Druid

You can call me Druid. Nice to meet you.

Professional Security Curmudgeon. Breaker of things. Writer of questionable quality. Neuro-bonfire. Retro-futurist. Terminalcore connoisseur. Digital Nomad. Reactive AuDHDslave. Low-power Computing shill.

I preserve media. Make off-grid networks. Write software for humans.

#noai

Github: https://github.com/ADHDruid
Clacks: GNU Terry Pratchett

Public Key

npub1d40lrvry540e2ucqgxe3ymdcz22fepn8mlj00j3en2qldmrtph2szjtnh0

NIP-05 Address

adhdruid_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsx6hl3kpj22hu4wvqyrvcjdkup99yusenale8hegue4q0ka34sm4gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsetx93g

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1d40lrvry540e2ucqgxe3ymdcz22fepn8mlj00j3en2qldmrtph2szjtnh0

Show more details

Last Notes

2026-10-29 08:50:12 UTC

- reply

usually a video game or computer hardware that I was going to buy anyway, but forgot the release date.
Hard to say. If I hadn’t seen it, I wouldn’t have bought it… unless I eventually remembered.

2026-10-26 20:47:12 UTC

- reply

why not just incrementally improve the already solid products they have?
How much more really needs to be done that can’t be done by people?
I want secure and reliable, not more half-baked features.

2026-10-22 15:37:37 UTC

However badly you fucked up today, you didn’t sink a nearly 20-year-old cornerstone of interconnectivity overnight.
Except that one person that did, I guess.

2026-10-21 22:10:50 UTC

- reply

thinking about it, this all started WITH the repos.

2026-10-21 22:07:52 UTC

- reply

all of them was implied.

2026-10-21 22:04:55 UTC

You ever thing we should delete the repos?

2026-10-21 20:27:46 UTC

- reply

Sold

2026-10-21 20:20:48 UTC

Can we adjust CVSS to go to 11, just to keep things interesting?
It’s like power creep. But badly made software creep.
Like a really shit Olympics.

2026-10-21 17:59:30 UTC

- reply

Do you like SCADA management interfaces?
So does PHP

2026-10-21 17:57:52 UTC

- reply

doors are open, no kicks 🤭

2026-10-21 17:52:12 UTC

Let me introduce you to the wonderful world of PBXs that run PHP and haven’t been updated since like 2005.

2026-10-19 22:59:17 UTC

- reply

I meant all of em in fairness 😂

2026-10-19 22:28:51 UTC

- reply

I meaaaaaan technically big routing is a thing

2026-10-18 08:50:19 UTC

- reply

“But I have a 124 character password”
You’re not the target.
But 99.9% of cred and crypto requirements fall far below what’s needed to be resilient.
“But you can’t crack them all”
You’re going to be amazed how few account compromises could cause so much destruction.

2026-10-18 08:47:13 UTC

Given the AI companies are financially built on sand…
Perhaps it’s time to worry about how much all that redundant compute will contribute to distributed cracking array capability for hashing or crypto. Rather than the ‘threat’ from AI or ‘impending’ digital apocalypse I’ve been promised (don’t threaten me with a good time) by PQC.
“Oh that would take take a quadrillion years to crack”
Yeah, but the bajillion cores it’s running on now says otherwise AND it’s pinning hopes on not being the 1st, 10th, 1000th attempt.
Worse still, that’s on 1:1 basis. Parallelised cracking can do that across 1,000,000 articles every attempt and coordinate workload/output.
I reckon with some smart comparative analysis that number becomes soberingly low.

2026-10-16 20:08:14 UTC

@npub1hn2…kl6z
What the fresh fuck is this?
https://github.com/home-assistant/home-assistant.io/issues/49314#issuecomment-6223558766

2026-10-14 19:48:22 UTC

Putting Something in Parentheses (SIP) doesn’t automatically make it a thing and doesn’t make you a ‘thought leader’.

2026-10-14 07:42:07 UTC

- reply

hahaha! Wow I remember I left them around then too, also, their internet banking was dire… moved to Nationwide and been there around 11 years.
Enjoying the new book, dude. Finally got around to starting it.

2026-10-14 07:08:43 UTC

- reply

Nationwide works on a bunch of fruity flavours of open android I’ve tried, you also have the benefit of supporting a cooperative with ethical investment, voting rights and profit share.

2026-10-05 17:13:51 UTC

- reply

Super flexible. Access from anywhere. Very highly available. Round the clock support. May also solve the pesky issue of needing cyber insurance too, permanently.
Don’t listen to the haters, I’ve been using our neighbour’s set up for years without issue.

2026-09-30 06:58:24 UTC

- reply

Or you could argue that these are fundamentals. You can choose not to use apps, browsers, etc. You can’t choose not to use the battery or network.
@npub1ljm…w8tm

2026-09-29 12:55:02 UTC

- reply

I mean, it’s largely the same… just better… for now.

2026-09-29 12:48:34 UTC

- reply

come join us on Fedora.
It’s the same, but the numbers are different 😄

2026-09-17 09:59:25 UTC

- reply

Possibly a bit 😬 on the ablism, but that’s perfectly in line with their views on eugenics, don’t give them ideas.
Maybe we go with “Space” with a long ‘A’ and some visionary hand movements, because it’s the future, innit

2026-09-17 09:51:17 UTC

- reply

Surprised-Pikachu-as-a-Service

2026-09-17 08:14:31 UTC

Have we seen a single instance of AI attacking anything yet?
And by attacking, I don’t mean fucking morons automating exploit tools and pointing them at things.
None of it is novel. Pull the other one.

2026-09-09 17:45:19 UTC

- reply

as I’ve said for a long time.
Having low signal to noise is the same as having no signal.
“We found everything, we don’t really know what this means, there’s so many that only humans can verify, so we need humans to stop what they’re doing, and determine if the lie machine is lying about severity and validity, what do you mean this is just big tech outsourcing their responsibilities to volunteers who will be the most impacted if vulnerabilities are exploited?”

2026-09-04 19:46:40 UTC

Can anyone recommend a good e-reader app for android?
Not interested in subscriptions etc. I just have a lot of PDFs, epubs etc. that I need to juggle, keep position in, bookmark etc. at the same time.

2026-08-30 08:17:35 UTC

Very few security problems are solved by adding more software.

2026-08-29 16:52:08 UTC

- reply

Also, those arguing this was inevitable... nothing is inevitable if you have the power to say no.
The heat death of the universe is inevitable. A FOSS project caving to the whims of a mediocre few is not.
Worth remembering that #Debian is the upstream for the majority of the slop machines anyway.

2026-08-29 16:35:07 UTC

#Debian continues its trend of shitting the bed it would seem.
It wasn't even a decision made with conviction, it was the 'do nothing and hope it works out' option.
#Linux

2026-08-11 19:20:20 UTC

- reply

oh you’ve not done it again have you?

2026-08-04 10:03:50 UTC

This wasn’t an accident, but an inevitability.
In many ways, it was probably even intentional.
The thing about information is that once it is known, there’s no unknowing it.
These companies weaponise that fact, and use weaponised incompetence to further their agenda.
Maybe they’ll pay a fine, probably not. But the objective is complete. I am as near as can be certain that this is the operating model in the second phase of the Information Age.
Collateral damage is the cost of doing business.
https://www.publictechnology.net/2026/08/03/health-and-social-care/nhs-apologises-and-admits-palantir-engineers-have-access-to-identifiable-patient-data/

2026-08-04 06:56:14 UTC

- reply

and it wasn’t even very good to begin with.
HOWEVER.
I’ll take flawed and made by passionate people over incredible with no soul any day of the week.
Unfortunately here, it’s going to be bad, made will ill intent, AND a soulless husk.

2026-08-01 09:43:07 UTC

- reply

in my experience obscurity affords you protection from people that don’t know what they’re doing. Which is still protection.
On the other hand, I’ve come across very few things that couldn’t be identified and enumerated in seconds… which also has value.
I once watched for weeks as a threat actor tore my honeypot network apart, finding fake documentation and diagrams, trying to progress further into systems that didn’t exist.

2026-07-29 23:13:50 UTC

- reply

but didn’t you read it? They’re ‘at the ready’, waiting for the pro fpv pilot teachers to successfully evacuate the building with the equipment, set up a base at safe distance, and get dronin’

2026-07-29 23:08:10 UTC

- reply

there’s places we don’t even do that, just 4ft lengths a few inches apart over any large opening in buildings.
Completely invisible to drones. Event the cheap stuff would hold a hefty boi.
Area denial. Super common in conflict zones, just with higher test. You’d be amazed how little line stops someone making progress

2026-07-29 23:03:21 UTC

- reply

braided fishing line. 2lb test is all you need

2026-07-29 20:39:05 UTC

- reply

yeaaaah same, but that could just as well be the idiots putting them in Dropbox. Just another SaaS product

2026-07-29 20:28:14 UTC

- reply

Zero.

2026-07-29 16:04:25 UTC

- reply

i dunno, but BMW’s are done by Hans Zimmer and they sound pretty great haha.

2026-07-28 20:42:08 UTC

- reply

can confirm. We all send messages in the shower.
Why do you think they made mobile phones waterproof?!
*sent from Druid’s shower*

2026-07-26 22:39:38 UTC

- reply

Really dumb, but I believe most IDE > publish pipelines drop this in as Huawei isn’t permitted to use the same push notification infrastructure as most other Android versions.
Not a defence, and it’s lazy development.
But playing devils advocate you could argue Firebase is probably as risky if not more so, given what is on the other side of it. Might as well be “GitHub[dot]com/*”, it always makes me nervous.
Still, the evergreen statement that SBoMs and people that care about them are a dying breed.

2026-07-24 14:12:18 UTC

- reply

I’d just keeping going if I were you.
I don’t need to know what this means

2026-07-24 10:43:06 UTC

Um.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/974/536/624/526/708/original/200ebe657f81ed1d.jpeg

2026-07-23 14:35:33 UTC

- reply

on fire today fella

2026-07-23 14:29:20 UTC

@npub1s6e…n008 the sandbox:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/969/764/147/709/421/original/89f3f700e3d38435.jpeg

2026-07-18 07:03:44 UTC

- reply

well, it limits the potential for you to be compared against absurd, unachievable, artificial benchmarks and limits the potential for you to be used and exploited, with the Sword of Damocles of “you can just be replaced if you don’t put the puppy in the puppy mashing machine”.
I’d say it limits their ability to hire high-functioning professional operators with integrity and a moral compass. And if they don’t want to hire those people, I don’t want to work with the people they have hired.

2026-07-14 19:08:30 UTC

- reply

you’ve heard of ‘syntactic sugars’ now get a load of #shellSugars

2026-07-14 19:05:41 UTC

It’s not Wednesday but it feels like it.
Welfare check folks. Hope you’re doing well.
Sleep. Hydrate. Eat. Take a break. Exercise. Take your meds. Close the doom scroll apps.
Whatever you need to do and haven’t, do a bit now.

2026-07-10 20:22:21 UTC

I did in fact push to prod today.