Nostr notes by shellsharks

Yeah. Pretty rude. 😄😡

2026-10-27T20:06:11Z

In reply to nevent1q…l0xa
_________________________

Yeah. Pretty rude. 😄😡

First it was the credit-jostling that we all saw happen with ...

2026-10-27T14:20:56Z

In reply to nevent1q…02jg
_________________________

First it was the credit-jostling that we all saw happen with PHP4Shell, and now everyone seems to want to self-label this Brotli issue. Answering the question no one was asking… “can we make security even MORE confusing and frustrating??”

wistful sigh… simpler times…

2026-10-27T14:18:33Z

In reply to nevent1q…xc9m
_________________________

*wistful sigh*… simpler times…

CVE-2026-11497 having a bit of an identity crisis… - Imperva ...

2026-10-27T14:11:09Z

CVE-2026-11497 having a bit of an identity crisis…

- Imperva coined the initial term, “Node2Shell” (https://www.imperva.com/blog/node2shell-from-brotli-data-to-remote-code-execution/)
- Aikido tried to turn it into “HTTP2Shell” (https://www.aikido.dev/blog/python-packages-vulnerable-node2shell-brotli-cve-2026-111497)
- Not satisfied with either of those, someone came up with “Broccoli2Shell” 🥦 (https://broccoli2shell.com)
- And now, super late to the game, humorless Tenable has decided to label it “Brotli2Shell” (https://www.tenable.com/blog/brotli2shell-frequently-asked-questions-for-google-brotli-decoder-cve-2026-111497)

Same vuln, 4 different names (so far). Yeesh…

Recently discovered this https://2shell2furio.us/, poking a bit ...

2026-10-25T13:46:00Z

Recently discovered this https://2shell2furio.us/, poking a bit of fun at all the "-2shell" named vulns (there's quite a few not even listed there yet if you search on https://vulnerability.garden/). But "shell" isn't even the most used vuln-naming trope. Taking the top 3 spots is "bleed", "jack" & "pwn" 😄

- "bleed": 45
- "jack": 37
- "pwn": 33
- "shell": 30
- "bad": 30
- "leak": 29
- "ghost": 28
- "dirty": 19
- "fail": 17
- "shadow": 14
- "break": 13
- "root": 12
- "hammer": 12

Oh I got something for ya 😄. All your "shell"-ey vulns ...

2026-10-25T12:11:38Z

In reply to nevent1q…4qc4
_________________________

Oh I got something for ya 😄. All your "shell"-ey vulns in one place: https://vulnerability.garden/

I need my feed to just be pics like this. 🧡

2026-10-24T15:57:44Z

In reply to nevent1q…r82f
_________________________

I need my feed to just be pics like this. 🧡

Welcome! Maybe this li’l packet of stuff can help you explore a ...

2026-10-23T12:53:41Z

In reply to nevent1q…as6t
_________________________

Welcome! Maybe this li’l packet of stuff can help you explore a bit 🤗 https://shellsharks.com/notes/2025/01/10/welcome-to-the-fediverse

😄

2026-10-22T22:47:18Z

In reply to nevent1q…v793
_________________________

😄

Yeah. This this this. Google and OpenAI out here crediting ...

2026-10-22T17:43:08Z

In reply to nevent1q…cnga
_________________________

Yeah. This this this. Google and OpenAI out here crediting themselves for finding the vuln because their models were used as part of the process is only a hair less absurd than the manufacturers of the chair Ryan sat on while he was expertly crafting this exploit taking credit for php2shell as well. Hell, get everyone involved taking credit! The electric company for providing power to his computer, bakery for providing Ryans breakfast that morning, etc… etc…

I read Calif’s (i.e. Ryan Austin’s) writeup on PHP2Shell ...

2026-10-22T16:45:10Z

I read Calif’s (i.e. Ryan Austin’s) writeup on PHP2Shell (https://calif.io/php2shell/) and come away feeling like an absolutely uncreative, and super noob infosec person. The perfect chaser, and a great way to feel better about myself (at least entropically speaking 🤭), is to mosey on over to eMudhra’s press release feed (https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business). I guess we’re pretty much all somewhere between the two… 🤗

Yeah, agreed. But damn, it's a bit scary how large a subset ...

2026-10-22T16:32:35Z

In reply to nevent1q…j2d5
_________________________

Yeah, agreed. But damn, it's a bit scary how large a subset of humanity fits the BS'ers category 🤦‍♂️

"I can't believe AI is replacing actual humans" ...

2026-10-22T16:26:17Z

In reply to nevent1q…e4xn
_________________________

"I can't believe AI is replacing actual humans"

*Watches this clip*

"Actually, yeah... maybe humans are cooked."

Perfect. Shit/shame-posters of the united Fediverse… ...

2026-10-22T15:58:42Z

In reply to nevent1q…6ns5
_________________________

Perfect. Shit/shame-posters of the united Fediverse… ASSEMBLE!!!!

Lol exactly. My 3yo cracked their key watching an episode of ...

2026-10-22T15:57:24Z

In reply to nevent1q…a6sw
_________________________

Lol exactly. My 3yo cracked their key watching an episode of number blocks (https://www.youtube.com/watch?v=Wafr8h4EsXg)

This is made even sweeter by the fact that eMudhra specifically ...

2026-10-22T15:52:47Z

In reply to nevent1q…7yyf
_________________________

This is made even sweeter by the fact that eMudhra specifically calls out “social media amplification” and its resulting *disproportionate scrutiny* of their SSL/TLS practices as reasons for completing exiting the PKI game entirely. https://emudhra.com/en/press-release/emudhra-to-exit-global-ssl-tls-certificate-business

I mean, congrats Fedi team (shitposters unite!). Y’alls memes made the Internet a bit safer with eMudhra now outta the game. 🫡

Makes me wonder who else we can shame into quitting…

Shoutout to everyone continuing to meme the eMudhra thing, ...

2026-10-22T15:46:09Z

Shoutout to everyone continuing to meme the eMudhra thing, despite there being a newer, hotter (as in flaming garbage dump hot) infosec disaster (i.e. PHP). I love you guys. 🧡 #never4get

Lol, their screw up was so absurdly and comically atrocious that ...

2026-10-22T15:40:09Z

In reply to nevent1q…9hxy
_________________________

Lol, their screw up was so absurdly and comically atrocious that they’re lopping off that part of the business, much like a hand that got bitten by a zombie, so that it can’t further taint the rest of their company? They also try to “no-biggie” the whole thing by saying they make no money off of it anyways? Too late friendos... I think the taint has already spread. But as we’ve learned with other security disasters… (crowdstrike taking strays here) …. You can always bounce back =)

Right? Honestly don’t know what I’m looking at half the time ...

2026-10-22T15:32:54Z

In reply to nevent1q…gsz9
_________________________

Right? Honestly don’t know what I’m looking at half the time right now… I’m lucky in a way that in my role I’m not too affected by any of this (no absurd work spike) so I get to be a spectator, drop memes, make jokes and such. It’s fun seeing Fedi (and infosec social in general) come alive when stuff like this comes about (last time there was this level of energy was either the crowdstrike debacle or the xz/JiaTan situation).

I think we can all agree that the ongoing PHP situation ...

2026-10-22T15:16:19Z

I think we can all agree that the ongoing PHP situation (#php2shell) is pure chaos. Sites being pulled down, everyone scrambling to produce a working exploit, botched disclosure, tons of half-assed exploitation attempts in the wild, etc. But my favorite part of this whole mess has been watching everyone and their mom trying to claim some bit of credit for it all... read on if you want a bit of a laugh (or you just want to try to make sense of it)

https://shellsharks.com/php2chaos

#infosec #cybersecurity

They make a lot of claims here about how they’re helping out… ...

2026-10-21T17:46:08Z

In reply to nevent1q…s3jn
_________________________

They make a lot of claims here about how they’re helping out… https://openai.com/index/coordinated-disclosure-of-critical-vulnerabilities/. But honestly it just seems like their models are being used for offense, and not so much proactive defense =/.

🥳 time to update https://istheinternetonfire.com with ...

2026-10-21T13:07:37Z

In reply to nevent1q…qqdz
_________________________

🥳 time to update https://istheinternetonfire.com with #PHPocalypse too Jan Schaumann (npub1z6e…ehl4)

Actual footage of eMudhra PKI folks... Crazy right? ...

2026-10-21T12:43:22Z

Actual footage of eMudhra PKI folks... Crazy right?

Two more nominations for biggest security woopsie woopsie of the ...

2026-10-21T12:31:39Z

Two more nominations for biggest security woopsie woopsie of the last 10 years...

- WannaCry 😭
- Log4J 🪵
- Solarwinds ☀️
- clownstrike 🤡
- xz (shoutout to Jia!) 😎
- 4 🤦‍♂️
- like... all of PHP

Congrats to all the nominees!

Calif supposedly has a poc dubbed "php2shell" or ...

2026-10-21T12:19:14Z

In reply to nevent1q…xull
_________________________

Calif supposedly has a poc dubbed "php2shell" or something. A more apt name is seemingly php2jesusfuckingchrist 😬

Looking at PHP: "My god, it's full of ...

2026-10-21T12:15:52Z

In reply to nevent1q…2af7
_________________________

Looking at PHP: "My god, it's full of <str>stars</str> attack surface!"

"4Bleed" 4️⃣🩸

2026-10-20T22:21:43Z

In reply to nevent1q…gv5q
_________________________

"4Bleed" 4️⃣🩸

There's also xpath scraping magic you can do to create an RSS ...

2026-10-18T11:58:23Z

In reply to nevent1q…23hj
_________________________

There's also xpath scraping magic you can do to create an RSS feed out of nothing if you were up for such a thing.

https://freshrss.github.io/FreshRSS/en/users/11_website_scraping.html

https://github.com/jareware/xpath2rss

More like... "Bluesky is the only platform not silencing No ...

2026-10-18T02:09:18Z

In reply to nevent1q…zrxu
_________________________

More like... "Bluesky is the only platform not silencing No Kings and other political contents YET"

🤨

Want. Put me on the waitlist.

2026-10-16T20:58:41Z

In reply to nevent1q…jaws
_________________________

Want. Put me on the waitlist.

Shoutout to [@campuscodi](https://mastodon.social/@campuscodi ) ...

2026-10-16T12:03:10Z

Shoutout to [@campuscodi](https://mastodon.social/@campuscodi ) and risky.biz. I went through every (and I mean *every*) newsletter (https://risky.biz/newsletters/) dating back to 2022 to pull out any “named vulnerabilities” that I didn’t yet have in the Vulnerability Garden (https://vulnerability.garden). Despite how thorough I’ve been, adding these throughout the years, I still managed to find just shy of 100 (99 to be exact) new vulns to add to the list. Thanks to Catalin for contributing to the madness! 🪴

"Sithteaming": Like redteaming, but fueled by hate, fear ...

2026-10-15T12:30:40Z

In reply to nevent1q…8mff
_________________________

"Sithteaming": Like redteaming, but fueled by hate, fear and anger.

My personal finance app, which I really like, and has nothing to ...

2026-10-02T01:02:54Z

In reply to nevent1q…wfm0
_________________________

My personal finance app, which I really like, and has nothing to do with Microsoft, is also called Copilot 🤦‍♂️

https://apps.apple.com/us/app/copilot-track-budget-money/id1447330651

Yeah some of these are like... meh. But I'm committed - so in ...

2026-09-19T15:52:14Z

In reply to nevent1q…0lsq
_________________________

Yeah some of these are like... meh. But I'm committed - so in the DB they go 🤷‍♂️

🎯

2026-09-10T12:51:27Z

In reply to nevent1q…xarr
_________________________

🎯

I mean it's just this right? https://browsergate.eu/ ...

2026-09-09T16:07:21Z

In reply to nevent1q…z8da
_________________________

I mean it's just this right? https://browsergate.eu/ 🤦‍♂️

Will be adding. Thanks!

2026-07-18T20:01:11Z

In reply to nevent1q…jd4y
_________________________

Will be adding. Thanks!

Thanks! 🧡

2026-07-12T11:33:32Z

In reply to nevent1q…7p54
_________________________

Thanks! 🧡

📜 Scrolls 46 is out! (I’m back!) ...

2026-07-10T20:43:11Z

📜 Scrolls 46 is out! (I’m back!)

https://shellsharks.com/scrolls/scroll/2026-07-10

Thanks to everyone mentioned below. Their work is featured in this week's issue.

yawnbox :softboy_pride:🔜40C3 (npub1hu0…vz3q) Brennan Kenneth Brown (npub109f…3mc6) dckim (npub1yfe…92ae) [@Notesfromtheroad](https://mastodon.art/@Notesfromtheroad ) Sylvia (npub1q0t…dgvk) heikki (npub1rp5…r7dm) [@jzb](https://hachyderm.io/@jzb ) Billy Wilcosky (npub14cl…nnue) Harry (npub1p34…jr9r) fLaMEd (npub1uk9…xemg) The Hacker‘s Choice (npub1a0s…dmkd) @gurupanguji (npub1eqe…vhyp) readbeanicecream (npub1c99…ljas) Juhis (npub1t2p…53hs) Brennan Kenneth Brown (npub109f…3mc6) Sebastian (npub19j2…slel) heyheymomo (npub1uxq…5dcj) JRT (npub1d4r…k2pv) Kyle Reddoch (CybersecKyle) (npub1puh…vk5s) axxuy (npub1eu4…677w) Joel :casio: :blobcatderpy: 🇲🇽 (npub1x74…ruph) Alex Hyett (npub15h0…lsjv) Stuart 🏳️‍🌈🏳️‍⚧️ (npub109d…cpmt) Andrew Nesbitt (npub1m49…yl0h) mauvehed 🐿️ (KØMVH) (npub1mz8…3kt8) nyan (npub1t9q…r0p6) Meadow Whisper (Natasha L.) (npub1lw8…60jz) newsonaut (npub1tay…f3zn) Soatok Dreamseeker (npub1wfp…w2m9) Pascal (npub1vyg…0gll) Isaac LeFever (npub1w5g…m2hw)

#indieweb #fediverse #infosec #cybersecurity

Once-ler-core

2026-07-10T20:01:54Z

In reply to nevent1q…v2mn
_________________________

Once-ler-core

Here’s a bunch of mine - ...

2026-07-10T19:07:39Z

In reply to nevent1q…h2d0
_________________________

Here’s a bunch of mine - https://shellsharks.com/notes/2024/08/30/favorite-fedi-artists

But if you’re looking for more webrings - I’ve got a bunch ...

2026-07-08T14:47:06Z

In reply to nevent1q…3uem
_________________________

But if you’re looking for more webrings - I’ve got a bunch you can peruse here: https://shellsharks.com/indieweb#webrings

I’m partial to the Webrings I’m in 🤗 - ...

2026-07-08T14:03:46Z

In reply to nevent1q…nq4f
_________________________

I’m partial to the Webrings I’m in 🤗 - https://shellsharks.com/#webrings

Yep. Still the biggest downside of vanilla Masto. It’s beyond ...

2026-07-08T14:01:22Z

In reply to nevent1q…ajq4
_________________________

Yep. Still the biggest downside of vanilla Masto. It’s beyond me why they don’t just allow admins to change this in the settings. Literally no reason not to do this.

cc Eugen Rochko (npub1vl7…f6g0) PLEASEEEEE!

Make sure to stay up on your CPEs! (Continue Posting Excrement)

2026-07-08T13:53:33Z

In reply to nevent1q…5657
_________________________

Make sure to stay up on your CPEs! (Continue Posting Excrement)

Still one of the coolest sites out there. Nice work!

2026-07-07T19:21:53Z

In reply to nevent1q…46qu
_________________________

Still one of the coolest sites out there. Nice work!

Honestly I almost didn’t even get this off the ground, but here ...

2026-07-07T14:44:30Z

Honestly I almost didn’t even get this off the ground, but here ya go, I’m actually going through with >Shark Week 2026.

https://shellsharks.com/sharkweek/2026

It’s just a cheesy thing I do on my site during Shark Week where I try to post something every day. Also, it turns out shark week isn’t until later in July. But F it. It’s going up this week for me.

Enjoy some random stuff from me for a week straight.

🦈 🗓️

Glad you enjoyed it! 🧡

2026-07-06T14:25:31Z

In reply to nevent1q…p6x4
_________________________

Glad you enjoyed it! 🧡

Oh cool! I hope I didn’t come off mean-spirited. But it’s ...

2026-07-06T14:24:03Z

In reply to nevent1q…ukzp
_________________________

Oh cool! I hope I didn’t come off mean-spirited. But it’s great you’ll be posting from your own domain 🧡. Looking forward to seeing more from ya!

Thanks! 🙏 🧡

2026-07-06T14:23:06Z

In reply to nevent1q…7akp
_________________________

Thanks! 🙏 🧡

100% no one uses this. It's a breathtakingly stupid idea. ...

2026-07-05T11:53:54Z

In reply to nevent1q…63gx
_________________________

100% no one uses this. It's a breathtakingly stupid idea. WOW.

I also am happy with the result. That there is some good ...

2026-06-21T06:40:26Z

In reply to nevent1q…v5qr
_________________________

I also am happy with the result. That there is some good webbin'

In one dialog (again, that I didn't ask for and that popped ...

2026-06-21T06:38:52Z

In reply to nevent1q…30nz
_________________________

In one dialog (again, that I didn't ask for and that popped up suddenly as I began to scroll), it is asking me to...

- download their app
- sign up for Medium
- give them my email address
- agree to their ToS
- subscribe to get updates from this person directly to my inbox

Like, chill! I just wanted to read this *one* article and you didn't even let me do that yet... how tf would I know if I wanted to commit this hard yet???

Yeah I rageclose the browser tab when I get this unwanted ...

2026-06-21T06:30:04Z

In reply to nevent1q…5qfq
_________________________

Yeah I rageclose the browser tab when I get this unwanted full-screen pop-up 😩

(No offense to Stuart or this article - I just can't stand Medium and its ilk)

I feel the same. I don't have the time to flesh out why rn, ...

2026-06-21T06:24:23Z

In reply to nevent1q…jr7v
_________________________

I feel the same. I don't have the time to flesh out why rn, but though I like bubbles as it serves as another entry point to the IndieWeb, I don't think it's a good reflection of what it has to offer.

To me, the indieweb shouldn't be a popularity contest, and its best content is often not what's "freshest". I dislike the idea of someone relying exclusively on Bubbles as their way of finding things.

The joys of IndieWeb discovery cannot be algorithmically contained.

Just under 5GB db and 11GB media storage at the moment.

2026-06-19T08:10:32Z

In reply to nevent1q…zmgg
_________________________

Just under 5GB db and 11GB media storage at the moment.

On the grand scale you're probably not wrong. But for me, and ...

2026-06-19T07:05:32Z

In reply to nevent1q…4tpw
_________________________

On the grand scale you're probably not wrong. But for me, and what I use "social media" for, it's been pretty good for 4-ish years. I hardly use socials, even Fedi for "micro-blogging" though. Most everything I want to say is done so on my site. I syndicate here sometimes, but mostly use it to interact with others posts. I've met some cool folks this way and that's all this place has ever needed to be. ✌️

Also Jerry's cool enough 😋. The bars low for humans these days 🤦‍♂️

This is the way.

2026-06-18T00:39:56Z

In reply to nevent1q…c3lt
_________________________

This is the way.

I've always thought this. So they're not only useless but ...

2026-06-18T00:35:17Z

In reply to nevent1q…lczg
_________________________

I've always thought this. So they're not only useless but also just ugly cruft on your posts 💩

Doh! That’s my bad. I found that whole coffee debate thing via ...

2026-06-15T13:22:49Z

In reply to nevent1q…6en4
_________________________

Doh! That’s my bad. I found that whole coffee debate thing via your article and somehow forgot to link it in the original scroll. It’s fixed now. Sorry about that. And I like your blog!

Thanks friend!

2026-06-12T18:32:37Z

In reply to nevent1q…sl54
_________________________

Thanks friend!

🧡

2026-06-12T18:30:27Z

In reply to nevent1q…npyx
_________________________

🧡

Thanks for the assist! 🙌

2026-06-12T18:30:16Z

In reply to nevent1q…fp8g
_________________________

Thanks for the assist! 🙌

Appreciate it!

2026-06-12T18:27:58Z

In reply to nevent1q…du7l
_________________________

Appreciate it!

You’re very welcome! And thanks! 🙌

2026-06-12T18:27:06Z

In reply to nevent1q…kte2
_________________________

You’re very welcome! And thanks! 🙌

Ack probably. I'll fix it when I'm back at my console ...

2026-06-12T15:16:04Z

In reply to nevent1q…qzvw
_________________________

Ack probably. I'll fix it when I'm back at my console 😅

Thanks!

📜 Scrolls vol. 45 is out! ...

2026-06-12T14:47:29Z

📜 Scrolls vol. 45 is out!

https://shellsharks.com/scrolls/scroll/2026-06-12

Thanks to everyone mentioned below. Their work is featured in this week’s edition! 🧡

Doctor M. Popular (npub158d…9kvp) [object Object] (npub1xle…27vc) Pat (npub14q4…3u22) Joost de Valk (npub1344…dgc3) yawnbox :softboy_pride:🔜40C3 (npub1hu0…vz3q) gcve.eu (npub1pna…2y52) @gurupanguji (npub1eqe…vhyp) Jake in the desert (npub1u5z…esha) Andy Baio (npub15x0…2g26) Max Inden (npub15mh…h268) [@ifixcoinops](https://retro.social/@ifixcoinops ) Old Book Illustrations (npub17zw…pctk) [@petrillic](https://hachyderm.io/@petrillic ) [@kev](https://social.catastrophic.horse/@kev ) Stefan Bohacek (npub1kqc…7wgd) [@liztai](https://hachyderm.io/@liztai ) Fractal Kitty (npub1ur9…v3q2) Brennan Kenneth Brown (npub109f…3mc6) ege (npub1uxz…e2r6) @gurupanguji (npub1eqe…vhyp) Cédric Delalande :ruby: (npub1zqh…u8aw) Nicolas Gouny (npub1090…cff7) Chris Silverman 🌻 (npub1asm…646p) Dan (npub1hrf…5zqe) Simon 🐮:spot: (npub1kxh…srr7)

#indieweb #fediverse #infosec #cybersecurity

FYI, Scrolls is now on a brief hiatus and will return on 7/10.

No reason you couldn’t put more than 4 in a /top4. Or do /top. ...

2026-06-11T13:47:16Z

In reply to nevent1q…d0ze
_________________________

No reason you couldn’t put more than 4 in a /top4. Or do /top. Or a totally new slash page of your design! slashpages.net is but a very unofficial guide on a few known slash pages. It isn’t meant to be the decider on what does or doesn’t count. I have a (very much work in-progress) /top4 page and I’ve already linked to other lists I have that aren’t strictly 4-in-length 🤷‍♂️

💯 🚀 👍 Added!

2026-06-11T13:44:07Z

In reply to nevent1q…fu6y
_________________________

💯 🚀 👍 Added!

I have a whole lot of feeds here https://shellsharks.com/feeds ...

2026-06-06T17:31:12Z

In reply to nevent1q…825n
_________________________

I have a whole lot of feeds here https://shellsharks.com/feeds 🤗

Thanks for the reminder for me to remove all links to Substack ...

2026-06-05T19:48:08Z

In reply to nevent1q…7hyc
_________________________

Thanks for the reminder for me to remove all links to Substack from my site. Cheers!

📜 Scrolls 44 is out! ...

2026-06-05T17:53:10Z

📜 Scrolls 44 is out!

https://shellsharks.com/scrolls/scroll/2026-06-05

Shoutout to everyone listed below. Their work was featured in this week’s edition. 🧡

readbeanicecream (npub1c99…ljas) Frontend Dogma (npub1z5v…z8zg) Andrew Nesbitt (npub1m49…yl0h) Jeremy Herve (npub1cyc…9psj) David - Forking Mad (npub1tyl…7s6e) Guy LeCharles Gonzalez (npub1xh9…x0uw) Chris Coyier (npub1t0w…zgs2) Ian (npub1za8…v6es) [@marvin_weblin](https://mastodon.social/@marvin_weblin ) Brennan Kenneth Brown (npub109f…3mc6) Marisabel Munoz (npub1tec…afr2) Arilin Thorferra (npub1tsx…ma4k) [@brittcoxon](https://mastodon.art/@brittcoxon ) [@liztai](https://hachyderm.io/@liztai ) Naty S (npub1xhj…hq9k) Mat “Wilto” Marquis (npub1nwk…slxa) [@Carl](https://sunny.garden/@Carl ) [@Ailantd](https://mastodon.art/@Ailantd ) Nicolas Gouny (npub1090…cff7) Wonko The Sane (npub1fs3…njx8)

Have a great weekend!

#indieweb #fediverse #cybersecurity #infosec

Definitely got the idea from you tho 😄

2026-06-05T12:06:18Z

In reply to nevent1q…serh
_________________________

Definitely got the idea from you tho 😄

AI isn’t real “intelligence”. It doesn’t measure up to ...

2026-06-04T14:01:53Z

AI isn’t real “intelligence”. It doesn’t measure up to human intelligence!

Looks around at humans…

Oh…

Well, AI can’t match human intelligence because humans can think for themselves!

Once again looks around at humans today…

Shit…

Here’s mine 🤗 https://shellsharks.com/style Your style is so ...

2026-06-04T13:57:48Z

In reply to nevent1q…558d
_________________________

Here’s mine 🤗 https://shellsharks.com/style

Your style is so crisp and nice looking though =). I’d say mine’s a bit more rough/amateurish… but some might say “full of character” 😄

I keep a list of such places here ...

2026-06-04T13:54:39Z

In reply to nevent1q…up8c
_________________________

I keep a list of such places here https://shellsharks.com/indieweb#explore-the-indieweb. Also, recently someone published this list of curated directories here https://theindex.fyi. I’m sure what you’re looking for can be found in one of these two places.

I know nada about ao3 or fan fiction sites in general. What I DO ...

2026-06-03T13:35:41Z

In reply to nevent1q…jr5k
_________________________

I know nada about ao3 or fan fiction sites in general. What I DO know is a good metaphor when I see one. This one about Internet cross-pollination is perfection. Especially for me right now as I’ve set off into my (IRL) gardening era. The importance of cross-pollination in both contexts can not be understated.

Cheers!

Neat! I had this exact idea like 15 years ago but never had the ...

2026-06-03T13:07:14Z

In reply to nevent1q…9u74
_________________________

Neat! I had this *exact* idea like 15 years ago but never had the energy ( or maybe know-how? ) to bring it to life. Back then the web seemed a bit less hostile… I have more fears and doubts about how well this concept would work today, but I think it’s awesome that someone’s going to try to make it happen. Looking forward to seeing how it goes!

📜 Scrolls 43 is now out! Lots of great links to discover as ...

2026-05-29T13:32:57Z

📜 Scrolls 43 is now out! Lots of great links to discover as usual 🤗

https://shellsharks.com/scrolls/scroll/2026-05-29

Thanks to everyone mentioned below. Their work is featured in this week’s issue. 🧡

Robin Berjon (npub17fx…dj24) Dave Wilburn :donor: (npub1wdx…gg3t) Ana Rodrigues (npub1lwx…c8f6) readbeanicecream (npub1c99…ljas) Doug Belshaw (npub1f5a…705y) Joel :casio: :blobcatderpy: 🇲🇽 (npub1x74…ruph) AetherAnne (npub1zvq…jy0a) Sara Soueidan (npub1247…zzvh) Ginny Mae 🩵 (npub1wnn…93z9) Aristotelis Tzafalias (npub187k…237q) [@Paul_FTW](https://xoxo.zone/@Paul_FTW ) [@miclgael](https://hachyderm.io/@miclgael ) Federated Mind (npub1xnz…kpy3) Dome (npub1mpv…v3ac) [@caolan](https://hachyderm.io/@caolan ) Sara Joy :happy_pepper: (npub1jpy…yfwv) ⁂ L. Rhodes (npub1e5z…p90v) Gordon (npub1wz5…gajk) Ben Werdmuller (npub1lrq…pn8w) Jens Oliver Meiert (npub1uej…t62s)

#indieweb #fediverse #infosec #cybersecurity

Have a great weekend!

Joined in 2018 out of curiosity. Rejoined in 2022 during the ...

2026-05-28T17:42:30Z

In reply to nevent1q…r7lf
_________________________

Joined in 2018 out of curiosity. Rejoined in 2022 during the early stages of the Elonification of Twitter. I was never much of a Twitter-er anyways (just lurking mostly) but out of principle, and because I saw infosec folks coming to Fedi, I went to.

I’ve stayed (and will continue to stay) for so many reasons….

- My awesome curated timeline filled with wonderful people.
- The level of ownership I have of my presence and data
- Fediversal interoperability

To name a few!

Good tip. I’m still working up the nerve to move my main site ...

2026-05-27T12:34:51Z

In reply to nevent1q…8kpv
_________________________

Good tip. I’m still working up the nerve to move my main site over to Codeberg. I recently set up my newest site there and wrote this up to help others do the same https://shellsharks.com/devlog/planting-a-website-on-codeberg-pages.

📜 Scrolls volume 42 is out! Enjoy some web surfing and have a ...

2026-05-22T14:44:18Z

📜 Scrolls volume 42 is out! Enjoy some web surfing and have a great weekend!

https://shellsharks.com/scrolls/scroll/2026-05-22

Thanks to everyone listed below. Their work was featured in this weeks issue.

Terence Eden (npub1x59…gect) Renkon (npub1y0h…u9hf) Wouter (npub1599…cfu6) Leia (npub1ujj…94rt) matt trask (npub1kt8…s5cv) Brennan Kenneth Brown (npub109f…3mc6) scribblans (npub13dg…65tn) Polykit (npub1dey…g39n) Andrew Nesbitt (npub1m49…yl0h) Mark Nottingham (npub1djp…ept4) [@mahryekuh](https://hachyderm.io/@mahryekuh ) Sebastian (npub140q…0v8s) [@albi](https://raintreeruckus.com/ ) Alberto Betella (npub1tk4…3wu7) Gregory 🇨🇦 (Open to work) (npub1nyp…ar25) Ewen Bell 📸 (npub1t4d…y3tj) たきまコウ (npub1ejn…ujpe) Andrew BoostsWithWildAbandon (npub1xxu…fsr2) Graham Dunning (npub1raa…r25n) Hell-vetica Orange (npub17a6…mgkf) Chris Silverman 🌻 (npub1asm…646p) Alan (npub1rc2…307q) Kate Roberts (npub1wrf…ktu7) [@fathia](https://sunny.garden/@fathia ) Nate (npub190q…f9lj) Sara Joy :happy_pepper: (npub1jpy…yfwv) Roy Tang 🇵🇭 (npub1z28…9m5z) [@xandra](https://tilde.zone/@xandra )

#indieweb #fediverse #infosec #cybersecurity

Oh ok cool. Thanks for the background. The list is more of an art ...

2026-05-20T18:43:24Z

In reply to nevent1q…e94e
_________________________

Oh ok cool. Thanks for the background. The list is more of an art than a science for sure =). Cheers!

Cool! Thanks for sharing. I added FROST (and a few others I was ...

2026-05-20T16:10:12Z

In reply to nevent1q…68uq
_________________________

Cool! Thanks for sharing. I added FROST (and a few others I was not aware of from your already-published works here https://vulnerability.garden). 🪴🤗

Quick somewhat-related question though. I’ve noticed in this research, and *so* many other similar published white papers, that the authors do not include a Published Date. Why is this? At best I’ll get a year-published for citation purposes, but I’d personally love to know the month+day as well.

Anyways, thanks again!!

Thanks! It’s been kinda rough so far this season. A string of ...

2026-05-20T13:08:13Z

In reply to nevent1q…z24w
_________________________

Thanks! It’s been kinda rough so far this season. A string of sub 50 degree days followed by several 95+ degree days and now we’re heading right back into 50 degree nights and 10 days straight of rain… ill be amazed if anything survives the onslaught. But plants can be resilient!

I think that's already been done. We've all been calling ...

2026-05-20T12:34:23Z

In reply to nevent1q…jwps
_________________________

I think that's already been done. We've all been calling it the "old web" (complimentary), but they'll spin it to be the "old web" (derogatory). Fortunately there's a surge of personal blogging and indieweb tooling looking to keep the better web afloat. Might be enough to save some of us...

Not that it’s the most reliable indicator, but a similar ...

2026-05-18T13:05:19Z

In reply to nevent1q…p3sf
_________________________

Not that it’s the *most* reliable indicator, but a similar trend is evident in what I see on vuln garden. This year we have 83 “named vulns” and we’re not even half way through the year. This pace could see 200+ while no year prior has ever gone over 130. It also seems like a majority of findings coming out recently are from AI shops (V12, those copyfail buggers, xbox, etc…)

Hired.

2026-05-16T16:36:39Z

In reply to nevent1q…xun9
_________________________

Hired.

Yeah if DVWA was installed on thousands of endpoints and *checks ...

2026-05-15T20:15:34Z

In reply to nevent1q…qyny
_________________________

Yeah if DVWA was installed on thousands of endpoints and *checks notes* also exposed to the Internet 😭

https://protean-labs.io/blog/researchers-find-thousands-of-openclaw-instances-exposed

OpenClaw says "my turn" - ...

2026-05-15T20:09:11Z

In reply to nevent1q…lzvm
_________________________

OpenClaw says "my turn" - https://www.cyera.com/blog/claw-chain-cyera-research-unveil-four-chainable-vulnerabilities-in-openclaw

The Vulnerability Garden isn’t exactly “Fedi-Native”, but I ...

2026-05-15T18:24:02Z

The Vulnerability Garden isn’t exactly “Fedi-Native”, but I did set up RSS Parrot to post out when new records are added. The latest being “Claw Chain” (from today!).

Whether it’s AI being popped, or AI doin’ the poppin’, it’s shaping up to be a big year for named vulns it seems. https://rss-parrot.net/u/vulnerability.garden/status/1778817847002383503

PoppedKernel

2026-05-15T18:16:52Z

In reply to nevent1q…8lw7
_________________________

PoppedKernel

This is one of those instances that is kinda on the fence for me ...

2026-05-15T13:02:38Z

In reply to nevent1q…mp5e
_________________________

This is one of those instances that is kinda on the fence for me in terms of inclusion in the garden… I kinda read this as “ssh-keysign-pwn” being the name of the script, or the name of the repo and not so much it being a “named” vuln. It’s pretty subjective as I’ve explained before though so 🤷‍♂️. It doesn’t have a website, or a logo. The author (in the repo) never really says anything like “named” or “dubbed” or “called” —> ssh-keysign-pwn. Not that it’s that important but yeah..

Hope you find a lot of stuff you’re interested in! 🧡

2026-05-15T12:59:23Z

In reply to nevent1q…av3z
_________________________

Hope you find a lot of stuff you’re interested in! 🧡

🤗

2026-05-15T12:58:58Z

In reply to nevent1q…frtw
_________________________

🤗

infosec.exchange probably has a bit of this vibe. Sure, there are ...

2026-05-15T12:53:13Z

In reply to nevent1q…nqnq
_________________________

infosec.exchange probably has a bit of this vibe. Sure, there are plenty of “broadcast-ey” types on there, but there’s also a solid population of folks that converse, comment, and otherwise *respond* to posts, not just publish. Having a topic-specific instance (like “infosec”) can help with this.

📜 Scrolls 41 has been published! Go check it out 🤗 ...

2026-05-15T04:10:42Z

📜 Scrolls 41 has been published! Go check it out 🤗

https://shellsharks.com/scrolls/scroll/2026-05-15

Thanks to everyone listed below. Their work is featured in this week's edition!

Juhis (npub1t2p…53hs) Tyler Sticka (npub1s8g…ejc3) Neil Brown (npub1huw…c5x7) an00b (npub16pv…g6y2) [@david_bardos](https://mementomori.social/@david_bardos )
Brennan Kenneth Brown (npub109f…3mc6) Joel :casio: :blobcatderpy: 🇲🇽 (npub1x74…ruph) Akhil (npub1597…3dck) Vasilis (npub1r4x…awyf) [@marlin_bian](https://mastodon.social/@marlin_bian ) internetarchive (npub1umd…wfr7) Andrew Nesbitt (npub1m49…yl0h) [@hyperreal](https://tilde.zone/@hyperreal ) Sebastian (npub140q…0v8s) Nicolas Gouny (npub1090…cff7) Jan Schaumann (npub1z6e…ehl4) [@inherentlee](https://flipping.rocks/@inherentlee ) bitspook (npub1kn7…rxdq) Geffrey van der Bos (npub1kf2…rzus) ZeekZack (npub1e2g…xwfr) Hister: Your own search engine (npub1m4j…835a) Adam (npub1zyj…25vl) [@Ailantd](https://mastodon.art/@Ailantd ) Wonko The Sane (npub1fs3…njx8)

#indieweb #fediverse #infosec #cybersecurity

I still use standard search engines a fair bit. But you know ...

2026-05-15T02:55:36Z

In reply to nevent1q…phg4
_________________________

I still use standard search engines a fair bit. But you know where I turn to that’s pretty cool? My own website! I have a lot of useful links saved up over time, and a fair bit I’ve written myself that I often find useful down the road.

lol. BRB, changing my title to "Cybergarbologist"

2026-05-14T15:44:42Z

In reply to nevent1q…q8q4
_________________________

lol. BRB, changing my title to "Cybergarbologist"

It seems to only be accelerating. The AI-fueled vulnshops are ...

2026-05-14T14:35:43Z

In reply to nevent1q…lra5
_________________________

It seems to only be accelerating. The AI-fueled vulnshops are having a field day with their li'l naming it seems. I just put 'em in a list 🤷‍♂️