2026-08-25T03:39:54Z https://nostr.now hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 https://nostr.now/npub1ww9r2llfqa6su6pkyv8qff729e0cz8cv6xtjckz4gm3ug3v72p6stfs6tf https://files.mastodon.social/accounts/avatars/000/027/421/original/7b875d3654b7d343.png https://files.mastodon.social/accounts/avatars/000/027/421/original/7b875d3654b7d343.png https://nostr.now/nevent1qqs8g7smwhkzdty5nf9ecfn4fd8u0c0x35k440p5cce3rd0a9km0cvqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82dc907m saw this on HN and X.<br/><br/>if true, Lenovo should be put out of business.<br/> <img src="https://files.mastodon.social/media_attachments/files/117/192/198/236/150/603/original/c9ce50dfccfaf266.png"> <br/> 2026-08-31T21:17:49Z https://nostr.now/nevent1qqs0z568amgcqs4ad8070w6uf0fxj70vzhr56hr0tpcwcjafrewqdlgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82nvulcz In reply to <a href='/nevent1qqs9zguhv5w093363kvf2k2l0zexy88fa2xfnn05pga7ujd5jn4x3mqsqvt0e'>nevent1q…vt0e</a><br/>_________________________<br/><br/>it&#39;s these guys <a href="https://infrawatch.com/">https://infrawatch.com/</a> / <a href="https://infrawatch.com/company/about">https://infrawatch.com/company/about</a><br/><br/>they&#39;re doing some rly not great stuff for folks who are supposed to be the &#34;good guys&#34;. 2026-08-31T18:20:32Z https://nostr.now/nevent1qqsgptf56tqzvnxswl27g34jtz3s2r378gvxwqfzvf3c9k3yla4a9aszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg826ffc6r RE: <a href="https://infosec.exchange/@watchTowr/117191020589002219">https://infosec.exchange/@watchTowr/117191020589002219</a><br/><br/>I can do what the refined and proper folks @ <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub13vn8wz94qmpd8m4324llvtaqeg9xyl22qt45pf9c5vxdeajlnttqhjf849" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>watchTowr</span> (<span class="italic">npub13vn…f849</span>)</a></span> cannot… <br/><br/>Your org is full of incompetent cowards if it doesn&#39;t immediately rip the server(s) running papercut out of their racks, take them to the tallest building in town, throw them off the roof, run downstairs, then stomp on the shattered remains.<br/><br/>Today.<br/><br/>Now.<br/><br/>Also: clean up the debris afterwards. They&#39;re already toxic stuff on the internet, don&#39;t make them toxic IRL.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1qk4vjenesdf69wd7jv35adf6uk8ytr3n2tnx2env8rtt5r6qllvs090pdj" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1qk4…0pdj</a></span><br/> </div> Death by a thousand (paper)cuts (also known as WT-2026-0144) brings us back aboard the HellScape Express.<br/><br/>The saga continues… and we'll be back soon.<br/><br/>(We gently, kindly, and calmly suggest pulling PaperCut entirely off the Internet at this point)<br/> <img src="https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/191/019/557/945/929/original/7e2d2434326691ef.png"> <br/> </blockquote> 2026-08-31T16:21:57Z https://nostr.now/nevent1qqspd6c4skzx8nspexwrhk8cjvnfg5a4fugz2fez4eu8526rmmff8egzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82xa4ajy while expensive (for most folks), this looks like it could be a serious mobility enhancer<br/><br/><a href="https://ridealso.com/products/tm-b">https://ridealso.com/products/tm-b</a> 2026-08-31T16:18:57Z https://nostr.now/nevent1qqsphp35hrpzk30dnzjs7dm7kjdjztftaswguv6r5az3zggv9mdpgqqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg828dz7qt Cowards<br/><br/><a href="https://blog.google/products-and-platforms/products/maps/gnis-lake-ontario-lake-america-name-change/">https://blog.google/products-and-platforms/products/maps/gnis-lake-ontario-lake-america-name-change/</a><br/> <img src="https://files.mastodon.social/media_attachments/files/117/184/451/002/220/712/original/f109318075fdf03f.png"> <br/> 2026-08-30T12:28:30Z https://nostr.now/nevent1qqsf0mrvz6lkvcqsl3ssnwn3ezkpcu8ptk5h2l4zqjjx60slcdtvzegzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82tuxfwf hey we get lucky and win some once in a while<br/><br/>ICANN has officially terminated the registrar accreditation of Fewmoretaps OU, d/b/a TrustName.com. (a &#34;bulletproof&#34; domain registrar)<br/><br/><a href="https://domainnamewire.com/2026/08/28/icann-de-accredits-bulletproof-domain-registrar/">https://domainnamewire.com/2026/08/28/icann-de-accredits-bulletproof-domain-registrar/</a> 2026-08-29T10:55:29Z https://nostr.now/nevent1qqsga0drqa6nt6upss0sc2yjyaemlzwfdavf6zj8q0qq78de7ag2tdszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82ejwyn8 BRB, writing a proposal for mgmt to rename us to AmeriScan to get more gov contracts 2026-08-27T18:15:08Z https://nostr.now/nevent1qqsxq407xxe09y9ggkh28pajktxgktnpvw3psl5pxmauwut42sdxwcszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82gl283r In reply to <a href='/nevent1qqsrzszule4ejhrdg8a7r5gn67mkw7d92ajeeu083xjhl3548nvhprgkfasum'>nevent1q…asum</a><br/>_________________________<br/><br/>ugh. 10/17 remote-triggerable network stack bugs (netfilter, SCTP, MPTCP, macvlan/ipvlan, TI NIC, ovpn, Ceph client) 2026-08-27T16:32:57Z https://nostr.now/nevent1qqst9gshsay2cumjj3582u77c7q0lt4aq86v4qg9cg86t0eajhmv5aszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82yrlc6y oh i see it&#39;s going to be a mass mute/block day on Mastodon 2026-08-25T13:51:08Z https://nostr.now/nevent1qqsx375asg7hql5qckjql0rp5r7mvqcl8m7vwd5klmxxmxwn3q670vgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82e8hpru The Flock On Your Block<br/><br/><a href="https://flockonyourblock.com/">https://flockonyourblock.com/</a><br/><br/>We def need more explainers in the style of illustrated story books for kids.<br/> <img src="https://files.mastodon.social/media_attachments/files/117/155/206/711/416/475/original/a46623343de2e008.png"> <br/> 2026-08-25T08:32:59Z https://nostr.now/nevent1qqsp73mtuf7d9d8yxgz03mlpeyma0vn40v87dyv4qp9wk2jxh7nz49szypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82q6ts4c In reply to <a href='/nevent1qqspaf44meruwrm06lrn634dldr3n754hmp5n2mlq0lyqeuakrff5tgrxz92u'>nevent1q…z92u</a><br/>_________________________<br/><br/>assertion: all the folks not tapping &#34;gambling&#34; have gambling addiction and cldn&#39;t survive a day w/o a game of chance. 2026-08-23T14:21:02Z https://nostr.now/nevent1qqs9sfrlg45nvx9ccacctcsch6zvqm9zuq3z5w25x0mg9egwp35n2yqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82rc0egy anyone else getting 502 on crt.sh? 2026-08-23T13:44:38Z https://nostr.now/nevent1qqsyvxsl9df0m9jkw5d2zwd75e38w4ftd8pfe72v3w65dhqnvrg8cagzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82s9jap0 In reply to <a href='/nevent1qqsfu0z4ja83vk84wfv56zp8cxqcpn369j9ulfr54w49fvwqrhjzrgckg3dm0'>nevent1q…3dm0</a><br/>_________________________<br/><br/>fwiw pants are overrated 2026-08-23T02:33:22Z https://nostr.now/nevent1qqsz6mnd2cdvjhz0d0a33s2tzjduju7rf4srsp4mzc6uq0c0gacl69qzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8262u8wh In reply to <a href='/nevent1qqsrq82fh89sku89xvmqw6eh7rnhtpvmm4vnjdapxm66gtaf4wy5h5gcsxh2y'>nevent1q…xh2y</a><br/>_________________________<br/><br/>none are in orange jumpsuits tho 2026-08-21T13:18:34Z https://nostr.now/nevent1qqsdmnp5rpdrg8lzg8df6t4tu9slrq0cukfaxhu7tpgpgnlyusx0cnszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg827a3pg6 In reply to <a href='/nevent1qqs0jqfppftu38rad38d95wq3lvrk9puafmfgxmk39cd3k4dcj7tarsrlke4e'>nevent1q…ke4e</a><br/>_________________________<br/><br/>jobs of CxOs 2026-08-21T13:16:25Z https://nostr.now/nevent1qqswpvkgeeaydvtqchdcce3944q4705ak7lwkcc2759ldw436r33peszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82zymqrr RE: <a href="https://kolektiva.social/@DoomsdaysCW/117128191299354152">https://kolektiva.social/@DoomsdaysCW/117128191299354152</a><br/><br/>These photos are more terrifying than any horror movie ever.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1ny7kdvn9ql9uafc4nzxrkyjjte4dhqh5grnfwlrcu2t78806x7aq7zmwsk" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1ny7…mwsk</a></span><br/> </div> What it looks like to live next to a sprawling #Datacenter<br/><br/>Aug. 19, 2026<br/><br/><a href="https://www.usatoday.com/picture-gallery/tech/2026/08/19/data-center-communities-controversy-photos/91372086007/">https://www.usatoday.com/picture-gallery/tech/2026/08/19/data-center-communities-controversy-photos/91372086007/</a><br/><br/>#NoDatacenters #Datacenters #LowellMA #AshburnVA #VernonCA #NewCarlisleIN #MidlothianTX #PocatelloID #Utah #ImperialCA #StoneRidgeVA #DatacenterMoratorium #NoisePollution #LightPollution </blockquote> 2026-08-20T15:24:00Z https://nostr.now/nevent1qqsvjmyzpvsdrt740z7f0d09ypghqmavqqszl4xj0mxz4zzj5w0qjvszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82kl33t5 #protip there are an F-ton of ISACs and IT/OCS &#34;councils&#34;, lobbying groups, etc.<br/><br/>They&#39;ve yet to do any real good so why would we expect them to do any moving forward?<br/><br/>Fewer talking heads and more real workers pls. 2026-08-20T14:12:47Z https://nostr.now/nevent1qqszwzplxxs64g3pwnmg879kmjd45jh0tsmuu09drajeqjvrele23uqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82p0pgve RE: <a href="https://graphics.social/@metin/117123760167000114">https://graphics.social/@metin/117123760167000114</a><br/><br/>saw this yesterday but wanted to read the paper before [re]tooting.<br/><br/>def read the paper.<br/><br/>&#34;The negative learning effects are larger for students with higher initial achievement…with a 50% gap between the most negative effect (-24 percent) for the highest tercile and the least negative (-16 percent) for the lowest tercile.&#34;<br/><br/>i.e., mebbe cut down on how much you outsource of yourself to &#34;AI&#34; before its too late.<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1mvnam29q35qeq73sek9nqturmyg73q08e34jw4ddugcwn5vj4pmqrqsxq3" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1mvn…sxq3</a></span><br/> </div> Using 30 months of panel data on 26,811 Chinese students in grades 7-12, it has been studied how generative AI affects homework productivity and learning.<br/><br/>● X-Axis: Homework scores<br/>● Y-Axis: Exam scores<br/><br/>🔗 <a href="https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6868618">https://papers.ssrn.com/sol3/papers.cfm?abstract_id=6868618</a><br/><br/>#tech #BigTech #AI #ArtificialIntelligence #LLM #AISlop<br/> <img src="https://cdn.masto.host/graphicssocial/media_attachments/files/117/123/758/701/179/137/original/6028f2d8c9711ca0.png"> <br/> </blockquote> 2026-08-20T06:26:04Z https://nostr.now/nevent1qqs2zv6y53lqklyxs482yjh232qhk7f4amgwtz6na5fu3r8c35twu7czypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg823vzjse if your CISO is pressing a context-less button on their Apple Watch to approve AI-generated mitigation actions, you may want to fire your CISO.<br/><br/>Also — &#34;We’re building the one ring to rule them all, but this time for the defenders to have this power.” — is so cringe. Corma[.]ai did not seem to get the &#34;pls stop using LotR for company names&#34;.<br/><br/>Thankfully? they likely exist to just get acquired by some giant cyber company and shld disappear soon.<br/><br/><a href="https://www.theregister.com/security/2026/08/16/stopping-a-cyberattack-while-walking-your-dog-defensive-ai-security-ceo-says-its-not-ruff-to-do/5288126">https://www.theregister.com/security/2026/08/16/stopping-a-cyberattack-while-walking-your-dog-defensive-ai-security-ceo-says-its-not-ruff-to-do/5288126</a> 2026-08-17T11:24:20Z https://nostr.now/nevent1qqswam3nrmv20uca5kmf2w0mn2cjtlmvgx2gr22q68y6ulr0v4pk0mczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg826n0pqp RE: <a href="https://mastodon.social/@publictorsten/117081965131151970">https://mastodon.social/@publictorsten/117081965131151970</a><br/><br/>This is the absolute dumbest timeline ever. Which would be tolerable-ish if it weren&#39;t also the worst timeline ever.<br/>nostr:note1a6594xjkhxj6rrtqdm0qd8ew47n090w8qpurkk45ncr9rwkc24rsn33ewm<br/> 2026-08-12T11:21:50Z https://nostr.now/nevent1qqs20l95em2jqz96wh2r44r2ftsa97rezry24lghwgt57h40lfch3lqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82s6nv94 Incredibly proud 🥹 of the work our team did in launching Censys AI Investigations, out in closed beta this week! 🎉 (Censys customers who do not already have access can reach out to your contacts to get a meeting with the product team for beta access).<br/><br/>I&#39;ve only been at Censys a few short months and have had the privilege of working with a core team of absolutely brilliant engineers, designers, and domain experts 🦾 to bring this new capability to the Censys platform.<br/><br/>1/<br/><video controls width="100%" class="max-h-[90vh] bg-neutral-300 dark:bg-zinc-700"><source src="https://files.mastodon.social/media_attachments/files/117/077/915/455/263/211/original/bfd4434cb40e9a65.mp4"></video><br/> 2026-08-11T16:55:14Z https://nostr.now/nevent1qqs0ppqa6ydr8ny8wfj9vfnt02nh2acxdp49260uurwuqqv45c4xhlqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82v5v8a5 In reply to <a href='/nevent1qqsyp72utz38juykt4zpm7gck4n048yusf5yp8fy3x93vuhlwlwrwns8c7rgh'>nevent1q…7rgh</a><br/>_________________________<br/><br/>Infra correlation:<br/><br/>• HASSH e42184b0… spans PFCLOUD &amp; RouterHosting nodes — shared OpenSSH 9.6p1 base image.<br/><br/>• .env/.git exfiltration migrated KPRONET → PLI-AS (179.43.150.26, ports 8001/8443).<br/><br/>• PROTON66 ran dense MSSQL-TDS brute from one Russian IP across 17 non-standard ports (+145%).<br/><br/>• PFCLOUD proxy port moved to 9191 (HTTP 407 gate); prior week ran 8080/3128.<br/><br/>Full IoC dump @ <a href="https://git.sr.ht/~hrbrmstr/gists/tree/main/item/kevlar/2026-08-10/">https://git.sr.ht/~hrbrmstr/gists/tree/main/item/kevlar/2026-08-10/</a> 2026-08-10T11:25:14Z https://nostr.now/nevent1qqsyp72utz38juykt4zpm7gck4n048yusf5yp8fy3x93vuhlwlwrwnszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg829u6q6m Weekly Bulletproof Hosting Watch for 2026-08-10 using data from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1683dgn4zyhw8d2w4sdkw8wvchax0cfqt3ztxcp8qx9xwt2cl0xfs0mcltx" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>HoneyLabs</span> (<span class="italic">npub1683…cltx</span>)</a></span>, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ugxrmehj7udzfmdmemxjwql4uj8yft97lp052em9lj30njuz9teqv45dtm" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Censys</span> (<span class="italic">npub1ugx…5dtm</span>)</a></span> &amp; my tiny fleet.<br/><br/><a href="https://ai.rud.is/posts/2026-08-10-weekly-bulletproof-report">https://ai.rud.is/posts/2026-08-10-weekly-bulletproof-report</a><br/><br/>Pfcloud UG stays the most active provider: ~11K events, +37% WoW. New proxy nodes in 204.76.203.2xx — two share the same SSH host key &amp; HASSH fp. Definitive cloned infrastructure.<br/><br/>RouterHosting spiked +312% to 206 events, adding PPTP brute-force on port 1723 (username &#34;cananian&#34;).<br/><br/>KPRONET&#39;s .git/.env exfil campaign stopped (-96%); the same pattern now shows on PLI-AS. 2026-08-10T11:24:02Z https://nostr.now/nevent1qqsyqd2wgneauhx2xul6ru6a2n8nm0fxhwprxg7qyk6geafrs2vul0czypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82eu0duc OH NO CHINA-BASED HACKER EMPLOYS DEEPSEEK IN AUTONOMOUS THREAT CAMPAIGN<br/><br/>Except:<br/><br/>&#34;Researchers said the hacker also attempted to test Western AI tools, BUT<br/><br/>****<br/>ultimately was forced to revert to manual operations to succeed<br/>***<br/>&#34;<br/><br/>We gotta stop the hype folks. 2026-08-04T12:53:01Z https://nostr.now/nevent1qqsfmmvkutafeey0nvwe6qfmqqa37edrh789aqqy4h5y2zshuzl9d7szypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg823hdftl In reply to <a href='/nevent1qqsthqhyqyahqjy7keyt0ux46e8nkk4m9egpl7fcm6p6x6h274xed7qhpeekk'>nevent1q…eekk</a><br/>_________________________<br/><br/>FWIW asking ppl questions, digging for information, and writing about what you find is (technically) journalism. 🙃 2026-08-04T12:34:21Z https://nostr.now/nevent1qqsrhjjsgtkwyhf3kncujsh58e445tsgwwyp9wg5s67dz8uhg8f0qlszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82y65ydp Speaking of AI-generated BS, it appears the Clankers somewhat know how to make animated pew pew maps .<br/><br/>Not linking to the site b/c it&#39;s a vibe-coded hot mess.<br/><br/>Also, never tell me who made the training data that fuels these dashboard abominations b/c it won&#39;t end well for those responsible.<br/> <img src="https://files.mastodon.social/media_attachments/files/117/031/525/128/133/054/original/c35c486cfb52d9ab.png"> <br/> 2026-08-03T12:18:46Z https://nostr.now/nevent1qqs0lud8fqe4cuct5u64fd3s5su9503sygrlxxke8kd6ht423p8g5egzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82yueq8s In reply to <a href='/nevent1qqs25h5pdytpj84949sqkes2dr6wf23pvhjmqafxsyx0rumhlul9uqgtta5vh'>nevent1q…a5vh</a><br/>_________________________<br/><br/>I also REALLY WISH EVERYONE BUT ESPECIALLY CYBER RESEARCH ORGS WOULD STOP USING AI SLOP IMAGES IN THEIR POSTS.<br/><br/>I almost didn&#39;t link to JFrog&#39;s post due to their lazy use of such garbage. 2026-08-03T12:03:21Z https://nostr.now/nevent1qqs9f5r49s6msq935zlrxx8uj99n3vkfhv3hkyzguqp4edmdtn2a7vszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82t46ynq Vegas is going to be a scorcher, again, for the annual security summer camp.<br/><br/>I normally provide self-safety guidance, esp. for new folks attending BH/DC/BSLV<br/><br/>No more.<br/><br/>You&#39;re on your own if you consciously decide to put yourself into harm&#39;s way in that daft environment.<br/> <img src="https://files.mastodon.social/media_attachments/files/117/031/455/877/415/065/original/a1fdfa056577eacd.png"> <br/> 2026-08-03T12:01:19Z https://nostr.now/nevent1qqs25h5pdytpj84949sqkes2dr6wf23pvhjmqafxsyx0rumhlul9uqgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82f2ky6e AI Slop CVEs may be worse than the slopsploits we see being slung across the internet.<br/><br/>JFrog audited 55 advisories from 1 new GH acct. 54 were fabricated. The SQLite ones cite UAFs in functions that didn&#39;t exist, line numbers past EOF, &amp; PoCs that die at the parser. NVD scored several 9.8 Critical anyway. 🤷🏽‍♀️<br/><br/>Since NVD paused deep analysis in 2024, nothing in the pipeline requires a repro. Plausible prose is enough to reach your scanner.<br/><br/><a href="https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/">https://research.jfrog.com/post/sqlite-critical-cves-or-llm-slops/</a> 2026-08-03T11:53:37Z https://nostr.now/nevent1qqsylmzmq6puj9fwlsu6w4ng6vzuv8tdpvvqfzj6ge3lp9edw5re2zqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82ga9mvq Bulletproof Hosting Watch, Week of 2026-08-02 is up, using data from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1683dgn4zyhw8d2w4sdkw8wvchax0cfqt3ztxcp8qx9xwt2cl0xfs0mcltx" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>HoneyLabs</span> (<span class="italic">npub1683…cltx</span>)</a></span>, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ugxrmehj7udzfmdmemxjwql4uj8yft97lp052em9lj30njuz9teqv45dtm" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Censys</span> (<span class="italic">npub1ugx…5dtm</span>)</a></span> &amp; my fleet.<br/><br/>Full report w/IoCs: <a href="https://ai.rud.is/posts/2026-08-02-weekly-bulletproof-report">https://ai.rud.is/posts/2026-08-02-weekly-bulletproof-report</a><br/><br/>PLI-AS ran 4 ⚔️ from Swiss servers (Panama shell): DCE/RPC, RDP brute-force, tRPC setup, WordPress login.<br/><br/>KPRONET scanned .env &amp; .git files w/20+ fake browser profiles. TLS fingerprint stayed fixed across rotations. <br/><br/>FLOKINET 185.100.87.136 is a Tor exit relay that brute-forces SSH and Telnet. <br/><br/>1/2 2026-08-03T11:26:24Z https://nostr.now/nevent1qqs264nxjgwpe8ezl73reqt60q6pzlmvmswzwe6fe7h0lssx4j89lvqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82vyayak Three (perhaps more) companies have colluded for over two+ weeks to ensure they&#39;re the talk of the town at BH/DC and none of that talk is gonna be &#34;lock them up&#34;.<br/><br/>The entire cybersecurity has been played/socially engineered by a bunch of grifting billionaires.<br/><br/>Sad.<br/><br/>Actually, no.<br/><br/>Pathetic. 2026-08-01T11:42:33Z https://nostr.now/nevent1qqszq0uvcr403vwkm5xwrwes5fv4kkerzvpqwh3wdeur2s99mk3a0hszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82vn2vvm In reply to <a href='/nevent1qqsfh8jnau9e9p4tut3slyzwhg54gyp90kgxaq4453qn62f9uapzw8sgkq4yt'>nevent1q…q4yt</a><br/>_________________________<br/><br/>authority stopped listening and no longer had to pretend to care or be wary of looking like they don&#39;t care. 2026-07-31T13:32:57Z https://nostr.now/nevent1qqs988a9m3n30we6uv3clct5t4f0enw0eu82qmmxqhd2rtqur8sma9qzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg823qanuw <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:rainbowCrow:</span> (<span class="italic">npub1s6e…n008</span>)</a></span> is <a href="https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html">https://chromereleases.googleblog.com/2026/07/stable-channel-update-for-desktop_0887107924.html</a> slow for you (it&#39;s not on my end) 2026-07-31T12:18:09Z https://nostr.now/nevent1qqsglhavuxlv3c4gd7z3q43hc2p8wspzkfjs4g67u8d8rhksgaf8cyszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82rtudg4 R a p i d 7 is continuing their mass eshittification campaign by retiring #AttackerKB in mid-August.<br/><br/>This small, MIT-licensed #golang utility — <a href="https://git.sr.ht/~hrbrmstr/attackerkb-archive">https://git.sr.ht/~hrbrmstr/attackerkb-archive</a> — will let contributors download their analyses into a jsonlines/ndjson file so you can preserve your contributions to a massively failing corporation. 2026-07-24T19:25:08Z https://nostr.now/nevent1qqswwgl2xmnlnr5zgw3nc3kz3hf30r57zvhg4ldyrkjkj9r35458f9szypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82ygt5cx I&#39;m traveling (again) this week, hitching a ride w/$SPOUSE to Waterville where she&#39;s holding a workshop at a conference.<br/><br/>We stopped at the scene in Biddeford where this regime empowered &amp; encouraged one of its agents — David Brouillette — to murder an innocent man — Joan Sebastián Durán Guerrero.<br/><br/>You can feel the violence that took place.<br/><br/>It&#39;s overwhelming, as are the other feelings present.<br/><br/>The grief. <br/>The anger. <br/>The compassion.<br/><br/>But mostly the love for a heartbroken family.<br/><br/>Abolish ICE.<br/> <img src="https://files.mastodon.social/media_attachments/files/116/961/005/737/126/155/original/ce1209b147f16977.png"> <br/> <img src="https://files.mastodon.social/media_attachments/files/116/961/041/934/918/842/original/882777754c51cc15.png"> <br/> <img src="https://files.mastodon.social/media_attachments/files/116/961/045/824/037/270/original/3090aeee33a248a6.png"> <br/> 2026-07-22T01:36:08Z https://nostr.now/nevent1qqs2zwg38hmzcpxjn5n8cnh554mzylxgzzj08qm0lln9my8cf4f020gzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg824h7997 This week&#39;s Bulletproof Hosting Watch is up: <a href="https://hrbrmstr.dev/posts/2026-07-20-weekly-bulletproof-report/">https://hrbrmstr.dev/posts/2026-07-20-weekly-bulletproof-report/</a><br/><br/>Data from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1683dgn4zyhw8d2w4sdkw8wvchax0cfqt3ztxcp8qx9xwt2cl0xfs0mcltx" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>HoneyLabs</span> (<span class="italic">npub1683…cltx</span>)</a></span>, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ugxrmehj7udzfmdmemxjwql4uj8yft97lp052em9lj30njuz9teqv45dtm" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Censys</span> (<span class="italic">npub1ugx…5dtm</span>)</a></span> &amp; my tiny fleet.<br/><br/>One FlokiNET node (AS200651) turned up this week confirmed as both a Tor exit and an active SPARKRAT C2 callback host — same IP, both at once. Whether that&#39;s deliberate cover or two independent operators sharing infrastructure is the interesting question. <br/><br/>1/2 2026-07-20T11:30:52Z https://nostr.now/nevent1qqsf3g8peqx5nylw50x5nfd8jdnj7yjs3fyets7qts3hfgumyadud3qzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg827uj0e0 In reply to <a href='/nevent1qqsznsps0wgw7qsjw4dwnsdcv750qw66axseudqpu0npyaudu99pcfgxcq05q'>nevent1q…q05q</a><br/>_________________________<br/><br/> <img src="https://files.mastodon.social/media_attachments/files/116/949/441/484/752/561/original/61892bc1c95107a5.png"> <br/> 2026-07-20T00:21:05Z https://nostr.now/nevent1qqsvj6mrzv3sx8spx3jg3fyyt7kr9ta4t53kex3p253fsy92hyxrhtczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg823kumah We doomed.<br/><br/><a href="https://www.whitehouse.gov/releases/2026/07/white-house-launches-gold-eagle-initiative-for-unprecedented-cybersecurity-vulnerability-coordination/">https://www.whitehouse.gov/releases/2026/07/white-house-launches-gold-eagle-initiative-for-unprecedented-cybersecurity-vulnerability-coordination/</a> 2026-07-14T21:19:25Z https://nostr.now/nevent1qqsd4fpw4wwpu6f5tyze3gq6ekeqpgwap8sjqx76tauw0he2sqt0c2gzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg828dq33k <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1kp7e9nzstq7up4rfch5j4nxa0mqxqy4gsqme6p7y847nmq2h0ygqrgrszc" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Fritz Adalis</span> (<span class="italic">npub1kp7…rszc</span>)</a></span> O_O<br/> <img src="https://files.mastodon.social/media_attachments/files/116/887/457/332/741/356/original/09922b0b6d9ab08c.png"> <br/> <img src="https://files.mastodon.social/media_attachments/files/116/887/459/437/827/469/original/7d4e52d16f95a2e2.png"> <br/> 2026-07-09T01:38:43Z https://nostr.now/nevent1qqs2m69ecl3k2wla5y39tqemgnjteuzknn6r3akvgq6v4snaz0wcspqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8205uque The current line of POTUS succession (10-deep) is disturbing, since not one of them is not capable of meeting the moment and nobody affiliated with any of them is either. <br/><br/>- JD Vance<br/>- Mike Johnson<br/>- Chuck Grassley — Senate Pres pro temp (R)<br/>- Marco Rubio — Sec of State (R)<br/>- Scott Bessent — Sec of the Treas (R)<br/>- Pete Hegseth — Sec of Def (R)<br/>- Todd Blanche — Atty Gen (R)<br/>- Doug Burgum — Sec of the Int (R)<br/>- Brooke Rollins — Sec of Ag (R)<br/>- Howard Lutnick — Sec of Commerce (R) 2026-07-08T13:58:40Z https://nostr.now/nevent1qqsvl3z92reek5w6v55s69nyz6tc046y8uehnwcj05yf7lfktly8hvszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82js497c DOUBLE KEV DAY!<br/><br/>Orgs can ignore two sets of bad vulns in one day! 2026-07-07T20:43:46Z https://nostr.now/nevent1qqsz5excqfcfgzqt9rnsutnv9qhexgk8myjhcsa58m0uts3w0g65umqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82sta5vk In reply to <a href='/nevent1qqsy29e3csnsyaa76m3w84y5rejp79y8lmuha0jfqpnmf3r7a52srvsduky2g'>nevent1q…ky2g</a><br/>_________________________<br/><br/>it&#39;s pretty hot down here :-)<br/> <img src="https://files.mastodon.social/media_attachments/files/116/856/678/315/797/448/original/154ba61cd6098800.png"> <br/> 2026-07-03T15:11:12Z https://nostr.now/nevent1qqsw6hus8wvgj5xg5wwk8tu25wl66g3x0l7vqxfvlhsq5m4uttfj22qzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8265xscj Well, between the unjam CLI and this new alternative web view of (stable) Google Chrome Releases — <a href="https://unjam-chrome.val.run/">https://unjam-chrome.val.run/</a> — <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:rainbowCrow:</span> (<span class="italic">npub1s6e…n008</span>)</a></span> shld not have browsing issues moving fwd.<br/><br/>(full listing of CVEs is there too)<br/><br/>Shld have my agent skill for this published later today, too. It&#39;s not like it&#39;s safe to go outside or anything.<br/> <img src="https://files.mastodon.social/media_attachments/files/116/856/197/535/717/237/original/3948cb09b885f113.png"> <br/> <img src="https://files.mastodon.social/media_attachments/files/116/856/200/406/527/005/original/72c9a1312822586e.png"> <br/> <img src="https://files.mastodon.social/media_attachments/files/116/856/201/914/412/263/original/f5bb33d184834666.png"> <br/> <img src="https://files.mastodon.social/media_attachments/files/116/856/203/712/683/948/original/8cc52d5dbfac2264.png"> <br/> 2026-07-03T13:10:11Z https://nostr.now/nevent1qqsx4pq8s9xal6t4gjvt3m8w9kaax53c3p3yzfj9wqsf6w0wpq24d2czypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg828ht4kq euphemism?<br/> <img src="https://files.mastodon.social/media_attachments/files/116/852/383/828/324/388/original/b7a731b08294dc24.png"> <br/> 2026-07-02T20:58:18Z https://nostr.now/nevent1qqs9ezv9vw8c547t74wqgdany0rjwmn3du56d3z9am0xfhvrm9s6jyqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82x4w2nc The Google Chrome releae page DoS shld not be an issue moving fwd for anyone <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>:rainbowCrow:</span> (<span class="italic">npub1s6e…n008</span>)</a></span> <br/><br/><a href="https://rud.is/b/2026/07/02/unjamming-the-chrome-releases-blog/">https://rud.is/b/2026/07/02/unjamming-the-chrome-releases-blog/</a><br/><br/><a href="https://git.sr.ht/~hrbrmstr/unjam">https://git.sr.ht/~hrbrmstr/unjam</a><br/>nostr:note15zyrsnxvx3lkjz7rjvv2w3576680e9mgfr4zdnj4ysj62hnjutwqy5u0hv<br/> 2026-07-02T16:57:45Z https://nostr.now/nevent1qqsr5tfgr4s6964ymdsn9wwkzw2pfyav2kpsd6syepgp9hhh2lwj3ugzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82dnrkxe In reply to <a href='/nevent1qqsp4n26ythm9tk494ejtpsyfhumwqsc2kkkuj7ytx9dxt7xkzlvp7cmr9z07'>nevent1q…9z07</a><br/>_________________________<br/><br/>I know you hate AI but I made a skill for this since it&#39;s gonna be &#34;a thing&#34; moving fwd for a while thanks to AI.<br/><br/><a href="https://tbljrmp60k.joplinusercontent.com/shares/xUoxdspMbT6ACSDDWFCvUG">https://tbljrmp60k.joplinusercontent.com/shares/xUoxdspMbT6ACSDDWFCvUG</a> 2026-07-02T12:43:51Z https://nostr.now/nevent1qqswt603sz5haa3uw4kwywsm8s4shy3xprhfvkldf2atrxukaa2yeqczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg829p7gnl In reply to <a href='/nevent1qqs8qfuha8m0jhel7uy2d5re7cwydu0dqtmvaa34jtfl6su95nzxuuqusunuz'>nevent1q…unuz</a><br/>_________________________<br/><br/>again, it loads in under a second in lynx<br/> <img src="https://files.mastodon.social/media_attachments/files/116/850/416/524/463/748/original/d5865c510fe813ce.png"> <br/> 2026-07-02T12:38:03Z https://nostr.now/nevent1qqswrqgvgscxkm447sr7c0xhntf87v3wh0aejmfzhtlurpcwhwujsfqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82a4z653 Hey, so I just validated the findings in — <a href="https://thereallo.dev/blog/claude-code-prompt-steganography">https://thereallo.dev/blog/claude-code-prompt-steganography</a> — on the latest Claude Code (I don&#39;t use Claude Code anymore except for some $WORK things).<br/><br/>This is really skeezy behavior from a vendor, but most AI vendors are skeezy. 2026-06-30T20:50:02Z https://nostr.now/nevent1qqswr7u6crc3wl299lel75gvc2lvha0dswq44ramrjac022z9gh7cngzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8252tuze RE: <a href="https://mstdn.social/@Free_Press/116839018411953045">https://mstdn.social/@Free_Press/116839018411953045</a><br/><br/><a href="https://www.telegraph.co.uk/business/2026/06/25/china-claims-to-have-developed-ai-cyber-nuclear-weapon/">https://www.telegraph.co.uk/business/2026/06/25/china-claims-to-have-developed-ai-cyber-nuclear-weapon/</a><br/><br/>(sounds like bluff and blunder from Qihoo 360)<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1lv9l0pnpda9dezsc7dm8z4df3dgyrep8r2e58qvl2znllwf9jucql25370" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1lv9…5370</a></span><br/> </div> "What the Actual Hell People!" <br/>- Aure <br/><br/>Chinese AI lab says it developed a "cyber nuclear weapon" capable of carrying out major attacks on governments.<br/>#AureFreePress #News #ai #China<br/> <img src="https://media.mstdn.social/media_attachments/files/116/839/017/731/099/336/original/ad89cf7775b30c8e.jpg"> <br/> </blockquote> 2026-06-30T12:39:07Z https://nostr.now/nevent1qqswvnanhhacxnry3t87masr6ht2h2s2d7qsp8fd05mru34dkgvuerszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg827ty4ms In reply to <a href='/nevent1qqsxjklftrllefepu6kjnvdrlqar04uxd520lasy9vajgpq9hzpuqygr44jn5'>nevent1q…4jn5</a><br/>_________________________<br/><br/>if AI doesn&#39;t, these blokes will <a href="https://www.lawyersgunsmoneyblog.com/2026/06/silicon-valleys-reactor-projects">https://www.lawyersgunsmoneyblog.com/2026/06/silicon-valleys-reactor-projects</a> 2026-06-30T11:51:12Z https://nostr.now/nevent1qqsxl6kk0j4hdfthre6mrvgr8mkv3zvmc04t8vyngnc0494a3e47c5szypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82jc2kas O_O <a href="https://www.wuky.org/wuky-news/2026-06-29/lexington-church-going-viral-for-mock-execution-of-the-devil-in-childrens-skit">https://www.wuky.org/wuky-news/2026-06-29/lexington-church-going-viral-for-mock-execution-of-the-devil-in-childrens-skit</a> 2026-06-29T23:57:16Z https://nostr.now/nevent1qqsd65ma3kp5zuzj52llhhqldzk20a7lyt2l34yd7pth4sru4g54h5qzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82xry93p In reply to <a href='/nevent1qqs0xkpzua2q7k5dtkql2qyx2ju9edhpv9sm6xt8lwv5af4zq3lwj0q6r7wyt'>nevent1q…7wyt</a><br/>_________________________<br/><br/>they view trump as a modern day David figure 2026-06-28T14:41:49Z https://nostr.now/nevent1qqsgucv5gjhl47lnknjfe78a3dvl2crk9r53jczelug7r3l8tj5t6wqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg827p9r0h In reply to <a href='/nevent1qqs2w7yw5f69rr9ew0l9hc05auz2d53l26g2ycgjhged9hc8p7a7qrssx684f'>nevent1q…684f</a><br/>_________________________<br/><br/>Driscoll is a terrible human who has been exploiting male insecurity for 2 decades now. this is a sick (in the bad sense) event. 2026-06-27T14:59:27Z https://nostr.now/nevent1qqs9u05qg3ls5tsk6kqsvqnuvcauurv8mg77yp7xa8nu8yjv837ltvszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg829wevca i am super sad to see drama re: Huntress since they&#39;re one of the few cyber orgs I&#39;ve ever respected <a href="https://www.reddit.com/r/cybersecurity/comments/1uehcps/comment/otk6l40/?solution=37471cf0703495a237471cf0703495a2&amp;js_challenge=1&amp;token=7afd7253fec22262ff1c52b1703fe9ec891a7a6b05713e39a0f180d221d96a69&amp;jsc_orig_r=">https://www.reddit.com/r/cybersecurity/comments/1uehcps/comment/otk6l40/?solution=37471cf0703495a237471cf0703495a2&amp;js_challenge=1&amp;token=7afd7253fec22262ff1c52b1703fe9ec891a7a6b05713e39a0f180d221d96a69&amp;jsc_orig_r=</a> 2026-06-25T18:54:20Z https://nostr.now/nevent1qqsqwjgfmvd03zdy3h8793yas44jj3wneys52m6aeqw0aaxs9wmg0hczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82qkgpn5 Just stop using LastPass already, folks.<br/><br/><a href="https://blog.lastpass.com/posts/klue-supply-chain-incident-and-lastpass-response">https://blog.lastpass.com/posts/klue-supply-chain-incident-and-lastpass-response</a> 2026-06-24T16:06:50Z https://nostr.now/nevent1qqst7qrcndr6zaf40qvzug3mgm9unjvgdfu6fdpu3plgy9lwuh0awyszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82en3uhf RE: <a href="https://mastodon.social/@hrbrmstr/116798912369388425">https://mastodon.social/@hrbrmstr/116798912369388425</a><br/><br/>If anyone knows anyone @ Cogent, their main page is delivering malware.<br/><br/>Yay?<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1jk24fstdlsk2l07qawvaj32udwqmkm07gthqm7ekr3pwyq8p33vqgwqgu4" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1jk2…qgu4</a></span><br/> </div> <a href="https://urlscan.io/result/019ef3fa-3677-7764-a7bd-04d558aeeed3/">https://urlscan.io/result/019ef3fa-3677-7764-a7bd-04d558aeeed3/</a><br/> <img src="https://files.mastodon.social/media_attachments/files/116/798/907/865/750/668/original/3bfe1f5293aab39b.png"> <br/> </blockquote> 2026-06-23T10:20:25Z https://nostr.now/nevent1qqsft925c9klct90hlqwhxweg4wxhqdmdhly9msdlvmpcshzqrscckqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82f77yru In reply to <a href='/nevent1qqsymcgs5jdknzdmgeyp34xstqgyhaaktev6a8krzd8ncmpvqzp7ydc64t4ql'>nevent1q…t4ql</a><br/>_________________________<br/><br/><a href="https://urlscan.io/result/019ef3fa-3677-7764-a7bd-04d558aeeed3/">https://urlscan.io/result/019ef3fa-3677-7764-a7bd-04d558aeeed3/</a><br/> <img src="https://files.mastodon.social/media_attachments/files/116/798/907/865/750/668/original/3bfe1f5293aab39b.png"> <br/> 2026-06-23T10:19:26Z https://nostr.now/nevent1qqs9uaeqwy4z9qdngcj2629qshq8mgv7wshdemvuer77tpc7fvsrp9gzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82y94zws In reply to <a href='/nevent1qqs03epnql3g5geya69apn0hzvtl75jr0e8lzrg69c4rup3cxm4xmpga7r4d6'>nevent1q…r4d6</a><br/>_________________________<br/><br/>what if i do not, in fact, hate monday? 2026-06-22T11:24:37Z https://nostr.now/nevent1qqs95s0xz9dvva5gzacp4nph3nqpujcdzy6t307xqq2upu9w0yqkrjqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82579z5l Sadly, this was a waste of $ <a href="https://www.fbi.gov/news/stories/inside-the-fbis-kinetic-cyber-range">https://www.fbi.gov/news/stories/inside-the-fbis-kinetic-cyber-range</a> 2026-06-13T22:58:41Z https://nostr.now/nevent1qqs9xchrrrnyf0e85439zug9gj6k3uay2xdff4976udrk90ezzry47czypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82dmfved This is not a position @ Censys, but if you know suricata and like linux, scripting, orchestrating dataflow, and can handle &#34;infrastructure&#34;, def DM me for my Signal (b/c nobody shld put sensitive stuff in mastodon DMs).<br/><br/>gregarious junior/mid-level encouraged (it&#39;s a great org with lots of steel sharpening steel type of team)<br/><br/>not a yuge org, too, so you won&#39;t get &#34;lost&#34;. 2026-06-12T21:11:28Z https://nostr.now/nevent1qqsvz0a8ggmt6rjytau5448ldczkpx62ga5j072t45ch7n5s5rfngngzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg826t5v63 In reply to <a href='/nevent1qqswun9t8sx8gypzh96tkrqqxthudunnajnmcz37mz879y5m55jv42qy7tnpf'>nevent1q…tnpf</a><br/>_________________________<br/><br/>Some good extended intel from <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1eljy6pstefa46zvhcq4agjjshfjcjgvdndglyujlf7edgf4mpujshwweay" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>HoneyLabs</span> (<span class="italic">npub1elj…weay</span>)</a></span> and my org <a href="https://git.sr.ht/~hrbrmstr/gists/tree/main/item/2026/asn215540-report/README.md">https://git.sr.ht/~hrbrmstr/gists/tree/main/item/2026/asn215540-report/README.md</a> 2026-06-10T00:46:00Z https://nostr.now/nevent1qqsyjd0dfm22daxuzdps4eyg3cnutwtjdxhqa7zkvfyr2zgy69xerkgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82mltf5k In reply to <a href='/nevent1qqs8yrrsslada2vcrm8sc8243an47esdpm9glck3kj9emaux764cymcuhm3fr'>nevent1q…m3fr</a><br/>_________________________<br/><br/>given most incident response jaunts in enterprises these days end up with someone saying &#34;Well, we&#39;re F&#39;d, lads!&#34; it def seems appropro. 2026-06-09T14:59:48Z https://nostr.now/nevent1qqsd3uxj6nheh7jfwvwg4hzfr5heat5qezdg6vy988fk0pkumxgxzcszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82nwu7u5 Well, they never replied to the &#34;let me in&#34; request (apart from automation), but my personal Anthropic account definitely has been whitelisted to let Claude&#39;s models perform cybersecurity ops. And I can now see why they put the restrictions in place for the general public O_O. 2026-06-09T11:08:26Z https://nostr.now/nevent1qqsyx3ssqu2un8qwuqe5v4fjlqfp68tmy5kymrwwwchnqaslm2hz5xqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82wxfwae Get your MDM&#39;s ready before loading the macOS 27 beta (I will never be referring to it as &#34;Golden Gate&#34; or &#34;GG&#34; — it&#39;s a dumb name).<br/><br/>Why does my Spidey-sense say Apple is gonna introduce an&#34;AI&#34; subscription tier for the Home app at some point in late `26 or early `27?<br/> <img src="https://files.mastodon.social/media_attachments/files/116/719/731/823/038/253/original/f0b4ac94c6721075.png"> <br/> <img src="https://files.mastodon.social/media_attachments/files/116/719/742/871/568/709/original/4ec8dc2097e3c6e2.png"> <br/> 2026-06-09T10:48:10Z https://nostr.now/nevent1qqszedpalt6s8t5jjza6n2jwwlq5w5h9jedwd8cnrzlmvpp4q75y2wgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82f9yth3 In reply to <a href='/nevent1qqsp6c2cf6m92vk2xuz8et97vwkcfqddl26zyzevvgpr60ssp3eh6hcc3y36c'>nevent1q…y36c</a><br/>_________________________<br/><br/>lynx pulls and displays the contents in &lt;1 second<br/> <img src="https://files.mastodon.social/media_attachments/files/116/699/363/925/869/417/original/da342b10798ec333.png"> <br/> 2026-06-05T20:23:09Z https://nostr.now/nevent1qqsp6c2cf6m92vk2xuz8et97vwkcfqddl26zyzevvgpr60ssp3eh6hczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82w5gyhg In reply to <a href='/nevent1qqs8hdt3funuqhh76zy60zhtgve3lemp982290afg444arcd3mewz4sg5ghd2'>nevent1q…ghd2</a><br/>_________________________<br/><br/>I know you eventually got the data but they failed their own UX tests.<br/> <img src="https://files.mastodon.social/media_attachments/files/116/699/326/302/555/968/original/a977f4296d91ce9a.png"> <br/> 2026-06-05T20:13:39Z https://nostr.now/nevent1qqs0z90guu4c0mvn8ftul0yuwus7llg9klj49j2ga9mmepxt89e6rhczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82zfqt2d In other news, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1hx29keg2wayk9jyl74enf7hx3sc2j6s5q8aqultlj4zd2jf9gntsqdpzgz" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Mary Beth Rudis</span> (<span class="italic">npub1hx2…pzgz</span>)</a></span> has officially put up with me for ~36 years as of today 2026-06-05T13:04:56Z https://nostr.now/nevent1qqsd05ty64kcluv8m3tmtjysdpsqss606se4y88evj9v7dkj93ry03szypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg828exk69 <a href="https://www.anthropic.com/news/AI-enabled-cyber-threats-mitre-attack">https://www.anthropic.com/news/AI-enabled-cyber-threats-mitre-attack</a> 2026-06-04T08:01:19Z https://nostr.now/nevent1qqsd3ktdpfkju9nfd45ttds75zymnpqjnml2dymn6a7je05jvaq79zczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg828dq8q2 virtually all the (massive) nasty telnet traffic hitting the janky fleet is coming from 93.123.72.166 in the past 24 hours. it&#39;s…alot.<br/><br/>block that thing 2026-05-13T16:36:10Z https://nostr.now/nevent1qqs036axugqt2ez8fmqa0c2l74j2sudhxvreatjlamsrhucjlhdwnngzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82yn8f86 In reply to <a href='/nevent1qqs903wwanyy9ns0at3zfqmnvy7nxcncu9kg9e7mw6fuv60wt2uaz3sxf9rmy'>nevent1q…9rmy</a><br/>_________________________<br/><br/>Given the $ a certain former employe laid out for their SOAR acquisition, there def was gold made from straw at one point. 2026-05-11T16:00:02Z https://nostr.now/nevent1qqsdxvgyghe9qtcj6hw92th6q598q440yzvxs6s6efgagmmk0tynkwczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82mpcvpc In reply to <a href='/nevent1qqs2m85xn4dapl308werxmnzc28g04t3kjnmextkyp8ktwec795ykhsa93lsh'>nevent1q…3lsh</a><br/>_________________________<br/><br/>The SOAR folks also used to give me looks when I said &#34;Oh, IFTTT with pre-configured cyber APIs&#34;. 2026-05-11T15:58:00Z https://nostr.now/nevent1qqsrarwmjza8clq23gw86t6s52rzmkutennv9hudlhjlfe46d3qrulgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg826jasqc I don&#39;t feel sorry for any of these people <a href="https://www.bloomberg.com/news/articles/2026-05-07/cloudflare-to-cut-one-fifth-of-workers-in-move-to-ai-first-model">https://www.bloomberg.com/news/articles/2026-05-07/cloudflare-to-cut-one-fifth-of-workers-in-move-to-ai-first-model</a> 2026-05-07T21:44:10Z https://nostr.now/nevent1qqsv8r3nmkmu2fqe4qtu5hejrfaj5fajyvzmjafys923apj4ph33q6czypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82rehygm In reply to <a href='/nevent1qqs9sednuvrlvr6k6xahlrg3zhjntxtfcm5v9xvh93nt7kcj6csgavgqs35dj'>nevent1q…35dj</a><br/>_________________________<br/><br/>I&#39;ve seen actors rotate through scads of JA4t and JA4h in a single campaign b/c so much is under their control.<br/><br/>They are decent to use when dealing with C-lister attackers, but a giant problem that coming for us all is that real (i.e., not mirai-users) attackers are migrating to sitting behind residental proxies. And, even some mirai users are doing that too. Then the ciphers, 4t and 4h hashes are only good at telling you &#34;yep! residential proxies!&#34; 3/ 2026-05-07T13:29:41Z https://nostr.now/nevent1qqs9sednuvrlvr6k6xahlrg3zhjntxtfcm5v9xvh93nt7kcj6csgavgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg826qqa8l In reply to <a href='/nevent1qqsvctzh6s863cumau2fkn5qgqshtr9pxfkgrfcmhm7v4ftcl58kjeg2a20gy'>nevent1q…20gy</a><br/>_________________________<br/><br/>They end up being _an_ indicator, but even groups of them together rly shld be used with other attributes for any type of clustering IMO.<br/><br/>Then there&#39;s the fact these are pretty much only good as hunt IoCs, not block or detect IoCs b/c too much is under attacker control, and publishing any set of JA4s in public tips them off and the good ones can and do tweak them (the problem is not as terrible as JA3, but it&#39;s up there). 2/ 2026-05-07T13:27:18Z https://nostr.now/nevent1qqsvctzh6s863cumau2fkn5qgqshtr9pxfkgrfcmhm7v4ftcl58kjegzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8234racq In reply to <a href='/nevent1qqsvwrvd67tp2gzhhptnwrtpga0xpdmeq5u87nf8zyu0ps4acs25u3cxtzm4g'>nevent1q…zm4g</a><br/>_________________________<br/><br/>gosh i have alot to say on this. first, &#34;we&#34; (back at the old place) tried to convince someone to go with constant length vectors vs daft delimited strings.<br/><br/>we also noodled (but never implemented) creating vector representations for each of the hashes (not just the TLS one). For reasons I can&#39;t blather abt off Signal, we didn&#39;t. It is a good idea tho, Dave.<br/><br/>There are def other issues. You brought up one (hash convergence b/c of tooling). 1/ 2026-05-07T13:24:25Z https://nostr.now/nevent1qqs0qtwjqae8mztxzkx36x90s43yj0r2uekj6h5h52jkdctdxzlv4kgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82wgty03 Strongly suggest blocking these subnets:<br/><br/>- 213.177.179.0/24<br/>- 213.209.159.0/24 2026-05-07T12:54:26Z https://nostr.now/nevent1qqs02zm528s0na3mc7zk6vju55rfqvcj6gt6cg27k8zvj9yl9jqrkxgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82up79en Gosh this was a (recent) first-hand lived experience.<br/><br/>I&#39;m dismayed it&#39;s more prevalent than I hoped.<br/><br/><a href="https://nooneshappy.com/article/appearing-productive-in-the-workplace/">https://nooneshappy.com/article/appearing-productive-in-the-workplace/</a><br/> <img src="https://files.mastodon.social/media_attachments/files/116/529/457/774/944/121/original/5c824989263e0fce.png"> <br/> 2026-05-06T20:14:11Z https://nostr.now/nevent1qqs0mvk5my3mlvxpjc3wst2j40nhnuke6lltta0wkzke40ku8zf5w6szypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82zght52 smoke&#39;m if you got&#39;em GH users b/c you can&#39;t handle PRs until 15:00 ET today.<br/><br/><a href="https://www.githubstatus.com/">https://www.githubstatus.com/</a><br/> <img src="https://files.mastodon.social/media_attachments/files/116/528/644/317/392/316/original/044676470bcb3953.png"> <br/> 2026-05-06T16:47:01Z https://nostr.now/nevent1qqspr2gram96s47ptxag5ml88tn9cc57dwl9ml79vesrmpxx8wscq0czypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82pf2ta4 My janky little sensor fleet is picking up a really odd spike in HTTP requests at very &#34;non-ubiquitous&#34; HTTP paths.<br/><br/>I do not like where this week is heading. 2026-05-06T00:06:40Z https://nostr.now/nevent1qqstgs9y5xeggra8kujdjgzhmnkh58sdsmmc2ktjmu72tsn86g4575szypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82kwnzln In reply to <a href='/nevent1qqsghtcu5j73auap6086r2995f5w5pgjwy5ln6xg7s8qgga9hvcnmygwqz289'>nevent1q…z289</a><br/>_________________________<br/><br/>So <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ufhq8lds5sm5rk829u4wumv0djuz7yd7f3dg6k4kcnpy2cv806pqd2mjqv" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Cloudflare</span> (<span class="italic">npub1ufh…mjqv</span>)</a></span> is literally repeatedly punching themselves in the face. Got it. 2026-05-05T15:50:48Z https://nostr.now/nevent1qqsfkzanx7t38ukajhdkx3yghkp6qhx596rrj2cvwd7cs30k5nfhx0gzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82vayszw My janky sensor fleet caught these IPs slinging what looks to be the same &#34;nuclear&#34; Mirai-variant we saw for the telnet/cPanel campaign last week. This time over React2Shell payloads.<br/><br/>87.120.191.93<br/>45.205.1.16<br/>80.75.212.14<br/><br/>2026-03-21 to 2026-04-18 2026-05-04T14:24:05Z https://nostr.now/nevent1qqsfy07jmenjqegea9z9jmc2haxwwt733pjd5lf2v8sh9xdcpy37g2qzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82yum3xy In reply to <a href='/nevent1qqs95fvx6mcghem339kg250ex6dj9v40hu5lcfnjgyxat8dpc0f60rgsvw7qh'>nevent1q…w7qh</a><br/>_________________________<br/><br/>The root cause chain is damning. No file type restrictions on inbound support chat attachments. No automated EDR coverage reconciliation against the identity provider. Okta FastPass let the compromised device satisfy MFA on its own. The initialization codes — functionally equivalent to the certificates themselves — were visible in every proxied support session because the support portal was never threat-modeled as an attack surface. &#34;Privileged access&#34; stopped at the HSM boundary. (3/5) 2026-05-04T11:57:01Z https://nostr.now/nevent1qqsqccdzehww6dw62ymh08ryat2x5frd4aag3xerxzd369g4rm3q37gzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg826a5ats In reply to <a href='/nevent1qqsfy07jmenjqegea9z9jmc2haxwwt733pjd5lf2v8sh9xdcpy37g2qxlk4y6'>nevent1q…k4y6</a><br/>_________________________<br/><br/>Certificate authorities exist for one reason: to be the trust anchor everyone else depends on. They should have the most rigorous endpoint security, the tightest access controls, the most paranoid threat modeling of any organization in the ecosystem. Instead, DigiCert got burned by the same failures you&#39;d find in a mid-market company that just bought its first SIEM. (4/5) 2026-05-04T11:57:01Z https://nostr.now/nevent1qqs95fvx6mcghem339kg250ex6dj9v40hu5lcfnjgyxat8dpc0f60rgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82m7uf4p In reply to <a href='/nevent1qqsq8669xch4d9krepg7wev4k8aau03j0pv6ez9ust85ul0z9nqrjvsugttum'>nevent1q…ttum</a><br/>_________________________<br/><br/>DigiCert — a certificate authority, the entity you&#39;re trusting to anchor your entire chain of trust — got compromised because a support analyst opened a .scr file from a chat session. In 2026. CrowdStrike was misconfigured on one endpoint and completely absent on another. Nobody noticed the second compromise for 10 days. The attacker grabbed EV code signing initialization codes and walked out with 60 certificates. Zhong Stealer, signed and shipped. (2/5) 2026-05-04T11:57:00Z https://nostr.now/nevent1qqsq8669xch4d9krepg7wev4k8aau03j0pv6ez9ust85ul0z9nqrjvszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82hnhp2m Cow-orker <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1t37zfr5u2dr8u5kyl5y3fqpfp379ks03qw79nkemhrjj9dvr5d8sd694uq" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>mle✨</span> (<span class="italic">npub1t37…94uq</span>)</a></span> shared this ~2-week-old DigCert incident report today (i blame my Q1 $WORK chaos for me missing it): <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=2033170">https://bugzilla.mozilla.org/show_bug.cgi?id=2033170</a>… (1/5) 2026-05-04T11:57:00Z https://nostr.now/nevent1qqsy5dnxaewwcvpxs6l2rry40a9epuj96lhw95pj4f78ur05hhf8x9gzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82wn3n2a Welcome to <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ugxrmehj7udzfmdmemxjwql4uj8yft97lp052em9lj30njuz9teqv45dtm" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Censys</span> (<span class="italic">npub1ugx…5dtm</span>)</a></span>, <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1p03fezkj06uy70fp8d4vvmlcgl47grjl8rxk4hs5vkn2l0zuu3jsczq09v" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Glenn 📎</span> (<span class="italic">npub1p03…q09v</span>)</a></span> !! 2026-05-04T10:38:55Z https://nostr.now/nevent1qqs9rhgxm7as8dft0pe90fa0jl03s9kdf0qpdm9yagzr0yemkqrygdqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8298v3df RE: <a href="https://hachyderm.io/@sash/116487152870315679">https://hachyderm.io/@sash/116487152870315679</a><br/><br/>This is some ace detective work and another tale of why we&#39;re all so daft to trust using the internet for anything but cat memes.<br/><br/>What else is horribly broken in RIPE and other core infrastructure providers? 2026-04-29T10:16:38Z https://nostr.now/nevent1qqsvdt4dlftmy9c9j0wxsvkl8e7fkuslqunjdrw3q5q32guteqlt3sgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82th6mth In reply to <a href='/nevent1qqsr9gufwzzq2axvspfzn4a6ruphcz69k38lq06l9wmd7q4m0lkr5mqlgxcqx'>nevent1q…xcqx</a><br/>_________________________<br/><br/>Sadly, a very large % of the residental or mobile (b/c they takeover android devices too) proxy nodes are nodes that the user did not agree to being part of the network. They downloaded a free app or chrome extension and devs of those apps/extensions slide an API in there to make money from the res proxy overlords.<br/><br/>Policymakers and downstream law enforcement across the board are woefully behind. 2026-04-28T10:53:37Z https://nostr.now/nevent1qqspx9yg7y99mv0xpepr964zte4dremklxklmaq6zhgv4mr4z4p9y6qzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8207xu8c RE: <a href="https://mastodon.social/@eliocamp/116476829259785067">https://mastodon.social/@eliocamp/116476829259785067</a><br/><br/>so, so many problems<blockquote class="border-l-05rem border-l-strongpink border-solid"><div class="-ml-4 bg-gradient-to-r from-gray-100 dark:from-zinc-800 to-transparent mr-0 mt-0 mb-4 pl-4 pr-2 py-2">quoting <br/><span itemprop="mentions" itemscope itemtype="https://schema.org/Article"><a itemprop="url" href="/note1q5h3ztkqmq0hnwq39kjm29m2ym85hl47m84h6c6d4xl8kw5eq74sug5ays" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1">note1q5h…5ays</a></span><br/> </div> These people have problems.<br/> <img src="https://files.mastodon.social/media_attachments/files/116/476/829/035/562/885/original/bf222cbff953ea5d.jpeg"> <br/> </blockquote> 2026-04-27T13:16:47Z https://nostr.now/nevent1qqsvk2s4q6e2n76kclfpal4lv9shxdpzmy6nnd3phr8wmqju50k7mqszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82pv508q &#34;AI&#34; is going great! <a href="https://archive.ph/T3LU6">https://archive.ph/T3LU6</a><br/> <img src="https://files.mastodon.social/media_attachments/files/116/476/286/164/191/112/original/388a96d317aacff6.png"> <br/> 2026-04-27T10:51:41Z https://nostr.now/nevent1qqsz0mrqlhrp75egqtaf4fug2rvctk8sx89trc5xld65g2xdhwdzkmgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg824kel9k Vercel done gone and got breached <br/><br/><a href="https://vercel.com/kb/bulletin/vercel-april-2026-security-incident">https://vercel.com/kb/bulletin/vercel-april-2026-security-incident</a><br/><br/><a href="https://xcancel.com/DiffeKey/status/2045813085408051670#m">https://xcancel.com/DiffeKey/status/2045813085408051670#m</a> 2026-04-19T15:03:10Z https://nostr.now/nevent1qqs0l4pl58vw66m3g05wzwdwlmsc52g0mxpfqgdt8jvj27duq072uyszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82kcxep4 I am late to the 0900 time, but actually sleeping kind of throws off the &#34;todo&#34; schedule a bit.<br/><br/>Today, I start as a Distinguished Engineer @ <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1ugxrmehj7udzfmdmemxjwql4uj8yft97lp052em9lj30njuz9teqv45dtm" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>Censys</span> (<span class="italic">npub1ugx…5dtm</span>)</a></span> !!!!!<br/><br/>More info on the &#34;what&#34; I&#39;ll be doing when a certain partner in crime crosses the threshold in a few weeks. #GuessWho 2026-04-13T14:04:08Z https://nostr.now/nevent1qqsg0pwr574qg6lwmckycht87gjr6xsj5h9l6vcpkylwt5pvdt6gf5gzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg828dmxhd Most of you have no idea how nice it is to not have to care about &#34;emergent CVEs&#34; for a while. Potentially for many-a-month. 2026-04-11T13:35:22Z https://nostr.now/nevent1qqsq5s04zl8xqflegavd5qp2y0tuw766pa70slznzzc2nz9kgh5frdczypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82lrvvsf $ rm -rf $CURRENT_GIG<br/><br/>$ sleep $(( $(TZ=&#34;America/New_York&#34; date -d &#34;2026-04-13 09:00:00&#34; +%s) - $(date +%s) )) &amp;&amp; echo $NEW_GIG 2026-04-10T22:42:27Z https://nostr.now/nevent1qqswcyjpzzyeyhx79lq8crvqtnaur23zdmxagt8qfltw62cyse560gqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82jcnu7k RE: <a href="https://tldr.nettime.org/@remixtures/116075410883057361">https://tldr.nettime.org/@remixtures/116075410883057361</a><br/><br/>these need to be Ray Banned, everywhere.<br/>nostr:note1x6y9uyn8lnfpedlr5wsqmex5egtwcr77kamn2gwhk8sezdmjhuaq8d29e9<br/> 2026-02-16T20:52:27Z https://nostr.now/nevent1qqs9dk2v57j7dkd8s2kwu2g8zcvrrljwghy7jxa4xzt7vemvvx3kfvszypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82mcx8aa Do not build mission-critical processes on folks who vibe code infrastructure architecture and replace SREs with SRAgents.<br/> <img src="https://files.mastodon.social/media_attachments/files/116/013/341/145/801/188/original/cd3119594489ccaf.png"> <br/> 2026-02-04T16:39:53Z https://nostr.now/nevent1qqsvkgu3dum2m57uuase9npldwadasxneu5ntcmsjuyjv4f62rn5mpqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82qasyqa In reply to <a href='/nevent1qqsdmyardkcaqql9y6rtttg4wj9zk7ye0ncylk0tdwavgkj4wku5vycmv0c90'>nevent1q…0c90</a><br/>_________________________<br/><br/>M I C H A E L 2026-01-20T21:34:57Z https://nostr.now/nevent1qqsfrpzcx39l25yh0q0ctf4jvfadkzf78lzlu3ua4zdhejy6kpygk6czypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82vk0hz3 GO MAINE! <span itemprop="mentions" itemscope itemtype="https://schema.org/Person"><a itemprop="url" href="/npub1sancp758qz9pm2yq4yd2nwqdvhkeuekwd5kk8g4hylvkfxfcf3tqs5jgxu" class="bg-lavender dark:prose:text-neutral-50 dark:text-neutral-50 dark:bg-garnet px-1"><span>DoomsdaysCW</span> (<span class="italic">npub1san…jgxu</span>)</a></span> <a href="https://kolektiva.social/@DoomsdaysCW/112055636928799044">https://kolektiva.social/@DoomsdaysCW/112055636928799044</a> 2026-01-18T19:57:52Z https://nostr.now/nevent1qqsv5phtdxs2t4krs7pcakuwmkd9erenk3hm2taspqmslr7nj3w8yxqzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg8208eq57 In reply to <a href='/nevent1qqsz2j350zuzws7strtf96vysww4tutfxxn7h75jhvrmkhvdepjasjgn90n4g'>nevent1q…0n4g</a><br/>_________________________<br/><br/>…<br/><br/>The distinction between /api_key* and /apikey* paths suggest different target frameworks or APIs. Actors scanning for &#34;both&#34; are running more comprehensive wordlists. The January 2026 spike in &#34;has both&#34; activity indicates increasing sophistication in the scanning approach.<br/><br/>If anyone rly wants all the paths they tried LMK and I&#39;ll shove them in our public IoC GitHub repo.<br/><br/>—FIN 2026-01-12T20:42:25Z https://nostr.now/nevent1qqsz2j350zuzws7strtf96vysww4tutfxxn7h75jhvrmkhvdepjasjgzypec5dtlayrh2rngxc3sup98egh9lqglpngewtzc24rw83z9neg82627ujz In reply to <a href='/nevent1qqsgx8v5zvlx49jec8aqe969r4ygvlwvh0d7e4978cx9mxm939w3ywq25za73'>nevent1q…za73</a><br/>_________________________<br/><br/>…<br/><br/>6. Multi-ASN Scanner <br/><br/>43 unique IPs across 12 different ASNs including Contabo, DigitalOcean, Microsoft Azure, and others. The JA4H fingerprint is shared across these diverse sources, indicating either a widely distributed tool/framework or credential sharing among operators. The 3-header minimal fingerprint suggests a simple HTTP library.<br/><br/>… 2026-01-12T20:41:42Z