Nostr notes by k3ym𖺀

RE: https://infosec.exchange/@k3ym0/117479620703967918 PSA: it is ...

2026-10-23T20:36:07Z

RE: https://infosec.exchange/@k3ym0/117479620703967918

PSA: it is TODAY, you absolute goblins.

B'ad Samurai :ifin: (npub1ctt…3ll8) takes the stage at BSidesPDX (npub15xy…rd6g) at 3:30p, Track 2. Put Community Lists in your Kill Chain.

Skip the hallway con for 20 minutes. Learn how free lists stop the shit your fancy platform keeps missing. Then go back to the hallway con, I’m not a monster.

#bsidespdx #bsides #blocklist #infosec

quoting
note1g03…zz7v

RE: https://infosec.exchange/@badsamurai/117475644115110129

Stop doomscrolling your 47th “agentic AI will replace your SOC” thread and go watch B'ad Samurai :ifin: (npub1ctt…3ll8) at BSidesPDX (npub15xy…rd6g) this Friday.

Community lists. Doing the fucking basics. Deterministic full-stops in the kill chain. No vendor magic beans, just free lists that block the shit your six-figure platform waved through.

Cyber intel is a team sport. Get your ass on the team.

#bsides #bsidespdx #blocklist #infosec
note1ftj…0asq

Until you’re agentic swarm can hack into the government and ...

2026-10-23T03:57:39Z

Until you’re agentic swarm can hack into the government and release the Epstein files, I will not be impressed

RE: https://infosec.exchange/@badsamurai/117475644115110129 Stop ...

2026-10-21T15:32:31Z

RE: https://infosec.exchange/@badsamurai/117475644115110129

Stop doomscrolling your 47th “agentic AI will replace your SOC” thread and go watch B'ad Samurai :ifin: (npub1ctt…3ll8) at BSidesPDX (npub15xy…rd6g) this Friday.

Community lists. Doing the fucking basics. Deterministic full-stops in the kill chain. No vendor magic beans, just free lists that block the shit your six-figure platform waved through.

Cyber intel is a team sport. Get your ass on the team.

#bsides #bsidespdx #blocklist #infosec

quoting
note1ftj…0asq

Love lists and doing the basics? I really, really do. So I’m speaking about it this Friday at BSidesPDX.

This year’s theme is **genuine human connection** so *Put Community Lists in your Kill Chain* is a celebratory look at the great impact lists can have within your security program.

And there’s not a lick of AI in the talk or derived content.

https://bsidespdx.org/events/2026/speakers.html#session-P9HCXH

#bsides #bsidespdx #blocklist #blueteam

Naturalist is someone who watches birds. Naturist is someone who ...

2026-10-20T13:06:09Z

Naturalist is someone who watches birds. Naturist is someone who watches birds with no pants on.

Two letters of difference, wildly different Google results.

beautiful pup. I am so sorry for your loss. You gave them the ...

2026-08-24T22:20:25Z

In reply to nevent1q…sml4
_________________________

beautiful pup. I am so sorry for your loss. You gave them the best life <3

Frog and Toad Are Chainloaded frog put the UEFI app ...

2026-07-21T16:40:24Z

**Frog and Toad Are Chainloaded**

frog put the UEFI app signatures in a box. there. now we will not boot any more unsigned UEFI apps. but we can disable SecureBoot said toad. that is true said frog. that is true. frog knew. frog always knew. the box was never locked. toad found the off switch in four seconds. three weeks of signed shim work gone. frog does not cry frog just stares at the mokutil prompt

#infosec #SecureBoot

reminder that ...

2026-06-18T18:25:37Z

reminder that "[fortibleed](https://www.darkreading.com/cyberattacks-data-breaches/sweeping-credential-harvesting-heist-compromises-30k-fortinet-devices )" is not a vuln. no CVE. no patch. nothing fucking "bled."

it's a russian-speaking crew firing 1.16 billion creds from old breaches and infostealer logs at every fortigate dumb enough to have its mgmt interface sitting on the public internet. ~50% of internet-facing boxes. half of you.

and before anyone cries "but my password was 28 characters with symbols": it didn't get cracked. it was already chilling in an infostealer dump in plaintext. great entropy, shame about the malware on your sales guy's laptop.

the -bleed suffix is marketing. the real CVE is CVE-2026-YOUREANIDIOT: "admin panel pointed at 0.0.0.0/0, password recycled from a 2022 breach, MFA considered but never enabled."

rotate the creds, yank the mgmt interface off the internet, force MFA, and maybe stop letting threat intel firms name your incidents like they're naming a fucking Marvel villain.

#infosec #fortinet #fortigate

PSA for anyone still running NetScaler as a SAML IdP ...

2026-06-03T18:21:27Z

**PSA for anyone still running NetScaler as a SAML IdP**

CVE-2026-3055 (memory overread, CVSS 9.3) is on CISA KEV and getting hammered in the wild. Leaks session tokens and creds straight out of process memory. It's also a CVE Interlock is associated with, and they love healthcare.

Patch the appliance, but if you've got a FortiGate in front of it, drop an IPS profile on and virtual-patch it today. Signature's live.

Alert: https://www.fortiguard.com/outbreak-alert/citrix-netscaler-memory-overread

Interlock: https://www.fortiguard.com/threat-actor/6384

#infosec #CVE #NetScaler #ransomware

I did goatse that coming. ...

2026-05-06T19:57:50Z

I did goatse that coming.

Nostr event nevent1qqszrug96x4q3q7myhkqz7gmc4ftq82sxemeh8d0stugvgqzsgheuuczyqr8lcvk8twjn9jrv9z6p0rlh4gytls7lwymhl5jx7e6u067rkv8kfe63uj

2026-04-13T21:09:13Z

**In today's episode of "Can It Run Doom": DNS ...

2026-03-26T20:02:13Z

**In today's episode of "Can It Run Doom": DNS fucking TXT records.**

Some absolute madlad (*cough* Adam Rice *cough*) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: https://blog.rice.is/post/doom-over-dns/

repo: https://github.com/resumex/doom-over-dns

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns

The person with 2 years of food storage and no relationships is ...

2026-03-26T15:19:03Z

The person with 2 years of food storage and no relationships is less resilient than the person with 2 months of storage and a neighborhood that gives a shit about each other.

#ClimateChange #ClimateResilience

@npub146c…ztj7 is now using AI to read web pages when you hover ...

2026-03-25T22:20:54Z

Firefox (npub146c…ztj7) is now using AI to read web pages when you hover over links. Enabled by default. With fucking pop-up nags to try it.

The "last privacy-respecting browser" is sending page content to ML models unless you go find the off switch yourself. What the fuck happened to you, Mozilla.

They spent WEEKS in damage control promising an "AI kill switch" and then shipped it fucking disabled. That is the most gaslit UX I have ever seen in my life.

*"Help me LibreWolf (npub1vpu…608s) - you're my only hope."*

#Firefox #Mozilla #AI #InfoSec #Privacy #Fediverse #OpenWeb

I’m thrilled to share that I’ve just successfully completed a ...

2026-03-17T14:57:22Z

In reply to nevent1q…2rwy
_________________________

I’m thrilled to share that I’ve just successfully completed a major internal release. This process was all about letting go of what no longer serves me to make room for new growth. It’s a reminder that sometimes, you have to push through the discomfort to achieve a sense of relief and clarity. Grateful for the output and ready to tackle the next challenge! #GrowthMindset #Efficiency #ProcessOptimization #Relief

FCC is so secure that they restrict user passwords to a max of 15 ...

2026-03-16T16:19:13Z

FCC is so secure that they restrict user passwords to a max of 15 characters

Dumb Password Rules (npub16r2…3qs5)

Nostr event nevent1qqszsct3x55aaqug5mlywj5mnqagkfal9cnzvv30c6l6axcyqrd8rzgzyqr8lcvk8twjn9jrv9z6p0rlh4gytls7lwymhl5jx7e6u067rkv8kuje69d

2026-03-15T20:35:06Z

If you're an SRE that struggles with imposter syndrome... ...

2026-03-09T15:47:42Z

If you're an SRE that struggles with imposter syndrome...

GitHub's SLA for Enterprise Cloud customers specifies only 99.9 percent uptime.

THREE FUCKING NINES.

https://www.theregister.com/2026/02/10/github_outages/

And they cant even hit that.

#GitHub #SRE

We’ll have no misgendering in this saloon, partner. ...

2026-03-08T19:53:22Z

We’ll have no misgendering in this saloon, partner.

ProtonMail anonymity speedrun, any%: step 1: don’t use your ...

2026-03-06T14:16:45Z

**ProtonMail anonymity speedrun, any%:**

step 1: don’t use your real email to sign up, you absolute muppet. use a burner. gorilla mail – free, dies after an hour, leaves no trace.

step 2: free tier is fine. need to upgrade? Monero or cash. do NOT hand them a credit card.

step 3: want ToR? boot Tails OS first, full stop. Tails forgets you exist on shutdown, ToR handles the routing. together they mean something. separately you’re just cosplaying at privacy.

that’s it. that’s the whole guide. it’s not hard. the threat model does the heavy lifting, you just have to put in the work.

stay feral. 🐀

#privacy #infosec #tor #ProtonMail #Monero #opsec #TailsOS

OH MY GOD. I just picked up We Will Rise Again at BSides ...

2026-03-04T23:53:06Z

In reply to nevent1q…z7te
_________________________

OH MY GOD.

I *just* picked up We Will Rise Again at BSides Seattle! I had no idea you were on the fedi!

Thank you so much for such a beautiful work of art. It’s the hope I need in this day and age <3

You're paying AI companies a monthly subscription fee to be ...

2026-03-02T21:11:28Z

You're paying AI companies a monthly subscription fee to be fingerprinted like a parolee.

I got bored and ran uBlock across Claude, ChatGPT, and Gemini simultaneously.

**Claude:** <li>Six parallel telemetry pipelines. </li><li>A tracking GIF with 40 browser fingerprint data points baked into the URL, routed through a CDN proxy alias specifically to make it harder to block. </li><li>Intercom running a persistent WebSocket whether you use it or not. </li><li>Honeycomb distributed tracing on a chat UI because apparently your conversation needs the same observability stack as a payments microservice.</li>

**ChatGPT:** <li>proxies telemetry through their own backend to hide the Datadog destination URL from blockers. </li><li>uBlock had to deploy scriptlet injection — actual JS injected into the page to intercept fetch() at the API level — because a network rule wasn't enough. </li><li>Also ships your usage data to Google Analytics. OpenAI. To Google. You cannot make this up. </li><li>Also runs a proof-of-work challenge before you're allowed to type anything.</li>

**Gemini:** <li>play.google.com/log getting hammered with your full session behavior, authenticated with three SAPISIDHASH token variants, piped directly into the Google identity supergraph that correlates everything you've ever done across every Google product since 2004.</li><li>Also creates a Web App Activity record in your Google account timeline. Also has "ads" in one of the telemetry endpoint subdomains.</li>

When uBlock blocks Gemini's requests, the JS exceptions bubble up and Gemini dutifully tries to POST the error details back to Google. uBlock blocks that too. The error messages contain the internal codenames for every upsell popup that failed to load.

KETCHUP_DISCOVERY_CARD.
MUSTARD_DISCOVERY_CARD.
MAYO_DISCOVERY_CARD.

Google named their subscription upsell popups after condiments and I found out because their error handler snitched on them.

All three of these products cost money.
One of them is also running ad infrastructure.

Touch grass. Install uBlockOrigin (npub1gh2…tcud)

#infosec #privacy #selfhosted #foss #surveillance

Wha fucking universe am I in. ...

2026-01-21T04:09:47Z

Wha fucking universe am I in.

https://www.npr.org/2026/01/20/nx-s1-5675241-e1/wall-street-backed-landlords-a-target-for-both-trump-and-democrats

I am so incredibly blown away with how advanced AI is getting. ...

2026-01-02T15:50:23Z

I am so incredibly blown away with how advanced AI is getting.

When the AI model is instructed to make a new coke commercial for ...

2025-11-20T00:12:27Z

When the AI model is instructed to make a new coke commercial for the holidays and just kind of runs with it.

this checks out lmao ...

2025-11-19T19:49:07Z

this checks out lmao

Cal Raleigh hits 60th home run, Mariners clinch first AL West ...

2025-09-25T04:13:22Z

Cal Raleigh hits 60th home run, Mariners clinch first AL West title since 2001

LETS
FUCKING
GOOOOOO

https://www.seattletimes.com/sports/mariners/mariners-look-to-clinch-al-west-live-updates-score-how-to-watch/

Of course the AWS security team tagged their [blog about ...

2025-09-04T04:22:51Z

Of course the AWS security team tagged their [blog about disrupting the watering hole campaign by Russia’s APT29](https://aws.amazon.com/blogs/security/amazon-disrupts-watering-hole-campaign-by-russias-apt29/ ) with the "Thought Leadership" tag.

Because thought leadership now means narrating how you tripped over Cozy Bear while locking your own front door.

#ThoughtLeadership #ThotLeadership #ThotLeader

Trust your :hacker_t: :hacker_e: :hacker_c: :hacker_h: :hacker_n: ...

2025-08-20T03:47:08Z

Trust your

:hacker_t: :hacker_e: :hacker_c: :hacker_h: :hacker_n: :hacker_o: :hacker_l: :hacker_u: :hacker_s: :hacker_t:

https://shop.hak5.org/products/wifi-pineapple-pager

:blobaww:

thanks for the new profile banner pic

2025-08-19T22:40:08Z

In reply to nevent1q…4tqz
_________________________

thanks for the new profile banner pic

It is so hilarious to me that we have FOSS maintainers begging ...

2025-08-19T22:12:16Z

It is so hilarious to me that we have FOSS maintainers begging for money to try to keep the development of NTP ongoing. NTP - you know, that protocol that the entirety of humanity relies on for access to the internet (or anything on a network for that matter).

Meanwhile the o̶l̶i̶g̶a̶r̶c̶h̶y̶ broligarchy makes billions of the backs of these people.

Anyways, they're currently at $495 of $1000 for their 2025 goal. Go throw them some $ if you feel so inclined.

https://www.nwtime.org/mills-spring/

#NTP

sounds like you have some fanboys

2025-08-19T21:01:25Z

In reply to nevent1q…pykh
_________________________

sounds like you have some fanboys

Meme History 101: Dat Ash I'm sure you're probably ...

2025-08-19T19:57:13Z

**Meme History 101: Dat Ash**

I'm sure you're probably sitting here on this fine Tuesday afternoon, thinking to yourself: "Remember those (lewd) "Dat Ash" memes from 14 years ago? I wonder how those came about." 🤔

> *"The advice animal drawing was inspired by a photo from the website myfacewhen.com. The picture has been used as a reaction face on the Wiremod forums as far back as December 2nd, 2010. The earliest known instance of the Ash Pedreiro ("brick layer" in Portuguese) advice animal was posted on the Portuguese website Cao Ninja on February 2nd, 2011."*

Sauce: https://knowyourmeme.com/memes/ash-pedreiro-dat-ash

#memes #KnowYourMeme

Man these SMSishing attempts are getting good. They’re clearly ...

2025-08-16T16:01:45Z

Man these SMSishing attempts are getting good. They’re clearly using GenAI. Makes me concerned for the people outside of infosec who don’t have as much awareness.

HOT OFF THE PRESS: [Joint CISA Advisory on Scattered ...

2025-07-29T16:33:13Z

HOT OFF THE PRESS:

[Joint CISA Advisory on Scattered Spider](https://www.cisa.gov/sites/default/files/2025-07/aa23-320a-scattered-spider_1.pdf )

Fresh IOCs and TTPs included.

Scattered Spider has been BUSY. Go update your blocks.

#ScatteredSpider #ThreatIntel

[Chinese hackers breached National Guard to steal network ...

2025-07-18T17:11:23Z

[Chinese hackers breached National Guard to steal network configurations](https://www.bleepingcomputer.com/news/security/chinese-hackers-breached-national-guard-to-steal-network-configurations/ )

> "Between March and December 2024, Salt Typhoon extensively compromised a US state's Army National Guard's network and, among other things, collected its network configuration and its data traffic with its counterparts' networks in every other US state and at least four US territories, according to a DOD report," reads the memo.

> "This data also included these networks' administrator credentials and network diagrams—which could be used to facilitate follow-on Salt Typhoon hacks of these units."

Nostr event nevent1qqsgh7qz9rsvpx9g2qlrwr2k440dfjjttem8unrjj6l856u326elz7qzyqr8lcvk8twjn9jrv9z6p0rlh4gytls7lwymhl5jx7e6u067rkv8kap8gtw

2025-07-02T15:32:41Z

https://www.computesgazette.com/asp-products/pre-order-first-collectible-issue/

holy shitballs O.o

real talk tho ms teams is the fuckin worst. ...

2025-07-01T19:48:19Z

real talk tho ms teams is the fuckin worst.

🚨 Just In: For the 5th year in a row, Cloudflare has been ...

2025-06-28T18:02:35Z

🚨 Just In: For the 5th year in a row, Cloudflare has been rated highest in Completeness of Vision and Ability to Execute in the Gartner Magic Quadrant for Malware Delivery Infrastructure.

Unmatched scalability. Global reach. Seamless deployment.

The preferred platform for payload delivery—at any scale.

Read full Press Release here: https://paste.lol/k3ym0/cloudflare-recognized-for-fifth-consecutive-year-in-gartner-magic-quadrant-for-malware-delivery-infrastructure

#Cloudflare #GartnerMQ #CyberInfrastructure #ThreatOps #Crimeflare

**Sliver too mainstream? Cobalt Strike too patched? Say hello to ...

2025-06-24T15:58:44Z

**Sliver too mainstream? Cobalt Strike too patched? Say hello to Havoc.**

FortiGuard Labs (npub1a90…kugv) just broke down a malicious Havoc C2 sample — and it’s bringing that open-source, post-exploitation energy with extra attitude.

Built for red teamers but abused by threat actors, this sample goes full dark mode:<li>Shellcode loader in C++</li><li>AES-encrypted payload</li><li>XOR junk code to slow reverse engineering</li><li>Dynamic API resolving</li><li>LOLBin delivery via regsvr32</li>

It’s like someone asked: *“What if malware devs went full GitHub?”* (never go full GitHub)

🔗 Full breakdown:
https://www.fortinet.com/blog/threat-research/dissecting-a-malicious-havoc-sample

TL;DR for blue teamers:<li>Havoc ≠ harmless just because it’s open source</li><li>Monitor regsvr32, rundll32, mshta — Havoc loves its LOLBins</li><li>Watch for process injection + thread creation anomalies</li><li>Memory analysis > file-based detection here</li><li>Don’t assume your EDR is catching every beacon on port 443</li>

> Is it threat emulation or a real attack?

— Blue teamer having a full-blown identity crisis at 2am

Shoutout to Xiaopeng Zhang (npub1tcc…ank6) and team for their amazing work!

#ThreatIntel #MalwareAnalysis #HavocC2 #RedTeamTools #PostExploitation #Infosec #BlueTeam #ReverseEngineering #CyberSecurity

No PE header? No problem. @npub1a90…kugv dropped a deep ...

2025-06-16T16:11:17Z

**No PE header? No problem.**

FortiGuard Labs (npub1a90…kugv) dropped a deep dive into a malware sample dumped without a PE header — like a cybercriminal rage-quit halfway through packing their payload.

You ever load a binary in IDA and think, “Am I being punk’d?”
Yeah, it’s one of those samples.

This sample:<li>Reconstructs its own PE structure at runtime</li><li>Hides config data in obfuscated blobs</li><li>Uses anti-sandbox tricks to avoid analysis</li><li>Drops yet another info-stealer, because originality is dead</li>

It’s engineered to break basic static analysis and dodge sandboxes like it’s speedrunning DEFCON CTF.

🔗 Full breakdown:
https://www.fortinet.com/blog/threat-research/deep-dive-into-a-dumped-malware-without-a-pe-header

TL;DR for blue teamers:<li>Static AV signatures won’t help here</li><li>Watch for suspicious memory allocations + hollowing patterns</li><li>Endpoint heuristics > file-based detection</li><li>Log your PowerShell and LOLBins — this thing probably brings friends</li><li>If your EDR cries when it sees raw shellcode, maybe give it a hug</li>

#ThreatIntel #MalwareAnalysis #ReverseEngineering #Infosec #PEFilesAreSo2020 #EDREvasion #LOLbins #CyberSecurity #BlueTeam

In America, we don’t do kings. ON JUNE 14TH, WE RISE UP. ...

2025-06-13T00:20:10Z

In America, we don’t do kings.

ON JUNE 14TH, WE RISE UP.

https://www.nokings.org

#NoKings

🚨 0-day vibes from 2017? Yup, it’s still happening. A ...

2025-06-10T16:19:18Z

🚨 0-day vibes from 2017? Yup, it’s still happening.

A malicious Excel file using CVE-2017-0199 is out here in 2025 dropping FormBook like it's a fresh mixtape.

The attack chain?<li>Macro-free Excel</li><li>Weaponized with remote .hta</li><li>Payload: Info-stealer FormBook</li>

Despite being 7+ years old, this vuln still slaps in phishing campaigns — because patching is apparently a myth.

Full technical breakdown by FortiGuard Labs (npub1a90…kugv): https://www.fortinet.com/blog/threat-research/how-a-malicious-excel-file-cve-2017-0199-delivers-the-formbook-payload

TL;DR for blue teamers:<li>Watch your egress traffic</li><li>Harden Office apps</li><li>Monitor LOLBins (Living Off the Land Binaries)</li><li>Block outbound to shady IPs faster than your memes go viral</li>

Don’t let your org get dunked on by a 2017 CVE in 2025. That’s not a good look.

#CyberSecurity #ThreatIntel #FormBook #CVE20170199 #Infosec #BlueTeam #MalwareAnalysis #HackerNews #Phishing

Damnit. @npub1m24…d9a3 just dropped [new ...

2025-06-10T16:10:11Z

Damnit. Electronic Frontier Foundation (npub1m24…d9a3) just dropped [new merch](https://supporters.eff.org/donate/EFF35--CDE1 ), and I want it.

🚨 New Threat Alert: FormBook is back — and it’s stealthier ...

2025-05-29T17:16:32Z

🚨 New Threat Alert: FormBook is back — and it’s stealthier than ever.

FortiGuard Labs (npub1a90…kugv) has uncovered a new phishing campaign that spreads FormBook, a potent #infostealer malware targeting your credentials, screenshots, and more.

📥 Lures victims with spoofed job applications
🎯 Designed to evade detection
🕵️‍♀️ Highly active in the wild

Don’t get caught off guard.

🔍 Dive into the full technical breakdown and see how to defend your org ➡️ https://www.fortinet.com/blog/threat-research/infostealer-malware-formbook-spread-via-phishing-campaign

#CyberSecurity #ThreatIntel #Phishing #InfoStealer #Malware #Fortinet #CISO #SecurityOperations #CyberThreats

There’s something to be said about a drummer that can play the ...

2025-05-28T15:53:34Z

There’s something to be said about a drummer that can play the simplest beat, and somehow it still makes you want to move your body.

Credit: @MyaCymbaluk

https://m.youtube.com/shorts/flPb2zHiy8I

Nostr event nevent1qqswvykn472h3cyqtqanpmlq2xg7sm8p2ycadpqtu3f7923pv4vk7aszyqr8lcvk8twjn9jrv9z6p0rlh4gytls7lwymhl5jx7e6u067rkv8ktln7ym

2025-05-24T23:27:50Z

https://www.nytimes.com/2025/05/24/nyregion/crypto-investor-torture-italian-tourist.html

Holy shit XKCD 538 irl

Gonna be doing some light reading this weekend ...

2025-05-23T18:45:20Z

Gonna be doing some light reading this weekend

well that's alarming. Can you help me understand the pattern ...

2025-04-22T23:20:35Z

In reply to nevent1q…q7m3
_________________________

well that's alarming.

Can you help me understand the pattern of fluctuations leading up to where we are today?

Hey everyone, just a gentle reminder to PATCH YOUR FUCKING SHIT. ...

2025-04-22T21:43:55Z

Hey everyone, just a gentle reminder to PATCH YOUR FUCKING SHIT.

-- Your Friendly Neighborhood IT Janitor

this is awesome. We do something similar with our littles (3yo ...

2025-04-22T15:32:29Z

In reply to nevent1q…5gas
_________________________

this is awesome. We do something similar with our littles (3yo and 5yo) at the dinner table. We call it “highs and lows.” We go around the table and ask, “What was your high? What was your low?”

It’s so important to take time for intentional connection amidst the chaos of life. I also want my kids to know that just like it’s okay to talk about and celebrate the “highs,” our family is a safe space to talk about and process the not-so-great parts of the day.

no Rocky???? :(

2025-02-27T05:29:30Z

In reply to nevent1q…r2sx
_________________________

no Rocky???? :(

the crazy thing is, for many of us who actually work in infosec, ...

2025-01-30T19:36:05Z

In reply to nevent1q…myx6
_________________________

the crazy thing is, for many of us who actually work in infosec, our family members will dismiss what we have to say on issues concerning national (cyber) security if it doesn't align with the propaganda they consume from $RightWingExtremistNewsSite.

I went down a rabbit hole last night exploring the vast caverns ...

2025-01-25T03:29:06Z

In reply to nevent1q…8s84
_________________________

I went down a rabbit hole last night exploring the vast caverns of the internet for this very thing.

Behold: the spoils of my work

this fucking sent me lmaoooo

2025-01-24T03:51:24Z

In reply to nevent1q…pvm3
_________________________

this fucking sent me lmaoooo

this picture smells like my high school computer lab.

2025-01-17T01:49:38Z

In reply to nevent1q…tnhk
_________________________

this picture smells like my high school computer lab.

“There ain’t no you in United Health.” Brilliant piece by ...

2024-12-13T19:44:24Z

“There ain’t no you in United Health.”

Brilliant piece by Jesse Welles: https://m.youtube.com/shorts/J_swGiAHhbQ

https://2000.shodan.io/#/ this. is. amazing.

2024-12-06T05:03:11Z

https://2000.shodan.io/#/

this. is. amazing.

The cosmos has always served as an escape for me; a vast, ...

2024-12-04T06:29:54Z

The cosmos has always served as an escape for me; a vast, expansive refuge. When I set my focus on the sheer magnitude of our night sky, everything else in life feels so trivial in comparison.

The celestial objects turn like the gears in a clock - nothing can stop them - they will continue their dance well beyond the existence of humanity.

Go see for yourself. It’s free, and right now the night sky is teaming with objects.

Camera Details:
Apple iPhone 14 Pro Max
Main Camera — 24 mm f1.78
ISO 8000
f1.78
3.4s shutter speed

#astronomy #Astrodon

Also out but not depicted: Mars, Saturn, Uranus, Neptune

gee golly it would sure be a shame if anyone were to use that ...

2024-11-23T01:50:41Z

In reply to nevent1q…ad9e
_________________________

gee golly it would sure be a shame if anyone were to use that info to dox people.

New T-shirt just arrived 💪 #RoundEarther ...

2024-09-20T19:19:40Z

New T-shirt just arrived 💪 #RoundEarther

whhhatt? When did this come out??? Or are you on pre-release?

2024-09-14T15:56:34Z

In reply to nevent1q…j8tc
_________________________

whhhatt? When did this come out??? Or are you on pre-release?

When you successfully secure all your endpoints, but not your ...

2024-09-06T16:39:41Z

When you successfully secure all your endpoints, but not your core infrastructure.