I do make sure they are DRM free, regardless of where they were purchased, or retain DRM without constraint. This is perfectly legal, as the law can’t simply state you need to log in every N days to retain access and there are a number of important exclusions. There’s a lot of interesting twists to this too. If I buy physical media that can be activated, say on Steam, I have not agreed to a EULA or terms of sale. Especially if second hand. But I would then be prompted with a second EULA I would have to agree to use the software. And I could then sell the physical media on, legally. If I ‘copied’ a digital game and distributed it, it would be piracy, and not just against a non enforceable EULA, against the law. Straying into murky waters here, and I don’t encourage piracy. In practice there is no material difference. You might even argue that by enabling a game digitally you have modified or circumvented copyright protections, as you don’t need to use the media to launch it.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 15, 2026

Replying to @gooba42@mastodon.social

@gooba42@mastodon.social @noodlemaz@mstdn.games @eff@mastodon.social Firstly, EULA’s are unenforceable in the majority of cases, and this has been tested in court… or more commonly is entirely inadmissible in places like the EU, Australia, UK etc. Second, the idea that you purchase a ‘license’ is completely misunderstood. This is not a software license, it is a license to the copyright for the purposes of a performance. Much like you license music for commercial use. A performance here being you playing the game. There is almost never an end date to your license, and if there is, due to language used in the agreement being unclear to the average person… is unenforceable. This puts a large burden on digital storefronts, rightly so, they facilitated started this, so they should have to support the availability of the title for its lifetime… which is until the copyright expires. But you then start to see cheap tricks like re-releasing ‘remakes’ of old games, and removing existing titles from storefronts. To move the attrition point further in the direction they’d prefer. Publishers continue to put them in, in case the lobbying eventually works in their favour. They’re playing the long game. Hence the new push to rent-only and eradicating physical media. An agreement that is unenforceable doesn’t stand. In most countries, when you press “Buy”, that means you own it. The remaining countries don’t really care for copyright anyway.

0

1

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 13, 2026

Thanks to chocolatiers for conveniently marking the bars into segments so you can be absolutely certain where it’s not going to break.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 11, 2026

My new Gigabyte Aorus 9070 XT Elite is a real powerhouse of a card. The mildest of undervolts it is giving 5080 performance on old hardware, with a Ryzen 1700X at stock speeds, on new titles. Don’t even need Resize Bar which the 1700X can’t use. Importantly, I trust the VRMs and power distribution on Gigabyte cards, and their cooling is better than most when pushed. In a time when prices are so high, and a Raspberry Pi is nearly £300, it’s probably one of the highest ROI in consumer tech right now at sub £700.

0

0

0

0

ADHDruid @ADHDruid@infosec.exchange · Jul 11, 2026

Replying to @zak@infosec.exchange

@zak@infosec.exchange you’re not wrong. It’s probably the main application I’m left using that’s not FOSS on my endpoints.

0

0

0

0

Remote instance

infosec.exchange

Open on original server

Media