<unnamed>

Public Key

npub155t0ydv2yz5sc4sta5jmxnannmjm6y48rpur0huvj6seuqrseekszdnysn

Profile Code

nprofile1qqs229hjxk9zp2gv2c976fdnf7eeaedaz2n3s7phm7xfdgv7qpcvumgpz4mhxue69uhhyetvv9ujumt0wd68ytnsw43q43m84g

Publishing to

relay.mostr.pub

Last Notes

2026-08-18 20:56:53 UTC

i am both very tired and very shouty today.

2026-08-08 16:25:48 UTC

For your amusement, an $11 KitKat. Oh, Vegas.
https://masto.deoan.org/system/media_attachments/files/117/060/819/010/803/875/original/6dade88f1d1d2d1b.jpeg

2026-08-06 13:16:19 UTC

- reply

As a defender, for me the table stakes question comes down to this:
Even leaving out the other issues with AI, these companies are freely announcing that they neither properly monitor nor properly control exfiltration from their corporate environment.
Given that, why the hell would I want their products in my corporate environment?

2026-08-06 12:56:40 UTC

- reply

All these “AI sandboxes” appear suspiciously similar to my hairline these days. Massive gap in the rear, with the perimeter doing nothing but receding.

2026-07-28 19:43:33 UTC

thinking about blackhat/defcon, and some year i want my org to sponsor a quiet reading party.
maybe low-key waitstaff taking care of drinks and snacks, and handing out warm washcloths.
"no eye contact chill rager; unless someone's wearing a green sign they get left alone to rest"
back in my meditation days, at the retreat center the folks on silent retreats would wear a big button that said "in loving silence"
i wonder what the hacker equiv would be

2026-07-27 16:22:28 UTC

- reply

@nprofile…dd4h Yep! Zanjani going from death row to international jet-setting regime money launderer actually triggered a ton of protests in Iran.

2026-07-27 14:56:26 UTC

We've worked on this investigation for more than a year, and it led us from a single domain to a multi-billion dollar IRGC sanctions evasion network. Please enjoy the report!
#infosec #cybersecurity #threatintel #iran
https://dti.domaintools.com/research/the-zedxion-corporate-nexus

2026-07-25 18:12:11 UTC

Sorry, can't, too busy HALO-jumping in Palworld because for whatever reason this island IS RINGED WITH GROUND-TO-AIR MISSILE SYSTEMS.

2026-07-25 13:25:04 UTC

- reply

@nprofile…asjv The latter. You are not entitled attention or consideration simply because you have a text predictor at hand - life will be easier once you recognize this.
Good day.

2026-07-25 12:09:15 UTC

- reply

@nprofile…asjv Suggested reading: https://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect

2026-07-25 11:40:31 UTC

- reply

@nprofile…asjv Please do not mistake your prompt for 10 years of field experience.

2026-07-24 22:03:50 UTC

I was a 911 dispatcher for a decade.
To really understand how absolutely terrible an idea it is to have AI answer 911 calls, I'll present you with a single real-life call:
Upon answer, the caller calmly began ordering a pizza. Large, pepperoni. Side order of chicken wings. To be delivered promptly.
The only sign the caller gave that things were amiss? She rather ignored the first few questions from the calltaker.
Because she was being physically abused, had already been beaten, and her abuser was *IN THE ROOM* listening to her order pizza.
Tell me how your AI is going to read between those lines.
#nevent1q…l76v

2026-05-13 20:49:40 UTC

Aged, recycled domains available for rent via a Chinese / Southeast Asian reseller market.
Registrar: Metaregistrar BV
NS: share-dns[.]com
AS36352 ("Sally Wang")
#nevent1q…qdfj

2026-05-12 22:16:05 UTC

- reply

@nprofile…gu7x time to log off for a bit and maybe go touch grass, friend.
and i say this knowing just how hypocritical it sounds coming from me.

2026-04-05 13:50:24 UTC

NEW RESEARCH: Yesterday, our team at @nprofile…lpl4 Investigations published a holistic analysis of DPRK malware tracks and trajectories, providing a cross-connected understanding of the adversarial landscape in Pyongyang.
#infosec #cybersecurity #threatintel
https://dti.domaintools.com/research/dprk-malware-modularity-diversity-and-functional-specialization

2026-04-03 17:49:41 UTC

- reply

thing is, this is likely to cause many downstream enterprise breaches, even in enterprises that actively ban openclaw.
unauthorized instances, or instances that allow a threat actor to pivot from private hardware to work hardware.
pure negligence, rolling OpenClaw out in the way they did, both the devs and all the hosting companies that saw profit in providing easy-install packages.

2026-04-03 17:32:44 UTC

- reply

i know i'm an AI skeptic, but i did not expect "virally popular agent does no authentication checks before escalating system privileges"

2026-04-03 17:27:10 UTC

oh jesus tapdancing christ
#nevent1q…k82n

2026-04-02 21:56:12 UTC

okay okay i've got a plan but i need y'alls help.
so
we tell the israeli govt that Cloudflare data centers protect iranian hackers and info ops
then we tell the iranian govt that Cloudflare data centers protect israeli hackers and info ops
and finally we tell the Trump administration that Cloudflare data centers contain the Epstein files.

2026-04-02 14:31:32 UTC

you ever been so tired that you see yesterday's leftover coffee and consider finishing it rather than getting up to make a fresh cup?

2026-04-01 15:38:21 UTC

The perfect merger of "Go to the cloud," they said, "It'll be fine," they said,
and
"AI is going great"
has happened, @nprofile…z3lm
#nevent1q…yw64

2026-03-31 22:43:15 UTC

it's always DNS, even in Hell.
perhaps especially in Hell.
*racks shotgun*
#nevent1q…3ppd

2026-03-26 18:19:49 UTC

US or EU, Remote - Wiz - Threat Intelligence Researcher (Cloud)
Wiz has been doing some great work around TeamPCP lately, among other things.
According to LinkedIn ( https://www.linkedin.com/posts/benjamin-read-41817121_im-continuing-to-build-the-threat-intel-share-7442969734645608448-Gu-n?utm_source=share&utm_medium=member_desktop&rcm=ACoAABIZhqYBjXCQuV7JX7N_3xlpxZY6alHZ77o ) it's posted for US but open to EU. They're looking for two roles, one Cyber Crime and one Cyber Espionage.
(I am not affiliated with Wiz or at all involved in this hiring process.)
https://www.wiz.io/careers/job/4658917006/threat-intelligence-researcher-cloud

2026-03-24 21:14:42 UTC

It's interesting that OpenAI is killing Sora more or less the same week Microsoft announced it's scaling back Copilot infestation of Windows.
#nevent1q…4a4p

2026-03-24 16:29:12 UTC

hey @nprofile…gu7x - in case you're not watching the litellm & checkmarx supply chain compromises, you're probably gonna be interested.
46.151.182[.]0 / 24 is a fun little range to track.
for that /24, roughly AS44477 -> AS200195 -> AS214967 -> AS205759

2026-03-24 12:11:53 UTC

i love that we went from "zero trust" as a fundamental buzzword to "trust autonomous nondeterministic agents everywhere in your stack"

2026-03-21 19:32:21 UTC

Re: Microsoft removing copilot integrations in notepad, snipping tool, photos, widgets, etc -
this isn't about them accepting feedback.
I'll bet a shiny $10 bill that we learn by July about a series of significant compromises with Copilot and Recall in the exploit chain.

2026-03-20 14:14:20 UTC

NEW RESEARCH - I'm pretty proud we were able to pound out and ship a piece on this within 3 days. But its importance may get lost in the news cycle.
While we continue to struggle with things like keeping private keys secret, we're also busy introducing autonomous, nondeterministic agents into every place possible that are subject both to all the problems we still struggle with *AND* largely interminable new problems that can't be easily guardrailed-away.
Sure, this is a Chinese company so it's difficult for many folks to envision the same thing happening in the US, but we are 100% setting ourselves up for it, and companies and professionals not gleefully joining in the regressions are being continually punished.
This is a warning sign, and unfortunately, we will fail to heed it.
https://dti.domaintools.com/research/exposure-of-tls-private-key-for-myclaw-360-in-qihoo-360-security-claw-ai-platform

2026-03-20 09:22:26 UTC

I need a few hundred thousand dollars so I can launch a .ffs TLD and retire.

2026-03-02 19:41:47 UTC

NEW RESEARCH!
@nprofile…lpl4 Investigations researchers have spent the past several weeks pulling apart data from Russian threat actor Doppelganger to analyze recent campaigns and explore its technical and organizational structures.
#infosec #threatintel #cybersecurity
https://dti.domaintools.com/research/doppelganger-rrn-disinformation-infrastructure-ecosystem

2026-02-27 23:15:48 UTC

I have been remiss in having forgotten to mention that Da Boss, Daniel Schwalbe, will be speaking tomorrow at BSides Seattle! Go see him work his magic.
Bonus points if you ask him what the "F" in "DFS" stands for.
#infosec #cybersecurity #bsidesseattle
https://masto.deoan.org/system/media_attachments/files/116/145/129/351/903/968/original/628f6ab68102a500.png

2026-02-27 19:18:12 UTC

US - Remote / ET - Datadog - Cyber Threat Intelligence Engineering Manager I
(I am not affiliated with Datadog or at all involved in this hiring process.)
https://careers.datadoghq.com/detail/7181025/?gh_jid=7181025

2026-02-26 23:07:27 UTC

*ATTENTION, ATTENTION*
@nprofile…y4qv is a fucking genius.
That is all. Thank you for your attention in this matter.

2026-02-26 16:39:41 UTC

- reply

@nprofile…29kj Good luck!
maybe i should take my toot down so less other people apply 👀

2026-02-26 15:49:51 UTC

USA, multiple offices - Amazon Cyber Threat Intelligence - Sr. Technical Program Manager
(I am not affiliated with Amazon or at all involved in this hiring process.)
USA, TX, Austin
USA, VA, Arlington
USA, WA, Seattle
USA, NY, New York
USA, MD, Annapolis Junction
USA, VA, Herndon
https://www.amazon.jobs/en/jobs/3189668/sr-technical-program-manager-amazon-cyber-threat-intelligence

2026-02-26 12:10:07 UTC

Autistic thought of the morning:
What I really want is an actively cooled weighted blanket. Maybe liquid cooling would work for both cases.
Then I wondered at how much more work I could get done if I was that comfortable.
And then I realized I was essentially turning myself into a high-performance PC and, you know, I'm okay with that.

2026-02-21 13:06:26 UTC

- reply

@nprofile…y4qv swing and a miss!

2026-02-21 11:15:33 UTC

https://www.bloodinthemachine.com/p/across-the-us-people-are-dismantling
https://masto.deoan.org/system/media_attachments/files/116/108/331/161/674/583/original/adbdb508295aaff3.jpeg

2026-02-19 18:03:50 UTC

@viss lul
https://masto.deoan.org/system/media_attachments/files/116/098/610/211/506/533/original/beed11d7bde6845b.png

2026-02-12 17:25:00 UTC

Yesterday, DomainTools Investigations released research on Lotus Blossom and the Notepad++ attack - but also, we went far beyond the attack and deeper into Lotus Blossom's larger profile.
#threatintel #infosec #cybersecurity
https://dti.domaintools.com/research/lotus-blossom-and-the-notepad-supply-chain-espionage-campaign

2026-02-10 15:20:54 UTC

Alphabet (Google) launched a massive global bond sale, including a 100-Year Bond.
The last time tech companies offered 100-Year Bonds was, according to Bloomberg,
the dot com boom.

2026-01-29 10:05:53 UTC

really would like to sleep, but ok, brain

2026-01-27 21:29:56 UTC

Trump’s acting cyber chief uploaded sensitive files into a public version of ChatGPT
The interim head of the country’s cyber defense agency uploaded sensitive contracting documents into a public version of ChatGPT last summer, triggering multiple automated security warnings that are meant to stop the theft or unintentional disclosure of government material from federal networks, according to four Department of Homeland Security officials with knowledge of the incident.
https://www.politico.com/news/2026/01/27/cisa-madhu-gottumukkala-chatgpt-00749361

2026-01-24 13:07:03 UTC

have just seen my favorite meme of the year so far, hands down.
https://masto.deoan.org/system/media_attachments/files/115/950/215/974/098/446/original/706478d5396887ab.png

2026-01-19 23:01:04 UTC

"Stormtroopers Who Killed Tatooine Farmers Feared for Their Lives"
https://hard-drive.net/stormtroopers-who-killed-tatooine-farmers-feared-for-their-lives/

2026-01-14 23:13:54 UTC

"Most people don't need more discipline. They need an environment their biology can finally trust."
hussein naji

2026-01-09 12:30:13 UTC

Oh well that's fucking clever. A threat actor is sending out phishing emails pretending to be SendGrid, and explaining that all their emails will include "Support ICE" banners in order to trigger ragebait clicks through to the phishing kit.
#threatintel
https://www.linkedin.com/posts/simokohonen_ragebait-as-a-phishing-tactic-a-threat-activity-7415349853754638336-gcCu?utm_source=social_share_send&utm_medium=member_desktop_web&rcm=ACoAABIZhqYBjXCQuV7JX7N_3xlpxZY6alHZ77o
https://masto.deoan.org/system/media_attachments/files/115/865/138/413/167/171/original/fea28f94013a4df3.png

2026-01-08 11:40:11 UTC

- reply

@nprofile…a4ar Adding to that something I picked up elsewhere:
Every time history repeats itself, the price goes up.
(as quoted in Joseph Tainter's "The Collapse of Complex Societies" no less.)

2026-01-08 11:35:55 UTC

i was prepared for a rehash of 2020 because
*gestures vaguely at everything.*
i was not expecting to Groundhog Day all the way back to 2003.

2026-01-06 22:18:06 UTC

- reply

@nprofile…y4qv please, yes, make it the northeast US and I will be a loyal subject

2026-01-05 22:17:43 UTC

don't tell me if it's made up, i want to believe
https://masto.deoan.org/system/media_attachments/files/115/844/801/926/880/151/original/3dae3fad31d6e827.png

2026-01-03 00:00:06 UTC

'“Tinder for Nazis” hit by 100GB data leak, thousands of users exposed'
Also exposed: it's a sausage fest, with almost no women. Shocker.
I'm coining it now: "Fashley Madison."
https://cybernews.com/security/investigator-exposes-white-supremacist-sites-users/

2025-12-20 10:58:54 UTC

- reply

@nprofile…j4xh went that well, eh?

2025-10-29 16:20:26 UTC

- reply

@nprofile…p7lw downdetector is based on user reports. i suspect that's either folks who think it's AWS and are wrong, or whose path crosses MS services on the way to AWS, like for MS-based SSO

2025-10-28 15:07:28 UTC

- reply

"let's make our mailservers and internal documentation all vulnerable to cognitive attacks"
utterly deranged

2025-10-28 15:00:02 UTC

the funniest part about LLM vulnerabilities is that we've essentially opened up our deterministic systems to techniques honed in centuries of disinformation operations, like an accelerated epistemology purposely weak to cache poisoning.
https://infosec.exchange/@mttaggart/115446376556227026
https://masto.deoan.org/system/media_attachments/files/115/452/368/357/727/267/original/db5cad7e95796e4b.jpeg

2025-10-13 21:00:58 UTC

The image below, as well as other recent examples, form part of an information operation meant to make my generation and older feel prematurely aged and infirm.
In this closed-door briefing i will….
https://masto.deoan.org/system/media_attachments/files/115/368/862/393/241/937/original/17dd541526a17b9f.jpeg

2025-10-12 23:06:12 UTC

So
not only this excellent graphic
but this graphic on this server name. https://toad.social/@amyedge/115363451499320006

2025-10-10 11:18:39 UTC

I fucking love David Simon (creator of The Wire). Being interviewed by Ari Shapiro on AI.
Editing to add: OP was on bluesky, just saw they’re on bridgy: https://bsky.brid.gy/r/https://bsky.app/profile/did:plc:t2nqc2rnyz2hco3uqxc457cd/post/3m2qdqsffuk2w
https://masto.deoan.org/system/media_attachments/files/115/349/593/562/748/702/original/362a39570b37e1d8.jpeg

2025-10-09 15:43:53 UTC

- reply

@nprofile…fle4 is that haddix?

2025-10-09 12:54:40 UTC

In regards to Framework’s latest footgunning, lemme reiterate two things:
1. Tech is and always has been political. Anyone saying otherwise simply wants to avoid being held accountable for their words and actions.
2. “Big tent” policies do one thing: loudly express that you’re perfectly okay becoming the neighborhood nazi bar.

2025-10-09 00:36:24 UTC

“We gladly feast on those who would subdue us.”
https://masto.deoan.org/system/media_attachments/files/115/341/405/820/659/114/original/98a7457ff4090f63.jpeg

2025-10-07 17:10:38 UTC

ICE now owns roving vans with integrated cell site simulators
https://techcrunch.com/2025/10/07/ice-bought-vehicles-equipped-with-fake-cell-towers-to-spy-on-phones/
for commentary on this breaking news, i turn to my recently-made friend Ray Hunter
Luckily everyone else can too!
#infosec #privacy
https://www.eff.org/deeplinks/2025/03/meet-rayhunter-new-open-source-tool-eff-detect-cellular-spying

2025-10-06 20:42:00 UTC

episode #543345 in “Rimworld modders are not okay…”:
mod option that enables the ability for colonists who specialize in mechanical robot management to have sex with their mechs.

2025-09-15 11:36:38 UTC

- reply

@nprofile…6kgk Congrats and well done!

2025-09-14 17:13:59 UTC

Best ten-dollar purchase I've made in ages:
small desktop pomodoro-type timer that ensures I stand up, stretch, and move every hour or so.

2025-09-12 11:28:38 UTC

🎵 FIDOn’t wanna close my eeeyes 🎵
🎵FIDOn’t wanna fallll asleeep 🎵
🎵cause I’d miss yubikey🎵
🎵and I don’t wanna miss a thiiing 🎵

2025-09-12 11:00:11 UTC

- reply

Tired enough that I stood at the wrong luggage carousel, very concerned my bag was not appearing.

2025-09-12 05:03:29 UTC

Officials too old for redeye flights I think. Eugh.

2025-09-11 13:57:50 UTC

- reply

@nprofile…aakv that looks AMAZING

2025-09-11 13:02:27 UTC

- reply

I’m an RSS and feed ingestion addict and have tried every platform under the sun, so if it’s finding new ways for me to pull stuff in, you *know* it’s novel an exciting.

2025-09-11 13:00:36 UTC

Hey folks, I want to highlight an offering from @nprofile…82k3 for a sec.
He’s been working tirelessly on https://www.cyberespresso.eu - a platform that leverages threat intelligence RSS feeds and then augments them in a myriad of ways.
It’s been fascinating to travel through beta, tweak things, watch the iterations, and find the real sweet spots made more apparent by keen attention to feed optimization.
Highly, highly suggest folks sign up and check it out.
https://www.cyberespresso.eu

2025-09-11 12:44:10 UTC

Now that I’m submitting more CFPs I need to start shopping my “Shitposting-as-a-Service” talk around…

2025-09-10 14:03:42 UTC

- reply

@nprofile…nkpy Ohhh, I like that reflection. Pillow fort as sand mandala.

2025-09-10 13:20:52 UTC

New research brief from @nprofile…rtth Investigations on likely PoisonSeed threat actor activity with some questions about SCATTERED SPIDER overlap.
#threatintel #infosec #cybersecurity
https://dti.domaintools.com/newly-identified-domains-likely-linked-to-continued-activity-from-poisonseed-e-crime-actor/

2025-09-10 03:58:09 UTC

I need a hotel room doorknob sign that says “I’m out at my event and you can come in, but I finally got my pillow fort JUST the way I want it, so please leave the bed as it is.”

2025-09-10 02:19:36 UTC

- reply

This is what surveillance capitalism inevitably gets us, regardless of class, party, or society.

2025-09-10 02:12:53 UTC

This story by @nprofile…kx3z and Dake Kang is so well done, and so important. Please read and share if so inclined. https://mastodon.social/@yaelwrites/115172437805090461

2025-09-09 16:12:25 UTC

Neat to see the Cybereason team building on/alongside some of our DomainTools Investigations research! Threat research is a collaborative sport, in addition to the competitive aspects. Our ecosystem benefits from everyone building across borders.
https://www.cybereason.com/blog/chrome-extension-campaign-madgicx

2025-09-08 16:22:36 UTC

This is too good.
https://masto.deoan.org/system/media_attachments/files/115/169/594/749/659/184/original/e5aba7420452dd92.jpeg

2025-09-08 13:21:06 UTC

- reply

@nprofile…zwse that checks out. It tottered up, very fluffy, sniffed around a little, sniffed my backpack (maybe for the clif bar therein), and then seemed happy enough to wander off at the same chill pace.

2025-09-08 12:00:36 UTC

Risky Business podcast’s “Snake Oilers” (paid promotion spots, very well-announced and well executed imho) had US privacy-first mobile network operator Cape on.
Worth listening to in order to remember privacy is not dead, and to hear Cape’s pitch to consumers.
I’m a Cape subscriber and it’s been pretty damn good so far.
https://risky.biz/snakeoilers22pt1/

2025-09-08 08:52:32 UTC

- reply

@nprofile…dzdx @nprofile…fv4z @nprofile…sxdw @nprofile…4fn8 fair! I think the forcing effort on behalf of the AI folks is one of the most toxic things out there.
I still use it sparingly, I am not all in by any means.
Gotta respect consent above all else I think.

2025-09-08 07:40:24 UTC

- reply

@nprofile…fv4z @nprofile…dzdx @nprofile…sxdw @nprofile…4fn8 valid for pretty much everything.

2025-09-08 07:28:34 UTC

Headed to the airport and was sitting outside of my house waiting for pickup when a big ol’ skunk meanders across my driveway and right up to me.
Had visions of getting sprayed and missing my flight, but the skunk was just curious and pattered off again in short order.

2025-09-08 07:03:43 UTC

- reply

@nprofile…fv4z @nprofile…dzdx @nprofile…sxdw @nprofile…4fn8 I would like no more than to disagree with Jeff on the merits - Up through about March I refused to engage with it if I didn't have to.
But,
1. QA got better with some of them.
2. Industry isn't backing off.
3. I finally realized that, yes, using them is a learned skill akin to immersing yourself in an interface. You can reliably get decent (if non-deterministic) results, it's just not the easy button it's supposed to be.
grumble.

2025-09-08 06:44:14 UTC

- reply

@nprofile…ktud F

2025-09-08 06:35:05 UTC

- reply

@nprofile…2p5k I hope your day and week and year get better, friend. You deserve it.

2025-09-08 06:33:02 UTC

- reply

@nprofile…2p5k "boy howdy, dodged THAT one by the skin of my teeth! [stifled sob]"

2025-09-06 17:00:20 UTC

- reply

@nprofile…salt oh jeezus, just lookin through this is not great.
Especially the firms that haven't removed it from their record in the past 24h...like, probably not gonna matter, but c'mon people...

2025-09-06 16:32:58 UTC

- reply

@nprofile…g0wr OH! Thank you! I usually do alt text but missed it this time, thanks for pointing it out and writing it up. I've added it to the image.

2025-09-06 15:49:59 UTC

- reply

@nprofile…salt nice find on the TXT record marker.

2025-09-05 21:49:05 UTC

This is a hilariously harmless “fucked around and found out” story.
https://masto.deoan.org/system/media_attachments/files/115/153/891/629/362/909/original/4551a688edb4a5db.jpeg

2025-09-05 18:34:30 UTC

- reply

@nprofile…vrgz @nprofile…gzme "verified pickup" list for later exploitation or sale to other scammers.

2025-09-05 16:04:18 UTC

- reply

@nprofile…85tn Well done!

2025-09-05 15:59:50 UTC

- reply

@nprofile…85tn It's Friday, might as well let that one go too...
https://masto.deoan.org/system/media_attachments/files/115/152/514/252/274/842/original/5b08eed32166f1ea.gif

2025-09-05 13:09:17 UTC

New research from DomainTools Investigations this morning.
Our researchers dived into the recent Kimsuky leak and emerged with interesting findings, including a significant expansion of Kimsuky's interest to now include Taiwan.
Also deep dives on tooling as well as targeting (watch your PKI infrastructure, folks!).
#infosec #cybersecurity #threatintel
https://dti.domaintools.com/inside-the-kimsuky-leak-how-the-kim-dump-exposed-north-koreas-credential-theft-playbook/

2025-09-05 00:24:25 UTC

- reply

@nprofile…0pmy Hope ya get better quick!

2025-09-05 00:03:41 UTC

- reply

@nprofile…5lc3 per jfrog website copy,
“Serving over 80% of the Fortune 100” - 7300+ customers

2025-09-04 23:51:09 UTC

man i am a little salty tonight