@froge@social.glitched.systems

CyberFrog @froge@social.glitched.systems · Jul 14, 2026

Replying to @cR0w@infosec.exchange

@cR0w@infosec.exchange yeah I am less sympathetic to those groups, if your "commercial business" is funded by "oops all criminal proceeds" I'm sort of inclined to say they fucked around and will find out when the state gets them as well tbh

0

2

0

CyberFrog @froge@social.glitched.systems · Jun 30, 2026

Replying to @iampytest1@infosec.exchange

@iampytest1@infosec.exchange @Viss@mastodon.social I mean of course any two extensions modifying and checking page content in this way might conflict if you run them together but if it works, it works, and for most people it seems fine tbh

0

2

0

CyberFrog @froge@social.glitched.systems · May 12, 2026

Replying to @SecureOwl@infosec.exchange

@SecureOwl@infosec.exchange got a whole "digital confirmation" that the data was deleted and everything... which amounted to a text file of paths that the hackers promise they deleted lol

2

0

1

0

CyberFrog @froge@social.glitched.systems · May 07, 2026

Replying to @campuscodi@mastodon.social

@campuscodi@mastodon.social having written git hooks for a team before, can confirm, all the documentation about this feature beats you over the head with "this is insecure and you must explicitly be ok with arbitrary code inside git hooks running automatically" warnings kind of funny that DRPK finally got around to using it instead of VScode autorun methods too

0

CyberFrog @froge@social.glitched.systems · May 03, 2026

today I have decided to simply stop using services that block me instead of rotating IP address 15 times until one of them works

I wish every badly built company network a very routing error that triggers corporate downtime today

9

0

4

0

CyberFrog @froge@social.glitched.systems · May 01, 2026

fast16 | Mystery ShadowBrokers Reference Reveals High-Precision Software Sabotage 5 Years Before Stuxnet

https://www.sentinelone.com/labs/fast16-mystery-shadowbrokers-reference-reveals-high-precision-software-sabotage-5-years-before-stuxnet/

SentinelOne

fast16 | Mystery Shadow Brokers Reference Reveals High-Precision Software Sabotage 5 Years Before St

A previously unknown 2005 cyber sabotage framework patches high-precision calculation software in memory to silently corrupt results.

0

CyberFrog @froge@social.glitched.systems · Apr 29, 2026

Replying to @davidgerard@circumstances.run

@davidgerard@circumstances.run I have been saying for years that a lot (not all, but a lot) of AAA windows games run better on wine/proton, but especially lately I've noticed some things like 1% frame times and graphics stutter being better on linux, which makes the games feel nicer too lol

1

0

CyberFrog @froge@social.glitched.systems · Apr 23, 2026

Replying to @jascha@ohai.social

@jascha@ohai.social seems pretty normal to me, every truly productive person or game changing team member I've worked with does this ngl there are some people which just consistently do a little bit of work every day, and those people are great too, projects don't really work without those people... but someone with chaotic ADHD energy doing nothing for a week and suddenly rewriting an entire component because "everything is better this way" is how a lot of game changing software gets made tbh

0

1

0

CyberFrog @froge@social.glitched.systems · Apr 17, 2026

Replying to @tyalie@chaos.social

@tyalie@chaos.social for patterns I usually just grep the raw bytes, or run strings over the binary data tbh I think maybe binwalk can extract media images, as well as firmware, might be worth trying that?

0

CyberFrog @froge@social.glitched.systems · Mar 07, 2026

Replying to @catsalad__dup_5@infosec.exchange

@catsalad@infosec.exchange this is like all the times I told people software patents were invalid in Europe and you can just compile freetype with the illegal code enabled except cooler, and better, bring on the new era of hacking lmao

2

0

4

0

CyberFrog @froge@social.glitched.systems · Mar 06, 2026

Replying to @TimWardCam@c.im

@TimWardCam@c.im @BorisBarbour@mastodon.social that is a bit strange yeah, most screens are still 1080p or standard sized 720p from what I know, also 32bit color depth is pretty fancy I think 😛

0

CyberFrog @froge@social.glitched.systems · Mar 06, 2026

Replying to @mhoye@cosocial.ca

@mhoye@cosocial.ca dystopian

0

CyberFrog @froge@social.glitched.systems · Mar 06, 2026

Replying to @mayuraviva@shelter.moe

@mayuraviva@shelter.moe @w3cdevs@w3c.social @w3c@w3c.social they do have a justification if you take the time to check the intro in the spec document lol As individuals and organizations, many of us use globally unique identifiers in a wide variety of contexts. They serve as communications addresses (telephone numbers, email addresses, usernames on social media), ID numbers (for passports, drivers licenses, tax IDs, health insurance), and product identifiers (serial numbers, barcodes, RFIDs). URIs (Uniform Resource Identifiers) are used for resources on the Web and each web page you view in a browser has a globally unique URL (Uniform Resource Locator).The vast majority of these globally unique identifiers are not under our control. They are issued by external authorities that decide who or what they refer to and when they can be revoked. They are useful only in certain contexts and recognized only by certain bodies not of our choosing. They might disappear or cease to be valid with the failure of an organization. They might unnecessarily reveal personal information. In many cases, they can be fraudulently replicated and asserted by a malicious third-party, which is more commonly known as "identity theft".The Decentralized Identifiers (DIDs) defined in this specification are a new type of globally unique identifier. They are designed to enable individuals and organizations to generate their own identifiers using systems they trust. These new identifiers enable entities to prove control over them by authenticating using cryptographic proofs such as digital signatures.

2

0

CyberFrog @froge@social.glitched.systems · Mar 02, 2026

Replying to @briankrebs@infosec.exchange

@briankrebs@infosec.exchange I see many otherwise intelligent and reasonable people, programmers and highly skilled technical architects mostly, have their entire lives ruined because they spend too long talking to the LLMs and drive themselves into a delusional hole many such cases tbh

1

2

1

0

CyberFrog @froge@social.glitched.systems · Mar 02, 2026

Replying to @mikesiegel@infosec.exchange

@mikesiegel@infosec.exchange @evacide@hachyderm.io I've seen it mentioned by a few security research reports but never tested it myself tbh Radare2 has some integration for these tools as well which I might try out

0

CyberFrog @froge@social.glitched.systems · Mar 02, 2026

Replying to @evacide@hachyderm.io

@evacide@hachyderm.io it is strangely good at complex binary diffs when you format the information for it correctly tbh

0

2

0

CyberFrog @froge@social.glitched.systems · Feb 15, 2026

Replying to @codinghorror__dup_1217@infosec.exchange

@codinghorror@infosec.exchange it is unfortunate that this person was given a position of editorial significance in anything at all tbh

0

CyberFrog @froge@social.glitched.systems · Feb 12, 2026

Replying to @0xabad1dea__dup_153@infosec.exchange

@0xabad1dea@infosec.exchange discord has multiparty end to end encryption so you do actually need this for voice and video data

0

1

0

CyberFrog @froge@social.glitched.systems · Feb 12, 2026

Replying to @GroupNebula563__dup_2878@mastodon.social

@GroupNebula563@mastodon.social this isn't real, time can't hurt me if I don't acknowledge it :blobsmiletear:

1

0

1

0

CyberFrog @froge@social.glitched.systems · Feb 12, 2026

Replying to @utf_7@mastodon.social

@utf_7@mastodon.social @molly0xfff@hachyderm.io anything that annoys the rich and powerful will be justified as illegal retroactively, regardless of what it is right now tbh

7

0

CyberFrog @froge@social.glitched.systems · Feb 10, 2026

Replying to @bert_hubert@eupolicy.social

@bert_hubert@eupolicy.social but more code = more better surely :D

1

0

CyberFrog @froge@social.glitched.systems · Jan 23, 2026

Replying to @dalias@hachyderm.io

@dalias@hachyderm.io @GossiTheDog@cyberplace.social secure encryption will unavoidably cause you to lose everything if you lose your keys, by default.... but the real issue is that microsoft engineers know this, and didn't even so much as try to program a secure backup feature that doesn't expose the keys, or even give a popup in the installer warning people that their drives will be completely unencrypted and insecure by default without an MS account... or any of the 1000s other things they could do to communicate their security stance to users tbh

0

1

0

CyberFrog @froge@social.glitched.systems · Jan 23, 2026

Replying to @froge@social.glitched.systems

@GossiTheDog@cyberplace.social oh also as a note to all the users who installed windows with a local system account instead of linking your microsoft account none of you have an encrypted OS drive, it just doesn't encrypt your drives by default if you do that because it can't back the keys up to MS cloud

0

3

0

CyberFrog @froge@social.glitched.systems · Jan 23, 2026

Replying to @GossiTheDog@cyberplace.social

@GossiTheDog@cyberplace.social Windows charging people for a pro/enterprise license to encrypt more than the OS drive (while still uploading their keys to the cloud) is also just insane to me For a long time I think you had to pay for a pro license to even encrypt your drives at all, but luckily they stopped doing that, instead you get to encrypt the OS drive for free and everything else is gonna cost you a few hundred extra dollars 💀

0

4

0

CyberFrog @froge@social.glitched.systems · Nov 19, 2025

Replying to @Mara@hachyderm.io

@Mara@hachyderm.io this is doubly confusing because in many other languages, even some FP languages, "unwrapping" a value is actually a non-panicing operation lol

1

2

0

CyberFrog @froge@social.glitched.systems · Nov 06, 2025

Replying to @briankrebs@infosec.exchange

@briankrebs@infosec.exchange absolutely fucking damning, they know exactly what is going on and haven't done SHIT about it Meta projected 10% of its 2024 revenue would come from ads for scams and banned goods, documents seen by Reuters show. And the social media giant internally estimates that its platforms show users 15 billion scam ads a day.

0

2

0

CyberFrog @froge@social.glitched.systems · Sep 25, 2025

Replying to @spaf@mstdn.social

@spaf@mstdn.social could just cross out "AI" and call this "top 10 founder lies" and it'd still be true honestly lol

1

2

0

CyberFrog @froge@social.glitched.systems · Aug 21, 2025

Replying to @Harlander@writing.exchange

@Harlander@writing.exchange incredible, just... absolutely incredible

3

0

CyberFrog @froge@social.glitched.systems · Aug 19, 2025

Replying to @ludicity@mastodon.sprawl.club

@ludicity@mastodon.sprawl.club I haven't been an interviewer in this position, but I think in hindsight I lost a very good job opportunity in part because when I started screen sharing I chose to share only the relevant window with my code inside it, not my entire desktop... and the interviewers seemed concerned and wanted me to share my full desktop (which I eventually did without thinking much of it) I only ever share a single window because I just care about my privacy and don't want distractions from other desktop notifications and stuff bothering people who watch my screen, especially during meetings, but in retrospect I think they just assumed I was using an LLM to answer questions even though I totally fucking bombed the interview naturally anyway lol

0

3

0

CyberFrog @froge@social.glitched.systems · Jul 24, 2025

Replying to @phos@not.an.evilcyberhacker.net

@phos@not.an.evilcyberhacker.net this is too mainstream, I'm going to install linux an a point of sale terminal and haul that thing around to make calls for extra style points

0

CyberFrog @froge@social.glitched.systems · Jul 18, 2025

Replying to @utf_7@mastodon.social

@utf_7@mastodon.social @gromit@chaos.social @archlinux@fosstodon.org the official repos are managed by trusted maintainers and have a review and quality assurance process which is likely to catch any malicious or incorrect changes the AUR is simply a list of packages maintained by random people who have free reign to update them whenever they want, with anything they want, without review or checks using the AUR is a bit like going and installing a random binary from a random github project, without anyone checking the code at all, the official repos have a lot of peer review by people with good reputations in the arch community

0

CyberFrog @froge@social.glitched.systems · Jul 18, 2025

Replying to @gromit@chaos.social

@gromit@chaos.social @archlinux@fosstodon.org yeah, but everyone totally ignores or plays down the warnings, there is a culture of blindly trusting the AUR among arch users usually I'm a long time contributor to a large Linux community online, and often one of the first things users do on a clean install is setup an AUR helper and blindly pull packages they want

0

2

0

CyberFrog @froge@social.glitched.systems · Jul 18, 2025

Replying to @archlinux__dup_36547@fosstodon.org

@archlinux@fosstodon.org nice, isn't it cool how every arch user I've ever met thinks it's totally fine to run arbitrary binaries from strangers, with absolutely no concept of what project packaging is and what official maintainers do

0

1

0

CyberFrog @froge@social.glitched.systems · Jul 14, 2025

Replying to @NoFood4u@wetdry.world

@NoFood4u@wetdry.world this is the funniest thing I've seen all day LOL

0

CyberFrog @froge@social.glitched.systems · May 10, 2025

Replying to @maaikees@sw-development-is.social

@maaikees@sw-development-is.social god I fucking wish it was cross-functional with humanities studies, the academic world treats it like an abstract branch of math (which is reasonable tbf) while ignoring the ACTUAL real world implementations, which are very much closer to a sociology project than a difficult math project

0

CyberFrog @froge@social.glitched.systems · Apr 30, 2025

Replying to @eff@mastodon.social

@eff@mastodon.social free expression, until the government doesn't like what you express 🤡

0

CyberFrog @froge@social.glitched.systems · Apr 16, 2025

Replying to @axel@social.glitched.systems

@axel@social.glitched.systems @osma@mas.to ah yeah, he did mostly leave because he got his feelings hurt about the beard LOL but he also specifically mentions here that the other reason was because the platform wasn't decentralized enough and was becoming "just another app" “That was the second moment I thought, uh, nope,” Dorsey added. “This is literally repeating all the mistakes we [Twitter] made as a company. This is not a protocol that’s truly decentralized. It’s another app. It’s another app that’s just kind of following in Twitter’s footsteps, but for a different part of the population.”

0

1

0

CyberFrog @froge@social.glitched.systems · Apr 16, 2025

Replying to @osma@mas.to

@osma@mas.to oh hey cool they're doing exactly what I said they'd do, which is never federate and then slowly become yet another walled garden it's literally built by the former twitter CEO, who left over arguments about federation not happening, like.... come on here...

1

17

3

0

CyberFrog @froge@social.glitched.systems · Mar 25, 2025

Replying to @fj@mastodon.social

@forthy42@mastodon.net2o.de @kkarhan@infosec.space @fj@mastodon.social it's not that I actually confuse these things, it's that the alternatives presented have equally bad operational security problems too, just in new and interesting ways, so it's hardly worth mentioning as a point of comparison to me in general

3

1

0

CyberFrog @froge@social.glitched.systems · Mar 25, 2025

Replying to @brahms@chaos.social

@brahms@chaos.social @kkarhan@infosec.space @fj@mastodon.social I do personally like that Deltachat is secure against a server compromise, and their efforts to hide metadata and content from hostile servers are nice, I think that has something over signal... but the lack of PFS (and indeed the ability to send unencrypted data by default) means other known attacks could be mounted instead, so to say it matches signal is still probably wrong on a technical level besides a lot of these tools only work if you're smart enough to securely deploy and maintain an entire server yourself, and that is.... not possible for most of the population, even if they're a programmer or work IT-adjacent jobs

1

0

CyberFrog @froge@social.glitched.systems · Mar 25, 2025

Replying to @kkarhan@infosec.space

@kkarhan@infosec.space @fj@mastodon.social that's fine, I actually really like deltachat and a few others, but none of them pretend to match the same level of security as Signal because they're not actually the same level of security/privacy/confidentiality in the real world, I don't really trust signal self hosting their servers either but that doesn't mean these alternatives match the same level of privacy and security on a technical level for example the encryption used by Deltachat openly has flaws and doesn't support perfect forward secrecy in the cryptography, this is on purpose, they mention it several times in the documentation, because their goal is to be compatible with existing email systems and that requires protocol constraints and trade offs Fact is deltachat (and many others on this list) are not as cryptographically secure as signal, and they're not trying to be, and that's fine as long as you understand many of these tools make tradeoffs in their privacy/security in unique ways for their use cases still doesn't mean any of them will provide the same level of secure and private service that signal does, even if they are more decentralized and cheaper/easier sometimes for some people

3

2

0

CyberFrog @froge@social.glitched.systems · Mar 25, 2025

Replying to @kkarhan@infosec.space

@kkarhan@infosec.space @fj@mastodon.social some of these are issues, but to be real the suggestion to use PGP and MIME instead of signal is laughable, not only is it nonviable as a replacement, but also is just bad to deal with and use in comparison firstly, try to achieve similar security as signal with only PGP (or OMEMO), secondly after pulling off that technically impossible feat, try to use it without causing 100x more avoidable security issues than signal does right now after doing that I think you can appreciate that although signal has many flaws (phone numbers being my biggest issue with them) they are actually still doing state-of-the-art security/privacy/cryptography services and can't easily be replaced by random other tools like this lol

12

3

1

0

CyberFrog @froge@social.glitched.systems · Jan 26, 2025

Replying to @h@social.besties.house

@h@social.besties.house The idea that this person has, for the entirety of their experience in technology, literally only ever used docker for deployments is gross and alarming to me lol I have seen the most horrid shit done with Docker on a server before, and every single time I ask the original developer or sysadmin about it, they are absolutely clueless about how most of docker even works, nevermind whatever issue I'm trying to describe and get fixed smh

0

CyberFrog @froge@social.glitched.systems · Jan 15, 2025

Replying to @aaron@chirp.zadzmo.org

@aaron@chirp.zadzmo.org this is probably useful for lots of stuff related to trapping bots/scrapers, this is super nice!!!

0

CyberFrog @froge@social.glitched.systems · Jan 11, 2025

Replying to @alice__dup_32859@lgbtqia.space

@alice@lgbtqia.space not saying the people who often reply this way really mean it, or that they're actively malicious, often they're genuinely just misinformed or whatever but in saying that... there is a reason the CIA writes about this in their handbooks on how to disenfranchise and squash grassroots movements, it DOES take energy and momentum to sustain positive change, and comments that offer nothing of substance while broadly discouraging action absolutely have a big impact on people and wider movements as a whole, I think this is something most people don't consider very often but it's hugely important to remember

129

2

56

0

CyberFrog @froge@social.glitched.systems · Jan 07, 2025

Replying to @SyHoekstra@tweesecake.social

@SyHoekstra@tweesecake.social so sick of these ineffective barriers being placed around the web, and all the silly ways real people doing real stuff with their life have to work around them, instead of just being able to access information and services openly smh

1

0

CyberFrog @froge@social.glitched.systems · Nov 19, 2024

Replying to @upstreamism@theatl.social

@upstreamism@theatl.social to be real this has been the case for a long time anyway, large tech companies routinely "voluntarily comply" in ways above and beyond what a warrant or court asks them for, the NSA once described google as "one of our greatest intelligence partners" so I would be genuinely surprised if Twitter hasn't been giving out detailed information to the government for decades already In saying this, it could always get worse I guess, and Musk + Trump is definitely a sign that it's getting worse lol

0

CyberFrog

Posts

fast16 | Mystery Shadow Brokers Reference Reveals High-Precision Software Sabotage 5 Years Before St

Remote instance