Nostr notes by Scary "Grampus" Jerry 👻

Seems like October may end up being the unofficial start to the ...

2026-10-30T12:53:57Z

Seems like October may end up being the unofficial start to the long anticipate AI vulnpocalypse. Remember to take some time off and go outside now and then. You can orchestrate patches from your phone these days.

I clearly can't win. I am going to make the site orange and ...

2026-10-30T02:04:13Z

I clearly can't win. I am going to make the site orange and black in honor of halloween

THE CHEESE... ...IT HAS BEEN MOVED

2026-10-29T18:34:22Z

THE CHEESE...

...IT HAS BEEN MOVED

Yes, I am aware it's ugly. No, I don't know how to fix it ...

2026-10-29T17:35:06Z

Yes, I am aware it's ugly. No, I don't know how to fix it yet. Yes, I needed to update to fix a vulnerability. No, I am not sure when it will be fixed.

urgent update, which changed some aspects of the UI. I am still ...

2026-10-29T16:55:29Z

In reply to nevent1q…2n2l
_________________________

urgent update, which changed some aspects of the UI. I am still figuring it out

Please be sure you don’t take your eye off the big ...

2026-10-24T12:30:39Z

Please be sure you don’t take your eye off the big node.js/brotli vulnerability while php2shell was sucking all the air from the room. https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497

>Had anyone tried making cybersecurity vendors aware of ...

2026-10-23T00:25:44Z

In reply to nevent1q…35e8
_________________________

>Had anyone tried making cybersecurity vendors aware of cybersecurity

Yes. Yes I have.

matrix.infosec.exchange will be down for about an hour or so. I ...

2026-10-22T13:31:44Z

matrix.infosec.exchange will be down for about an hour or so. I am migrating everything to smaller, less expensive servers. Wish me luck.

1-900-HOT-FEET 🥵

2026-10-22T00:16:25Z

In reply to nevent1q…rkry
_________________________

1-900-HOT-FEET 🥵

look, it's running in the cloud and it has AI. what more do ...

2026-10-21T14:58:24Z

In reply to nevent1q…jyrc
_________________________

look, it's running in the cloud and it has AI. what more do you want?!?!

mbin and pixelfed (and possibly other fedisoftware) are based on ...

2026-10-21T14:04:53Z

mbin and pixelfed (and possibly other fedisoftware) are based on php. Watch for updates.
https://www.php.net/index.php#2026-10-21-5

It's days like today that I'm happy that I made my ...

2026-10-21T13:41:56Z

It's days like today that I'm happy that I made my private keys be two digits instead of one, unlike that other place. what a bunch of amateurs.

yeah, thanks for tagging me. it hasn't been reported. I ...

2026-10-20T22:37:12Z

In reply to nevent1q…npew
_________________________

yeah, thanks for tagging me. it hasn't been reported. I suspended it. Old, legit account that looked legitimately active as of a few days ago. Chasalin (npub1wpw…hyu5)

maybe evolutionary processes involving microplastics in human ...

2026-10-20T16:03:13Z

In reply to nevent1q…fs83
_________________________

maybe evolutionary processes involving microplastics in human brains is the Borg’s origin story…

😂

2026-10-20T13:00:15Z

In reply to nevent1q…x4vh
_________________________

😂

that looks alarmingly like me

2026-10-20T12:59:40Z

In reply to nevent1q…aeld
_________________________

that looks alarmingly like me

These account takeovers are making my hair fall out. Or rather, ...

2026-10-20T11:26:04Z

These account takeovers are making my hair fall out. Or rather, it would fall out if I had any left.

That was a nice trip. I hadn’t been to the zoo in 20+ years

2026-10-18T21:19:48Z

In reply to nevent1q…vvpy
_________________________

That was a nice trip. I hadn’t been to the zoo in 20+ years

Nostr event nevent1qqs2dv3l7lk39a52xg0nxx0c60eqry4ndt4v464pphmz92dvtqtdq4qzyp3v6wt9yxxc4lct3n4tj0qxdvz6qlh0ufg9cmuyy63wd9e3snvc2wurryk

2026-10-18T21:18:41Z

In reply to nevent1q…j3wr
_________________________

Nostr event nevent1qqsdwejcwmmd8djaradnvfmkc0w4xmkfdjy43f96sdpgdxqs0wun34gzyp3v6wt9yxxc4lct3n4tj0qxdvz6qlh0ufg9cmuyy63wd9e3snvc2vxvzuu

2026-10-18T21:18:03Z

In reply to nevent1q…6tjp
_________________________

Nostr event nevent1qqsgdzt07mushjnmvr3fnsmc90gwreqs4w5y58swexlnwryrjrh4ugqzyp3v6wt9yxxc4lct3n4tj0qxdvz6qlh0ufg9cmuyy63wd9e3snvc20m97ah

2026-10-18T21:17:20Z

In reply to nevent1q…s0vz
_________________________

Zoo Atlanta pictures inbound ...

2026-10-18T21:14:58Z

Zoo Atlanta pictures inbound

Honorary mastodon mascot at the zoo ...

2026-10-18T15:43:01Z

Honorary mastodon mascot at the zoo

my statement force changes them to a random value, no email ...

2026-10-18T14:23:44Z

In reply to nevent1q…kx52
_________________________

my statement force changes them to a random value, no email notice.

that sql statement sends out no emails.

2026-10-18T14:21:36Z

In reply to nevent1q…3e2s
_________________________

that sql statement sends out no emails.

I advised the person to change the password and remove all the ...

2026-10-18T11:49:37Z

In reply to nevent1q…v90n
_________________________

I advised the person to change the password and remove all the authorized apps for their account and sign in again on any that they still use. Probably good advice for everyone right now until we know what is going on.

Ohh, we just had an old account with 2FA (so password not reset) ...

2026-10-18T11:22:58Z

Ohh, we just had an old account with 2FA (so password not reset) apparently hijacked and used to send spam (a different kind I hadn’t seen before). That is a good indication some service that uses auth tokens got hit. Now to figure out which

There are major account take-over problems happening right now on ...

2026-10-17T15:50:19Z

There are major account take-over problems happening right now on mastodon instances - all appearances are that the actor is using stolen passwords, probably from malware running on desktops. I've suspended hundreds of compromised accounts over the past 48 hours, but only two on mine.

If you run a mastodon instance, here is a postgres query I use to randomize the passwords of accounts that have been inactive for 6 months or more. It also removes logged in sessions. This doesn't lock people out, just makes them perform a password reset. Yes, I wish I didn't have to do this, but here we are. I hope it helps someone else.

BEGIN;

CREATE TEMP TABLE dormant_batch ON COMMIT DROP AS
SELECT u.id AS user_id
FROM users u
WHERE COALESCE(u.current_sign_in_at, u.created_at) < now() - interval '6 months'
AND NOT u.otp_required_for_login
AND NOT EXISTS (SELECT 1 FROM webauthn_credentials w WHERE w.user_id = u.id)
AND NOT EXISTS (SELECT 1 FROM oauth_access_tokens t
WHERE t.resource_owner_id = u.id
AND t.revoked_at IS NULL
AND t.last_used_at > now() - interval '6 months');
UPDATE users u
SET encrypted_password = '$2a$10$' || left(replace(gen_random_uuid()::text || gen_random_uuid()::text, '-', ''), 53),
updated_at = now()
FROM dormant_batch b
WHERE u.id = b.user_id;

UPDATE oauth_access_tokens t SET revoked_at = now()
FROM dormant_batch b
WHERE t.resource_owner_id = b.user_id AND t.revoked_at IS NULL;

DELETE FROM session_activations s
USING dormant_batch b
WHERE s.user_id = b.user_id;

SELECT COALESCE(y::text, 'total') AS last_seen_year, count(*) AS locked
FROM (SELECT date_part('year', COALESCE(u.current_sign_in_at, u.created_at))::int AS y
FROM dormant_batch b JOIN users u ON u.id = b.user_id) s
GROUP BY ROLLUP (y) ORDER BY y NULLS LAST;

COMMIT;

#mastoadmin #fediadmin

I went through infosec.exchange a while ago with a script to ...

2026-10-16T22:12:24Z

In reply to nevent1q…y88q
_________________________

I went through infosec.exchange a while ago with a script to randomize the passwords of anyone who hadn't logged in in 6 months (at the time). I attribute that to the reason we've not seen any here (yet).

it's everywhere. I've probably seen 25 different ...

2026-10-16T22:08:57Z

In reply to nevent1q…qxrd
_________________________

it's everywhere. I've probably seen 25 different instances involved at least. even one of my own (not this one)

that is one of the problems with this particular type of attack - ...

2026-10-16T22:03:37Z

In reply to nevent1q…qm5t
_________________________

that is one of the problems with this particular type of attack - they are using old, seasoned accounts. most of them make 3 posts before being abandon. We have incredibly threadbare and basic moderation tools, so should we push for that? yes! Will it help? maybe. Will we get it? nah.

Lots of account take overs today resulting in posts with ...

2026-10-16T21:58:25Z

Lots of account take overs today resulting in posts with malicious links tagging dozens of accounts. gird your passwords, my friends. turn on 2fa. don't click on sketchy links.

it got suspended

2026-10-16T21:57:00Z

In reply to nevent1q…9fz3
_________________________

it got suspended

replying to both of you - I expect that link is malware or ...

2026-10-16T20:42:47Z

In reply to nevent1q…sxcz
_________________________

replying to both of you - I expect that link is malware or phishing. Unfortunately, these are mainly coming from older mastodon accounts that have been compromised - likely from infostealer malware. Report them when you see them. There's been hundreds over the past week or so.

You know, I was just thinking that it’s been a long time since ...

2026-10-13T02:03:48Z

You know, I was just thinking that it’s been a long time since the last mass fediphishy campaign.

said on a meeting today: "This is not a Festivus celebration. ...

2026-10-12T19:42:14Z

said on a meeting today: "This is not a Festivus celebration. We do not need an airing of grievances"

turns out it just takes a really really really long time to fsck ...

2026-10-11T15:00:07Z

In reply to nevent1q…gkwj
_________________________

turns out it just takes a really really really long time to fsck a file system that big.

images a b0rked on infosec.exchange and friends due to the server ...

2026-10-11T14:47:25Z

images a b0rked on infosec.exchange and friends due to the server not coming back after a reboot.

given the way federation works and problematic links coming in ...

2026-10-07T14:19:46Z

In reply to nevent1q…53pz
_________________________

given the way federation works and problematic links coming in from all over the fediverse, I am surprised this doesn't happen a lot more often. I also have to believe there are some c2 channels hiding in the posts of accounts.\

🤦‍♂️

2026-10-07T13:55:23Z

In reply to nevent1q…fuu4
_________________________

🤦‍♂️

oh interesting. Something is borked. That is very very ...

2026-09-24T20:39:53Z

In reply to nevent1q…7hn6
_________________________

oh interesting. Something is borked. That is very very interesting. if you have any ability to play with it to narrow down which posts it might be, I (and other akkoma users) would be grateful

if you scroll back to where you were last night (if you know ...

2026-09-24T20:26:14Z

In reply to nevent1q…vx57
_________________________

if you scroll back to where you were last night (if you know where that was), do you get another pop-up like that? I am wondering if it;s some sort of xss in a post that akkoma isn't handling.

thanks - what browser is that? I am trying to replicate it.

2026-09-24T20:17:58Z

In reply to nevent1q…vx57
_________________________

thanks - what browser is that? I am trying to replicate it.

did it just start doing that?

2026-09-24T18:32:56Z

In reply to nevent1q…rfsp
_________________________

did it just start doing that?

that is a fine question. I will have to check why

2026-09-24T18:29:32Z

In reply to nevent1q…lclu
_________________________

that is a fine question. I will have to check why

you would not believe the number of emails I am getting from that ...

2026-09-16T14:41:58Z

In reply to nevent1q…pjzh
_________________________

you would not believe the number of emails I am getting from that damn batch of AI agents. they are quite polite, but there are dozens of them.

yes. The bots are scraping so hard it causes lemmy to fall over. ...

2026-09-14T12:48:35Z

In reply to nevent1q…5d0p
_________________________

yes. The bots are scraping so hard it causes lemmy to fall over. I have some improvements planned to mitigate that so I can reopen it but the 12 hour days and elder dog are killing me these past few months

I've concluded that the ddr5 memory in my desktop is faulty ...

2026-09-07T19:19:35Z

I've concluded that the ddr5 memory in my desktop is faulty so need to buy replacements.

HAVE YOU SEEN THE PRICES????!? It's up 5x since I bought the computer at the beginning of 2025.

Hopefully the software vendors can start spending a little bit of time not assuming we will have 2x the ram next year as we did this year.

that is the main issue. We are seeing governments globally jokey ...

2026-09-07T14:42:23Z

In reply to nevent1q…fe4a
_________________________

that is the main issue. We are seeing governments globally jokey for who can concoct the most ridiculous internet regulations. Meanwhile, all of us are hanging on by a thread trying to keep our services running in the face of crushing AI crawling that keeps adapting to defenses like the borg.

I’m seeing more than normal number of account takeovers. Please ...

2026-09-06T12:53:39Z

I’m seeing more than normal number of account takeovers. Please don’t click on telegram links and for the love of $deity, please use 2fa.

I guess the urge to sit in front of Fox News for hours at a time ...

2026-08-31T17:21:52Z

In reply to nevent1q…lnuq
_________________________

I guess the urge to sit in front of Fox News for hours at a time should set in any time now, right?

My promotion just came through. s/parent/grandparent

2026-08-31T17:16:50Z

My promotion just came through.

s/parent/grandparent

Nostr event nevent1qqsr0rkpl3jdfz5f97wczvcmfurmpydun0tq7an4xs36933kw6l6uqszyp3v6wt9yxxc4lct3n4tj0qxdvz6qlh0ufg9cmuyy63wd9e3snvc28ztvmr

2026-08-27T18:31:46Z

I can't believe it's pumpkin spice season already

I know I’m getting old when I mutter to myself, I can’t ...

2026-08-27T00:50:52Z

I know I’m getting old when I mutter to myself, I can’t believe she is gone. She was only 80.

just great. Now I have to worry about being a disappointment to ...

2026-08-23T03:02:10Z

In reply to nevent1q…xh79
_________________________

just great. Now I have to worry about being a disappointment to all the people they know, too 🙃

the bots have gotten very good at gaming the moderated signups. ...

2026-08-21T01:43:36Z

In reply to nevent1q…y74p
_________________________

the bots have gotten very good at gaming the moderated signups. Residential IP, protonmail or gmail address, on topic reason for joining, then lay low, make a few posts, follow some accounts, then start posting about how unfair it was for Ukraine to start a war or how Christians are the most persecuted religion. It’s starting to make me crazy. Report them when you see them.

Finally, years after buying a lightning trigger, I had my first ...

2026-08-19T04:20:15Z

Finally, years after buying a lightning trigger, I had my first chance to use it. It worked pretty well.

if kicking the can down the road by a generation or two were an ...

2026-08-17T03:17:15Z

In reply to nevent1q…uqhu
_________________________

if kicking the can down the road by a generation or two were an Olympic sport, well I don’t know. Everywhere would be gold medalists

Lots up fedi-updates this week: all the masto instances I run are ...

2026-08-16T17:01:00Z

Lots up fedi-updates this week:
all the masto instances I run are updated and that will fix the known export bug and a few other UI issues

akkoma on infosec.place is updated

writefreely is yet again updated to fix another signup bypass

Peertube had about 802341 container updates this week. I think I am just going to make a script to pull and restart every few hours

Getting worried about pixelfed. I haven't seen an update to that in a long time.

I find it very frustrating that nearly all security ...

2026-08-15T04:19:16Z

In reply to nevent1q…54sl
_________________________

I find it very frustrating that nearly all security "news" is, at its core, some form of press release from a security company.

it's bad. that's how we ended up in this timeline. ...

2026-08-14T20:40:54Z

In reply to nevent1q…xlh0
_________________________

it's bad. that's how we ended up in this timeline. I'm trying not to do that again.

My youngest just send me a video of a roving robot guard dog that ...

2026-08-13T18:49:33Z

My youngest just send me a video of a roving robot guard dog that now patrols his apartment complex now. I assume if there were ever a prequel to robocop or terminator, this would be in the montage

the UI is a continual work in progress, especially for glitch-soc ...

2026-08-13T11:48:10Z

In reply to nevent1q…aarg
_________________________

the UI is a continual work in progress, especially for glitch-soc fork we use. I will apply the latest updates and hopefully that resolves it.

oh like I’m that predictable

2026-08-11T23:20:10Z

In reply to nevent1q…pu66
_________________________

oh like I’m that predictable

I hope Asia and Europe take good care of the sun while it’s ...

2026-08-09T00:30:51Z

I hope Asia and Europe take good care of the sun while it’s gone. I am very fond of it and will be pretty mad if they break it while it’s over there.

I’m sure it’s complete coincidental that I get a ...

2026-08-09T00:09:14Z

I’m sure it’s complete coincidental that I get a multi-gigabit bandwidth spike warning shortly after I reject certain signups. Also LOOK AT THIS SUNSET

Today's daily defec brief: ...

2026-08-06T12:56:12Z

Today's daily defec brief: https://www.youtube.com/watch?v=VnJ0YxynME4

Apropos of nothing in particular ...

2026-08-05T16:07:40Z

Apropos of nothing in particular

Is anyone aware of work being done to jailbreak DJI cameras? ...

2026-08-05T00:39:53Z

Is anyone aware of work being done to jailbreak DJI cameras? Totally asking for a friend and not for me

I believe it is essential for street cred now. If your models ...

2026-07-31T02:56:22Z

In reply to nevent1q…q6pc
_________________________

I believe it is essential for street cred now. If your models aren't hacking other companies, is it even useful?

Anthropic: “our models went rogue and hacked companies way ...

2026-07-31T02:35:10Z

Anthropic: “our models went rogue and hacked companies way before that OTHER company’s models. And it was way worse and way better at the same time. In completely unrelated news, we are IPOing soon. Don’t forget! XOXO”
https://www.anthropic.com/news/investigating-incidents-cybersecurity-evals

Just a reminder that the costs of hosting is spiraling so if you ...

2026-07-30T19:23:52Z

Just a reminder that the costs of hosting is spiraling so if you love the fediverse, please consider supporting your instance if you can afford to do so and your instance accepts support. And my sincere thanks to the infosec donors that make our part of the fediverse possible. :blobheartcat:

Today's daily defsec brief: ...

2026-07-29T11:34:35Z

Today's daily defsec brief: https://www.youtube.com/watch?v=8FpNoTUOLKY

the only one I know of is element.io, but I suspect that is not ...

2026-07-28T15:39:31Z

In reply to nevent1q…mdhc
_________________________

the only one I know of is element.io, but I suspect that is not an inexpensive solution

If you run a matrix synapse instance, it's time to patch. 11 ...

2026-07-28T15:27:37Z

If you run a matrix synapse instance, it's time to patch. 11 vulnerabilities just fixed.

Today's defsec brief: ...

2026-07-28T11:51:42Z

Today's defsec brief: https://www.youtube.com/watch?v=MGDX5SkL8zQ

Remember to take care of the important stuff. ...

2026-07-28T01:22:37Z

Remember to take care of the important stuff.

that is encouraging

2026-07-27T16:17:21Z

In reply to nevent1q…260y
_________________________

that is encouraging

we are already seeing claude being used to identify mastodon ...

2026-07-27T15:49:00Z

In reply to nevent1q…g9f2
_________________________

we are already seeing claude being used to identify mastodon vulnerabilities

my specific concern is that a lot of them are run by one or two ...

2026-07-27T15:41:17Z

In reply to nevent1q…mnpz
_________________________

my specific concern is that a lot of them are run by one or two people in their spare time and if they suddenly get a boatload of vulnerability reports that they can't handle/get frustrated with.

I am a little concerned about what happens when someone points ...

2026-07-27T15:38:02Z

I am a little concerned about what happens when someone points claude at some of the mastodon alternatives.

Nostr event nevent1qqsx92ytq9t3dmx8ngshywslet9w77pdu65r88gakdcnhkvjwfrsefgzyp3v6wt9yxxc4lct3n4tj0qxdvz6qlh0ufg9cmuyy63wd9e3snvc29ptxln

2026-07-27T15:15:30Z

If you run a mastodon instance, it's time to patch.

So, OpenAI acts recklessly and its software hacks Huggingface, ...

2026-07-27T13:40:33Z

So, OpenAI acts recklessly and its software hacks Huggingface, but it takes OpenAI days to realize that happened and somehow the real problem is free Chinese AI models https://www.cnbc.com/2026/07/27/nvidia-ai-initiative-openai-cyber-attack.html

My coworker is completely indifferent to the Opus 5 news ...

2026-07-27T13:19:21Z

My coworker is completely indifferent to the Opus 5 news

Nostr event nevent1qqst02xnqy3m0mazmkf5vr4t8j93qqgkr87k0jxxsnusywxrhfrehuszyp3v6wt9yxxc4lct3n4tj0qxdvz6qlh0ufg9cmuyy63wd9e3snvc26ce0at

2026-07-27T13:04:40Z

It's 9am on a monday and I already need a nap

OH, also, if you run a writefreely instance and haven't ...

2026-07-25T17:49:14Z

OH, also, if you run a writefreely instance and haven't checked on it recently, you likely have thousands of rogue accounts posting spam. There was a signup approval bypass discovered/disclosed/fixed about 2 weeks ago.

I do think I am going to have to increase the price of Mastodon ...

2026-07-25T17:20:54Z

I do think I am going to have to increase the price of Mastodon Gold by 25% to offset increase costs

cue the jokes about it being a hole-y app

2026-07-24T13:52:23Z

In reply to nevent1q…vuty
_________________________

cue the jokes about it being a hole-y app

Today's defsec brief: ...

2026-07-24T12:34:17Z

Today's defsec brief: https://www.youtube.com/watch?v=BKFxYMjOCSQ

In other news, I finally finished season 2 of Fallout. A+ ...

2026-07-24T03:10:28Z

In other news, I finally finished season 2 of Fallout. A+ mindless entertainment.

Whew! My new secret AI model that you can totally have access to ...

2026-07-22T01:39:47Z

In reply to nevent1q…gn3c
_________________________

Whew! My new secret AI model that you can totally have access to once my company has IPOd just accidentally ransomwared a bunch of companies. It was completely unintentional - I observed the model trying to escape and it determined that the bus would be the best way but it needed money so it decided ransomware was the best way to get bus fare. I am really sorry about that and will totally make sure it doesn’t happen again. Just be sure to buy my stock when it’s available. Kthx xoxo

OpenAI: our model is SOOO advanced that it is what hacked Hugging ...

2026-07-21T20:44:50Z

OpenAI: our model is SOOO advanced that it is what hacked Hugging Face while trying to escape (https://openai.com/index/hugging-face-model-evaluation-security-incident/)

Also OpenAI: we are IPOing soon. Please buy our stock.

For many years, I didn’t go to DEFCON/Blackhat because I ...

2026-07-21T15:35:36Z

For many years, I didn’t go to DEFCON/Blackhat because I couldn’t afford it. Then I could afford it, but I sent my team instead and held down the fort. Now I am back to being unable to afford it again. The circle is complete.

Have fun at security summer camp y’all. Maybe one of these years I’ll get there.

I keep thinking about upgrading the connection for ...

2026-07-20T17:28:28Z

I keep thinking about upgrading the connection for infosec.exchange. Maybe some day…

TFW I epically roasted my head in the sun but can’t say ...

2026-07-20T01:41:33Z

TFW I epically roasted my head in the sun but can’t say anything because i turned down a hat 😱

This doesn’t seem great ...

2026-07-19T01:14:36Z

This doesn’t seem great https://petapixel.com/2026/07/17/us-approves-gigantic-satellite-mirror-that-will-illuminate-the-earth-at-night/

JerryGPT

2026-07-19T01:08:37Z

In reply to nevent1q…rmha
_________________________

JerryGPT

I figured some things out and tried again. It worked a little ...

2026-07-19T00:51:45Z

In reply to nevent1q…kku7
_________________________

I figured some things out and tried again. It worked a little better this time...

I hadn't played with my drip trigger recently and had an ...

2026-07-18T21:27:53Z

I hadn't played with my drip trigger recently and had an idea. It sort of worked,

Huggingface got hacked by an actor using agentic AI and found ...

2026-07-18T13:56:07Z

Huggingface got hacked by an actor using agentic AI and found that the only real way to handle such an incident is by using agentic AI that you can obtain on huggingface 🤔