nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqe8m90e9k4w80kmp8shaw6pwqdtecp8lllkmnkmse7tx3wfe955aqdfh46y (nprofile…h46y) nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqhcrul0etnreherhra9vkg220qtjjw72dvezr8rceucj6jmapufxqr0pzxv (nprofile…pzxv) less fortunate: they also fucked up the permissions checks on that websocket in a bunch of BMCs.
You can send arbitrary SCSI packets to the host system with this mechanism...
Both Linux and Windows really aren't hardened against evil block storage devices.
Imagine the rest of the story.
Manawyrm
npub1kh…mjwem
2026-01-28 12:23:53 UTC
in reply to nevent1q…p7c4
Author Public Key
npub1khk8yx57k7t62kf3reh58tazv0a6wyg9jel2n8a6tyngkphjryusymjwemSeen on
wss://relay.ditto.pubPublished at
2026-01-28 12:23:53 UTCEvent JSON
{
"id": "db8f40d2c55cbeb995392d1793051095862a39c30ee74da87fa6f6c1ed686407",
"pubkey": "b5ec721a9eb797a559311e6f43afa263fba71105967ea99fba59268b06f21939",
"created_at": 1769603033,
"kind": 1,
"tags": [
[
"p",
"c9f657e4b6ab8efb6c2785faed05c06af3809ffffdb73b6e19f2cd172725a53a",
"wss://relay.ditto.pub"
],
[
"p",
"be07cfbf2b98f37c8ee3e95964294f02e527794d6644338f19e625a96fa1e24c",
"wss://relay.ditto.pub"
],
[
"p",
"4c20a2efba0fa477987ebb9e02a4b40156a7c3b79b08aeb70b15b36acbc3f1b7",
"wss://relay.ditto.pub"
],
[
"p",
"564d53cb2df848f36d8f68c74715c191450800144f82d015536c77d3dfb8d9dd",
"wss://relay.ditto.pub"
],
[
"e",
"8de78d11c01478868a62e3bb6d95de74b34e88970111f45df0a288fe7bbc0d76",
"wss://relay.ditto.pub",
"reply"
],
[
"proxy",
"https://chaos.social/users/manawyrm/statuses/115972704435910984",
"activitypub"
],
[
"client",
"Mostr",
"31990:6be38f8c63df7dbf84db7ec4a6e6fbbd8d19dca3b980efad18585c46f04b26f9:mostr",
"wss://relay.ditto.pub"
]
],
"content": "nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqe8m90e9k4w80kmp8shaw6pwqdtecp8lllkmnkmse7tx3wfe955aqdfh46y nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqhcrul0etnreherhra9vkg220qtjjw72dvezr8rceucj6jmapufxqr0pzxv less fortunate: they also fucked up the permissions checks on that websocket in a bunch of BMCs. \n\nYou can send arbitrary SCSI packets to the host system with this mechanism...\nBoth Linux and Windows really aren't hardened against evil block storage devices. \n\nImagine the rest of the story.",
"sig": "85c1f8952d27beaad7cfc0b71e12211fc76053575a2aa9aa451419fbe0ec1d53ad0b58a1a3cf185690c24379b1daee01c25869101936de3a5afb92d08a82ada9"
}