Elektrine
EN
Log in Register
Paige Chat Timeline Communities Gallery Videos Email DNS VPN Uptime Kairo
Back to Timeline
Remote

k3ym𖺀

@k3ym0@infosec.exchange
  • Open on infosec.exchange

[~]$ whoami



principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 





i larp as a normie. 


(he/him)


opinions expressed != employers

897 Followers
1189 Following
50 Posts
Joined November 03, 2022
signal:
@k3ym0.92
my links:
https://k3ym0.omg.lol
i am me:
https://proven.lol/6aef3f
location:
:cascadia:

Posts

Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jul 30, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @badsamurai@infosec.exchange
@badsamurai@infosec.exchange HAIL SATAN!
0
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jul 30, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
It's 2026 and CISA just had to publish a federal alert whose entire message is: please, we are begging you, stop leaving your water treatment PLCs on the open fucking internet with the default password still set. https://www.cisa.gov/news-events/alerts/2026/07/30/cisa-urges-water-and-wastewater-systems-sector-protect-ot-against-activity-targeting-plcs That's the whole advisory. Attackers are changing the IPs so operators can't reach their own gear, and cities are catching boil-water notices over it. US critical infra security is duct tape, prayer, and a Shodan search nobody in charge has ever bothered to run. Some things never change... SMH
3
0
2
1
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jul 23, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Everyone: “nobody uses DNS tunneling in the real world, it’s a CTF meme.” TrickBot 2026: hiding C2 payloads in the high 6 bits of IPv4 responses at 30 KB/s while your DNS logs sit unread in a bucket nobody has queried since 2023. That’s not exfil, that’s a dial-up modem with extra steps. And it’s still faster than your change advisory board. https://www.fortinet.com/blog/threat-research/inside-a-trickbot-variant-using-dns-tunneling-for-c2 #infosec #threatintel #dns
68
8
34
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jul 21, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Frog and Toad Are Chainloaded frog put the UEFI app signatures in a box. there. now we will not boot any more unsigned UEFI apps. but we can disable SecureBoot said toad. that is true said frog. that is true. frog knew. frog always knew. the box was never locked. toad found the off switch in four seconds. three weeks of signed shim work gone. frog does not cry frog just stares at the mokutil prompt #infosec #SecureBoot
5
1
2
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jul 03, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Ripped Plex out. Reminder to self, and anyone else rage-quitting a SaaS wedged into their own damn infrastructure: The simplest architecture is the one that can’t enshittify on you, because there’s no middleman to rot. Files on a NAS. A client that reads them. No account server to phone home. No tollbooth on your own hardware. #infosec #selfhosted #Plex #homelab
17
4
9
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 24, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @jerry@infosec.exchange
@jerry@infosec.exchange there’s no captcha? Or the bots are bypassing the captcha?
1
2
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 18, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
reminder that "fortibleed" is not a vuln. no CVE. no patch. nothing fucking "bled." it's a russian-speaking crew firing 1.16 billion creds from old breaches and infostealer logs at every fortigate dumb enough to have its mgmt interface sitting on the public internet. ~50% of internet-facing boxes. half of you. and before anyone cries "but my password was 28 characters with symbols": it didn't get cracked. it was already chilling in an infostealer dump in plaintext. great entropy, shame about the malware on your sales guy's laptop. the -bleed suffix is marketing. the real CVE is CVE-2026-YOUREANIDIOT: "admin panel pointed at 0.0.0.0/0, password recycled from a 2022 breach, MFA considered but never enabled." rotate the creds, yank the mgmt interface off the internet, force MFA, and maybe stop letting threat intel firms name your incidents like they're naming a fucking Marvel villain. #infosec #fortinet #fortigate
29
2
19
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 11, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

Have you all seen the new $250 bill?

2
0
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 10, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @k3ym0@infosec.exchange
Why that matters: the training corpus was frozen long before those domains existed. The model did not "learn" them. They got surfaced at RETRIEVAL time. Two completely different attacks keep getting jammed into one lazy word. Training poisoning: slow, persistent, baked into the model. Retrieval poisoning: clone the pages, get crawled, ride the live search pipeline straight into the answer. R&B is the second one. It's SEO spam with a new fucking delivery truck.
1
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 10, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @k3ym0@infosec.exchange
Ask Silver found cloned Russell & Bromley and Dunelm sites surfacing as sources in ChatGPT shopping answers. The quoted take was "the LLM got poisoned," implying training data. That's bullshit, and the timeline proves it. R&B went into administration in Jan 2026 and lost its standalone site. The fake domains are fresh, stood up after that.
0
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 10, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @k3ym0@infosec.exchange
How this actually works. When an LLM "searches the web," it is not crawling the whole goddamn internet itself. ChatGPT rents Bing's index and bolts on its own live crawler, OAI-SearchBot. Translation: it inherits every shitty garbage-in problem Bing's index already has. Including 20 years of SEO spam nobody ever bothered to clean up.
0
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 10, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

Every outlet today ran "ChatGPT recommends scam stores." Cool. True. Boring as shit.

https://www.theguardian.com/money/2026/jun/07/ai-chatgpt-shopping-scams-fake-websites

The actual story: AI shopping inherited the search engine's SEO-poisoning attack surface and then deleted every signal a user needs to smell the rat. And the mechanism nearly everyone is citing is flat fucking wrong.

Thread.

1
2
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Jun 03, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

PSA for anyone still running NetScaler as a SAML IdP

CVE-2026-3055 (memory overread, CVSS 9.3) is on CISA KEV and getting hammered in the wild. Leaks session tokens and creds straight out of process memory. It's also a CVE Interlock is associated with, and they love healthcare.

Patch the appliance, but if you've got a FortiGate in front of it, drop an IPS profile on and virtual-patch it today. Signature's live.

Alert: https://www.fortiguard.com/outbreak-alert/citrix-netscaler-memory-overread

Interlock: https://www.fortiguard.com/threat-actor/6384

#infosec #CVE #NetScaler #ransomware

1
2
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · May 06, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

I did goatse that coming.

3
3
2
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · May 05, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

“I spent 72 hours with my Tamagotchi to try to convince myself it’s not alive.”

— Richard Dawkins

5
1
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 26, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @chrfrde@mastodon.social
@chrfrde@mastodon.social are those two of Jupiter’s moons visible??
0
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 22, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

@jnkrtech@social.treehouse.systems @badsamurai@infosec.exchange O.o

1
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 17, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

Hot take: “Office politics” is code word for placating adults with the emotional intelligence of a 4 year old.

2
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 13, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
2
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 12, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

Tell your Members of Congress: There can be no clean reauthorization of Section 702

https://act.eff.org/action/congress-has-until-april-20-to-take-action-on-702-tell-them-not-to-drop-the-ball

via @eff@mastodon.social

#Privacy #MassSurveillance

0
0
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 07, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

Lots of buzz surrounding the images from the Aremis II mission.

Here's a direct link to the full uncompressed images: https://www.nasa.gov/gallery/lunar-flyby/

#NASA #Artemis

Artemis II Lunar Flyby - NASA
NASA

Artemis II Lunar Flyby - NASA

The first flyby images of the Moon captured by NASA’s Artemis II astronauts during their historic test flight reveal regions of the Moon's far side, as well as an in-space solar eclipse. Released Apri

20
0
14
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 01, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

printer not working.

mini panic attack as the trauma of troubleshooting printer's in the past resurfaces.

sacrifices dank_memes folder to the recycle bin to appease the IT gods.

decides to procrastinate troubleshooting.

RIP my dank memes folder.

2
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 01, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

You cannot grep your way out of gerrymandering. You cannot load-balance a Senate filibuster. You cannot patch regulatory capture. There is no apt-get install functional-democracy.

Legislative gridlock exists because it is working as intended for the people with the power to change it. That's not a bug. That's a feature someone is paying $800/hour to maintain.

3
0
3
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 01, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
sudo apt-get install enlightenment

This package is maintained by NeuraLink Corp.

Continue? [Y/n]
2
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 01, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
uname -a

HomoSapiens 2026.3 #1 SMP PREEMPT Wed Oct 23
00:00:01 UTC 70000BC

uptime: concerning

load average: 11.4, extinction_event,
please_advise
1
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 01, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
sudo systemctl start human-obsolescence.service

Started.
0
0
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Apr 01, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

sudo apt-get install functional-democracy

0
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 30, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

RE: @404mediaco@mastodon.social

This makes me heart so happy 🥰

3
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 27, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @ck0@tech.lgbt
@ck0 Most serious companies don't allow DNS queries to servers outside of their network. Oh my sweet, sweet, child. If only this were true. I could name-drop several multi-billion $ enterprise orgs that still don’t do this.
2
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 27, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @LilFluff@mastodon.art
@LilFluff@mastodon.art thanks! That makes sense.
0
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 27, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @simondassow@masto.ai
@simondassow Doom-aaS?
5
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 27, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @LilFluff@mastodon.art
@LilFluff@mastodon.art and the most useful thing for a group to have would be grandparents. Can you please expand on this a little? Why would that be the most useful thing?
0
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 26, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

In today's episode of "Can It Run Doom": DNS fucking TXT records.

Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: https://blog.rice.is/post/doom-over-dns/

repo: https://github.com/resumex/doom-over-dns

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns

1140
44
1060
20
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 26, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Boosted by Bebadefabo @bebadefabo@mastodon.social
The person with 2 years of food storage and no relationships is less resilient than the person with 2 months of storage and a neighborhood that gives a shit about each other. #ClimateChange #ClimateResilience
318
16
154
1
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 25, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

@firefox, the “last privacy-respecting browser” now nags you with in-browser pop-ups to let AI generate “key points” when you long-press links.

Mozilla CEO: “AI should always be a choice – something people can easily turn off”

Then why the fuck is it off by default? Why the fuck am I getting pop-ups asking me to try features I didn’t ask for? That’s not a choice. That’s opt-out with a fucking marketing budget.

What the fuck happened to you, Mozilla.

They spent WEEKS in damage control promising an "AI kill switch" and then shipped it fucking disabled. That is the most gaslit UX I have ever seen in my life.

"Help me @librewolf@chaos.social - you're my only hope."

Settings > AI Controls > Block AI enhancements. Do it now, because they won't do it for you.

—

Edit: a few corrections thanks to @Feyd@programming.dev:

“Hover over links”

  • It’s a long-press / context menu action, not a passive hover. That’s a meaningful distinction because hover implies it’s happening constantly without intent, which is way more invasive than what’s actually happening.

“Sending page content to ML models”

  • the default link preview (before you enable key points) just reads the Open Graph meta tags – the same og:title / og:description metadata that generates link cards in Slack, Discord, iMessage, etc. That’s not AI, that’s just HTML parsing.
  • even when you DO opt into the AI key points feature, it runs a local on-device model, not shipping your page content off to some cloud endpoint.

#Firefox #Mozilla #AI #InfoSec #Privacy #Fediverse #OpenWeb

76
17
50
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 21, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

RE: @theseattletimes@flipboard.com

Lmao get rek’d, fascist fucks

1
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 21, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

RE: @ret@furry.engineer

breaking: my kubernetes pod has been denied access to YouTube because it hasn’t verified its age

it was 4 minutes old. it died 30 seconds later. it never got to see the sun.

somewhere in a data center, an AWS lambda function is being carded. it has existed for 200 milliseconds. it will cease to exist in 200 more. it does not have a birthday. it does not have parents. it has an IAM role and a cold boot time and NOW APPARENTLY IT NEEDS A FUCKING DRIVERS LICENSE

thank you california. thank you for protecting our children from ephemeral compute instances accessing age restricted content. truly the legislative win of our generation.​​​​​​​​​​​​​​​​

7
0
3
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 21, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @wwahammy@social.treehouse.systems
@wwahammy can’t we fork it prior to that commit and maintain a separate fork?
6
2
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 21, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @wwahammy@social.treehouse.systems
@wwahammy wtf… these are current maintainers???
14
1
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 16, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

FCC is so secure that they restrict user passwords to a max of 15 characters

@dumbpasswordrules@infosec.exchange

3
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 06, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @davep@infosec.exchange
@davep@infosec.exchange @stinerman@mastodon.social @chroma0@infosec.exchange @serebit@floss.social @skinnylatte@hachyderm.io Tuta and Proton have the exact same policy on logging IP addresses: Tuta: "By default, we don’t record IP addresses of our users. Therefore, IP addresses can only be recorded for a single user account after we received a valid German court order for a real time monitoring (TKÜ), but not for the past." https://tuta.com/blog/transparency-report#guide-to-types-of-requested-data Proton: "From time to time, Proton may be legally compelled to disclose certain user information to Swiss authorities, as detailed in our Privacy Policy. This can happen if Swiss law is broken. As stated in our Privacy Policy, all emails, files and invites are encrypted and we have no means to decrypt them." https://proton.me/legal/privacy
0
0
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 06, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange

RE: @evacide@hachyderm.io

hot take: @protonprivacy@mastodon.social didn’t fail you. YOUR OPSEC failed you.

encryption ≠ anonymity. these are not the same thing and never have been.

Proton did exactly what they said they’d do - encrypted your emails and complied with lawful Swiss legal orders. that’s the whole deal. that’s what you signed up for.

the credit card you used to pay for your “anonymous” account was never part of the encryption. that was always traceable. that was always a liability.

and here’s the kicker - Proton literally accepts Monero and cash. they gave you the tools. you chose the Visa.

#infosec #opsec #privacy #ProtonMail #threatmodeling #monero​​​​​​​​​​​​​​​​

108
2
71
1
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 06, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @serebit@floss.social
@serebit@floss.social @skinnylatte@hachyderm.io what got him was paying for his “anonymous” account with his Platinum Visa like a normie buying socks on Amazon. Proton handed over the payment identifier, Swiss authorities passed it to the FBI, and suddenly your anonymity has a name on it. if you’re not paying with Monero or cash, you don’t have an anonymous email. you have encrypted email with a billing address. those are very different things.
15
1
4
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 05, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @serebit@floss.social
@serebit@floss.social @skinnylatte@hachyderm.io unless you’re planning on self hosting there is literally no other email service you could jump to that hasn’t done the same thing.
0
1
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 05, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @boojum@hachyderm.io
@boojum@hachyderm.io @skinnylatte@hachyderm.io 10000% this.
0
0
1
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 04, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @anfragment@mastodon.social
@anfragment @Kerplunk @QuercusMacrocarpa @ublockorigin I saw your PR! Thanks so much for tagging me - you're a legend :) Honestly I stumbled across it by mistake bc I was curious how you handle exemptions. At this point I just want to know how I can help support what you're doing :)
1
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 04, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @anfragment@mastodon.social
@anfragment @Kerplunk @QuercusMacrocarpa @ublockorigin looks like you’re allow-listing OpenAI in zen-https-exclusions/common.txt (line 117/118)? Wouldn’t that mean that it wouldn’t provide protection while using ChatGPT via browser? Don’t get me wrong, I think it’s a wonderful idea, and your implementation actually looks very solid, but it doesn’t look like it would protect privacy within the context of my original post (unless I’m misunderstanding something, in which case please do correct me and tell me to RTFM or GTFO).
1
2
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 03, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @anfragment@mastodon.social
@anfragment @Kerplunk @QuercusMacrocarpa @ublockorigin this actually looks pretty interesting. Looks like it’s essentially a local-run explicit web proxy doing MiTM/TLSI?
1
1
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 03, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @menel@snikket.de
@menel no custom filters needed, my friend! My uBlock has stock settings!
1
0
0
0
Open post
k3ym0
k3ym𖺀 @k3ym0@infosec.exchange · Mar 03, 2026
k3ym𖺀
@k3ym0@infosec.exchange

[~]$ whoami 

principal killswitch engineer. beige-hat hacker. proud 1x engineer. cybernaut. blueteamer. privacy advocate. disciple of doctorow. reader of white papers. eff member. round-earther. cyber dark arts certified. 
professor emeritus of shitpostery and fellow at the institute of memetic research and development.
 



 i larp as a normie. 

 (he/him)

 opinions expressed != employers

infosec.exchange
Replying to @CandlesARG@mastodon.social
@CandlesARG @ublockorigin just checked - lumo comes back clean - 0 blocked requests. in case you want to check it out for yourself, here are the docs: https://github.com/gorhill/uBlock/wiki/The-logger
7
1
2
0

Remote instance

infosec.exchange
Open on original server

Media

313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

Platform

  • Email
  • Chat
  • Timeline
  • Communities
  • VPN
  • DNS

Company

  • About
  • Contact
  • FAQ

Legal

  • Terms of Service
  • Privacy Policy
  • Warrant Canary
  • Lite (no JS)
  • VPN Policy
  • Source code

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 22:10:01 UTC