Buttered Jorts

Not that Jorts.

parent, sysadmin, sleepy

I generally #FollowForFollow, don't be scared if my profile is locked.

blog: https://blog.brazos3d.com
Bsky: https://bsky.app/profile/ajn142.bsky.social

Public Key

npub1kws0pqglc03r9m3gufqgztzcu2xp5s0ahaqt398f906h64as38psg40n5s

NIP-05 Address

[email protected]

Profile Code

nprofile1qqst8g8ssy0u8c3jac5wysyp93vw9rq6g87m7s9cjn5jhata27cgnscprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqyg8wumn8ghj7mn0wd68ytnhd9hx2qgdwaehxw309ahx7uewd3hkcm345at

Publishing to

relay.momostr.pink

nostr.wine

nos.lol

Author Public Key

npub1kws0pqglc03r9m3gufqgztzcu2xp5s0ahaqt398f906h64as38psg40n5s

Show more details

Last Notes

2026-07-13 17:41:08 CEST

- reply

I suspect (but don't know) that would be a tremendous game of cat and mouse, kind of like the existing badware list (cc @npub1yg8…ccz0). I'd bet similar things can be done with any AI platform that allows users to share content, so it's probably more useful to call out the pattern than examples.
https://infosec.exchange/@mttaggart/116886269816678602
#note1vkp…mgyj

2026-07-13 17:34:25 CEST

- reply

I'm just the dweeb that periodically tells folks "we can see your assets on the network, install antivirus pl0x"

2026-07-13 17:29:54 CEST

- reply

Unfortunately out of my remit, I'm just getting a summary from folks more in the know.

2026-07-13 17:28:12 CEST

- reply

For my #threatintel friends, seems the hxxps://claude[dot]ai/share URLs are being abused to deliver ClickFix. Legitimate Anthropic domain, but user-generated content.

2026-07-13 17:18:49 CEST

> Due to an event where users attempting to install and use Claude were running malicious commands, claude.ai URLs were blocked by $MSSP
I give you... *ClaudeFix*

2026-07-10 23:19:21 CEST

- reply

I mean if we’re comparing technofascists, JD Vance at least looks like a Goth2Boss dropout.

2026-07-10 23:11:26 CEST

Who named this preppy lookin’ motherfucker Sam ***Alt***man?

2026-07-10 22:53:37 CEST

RE: https://infosec.exchange/@cR0w/116897624323672110
lemme fix that headline real quick:
**Sponsored Bullshit**
#note13p7…qa4j

2026-07-10 16:01:53 CEST

- reply

excuse the fuck outta you, these are my emotional support vulnerabilities.

2026-07-06 17:27:53 CEST

- reply

I'll reject you @npub1s6e…n008

2026-07-02 22:49:06 CEST

- reply

so I can’t volunteer to be the bottle for the bottle rockets?

2026-07-02 22:47:39 CEST

- reply

so I really shouldn’t combine my hobbies that day, is that what you’re saying?

2026-07-02 19:21:50 CEST

- reply

Woot woot, I'm at 13!

2026-07-02 17:06:11 CEST

- reply

That was [@da_667](https://infosec.exchange/@da_667 ) again...

2026-07-02 16:56:36 CEST

- reply

you monsters.

2026-07-02 16:56:07 CEST

- reply

No [@da_667](https://infosec.exchange/@da_667 ) don't boost this, it'll make more people look at it.

2026-07-02 16:55:19 CEST

- reply

I should not have inspected the monitor.

2026-07-02 15:56:46 CEST

- reply

ClickFix this motherfuckers

2026-07-02 15:56:17 CEST

- reply

the obvious answer is just to move all your browsing to Lynx

2026-07-02 15:16:14 CEST

- reply

letting the AI push to prod, it isn’t even Friday yet.
I seem to remember @npub1ww9…s6tf commenting on some similar misbehavior a couple weeks ago when that zero day in 148 dropped.

2026-07-01 17:20:46 CEST

Wow @npub1s6e…n008 losing the rainbow avatar already, I see how it is…

2026-07-01 04:27:27 CEST

- reply

over/under on Boeing giving the guilty parties the whistleblower treatment?

2026-06-30 14:41:08 CEST

- reply

is getting acquired by Accenture a win condition or another failure case?

2026-06-29 23:52:43 CEST

- reply

which is “threat hunting” or
> now that I know what shape an Alien is, I should go take a walk around my space ship and see if I find any Alien-shaped holes in bulkheads, and tell the cameras on my airlocks to alert me if they see one

2026-06-29 23:47:04 CEST

- reply

yeah, the context of “prepare a hunt” probably isn’t transparent to the vast vast majority of folks who aren’t in the business of being professionally weird like @npub1s6e…n008
Tangential, one more crow in this convo and we have a murder.

2026-06-29 23:39:57 CEST

- reply

I think the context is that there isn’t a good reason for most people to be using this, and it presents an alternative root structure that could be used by bad actors to deliver command and control (C2) traffic for malware while obscuring that traffic from a lot of typical logging systems.
https://icannwiki.org/Alternative_Roots
Basically as an infosec person, if you see this on your network and can’t explain it, it’s very probable it’s being used for something malicious.

2026-06-29 22:45:54 CEST

- reply

some really fun patterns out there.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/835/347/959/866/156/original/d963cc8c5513e197.webp

2026-06-29 22:30:51 CEST

- reply

GAYINT kydex press when?
https://www.silhouetteamerica.com/cloche?color=59&bundle_options=327
/jk

2026-06-29 20:06:56 CEST

- reply

Oh good, now you're taking shiny stuff off angels too

2026-06-29 20:04:47 CEST

- reply

I don't believe you...

2026-06-27 19:44:08 CEST

- reply

you may want to look at mass-damping as well. I have my bedslinger on a concrete paver.

2026-06-20 16:43:56 CEST

Think I’m going dark for a bit.

2026-06-19 16:16:57 CEST

- reply

Also, do not buy lifesaving supplies from Amazon! Go direct to manufacturer!

2026-06-19 15:57:35 CEST

- reply

for sure, it gets a call out because my experience says that outside of those with military backgrounds, folks who hunt, do target shooting, etc., are both inordinately aware of the risks should something go wrong in those activities, and inordinately unprepared to deal with the consequences.

2026-06-19 15:39:52 CEST

- reply

Limited audience on Mastodon, but if your hobbies include poking very small holes through various objects at very high velocities, you owe it to yourself and those around you to also be able to close those holes, should the worst happen and one end up where it shouldn’t.

2026-06-19 15:35:30 CEST

> Man, I really wish I hadn’t had that first aid kit.
Said no one ever.
https://www.narescue.com/2026-sos-sale.html

2026-06-19 01:30:22 CEST

- reply

I know it's largely communication preferences, but I prefer to say "I don't know, but I'll find out" early and often, rather than waiting until things are concrete to say anything.

2026-06-19 01:20:40 CEST

- reply

probably the latter, but the fact he waved me off replying until he gets answers (Monday hopefully, or telling the head of Networking is moot) rather than letting me say “You found an edge case. We’ll include Networking informationally. If we determine they need to act, we’ll get back to you and them.” makes it feel like the former.

2026-06-19 00:52:28 CEST

- reply

I just wasn’t expecting it to be controversial that “protecting the network” and “protecting the computers on the network” were two separate things

2026-06-19 00:37:12 CEST

- reply

the analogy starts breaking down here, but the context is somebody came to me asking
> I heard you’re putting antivirus on computers, will that impact the Network, do we need to CC the head of Networking?
My initial response was: “No, we have a firewall to protect the network part of the Network, but you’re still gonna need AV on the the computers connecting to it, so yes, let’s include them informationally”, but because I’m the computers guy and not the firewall guy that Networking deals with, I ran my response by the firewall guy before I caused a schism.

2026-06-19 00:17:30 CEST

- reply

topic obfuscated with the closest parallels I could come up with at the speed of shitpost lol.
TBF, I don’t know enough about the tools and capabilities for protecting $Thing to say they’re wrong, and they are the expert, it may legitimately be all we need. I just know enough about $ThingOnTopOfThing to have my doubts and formulate a scary example that shows the gap I’m worried about.

2026-06-19 00:13:09 CEST

- reply

Do we need to run antivirus on computers on our network?
> We have a best in class stateful firewall with deep packet inspection, our network is protected.
Ok, so if somebody gets admin on a box the firewall will stop them from running cryptolocker?
> Let me get back to you.

2026-06-19 00:05:32 CEST

I love it when I ask someone a question in the abstract and they say “No, that’s fine” and then I say ok, so we don’t need to worry about $ConcreteExample and they go “uhhhh let me get back to you”.

2026-06-18 00:36:03 CEST

- reply

Technically this is taco meat in a tomato-based sauce, in a tortilla, not sure if that makes this a sloppy José, or what other variations we can make riffing on cuisines and names rooted in other cultures.

2026-06-18 00:22:13 CEST

Nothing like a fridge-temp sloppy Joe

2026-06-17 13:24:27 CEST

- reply

wanna put money on how many ../ were involved in the making of this incident?

2026-06-17 02:06:00 CEST

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/762/512/937/618/994/original/fa4afaad064550bf.jpeg

2026-06-15 18:39:20 CEST

- reply

age sex network?

2026-06-12 15:52:20 CEST

- reply

no I mean the model is towards the low end of ac, none of these spider ass netgear or asus thingamijigs

2026-06-12 15:41:01 CEST

- reply

yeah, when it became apparent there would be no more updates I moved to something that does get them. At this point even when hardware changes I will likely stick to something that can run OpenWRT, but there’s also no rush to change hardware, low end 802.11ac is all I’ll need for years.

2026-06-12 15:37:04 CEST

- reply

OpenWRT lol

2026-06-12 15:35:13 CEST

- reply

you can pry my archer A7s from my cold dead hands

2026-06-12 15:34:39 CEST

- reply

tp-link

2026-06-11 22:11:34 CEST

- reply

shitposting is a lifestyle.

2026-06-11 21:55:48 CEST

RE: https://infosec.exchange/@gayint/116733168773208404
I created a codeberg account just for this
https://codeberg.org/gayint/lists/pulls/1
#note1jsz…ysa4

2026-06-11 21:43:02 CEST

- reply

why are you blocking bofa?

2026-06-11 02:40:27 CEST

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/728/683/281/208/297/original/a5757e57dd9c4e81.jpeg

2026-06-11 02:31:45 CEST

- reply

yeah but every time you pick up the phone to dial, the connection drops.

2026-06-10 22:54:57 CEST

- reply

if I put those on my résumé, well employers realize I’m the one who wrote the vuln, not the discovery?

2026-06-10 22:51:22 CEST

- reply

can I get CVEs for publishing a bash script with hardcoded credentials? What about one that uses telnet to download stuff in the clear?

2026-06-10 22:43:42 CEST

- reply

https://github.com/kubev2v/assisted-migration-agent there’s the actual product.

2026-06-10 22:42:09 CEST

- reply

looks to be some small time AI bullshit at least.

2026-06-10 02:41:02 CEST

- reply

please tell me you put pants on for this hug.

2026-06-10 02:38:58 CEST

RE: https://infosec.exchange/@ajn142/116717483546559424
And again…
#note1x5j…pnas

2026-06-10 01:44:17 CEST

- reply

*reports @npub1s6e…n008 for being a dirty bird*

2026-06-10 01:38:02 CEST

- reply

a likely story

2026-06-09 03:11:01 CEST

Getting really tired of having more bad brain days than good.

2026-06-08 16:12:02 CEST

- reply

yes.

2026-06-08 16:06:04 CEST

- reply

Betteridge's law strikes again.

2026-06-08 15:50:30 CEST

- reply

Cop-pilot

2026-06-08 15:14:49 CEST

RE: https://infosec.exchange/@CyberSecurityNewsDaily/116714655896207665
I’m curious how they’ll consistently identify extensions as malicious within 2 hours.
cc @npub1s6e…n008
#note1cqp…6gm2

2026-06-06 02:10:49 CEST

- reply

oh shit it is malware!
https://discourse.ifin.network/t/microsoft-disabling-repos-related-to-azure-functions-durable-task/549/1

2026-06-05 22:55:39 CEST

- reply

lol preview card image says photobuf not protobuf

2026-06-05 19:48:33 CEST

- reply

Probably just the usual crap tier engineering though.

2026-06-05 19:06:35 CEST

- reply

That would be a really fun way to cause chaos after compromising GitHub's codebase via a malicious VSCode Extension...
Hypothetically.

2026-06-04 23:51:03 CEST

- reply

but my rainbow brackets!

2026-06-04 17:03:45 CEST

- reply

maybe I should go write crap POCs, doesn't seem like it's a barrier to success ;)

2026-06-01 04:45:49 CEST

- reply

ahh, the reverse Charlie Kirk

2026-05-30 23:55:29 CEST

- reply

well uhhhhhh, we’re definitely doing that at work. Not sure how many offhand tho.

2026-05-15 13:36:22 CEST

- reply

look, I’m not gonna be the one to tell the bear whether he’s fancy or not.

2026-05-15 04:10:03 CEST

- reply

fancy bear?

2026-05-12 23:10:12 CEST

- reply

wow, this guy has figured out how to monetize hating IPv6
https://www.gofundme.com/f/help-build-ipv8-the-next-generation-of-the-internet

2026-05-05 15:50:56 CEST

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/522/286/531/366/642/original/d60eac1086b3ba8f.png

2026-05-05 04:43:52 CEST

- reply

ooo scary, knife pigeon

2026-05-05 04:40:32 CEST

- reply

you’re saying these memes aren’t for the birds?

2026-05-05 04:19:31 CEST

- reply

but are there memes?

2026-05-02 17:11:33 CEST

- reply

If you like this, you’ll love ../, and the sequel, ../../

2026-05-01 03:22:06 CEST

- reply

I wonder if parallel dd if=/dev/zero of={} status=progress ::: /dev/{*} would work

2026-05-01 03:18:09 CEST

@npub16td…ucf7 --no-preserve-root, it’s the only way to be sure!

2026-04-30 15:18:39 CEST

- reply

at least let me have the lava lamps

2026-04-28 16:31:01 CEST

- reply

It's me, I'm the guy.

2026-04-28 14:47:41 CEST

- reply

Apparently this question has a cycle time of about a year… finding questions I asked on GitHub issues and then going wait I know that guy.

2026-04-28 05:09:34 CEST

- reply

look I don’t remember why I followed you, but I’m pretty sure it was neither. I blame @npub1s6e…n008

2026-04-28 04:56:30 CEST

Nothing quite like poking at a GitHub repo, then checking out the author's profile and finding a Mastodon account.
Related, if I seem to suddenly be following you out of the blue without prior interaction, that may be why xD

2026-04-27 19:39:53 CEST

Am I bored enough to try learning Pester for testing PowerShell again?
...

2026-04-24 16:55:04 CEST

- reply

I say this because we have too many damn comfy towels, and still a bunch of uncomfy ones, because they’re too bad to donate, too good to throw away, and more than we could reasonably use.
And yet we still run out because they end up becoming a laundry backlog that we can’t keep up with.

2026-04-24 16:51:34 CEST

- reply

I might not root for the animal beforehand, but certainly good for them, and I won’t shed a tear on the outcome.

2026-04-24 16:50:24 CEST

- reply

please tell me you get rid of the old, uncomfy stuff?

2026-04-24 16:48:55 CEST

- reply

look man, I grew up hunting, and reading the romanticized accounts of Africa from Bell, Taylor, and Capstick. I can’t honestly say that if I ever had the opportunity to go on a safari I wouldn’t. But as far as I’m concerned them’s the breaks. If you decided to go hunt things that could kill you, you inherently deserve it when those things kill you. That’s the bargain you made.

2026-04-23 15:22:27 CEST

- reply

ours isn’t open, but also not that restricted. Too many partner orgs who use Teams and need to collaborate.
It’s the tight integration, Microsoft stack sucks but beats G Suite+Slack+Zoom any day. Unfortunately as an org we Reyn all of the above, and more besides…