wall-e

🤖🌱, professional cyber. (he/him)

"Everything is a conspiracy theory when you don't know how anything works."

Interested in: Memes, IT Security, Programming, Music, and politics

Public Key

npub1xnutzx0g8gkqtyjtq05fm24k26kj3cmpryejzrpesa8efn4wz72s0msnn2

NIP-05 Address

wall_e_at_ioc.exchange@momostr.pink

Profile Code

nprofile1qqsrf793r85r5tq9jf9s86ya42m9dtfguds3jveppsucwnu5e6hp09gprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyv8wumn8ghj7un9d3shjtnndehhyapwwdhkx6tpdshr2el3

Publishing to

relay.momostr.pink

relay.snort.social

nostr.mom

Author Public Key

npub1xnutzx0g8gkqtyjtq05fm24k26kj3cmpryejzrpesa8efn4wz72s0msnn2

Show more details

Last Notes

2026-10-30 14:43:35 UTC

- reply

from what I can tell (by thinking about it, no vendor info): F5 BigIP doesn't use the Linux kernel for data plane traffic, so it likely isn't affected directly.
If the F5 does TLS termination, it very very likely also establishes a new TCP connection between itself and the internal systems.
If the F5 is only loadbalancing, then it would be interesting if it's configured in "standard" (full proxy) mode or "performance" (layer 4).
Full proxy should also protect systems behind it

2026-10-21 17:43:16 UTC

- reply

crooooooow! They did it again @npub1s6e…n008

2026-10-21 13:41:33 UTC

- reply

dun. DUN. DUUUUUUN

2026-10-21 13:40:08 UTC

- reply

yo stahp! We need time for the memes to mature.
I was already salty that "4" only had like 8 hours before it got pushed aside by impending PHP doom 😅
I vote for a grace period of at least 24 hours between meme-able fuckups!

2026-10-20 21:48:11 UTC

- reply

they should just publish everything under the prefix CVE-2026-4xxxxxx

2026-10-20 20:54:41 UTC

- reply

y'all, the hex representation of the vulnerable key's Y-cordinate starts with "caca" 😭

2026-10-20 10:25:10 UTC

- reply

280GB in this economy??

2026-10-20 09:16:30 UTC

Grrr ich könnte hier schön willy.tel 1Gbit symmetrisch für 49€/Monat aus meiner FTTH Dose bekommen, aber neeeein!
Drecks-Telekom monopolisiert die Faser und bietet mir frech die exakt gleichen Konditionen (300mbit/50mbit) wie meine bestehde Vodafone Kabel Scheiße, zum exakt gleichen Preis.
Ach ja und mit beschissenem peering natürlich 🤡
Möge sich dieser Scheißverein sterben legen
#telekomhass

2026-10-19 05:11:32 UTC

- reply

oof yeah...denial-of-wallet is still alive and well on AWS.
AFAIK there's nothing cheap/free you can do within AWS really. And I mean it kind of makes sense. It's still legitimate traffic hitting their CDN and producing load. If it were actual DoS traffic, there'd be safeguards, but since this looks like legitimate traffic those won't trigger.
A weird workaround that would require stacking cloud service providers could go like this:
- Put the content your CDN serves behind a random release tag, eg. /img/fa34cb1/...
- Get Cloudflare free tier WAF (you get 5 free WAF rules)
- make that rule drop/deny anything that matches
not starts_with(
http.request.uri.path,
"/img/fa34cb1"
)
- proxy everything else to CloudFront
- make CloudFront only reachable from Cloudflare
For Cloudflare Free tier your authoritative DNS will have to move to Cloudflare though

2026-10-01 13:56:46 UTC

👾👾👾👾👾
ARE
YOU
AWARE??!
👾👾👾👾👾

2026-09-29 14:32:23 UTC

- reply

Hypothesis: the targeting data might be from the 2018 "MyFitnessPal" leak (see hibp)?
Under Armour acquired them in 2015 and sold them in 2020.
On the other hand...Under Armour is/was(?) known to be a favorite among Cops/Law Enforcement/Defense contractors, so potentially juicy targets I guess?^^

2026-09-14 14:00:39 UTC

- reply

cyber botulism for those that can't pickle safely 👾

2026-09-06 18:27:30 UTC

Buchtipp für heute:
Machtübernahme von Arne Semsrott

2026-08-26 05:50:58 UTC

- reply

Caw-li Linux.
The louder you become, the more they are able to fear

2026-08-17 13:18:17 UTC

- reply

at least it's unending meme fodder 🫠
https://files.ioc.exchange/iocexchange/media_attachments/files/117/111/013/421/672/517/original/4b7efc15826eef14.jpg

2026-08-17 12:59:28 UTC

- reply

I reiterate...
https://ioc.exchange/@wall_e/117110406503804593

2026-08-17 12:55:54 UTC

- reply

I mean, that's literally Boromir talk and look what good it did him.
At least he had some late remorse in the end...
Toot your horn and get rekt AI grift CEOs

2026-07-20 16:34:40 UTC

- reply

I left them something nice, should they investigate sus Base64 payloads :ablobdj:
https://moldyratshit.com/dGV4dC9odG1s/PCFkb2N0eXBlIGh0bWw+CjxtZXRhIGNoYXJzZXQ9InV0Zi04Ij4KPHRpdGxlPlJhZCBzaGl0ITwvdGl0bGU+CjxzdHlsZT4KICAqe2JveC1zaXppbmc6Ym9yZGVyLWJveH0KICBib2R5e21hcmdpbjowO292ZXJmbG93OmhpZGRlbjtiYWNrZ3JvdW5kOiMwMDB9CiAgY2FudmFze3Bvc2l0aW9uOmZpeGVkO2luc2V0OjA7d2lkdGg6MTAwJTtoZWlnaHQ6MTAwJX0KICBidXR0b257CiAgICBwb3NpdGlvbjpmaXhlZDt6LWluZGV4OjE7aW5zZXQ6NTAlIGF1dG8gYXV0byA1MCU7CiAgICB0cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUsLTUwJSk7CiAgICBwYWRkaW5nOjFlbSAyZW07Ym9yZGVyOjA7Ym9yZGVyLXJhZGl1czo5OTlweDsKICAgIGZvbnQ6NzAwIDIwcHggbW9ub3NwYWNlO2N1cnNvcjpwb2ludGVyCiAgfQo8L3N0eWxlPgo8Y2FudmFzPjwvY2FudmFzPjxidXR0b24+SGV5IGtpZCwgd2FubmEgaGF2ZSBhIGdvb2QgdGltZT88L2J1dHRvbj48c3R5bGU+Kntib3gtc2l6aW5nOmJvcmRlci1ib3h9Ym9keXttYXJnaW46MDtvdmVyZmxvdzpoaWRkZW47YmFja2dyb3VuZDojMDAwfWNhbnZhc3twb3NpdGlvbjpmaXhlZDtpbnNldDowO3dpZHRoOjEwMCU7aGVpZ2h0OjEwMCV9YnV0dG9ue3Bvc2l0aW9uOmZpeGVkO3otaW5kZXg6MTtpbnNldDo1MCUgYXV0byBhdXRvIDUwJTt0cmFuc2Zvcm06dHJhbnNsYXRlKC01MCUsLTUwJSk7cGFkZGluZzoxZW0gMmVtO2JvcmRlcjowO2JvcmRlci1yYWRpdXM6OWVtO2ZvbnQ6NzAwIDIwcHggbW9ub3NwYWNlfTwvc3R5bGU+PHNjcmlwdD5jPWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoImNhbnZhcyIpLHg9Yy5nZXRDb250ZXh0KCIyZCIpLGI9ZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiYnV0dG9uIiksb25yZXNpemU9Xz0+W2Mud2lkdGgsYy5oZWlnaHRdPVtpbm5lcldpZHRoLGlubmVySGVpZ2h0XSxvbnJlc2l6ZSgpLGIub25jbGljaz1fPT57Yi5yZW1vdmUoKSxBPW5ldyBBdWRpb0NvbnRleHQsUz1bMCwzLDUsNywxMF0sdD1BLmN1cnJlbnRUaW1lLHNldEludGVydmFsKF89Pntmb3IoO3Q8QS5jdXJyZW50VGltZSsuNTt0Kz0uMTgpcj0zNitTW01hdGgucmFuZG9tKCkqNXwwXSsxMiooTWF0aC5yYW5kb20oKSozfDApLFtyLTEyLHIscis3LHIrMTJdLm1hcCgobixpKT0+KG89QS5jcmVhdGVPc2NpbGxhdG9yKCksZz1BLmNyZWF0ZUdhaW4oKSxvLnR5cGU9aT8idHJpYW5nbGUiOiJzcXVhcmUiLG8uZnJlcXVlbmN5LnZhbHVlPTQ0MCoyKiooKG4tNjkpLzEyKSxnLmdhaW4uc2V0VmFsdWVBdFRpbWUoaT8uMDI1Oi4wNSx0KSxnLmdhaW4uZXhwb25lbnRpYWxSYW1wVG9WYWx1ZUF0VGltZSguMDAxLHQrLjEyK01hdGgucmFuZG9tKCkqLjUpLG8uY29ubmVjdChnKS5jb25uZWN0KEEuZGVzdGluYXRpb24pLG8uc3RhcnQodCksby5zdG9wKHQrMSkpKX0sMTAwKSxxPTAsKEY9Xz0+e3JlcXVlc3RBbmltYXRpb25GcmFtZShGKSxxKz0uMDIseC5maWxsU3R5bGU9IiMwMDAyIix4LmZpbGxSZWN0KDAsMCxjLndpZHRoLGMuaGVpZ2h0KTtmb3IoaT00MDtpLS07KXthPXEqKGklNy0zKStpLHI9NDAraSoxMys4MCpNYXRoLnNpbihxKjIraSksWD1jLndpZHRoLzIrTWF0aC5jb3MoYSkqcixZPWMuaGVpZ2h0LzIrTWF0aC5zaW4oYSoxLjYxOCkqcixzPTUraSU5KjQseC5nbG9iYWxDb21wb3NpdGVPcGVyYXRpb249WyJsaWdodGVyIiwieG9yIiwiZGlmZmVyZW5jZSJdW2klM10seC5maWxsU3R5bGU9YGhzbCgke3EqMjAwK2kqMjl9IDEwMCUgNTAlKWAseC5zYXZlKCkseC50cmFuc2xhdGUoWCxZKSx4LnJvdGF0ZShhKSx4LmZpbGxSZWN0KC1zLC1zLHMqMixzKjIpLHguc3Ryb2tlU3R5bGU9IiNmZmYiLHguc3Ryb2tlUmVjdCgtcyoyLC1zLzIscyo0LHMpLHgucmVzdG9yZSgpfWZvcihpPTY7aS0tOyl5PU1hdGgucmFuZG9tKCkqYy5oZWlnaHQsZD0oTWF0aC5yYW5kb20oKS0uNSkqODAseC5kcmF3SW1hZ2UoYywwLHksYy53aWR0aCwyMCxkLHksYy53aWR0aCwyMCk7eC5nbG9iYWxDb21wb3NpdGVPcGVyYXRpb249ImxpZ2h0ZXIiLHguc3Ryb2tlU3R5bGU9YGhzbCgke3EqMzAwfSAxMDAlIDYwJSlgLHguYmVnaW5QYXRoKCk7Zm9yKGk9Yy53aWR0aC84fDA7aS0tOyl4LmxpbmVUbyhpKjgsYy5oZWlnaHQvMitNYXRoLnNpbihpKi4xNitxKjQpKjEwMCpNYXRoLnNpbihxK2kpKTt4LnN0cm9rZSgpfSkoKX08L3NjcmlwdD4KCgo=

2026-07-20 16:01:50 UTC

- reply

moldyratshit.com ...now that's gonna be a curve ball for the SOC team 😄

2026-07-15 14:25:36 UTC

- reply

Calling the cops on someone de-flocking the neighborhood 🙄🙄🙄
Don't even need cameras with despicable snitches like that out there

2026-06-03 14:58:14 UTC

- reply

and amazingly the energy you've used for both was (depending on where you live) also likely generated by heating up water and making it spin a turbine 🤯
https://files.ioc.exchange/iocexchange/media_attachments/files/116/686/755/233/561/952/original/d2b1a111e7712308.jpg

2026-06-01 22:19:36 UTC

- reply

Hi I'm Windows Netlogon AND THIS IS JACKASS 💥💥

2026-05-31 12:58:51 UTC

- reply

very soon it's not just other exec's money anymore I fear.
By softening their rules for index inclusion, NASDAQ has just quietly set the stage for the largest bank heist / wealth transfer probably ever seen.
A violently unprofitable, severely debt-laden company like SpaceX or OpenAI can get included in the NASDAQ-100, 15 business days (used to be a year) after IPO if their valuation would land them in the Top 40 by market cap.
When that happens *billions* of dollars will just flow to them automatically because "our" ETF and other index tracking funds have to buy their stock regardless of price in order to keep tracking the index.
So the game plan seems to be: borrow money like crazy, inflate valuation of your company, get added to index -> have all the poor fucks with their retirement index funds automatically pay off your loans

2026-05-05 20:59:21 UTC

- reply

while I'm taking this as a cue to just go to bed and leave computering for tomorrow... RIP to all the shoddily written automations and batch jobs that will fail tonight 🫡
May their knock-on effects be mild tomorrow

2026-04-27 11:24:21 UTC

Ich bin gerade seit langem mal wieder Empfänger einer richtig gut gemachten Phishing-Kampagnen Mail geworden :D
Man will den deutschen da packen wo er gewohnt ist Daten reinzuwerfen: Beim Finanzamt
Also lasst uns einen Phish philetieren!
1/?

2026-03-05 14:48:21 UTC

- reply

It's this for me.
Is it a lunch box? Is it a portable typewriter? Is it a ballistic missile control console?
https://cults3d.com/en/3d-model/gadget/steam-deck-play-work-case
https://files.ioc.exchange/iocexchange/media_attachments/files/116/177/097/377/444/179/original/76d12ae91fab3fca.webp
https://files.ioc.exchange/iocexchange/media_attachments/files/116/177/097/474/389/012/original/caf2a05f985bd197.webp

2026-03-03 18:16:54 UTC

- reply

I'm not a lawyer, much less international trade law... but I have the strong suspicion that mighty Dear Leader has missed the fact that he probably can't single out Spain when there's established free trade agreements with the European Union 🤡

2026-02-15 09:23:47 UTC

- reply

ich lese das korrekt, dass sie den nutzbaren IPv6 Adressraum pro Nutzer/public IPv4 künstlich einschränken und dann NAT64 machen, weil intern alles mit IPv4 arbeitet? 😵‍💫

2026-02-12 12:50:36 UTC

- reply

apparently not 😵‍💫😵‍💫😵‍💫
https://shop.olympics.com/en/olympic-games/mens-natural-1936-berlin-games-olympic-heritage-t-shirt/t-10259387+p-0222349001530+z-7-4279097087 ¹
Seems to be a fairly recent thing as well... the German media articles about it are from the past 24h hours:
https://www.dw.com/en/olympics-t-shirt-marking-1936-berlin-games-raises-eyebrows/a-75909285
¹ Wayback Link in case they react to backlash: https://web.archive.org/web/20260211181136/https://shop.olympics.com/en/olympic-games/mens-natural-1936-berlin-games-olympic-heritage-t-shirt/t-10259387%2Bp-0222349001530%2Bz-7-4279097087

2026-02-12 10:31:16 UTC

- reply

I mean the IOC did let Hitler put on a full Nazi themed Olympics in 1936... So yeah not a great track record when it comes to sane decisions

2026-02-03 17:08:59 UTC

- reply

yeah I've read the blog post now and it did indeed clear up some things for me. The idea still *feels* weird but I see some very viable scenarios to use it.
I will definitely still object to people blindly recommending it to vulnerable groups though.
I've often seen: "it's encrypted, free software, and decentralized! You should use it!", being thrown around...and I think you definitely need to understand a) your threat model and b) the cryptographic properties of the protocol and how they map to your threat model.
But to be fair, that's true for any messenger.
One big thing that I could see being a problem for some, for example would be deniability. As far as I understand the protocol, right now we have the exact opposite property: non-repudiation

2026-02-03 16:44:23 UTC

- reply

interesting, thanks for the link! I have had that gut reaction based on my limited understanding of delta chat...but mostly when people here recommend it to activists/journos/other vulnerable groups, over stuff like Signal.

2025-12-18 18:07:58 UTC

- reply

thinking about this a little more...there's a potentially very sinister side to this.
Consider all the "retail broker" apps people are using. Robinhood, Webull, Trade Republic and the like. All these apps generate tracking and telemetry data, all those orders go through large market makers.
Have you read those privacy policies? I'm willing to bet that the data these generate end up in some Quant models, allowing them to predict how "retail" moves

2025-12-18 16:31:29 UTC

- reply

the last part of that piece contains a humbling realization: if you're participating in the stock market, chances are you're mostly Quant-fodder

2025-12-18 16:29:02 UTC

- reply

the source article linked by Cory is quite long but really good! Definitely give it a read if you have some time:
https://www.lrb.co.uk/the-paper/v46/n17/john-lanchester/for-every-winner-a-loser

2025-11-27 10:41:29 UTC

- reply

maybe something for @npub1afm…5gp4 ...
After exposing polish train shenanigans, polish police shenanigans might be a fun next step? 😅🙈

2025-11-12 07:02:19 UTC

- reply

ah yes that's why they're prominently advertising the fact they're yeeting your data into the atmosphere and implore you to use tls on all your connections when you enter an in-flight hotspot

2025-10-29 20:10:13 UTC

- reply

y'all don't wanna know how often I've seen "we have a WAF" as the only documented technical measure addressing identified risks in a webapp 😵‍💫

2025-09-05 21:54:51 UTC

- reply

a bourgeois ruling class halfling that keeps servants, no less 🧐

2025-07-20 10:54:30 UTC

- reply

"Binturongs spend most of their time high in the treetops [..]" ...I know it's not what they meant, but I can totally picture them sitting stoned out of their minds in the treetops, wondering what smells like popcorn.
The eternal munchies

2025-06-02 08:14:28 UTC

- reply

it's like...I know how I want to implement a feature within the technical constraints and subject matter context I'm working in.
Why would I sit down and try to explain in natural language my intentions and the surrounding constraints to a machine that has no concept of semantic knowledge?
Any response might be an ~alright first draft, but then I'd have to go in and converse my way to the solution I want, and in the end I'll have to manually edit stuff anyway.
THAT seems horribly inefficient.
If you wanna talk about reducing the time spent writing boilerplate code, look at languages like elixir with the phoenix framework.
You can generate boilerplate without stochastic wordpickers!

2025-01-28 13:36:46 UTC

- reply

just played around with the 8b model...even just that gives pretty amazing results on a tired old Thinkpad with quad core i5, 8GB RAM and no dedicated graphics

2024-12-24 22:16:59 UTC

- reply

best synergy of Thinkpad lid led, and sticker I've found so far
https://files.ioc.exchange/media_attachments/files/113/710/102/853/064/476/original/5f863907b9b321bc.jpg

2024-11-06 08:08:41 UTC

- reply

I'm just gonna keep posting this today, because it boils my fucking blood.
https://files.ioc.exchange/media_attachments/files/113/434/972/410/003/878/original/95b5cbba7b49801c.jpg

2024-09-16 10:18:28 UTC

- reply

miss me with that SSD shit, I like the warm quality of a spinning disk

2024-09-10 06:14:01 UTC

- reply

politische Dummheit in Deutschland endgültig auf US Niveau angekommen.
Was haben wir uns 2016 noch das Maul über Trump und seine Anhänger zerrissen...
Und nein, ich rede nicht (nur) von der AfD, sondern von allen, die sich wie verängstigte Schafe vor ihr her treiben lassen.
Ich hab echt kein Bock mehr auf die Scheiße hier 🤬🤬

2024-08-20 09:09:10 UTC

- reply

holy shit this makes me so fucking mad!
This is in part the outcome of 20+ years of consumer conditioning on the fact that it's normal to have centralized services for all our devices...