shellsharks

Infosec researcher | Indieweb enthusiast | Find me @ https://shellsharks.com

#infosec #cybersecurity #tech #indieweb searchable

Profile picture: A red shark holding a terminal window shaped like a surfboard. The terminal reads “> whoami shellsharks”

#fedi22

Public Key

npub1kgjgq3wwlt6k3tpjgdtnwm4pe0fy3yvh6ce7wqjkfypzsz2z7pfqk6ua9d

NIP-05 Address

shellsharks@shellsharks-social.mostr.pub

Profile Code

nprofile1qqstyfyqgh804atg4seyx4ehd6suh5jgjxtavvl8qftyjq3gp9p0q5spz4mhxue69uhhyetvv9ujuerfw36x7tnsw43qsndjm7

Publishing to

relay.ditto.pub

Author Public Key

npub1kgjgq3wwlt6k3tpjgdtnwm4pe0fy3yvh6ce7wqjkfypzsz2z7pfqk6ua9d

Show more details

Last Notes

2026-10-27 14:11:09 UTC

CVE-2026-11497 having a bit of an identity crisis…
- Imperva coined the initial term, “Node2Shell” (https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/)
- Aikido tried to turn it into “HTTP2Shell” (https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497)
- Not satisfied with either of those, someone came up with “Broccoli2Shell” 🥦 (https://broccoli2shell.com)
- And now, super late to the game, humorless Tenable has decided to label it “Brotli2Shell” (https://www.tenable.com/blog/brotli2shell-frequently-asked-questions-for-google-brotli-decoder-cve-2026-111497)
Same vuln, 4 different names (so far). Yeesh…

2026-10-25 13:46:00 UTC

Recently discovered this https://2shell2furio.us/, poking a bit of fun at all the "-2shell" named vulns (there's quite a few not even listed there yet if you search on https://vulnerability.garden/). But "shell" isn't even the most used vuln-naming trope. Taking the top 3 spots is "bleed", "jack" & "pwn" 😄
- "bleed": 45
- "jack": 37
- "pwn": 33
- "shell": 30
- "bad": 30
- "leak": 29
- "ghost": 28
- "dirty": 19
- "fail": 17
- "shadow": 14
- "break": 13
- "root": 12
- "hammer": 12

2026-10-22 16:45:10 UTC

I read Calif’s (i.e. Ryan Austin’s) writeup on PHP2Shell (https://calif.io/php2shell/) and come away feeling like an absolutely uncreative, and super noob infosec person. The perfect chaser, and a great way to feel better about myself (at least entropically speaking 🤭), is to mosey on over to eMudhra’s press release feed (https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business). I guess we’re pretty much all somewhere between the two… 🤗

2026-10-22 15:46:09 UTC

Shoutout to everyone continuing to meme the eMudhra thing, despite there being a newer, hotter (as in flaming garbage dump hot) infosec disaster (i.e. PHP). I love you guys. 🧡 #never4get

2026-10-22 15:16:19 UTC

I think we can all agree that the ongoing PHP situation (#php2shell) is pure chaos. Sites being pulled down, everyone scrambling to produce a working exploit, botched disclosure, tons of half-assed exploitation attempts in the wild, etc. But my favorite part of this whole mess has been watching everyone and their mom trying to claim some bit of credit for it all... read on if you want a bit of a laugh (or you just want to try to make sense of it)
https://shellsharks.com/php2chaos
#infosec #cybersecurity

2026-10-21 12:43:22 UTC

Actual footage of eMudhra PKI folks... Crazy right?
https://cdn.masto.host/shellsharkssocial/media_attachments/files/117/478/955/358/403/312/original/481e8c4995a27160.mp4

2026-10-21 12:31:39 UTC

Two more nominations for biggest security woopsie woopsie of the last 10 years...
- WannaCry 😭
- Log4J 🪵
- Solarwinds ☀️
- clownstrike 🤡
- xz (shoutout to Jia!) 😎
- 4 🤦‍♂️
- like... all of PHP
Congrats to all the nominees!

2026-10-16 12:03:10 UTC

Shoutout to @nprofile…ydzz and risky.biz. I went through every (and I mean *every*) newsletter (https://risky.biz/newsletters/) dating back to 2022 to pull out any “named vulnerabilities” that I didn’t yet have in the Vulnerability Garden (https://vulnerability.garden). Despite how thorough I’ve been, adding these throughout the years, I still managed to find just shy of 100 (99 to be exact) new vulns to add to the list. Thanks to Catalin for contributing to the madness! 🪴

2026-07-18 20:01:11 UTC

- reply

@nprofile…mej2 Will be adding. Thanks!

2026-07-12 11:33:32 UTC

- reply

@nprofile…6x4u Thanks! 🧡

2026-07-10 20:43:11 UTC

📜 Scrolls 46 is out! (I’m back!)
https://shellsharks.com/scrolls/scroll/2026-07-10
Thanks to everyone mentioned below. Their work is featured in this week's issue.
@nprofile…hqg6 @nprofile…9v4s @nprofile…gykz @nprofile…sa6x @nprofile…upxj @nprofile…vd7w @nprofile…st9f @nprofile…g9eh @nprofile…8tkp @nprofile…n4tt @nprofile…yqz9 @nprofile…m09t @nprofile…757z @nprofile…pq2a @nprofile…9v4s @nprofile…26mc @nprofile…04s9 @nprofile…vchw @nprofile…508v @nprofile…6x4u @nprofile…atnr @nprofile…a85z @nprofile…7fdt @nprofile…m32a @nprofile…jx8n @nprofile…kgg0 @nprofile…ghwa @nprofile…r3xs @nprofile…s8xx @nprofile…y9y6 @nprofile…h7n2
#indieweb #fediverse #infosec #cybersecurity

2026-07-10 19:07:39 UTC

- reply

@nprofile…h7n2 Here’s a bunch of mine - https://shellsharks.com/notes/2024/08/30/favorite-fedi-artists

2026-07-08 14:47:06 UTC

- reply

@nprofile…64rw But if you’re looking for more webrings - I’ve got a bunch you can peruse here: https://shellsharks.com/indieweb#webrings

2026-07-08 14:03:46 UTC

- reply

@nprofile…64rw @nprofile…cmam I’m partial to the Webrings I’m in 🤗 - https://shellsharks.com/#webrings

2026-07-08 14:01:22 UTC

- reply

@nprofile…cdn7 Yep. Still the biggest downside of vanilla Masto. It’s beyond me why they don’t just allow admins to change this in the settings. Literally no reason not to do this.
cc @nprofile…5dxw PLEASEEEEE!

2026-07-07 19:21:53 UTC

- reply

@nprofile…k673 Still one of the coolest sites out there. Nice work!

2026-07-07 14:44:30 UTC

Honestly I almost didn’t even get this off the ground, but here ya go, I’m actually going through with >Shark Week 2026.
https://shellsharks.com/sharkweek/2026
It’s just a cheesy thing I do on my site during Shark Week where I try to post something every day. Also, it turns out shark week isn’t until later in July. But F it. It’s going up this week for me.
Enjoy some random stuff from me for a week straight.
🦈 🗓️

2026-07-06 14:25:31 UTC

- reply

@nprofile…n4tt Glad you enjoyed it! 🧡

2026-07-06 14:23:06 UTC

- reply

@nprofile…03me Thanks! 🙏 🧡

2026-07-05 11:53:54 UTC

- reply

@nprofile…rgm6 100% no one uses this. It's a breathtakingly stupid idea. WOW.

2026-06-21 06:40:26 UTC

- reply

@nprofile…x24f I also am happy with the result. That there is some good webbin'

2026-06-21 06:24:23 UTC

- reply

@nprofile…757z I feel the same. I don't have the time to flesh out why rn, but though I like bubbles as it serves as another entry point to the IndieWeb, I don't think it's a good reflection of what it has to offer.
To me, the indieweb shouldn't be a popularity contest, and its best content is often not what's "freshest". I dislike the idea of someone relying exclusively on Bubbles as their way of finding things.
The joys of IndieWeb discovery cannot be algorithmically contained.

2026-06-19 16:11:52 UTC

- reply

@nprofile…a53j I'm not a fan of AI, but I think this is as good a reason as any to use it. Blogs! Websites! Woo!

2026-06-19 08:10:32 UTC

- reply

@nprofile…g5kq @nprofile…l9z3 Just under 5GB db and 11GB media storage at the moment.

2026-06-19 07:05:32 UTC

- reply

@nprofile…vlzd On the grand scale you're probably not wrong. But for me, and what I use "social media" for, it's been pretty good for 4-ish years. I hardly use socials, even Fedi for "micro-blogging" though. Most everything I want to say is done so on my site. I syndicate here sometimes, but mostly use it to interact with others posts. I've met some cool folks this way and that's all this place has ever needed to be. ✌️
Also Jerry's cool enough 😋. The bars low for humans these days 🤦‍♂️

2026-06-18 00:35:17 UTC

- reply

@nprofile…fmmc I've always thought this. So they're not only useless but also just ugly cruft on your posts 💩

2026-06-16 13:32:43 UTC

- reply

@nprofile…7g7z @nprofile…wfkq I’ve got a few things like that, and I’ve seen quite a few others who have similar pages. Like… I have a blogroll (https://shellsharks.com/blogroll), a bookmarks/links page (https://shellsharks.com/bookmarks), and a li’l weekly link dump publication (https://shellsharks.com/scrolls/) that anyone can peruse and click around on!

2026-06-15 13:22:49 UTC

- reply

@nprofile…d2tw Doh! That’s my bad. I found that whole coffee debate thing via your article and somehow forgot to link it in the original scroll. It’s fixed now. Sorry about that. And I like your blog!

2026-06-15 13:22:00 UTC

- reply

@nprofile…prjl Thanks! 🧡

2026-06-12 15:16:04 UTC

- reply

@nprofile…9050 Ack probably. I'll fix it when I'm back at my console 😅
Thanks!

2026-06-12 14:47:29 UTC

📜 Scrolls vol. 45 is out!
https://shellsharks.com/scrolls/scroll/2026-06-12
Thanks to everyone mentioned below. Their work is featured in this week’s edition! 🧡
@nprofile…32sz @nprofile…e46s @nprofile…ja5s @nprofile…zwgr @nprofile…hqg6 @nprofile…p6u4 @nprofile…m09t @nprofile…64rw @nprofile…s3d4 @nprofile…25nm @nprofile…78j3 @nprofile…hawp @nprofile…kuux @nprofile…dx8f @nprofile…np4k @nprofile…m5a6 @nprofile…rnw0 @nprofile…9v4s @nprofile…03dx @nprofile…m09t @nprofile…xhcn @nprofile…68g5 @nprofile…j336 @nprofile…zed5 @nprofile…d2tw
#indieweb #fediverse #infosec #cybersecurity
FYI, Scrolls is now on a brief hiatus and will return on 7/10.

2026-06-11 13:44:07 UTC

- reply

@nprofile…mej2 💯 🚀 👍 Added!

2026-06-08 14:40:27 UTC

- reply

@nprofile…m5a6 My pleasure! Hopefully it’s an enjoyable time clicking through everything 😄

2026-06-06 17:31:12 UTC

- reply

@nprofile…0w6t I have a whole lot of feeds here https://shellsharks.com/feeds 🤗

2026-06-05 19:48:08 UTC

- reply

@nprofile…lx5s Thanks for the reminder for me to remove all links to Substack from my site. Cheers!

2026-06-05 17:53:10 UTC

📜 Scrolls 44 is out!
https://shellsharks.com/scrolls/scroll/2026-06-05
Shoutout to everyone listed below. Their work was featured in this week’s edition. 🧡
@nprofile…757z @nprofile…cz9q @nprofile…m32a @nprofile…cml4 @nprofile…pdft @nprofile…edv0 @nprofile…tcf3 @nprofile…20up @nprofile…cyr5 @nprofile…9v4s @nprofile…44q6 @nprofile…86lt @nprofile…934n @nprofile…m5a6 @nprofile…s5s2 @nprofile…0gac @nprofile…0tsc @nprofile…vu66 @nprofile…68g5 @nprofile…q60p
Have a great weekend!
#indieweb #fediverse #cybersecurity #infosec

2026-06-05 12:06:18 UTC

- reply

@nprofile…n4tt @nprofile…s5s2 Definitely got the idea from you tho 😄

2026-06-04 14:07:45 UTC

- reply

@nprofile…0tsc You’re doing great! You’ve got your own domain, and you’ve put something on it. Congrats! You’re part of the IndieWeb. My advice is to not get too caught up in any of the bespoke technical voodoo that often get’s associated with being “IndieWeb”. I mean if you want to add those things, then by all means do so. It’s YOUR site after all. Just don’t think you *need* to, or are expected to, in order to be part of said “community”.
A little more about that here…
https://shellsharks.com/notes/2024/05/14/one-of-us

2026-06-04 14:01:53 UTC

AI isn’t real “intelligence”. It doesn’t measure up to human intelligence!
Looks around at humans…
Oh…
Well, AI can’t match human intelligence because humans can think for themselves!
Once again looks around at humans today…
Shit…

2026-06-04 13:57:48 UTC

- reply

@nprofile…s5s2 Here’s mine 🤗 https://shellsharks.com/style
Your style is so crisp and nice looking though =). I’d say mine’s a bit more rough/amateurish… but some might say “full of character” 😄

2026-06-04 13:54:39 UTC

- reply

@nprofile…mcqv I keep a list of such places here https://shellsharks.com/indieweb#explore-the-indieweb. Also, recently someone published this list of curated directories here https://theindex.fyi. I’m sure what you’re looking for can be found in one of these two places.

2026-06-03 13:35:41 UTC

- reply

@nprofile…9v4s I know nada about ao3 or fan fiction sites in general. What I DO know is a good metaphor when I see one. This one about Internet cross-pollination is perfection. Especially for me right now as I’ve set off into my (IRL) gardening era. The importance of cross-pollination in both contexts can not be understated.
Cheers!

2026-06-03 13:07:14 UTC

- reply

@nprofile…cyr5 Neat! I had this *exact* idea like 15 years ago but never had the energy ( or maybe know-how? ) to bring it to life. Back then the web seemed a bit less hostile… I have more fears and doubts about how well this concept would work today, but I think it’s awesome that someone’s going to try to make it happen. Looking forward to seeing how it goes!

2026-06-01 14:30:42 UTC

- reply

@nprofile…pdft This is great! I love to see sites morph from “blogs” to “this is everything me”-style homes/gardens. Once you’re there, you can really let your individualistic expression run wild. Looking forward to seeing its evolution from here 😄

2026-05-29 13:32:57 UTC

📜 Scrolls 43 is now out! Lots of great links to discover as usual 🤗
https://shellsharks.com/scrolls/scroll/2026-05-29
Thanks to everyone mentioned below. Their work is featured in this week’s issue. 🧡
@nprofile…c3uv @nprofile…q2xw @nprofile…e4q5 @nprofile…757z @nprofile…07hu @nprofile…atnr @nprofile…excs @nprofile…a7f2 @nprofile…aztl @nprofile…mtpz @nprofile…xths @nprofile…3gey @nprofile…knj4 @nprofile…6ex4 @nprofile…tkha @nprofile…cmam @nprofile…lx5s @nprofile…2kst @nprofile…8txc @nprofile…eqtd
#indieweb #fediverse #infosec #cybersecurity
Have a great weekend!

2026-05-28 17:42:30 UTC

- reply

@nprofile…u8z9 Joined in 2018 out of curiosity. Rejoined in 2022 during the early stages of the Elonification of Twitter. I was never much of a Twitter-er anyways (just lurking mostly) but out of principle, and because I saw infosec folks coming to Fedi, I went to.
I’ve stayed (and will continue to stay) for so many reasons….
- My awesome curated timeline filled with wonderful people.
- The level of ownership I have of my presence and data
- Fediversal interoperability
To name a few!

2026-05-27 12:34:51 UTC

- reply

@nprofile…xe2k Good tip. I’m still working up the nerve to move my main site over to Codeberg. I recently set up my newest site there and wrote this up to help others do the same https://shellsharks.com/devlog/planting-a-website-on-codeberg-pages.

2026-05-22 14:44:18 UTC

📜 Scrolls volume 42 is out! Enjoy some web surfing and have a great weekend!
https://shellsharks.com/scrolls/scroll/2026-05-22
Thanks to everyone listed below. Their work was featured in this weeks issue.
@nprofile…dqzr @nprofile…5l8a @nprofile…5es2 @nprofile…ck53 @nprofile…8f9g @nprofile…9v4s @nprofile…sayx @nprofile…02ya @nprofile…m32a @nprofile…fne4 @nprofile…28y2 @nprofile…rc8z @nprofile…c462 @nprofile…jnjt @nprofile…4x83 @nprofile…mpl5 @nprofile…jhnq @nprofile…567c @nprofile…zfc7 @nprofile…nnrv @nprofile…j336 @nprofile…vcfk @nprofile…ru8t @nprofile…ru48 @nprofile…2lch @nprofile…cmam @nprofile…8lzm @nprofile…vj9r
#indieweb #fediverse #infosec #cybersecurity

2026-05-20 16:10:12 UTC

- reply

@nprofile…pms8 Cool! Thanks for sharing. I added FROST (and a few others I was not aware of from your already-published works here https://vulnerability.garden). 🪴🤗
Quick somewhat-related question though. I’ve noticed in this research, and *so* many other similar published white papers, that the authors do not include a Published Date. Why is this? At best I’ll get a year-published for citation purposes, but I’d personally love to know the month+day as well.
Anyways, thanks again!!

2026-05-20 13:08:13 UTC

- reply

@nprofile…9v4s Thanks! It’s been kinda rough so far this season. A string of sub 50 degree days followed by several 95+ degree days and now we’re heading right back into 50 degree nights and 10 days straight of rain… ill be amazed if anything survives the onslaught. But plants can be resilient!

2026-05-20 12:34:23 UTC

- reply

@nprofile…u7p7 I think that's already been done. We've all been calling it the "old web" (complimentary), but they'll spin it to be the "old web" (derogatory). Fortunately there's a surge of personal blogging and indieweb tooling looking to keep the better web afloat. Might be enough to save some of us...

2026-05-19 13:37:13 UTC

- reply

@nprofile…khw0 Hey! I write and share a fair bit about IndieWe and Fedi/Decentralization topics (among other things). Said writing typically ends up on the site https://shellsharks.com.
For more on #Indieweb, you could also subscribe to my related (free) web-newsletter Scrolls! https://shellsharks.com/scrolls/
On each edition of Scrolls is a link (at the bottom) which points to where I announced that particular issue on fedi. Each of those posts mentions a lot of awesome accounts that I’d recommend for you.

2026-05-16 16:36:39 UTC

- reply

@nprofile…equ9 @nprofile…z3lm Hired.

2026-05-15 18:24:02 UTC

The Vulnerability Garden isn’t exactly “Fedi-Native”, but I did set up RSS Parrot to post out when new records are added. The latest being “Claw Chain” (from today!).
Whether it’s AI being popped, or AI doin’ the poppin’, it’s shaping up to be a big year for named vulns it seems. https://rss-parrot.net/u/vulnerability.garden/status/1778817847002383503

2026-05-15 18:16:52 UTC

- reply

@nprofile…7q7j @nprofile…vs6a PoppedKernel

2026-05-15 13:02:38 UTC

- reply

@nprofile…mej2 This is one of those instances that is kinda on the fence for me in terms of inclusion in the garden… I kinda read this as “ssh-keysign-pwn” being the name of the script, or the name of the repo and not so much it being a “named” vuln. It’s pretty subjective as I’ve explained before though so 🤷‍♂️. It doesn’t have a website, or a logo. The author (in the repo) never really says anything like “named” or “dubbed” or “called” —> ssh-keysign-pwn. Not that it’s that important but yeah..

2026-05-15 12:59:23 UTC

- reply

@nprofile…rc8z Hope you find a lot of stuff you’re interested in! 🧡

2026-05-15 12:58:58 UTC

- reply

@nprofile…f83y 🤗

2026-05-15 04:10:42 UTC

📜 Scrolls 41 has been published! Go check it out 🤗
https://shellsharks.com/scrolls/scroll/2026-05-15
Thanks to everyone listed below. Their work is featured in this week's edition!
@nprofile…pq2a @nprofile…mpvz @nprofile…65q8 @nprofile…6plh @nprofile…eedj
@nprofile…9v4s @nprofile…atnr @nprofile…pnth @nprofile…yeqj @nprofile…fzjw @nprofile…gf9y @nprofile…m32a @nprofile…mdvv @nprofile…rc8z @nprofile…68g5 @nprofile…nxlx @nprofile…ws9g @nprofile…w7nn @nprofile…gxjy @nprofile…gzhh @nprofile…uz0y @nprofile…f83y @nprofile…vu66 @nprofile…q60p
#indieweb #fediverse #infosec #cybersecurity

2026-05-15 02:55:36 UTC

- reply

@nprofile…6x4u I still use standard search engines a fair bit. But you know where I turn to that’s pretty cool? My own website! I have a lot of useful links saved up over time, and a fair bit I’ve written myself that I often find useful down the road.

2026-05-14 14:16:53 UTC

- reply

@nprofile…ru48 Going as elaborate as mine would certainly be a choice. I really like your site’s crisp design / overall aesthetic. That said, it *is* fun to have a buncha stuff 😆

2026-05-14 11:35:03 UTC

- reply

@nprofile…hkdp @nprofile…ru48 Yes it really is awesome! 🤩

2026-05-13 13:59:23 UTC

- reply

@nprofile…mej2 👀 I’ll add it. It’s net like I haven’t added 20 different rowhammer variants 🤭. Thanks for sending it over!

2026-05-13 00:42:25 UTC

- reply

@nprofile…mdvv Yeah you can take it. I forget how I cobbled it together in the past. 😄

2026-05-12 20:30:23 UTC

- reply

@nprofile…mdvv FWIW: I went with CC BY-SA (https://shellsharks.com/disclaimer).

2026-05-12 12:42:34 UTC

- reply

@nprofile…g4md You’re very welcome! 🤗

2026-05-12 12:28:29 UTC

- reply

@nprofile…yujl Howdy! 🤠
You might like some stuff in this li’l ol’ Fedi #welcome packet 🤗
https://shellsharks.com/notes/2025/01/10/welcome-to-the-fediverse
See ya around! 👋

2026-05-11 14:28:56 UTC

- reply

@nprofile…5r6x I’ve got a few places I’ve been cataloguing / saving this sort of stuff…
- Thoughts on the #indieweb: https://shellsharks.com/indieweb
- “Decorporatizing”: https://shellsharks.com/notes/2023/11/13/decorporatization
- Resources on self-hosting: https://shellsharks.com/notes/2026/02/20/setting-off-on-a-self-hosting-journey
- Archiving: https://shellsharks.com/notes/2025/02/05/save-your-links
- Digital Security, OpSec, etc...: https://shellsharks.com/surviving-the-brave-new-world
You're welcome to any and all of it!
Special shoutout to @nprofile…44dh 's Homelab guide: https://taggart-tech.com/thav3/

2026-05-11 14:12:00 UTC

- reply

@nprofile…8f9g There may be a few you’d like to add here if you wanted to peruse - https://shellsharks.com/indieweb#explore-the-indieweb. I like this index though!

2026-05-09 03:28:55 UTC

- reply

@nprofile…s5s2 Would an ad blocker kill that obnoxious “Ask Our AI” bar? Or TIME begging for subs or money? Corpo web is cooked… (I actually don’t know if an adblocker would do that…but im sure there’s plugins/extensions to help with those annoyances too)

2026-05-09 03:23:20 UTC

- reply

@nprofile…s5s2 Yeah. That screenshot is as good of an ad for the #IndieWeb as I've ever seen. No ads on my site!

2026-05-09 03:09:42 UTC

TIME: hOw To FiX tHe InTeRnEt
They write this as their website on mobile can't even display a single paragraph because it's too cluttered with Ads, shit banners, AI assistants, random other modals, then more ads... 🤦‍♂️
Absolute 🤡 https://mastodon.social/@ovidem/116541257657967163

2026-05-09 02:33:03 UTC

- reply

@nprofile…gmhu Enjoy! And have a great weekend!

2026-05-09 02:30:47 UTC

- reply

@nprofile…00v5 Exactly how I felt about Microsoft’s TIC/research team posting macOS vulns that they also NAMED.
Microsoft of all companies. Like, bruh…
https://www.microsoft.com/en-us/security/blog/2023/05/30/new-macos-vulnerability-migraine-could-bypass-system-integrity-protection/

2026-05-08 13:07:43 UTC

- reply

@nprofile…s5s2 Same 😢. But given all the Internet spelunking I do, and socializing in this fashion, I’m positive I’ll tap into the wellspring of diversity that I know the IndieWeb/Fedi has to offer.

2026-05-08 12:59:17 UTC

📜 Scrolls 40 is out! This is a special one this week, featuring awesome content *exclusively* from women creators across the #indieweb and #fediverse!
https://shellsharks.com/scrolls/scroll/2026-05-08
A big thank you to all the awesome women who’s work is featured in this week’s edition 🧡
@nprofile…z58h @nprofile…8hcc @nprofile…xx8a @nprofile…gmhu @nprofile…9wdg @nprofile…llqp @nprofile…g4md @nprofile…e4q5 @nprofile…s5s2 @nprofile…dhrz @nprofile…puzq @nprofile…0jgd @nprofile…44q6 @nprofile…28y2 @nprofile…kejj @nprofile…gmrj @nprofile…efxd @nprofile…nhrn @moonsea@omg.sayitditto.net @nprofile…vl8z

2026-05-08 11:28:16 UTC

- reply

@nprofile…ypda @nprofile…7nkt An example of fuck around ➡️ find out (media)
But for the better! 🤗

2026-05-06 03:11:30 UTC

- reply

@nprofile…j5pz *All* I want to do is live in the woods. Alas...

2026-05-06 00:25:30 UTC

You #infosec folks like named vulns? Y’know, those silly ones with their own theme songs and logos? Well my latest project is for you! Introducing the Vulnerability Garden 🪴
https://vulnerability.garden
I've got a li’l intro writeup on why this exists, how you can contribute (if you wanted), etc… https://shellsharks.com/hello-vulnerability-garden
It is the successor to my long-running "Designer Vulnerabilities" resource: https://shellsharks.com/designer-vulnerabilities
Hope you nerds enjoy scrolling through vanity vuln history as much as I have!

2026-05-01 17:18:17 UTC

- reply

@nprofile…pdft Yeah people like to hate on email, and for good reason, overwhelmingly the email we all are exposed to is awful (i.e. spam, bills, marketing, 2fa codes, etc…) but that makes getting a NICE, personal email, that much sweeter—in that sea of sadness.

2026-05-01 14:41:11 UTC

Here’s my *official* “Mt. Rushmore of Branded Bugs”, i.e. a top 4 list of named vulnerabilities (specifically one’s with logos since I need to have some image for the rockface)
- Heartbleed
- VENOM
- Meltdown
- ProxyLogon
You can read about why I made this list, and how I came to these four specifically here: https://shellsharks.com/mt-rushmore-of-branded-bugs
I did this in part as a response to this post I saw from @nprofile…pzsq (https://infosec.exchange/@dennisf/116495102933813668)
#infosec / #cybersecurity folks, what would be your top 4?

2026-05-01 14:29:21 UTC

📜 Scrolls issue 39 is out! Getcha some good scrollin’…
https://shellsharks.com/scrolls/scroll/2026-05-01
Thanks to everyone mentioned below. Their work is featured in this week's edition!
@nprofile…k8zc @nprofile…ehwf @nprofile…d0jr @nprofile…np4k @nprofile…ec5x @nprofile…lxuj @nprofile…7z3l @nprofile…tkha @nprofile…9v4s @nprofile…dpst @nprofile…kwwg @nprofile…7cp4 @nprofile…psd6 @nprofile…efxd @nprofile…8kvm @nprofile…kh9l @nprofile…y4en @nprofile…eke9 @nprofile…udlj @nprofile…7yuj @nprofile…pdft @nprofile…8usl @nprofile…j336 @nprofile…hg8p
#indieweb #fediverse #infosec #cybersecurity
Have a great weekend!

2026-04-28 16:27:36 UTC

- reply

@nprofile…t4de Don’t think I’ve ever seen what you’re describing here (and I do a lot of indieweb spelunking). Best 88x31 collections I’ve seen are…
- The 88x31 Archive: https://hellnet.work/8831/
- Moule.world: https://moule.world/links.php

2026-04-28 16:06:45 UTC

- reply

@nprofile…s5s2 Neat! I feel like overwhelmingly people enjoy the li'l mention and dopamine hit via notification 😄

2026-04-28 04:01:15 UTC

- reply

@nprofile…je7u Yeah, I've personally loved using it. Would recommend.

2026-04-28 03:38:52 UTC

- reply

@nprofile…je7u Sure have! Been using it for my blog for nearly 7 years now.

2026-04-28 03:29:54 UTC

- reply

@nprofile…hd23 I don't have a favorite. But I've really enjoyed customizing and styling mine over the years to make it uniquely my own 😄

2026-04-27 14:58:15 UTC

- reply

@nprofile…mex9 @nprofile…z3lm lol, when you Google "ClownStrike" my site is like the second thing that pops up. Good times that was.
https://shellsharks.com/notes/2024/07/19/clownstrike

2026-04-27 11:24:58 UTC

- reply

@nprofile…hdfz This is the GOAT imo: https://en.wikipedia.org/wiki/Top_Gear_Overdrive

2026-04-27 01:58:03 UTC

- reply

@nprofile…7cp4 @nprofile…dysu @nprofile…4hqr I came here to suggest the blogroll as well, but yeah, I’ve also added quite a bit to it over the years. The nice thing is you could have section of the blogroll that you keep fairly small (~7) of your indieweb pals. I have 15 in my top section 🤷‍♂️.
I agree though that linking to other places on the web, specifically other indie sites has become more and more crucial to keeping the web healthy.
I do what I can I think 😃

2026-04-25 18:19:26 UTC

- reply

@nprofile…hwse Probably a combination of a lot of things.
- You're not following *that* many people
- non-algo feed brings less people into your posts
- constant whining about "reply guys" ➡️ now everyone's afraid to reply 🫠
- chrono feed means sometimes you're just on at the wrong time
- I do think compared to like threads there's less chatter per person 🤷‍♂️

2026-04-25 12:06:25 UTC

- reply

@nprofile…np4k "Side project enthusiast" really does sum you up haha 😄

2026-04-25 12:05:23 UTC

- reply

@nprofile…hh2e Thanks! Saw some gardening stuff on your site so interested in that having dived head first into gardening this year myself. 🌱

2026-04-25 12:03:40 UTC

- reply

@nprofile…8awa You bet! Something very soothing about the color palette and typography choices 😄

2026-04-25 12:02:42 UTC

- reply

@nprofile…xwqj 🤗

2026-04-25 12:01:50 UTC

- reply

@nprofile…757z 🤗 Good stuff from you as usual my friend!

2026-04-24 13:52:56 UTC

📜 Scrolls volume 38 is out! Check it out and let me know what you think!
https://shellsharks.com/scrolls/scroll/2026-04-24
Thanks to everyone below. Their work was featured in this week's edition.
@nprofile…vt3g @nprofile…757z @nprofile…xev4 @nprofile…k7ew @nprofile…np4k @nprofile…9v4s @nprofile…07ns @beitmenotyou@beitmenotyou.online @nprofile…w2cy @nprofile…n8tf @nprofile…7q7j @nprofile…lcqs @nprofile…d0jr @nprofile…lx5s @nprofile…8awa @nprofile…a4lx @nprofile…xwqj @nprofile…hh2e @nprofile…9v4s @nprofile…w89l @nprofile…s97y @nprofile…fz4e @nprofile…vt3g @nprofile…vs6a @nprofile…zmrh @nprofile…qfwq
#indieweb #fediverse #infosec #cybersecurity
Have a great weekend!

2026-04-24 11:25:10 UTC

- reply

@nprofile…gcwq Welcome! Here's a li'l welcome present 🎁
https://shellsharks.com/notes/2025/01/10/welcome-to-the-fediverse
👋

2026-04-23 21:32:18 UTC

- reply

@nprofile…8hcc @nprofile…5dxw I need tile work that is just the original gen 1 Pokémon in this style. Emphasis on the *need*.

2026-04-23 18:29:48 UTC

- reply

@nprofile…vuvh Seems like it https://bsky.app/profile/malwarejake.bsky.social/post/3mk6gunrx4s2z
Now having all these SANS certs is even more embarrassing 🤦‍♂️