:rainbowCrow:

Analyst

Location: :cascadia:
Pronouns: He / Him

Public Key

npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008

NIP-05 Address

Profile Code

nprofile1qqsgdvuhpp4pxpgsscwatre9t7k7acwy0q23sharhd3g5p4566hnrtqprpmhxue69uhhyetvv9ujumt0d4hhxarj9ecxjmntqy38wumn8ghj7mn0wd68ytnyd3jhytnrdakj7mtpwf3xcefdv9hxx6r0wgq8hk0w

Publishing to

relay.momostr.pink

nostr.dler.com/marble-anchor

Author Public Key

npub1s6eewzr2zvz3ppsa6k8j2hadamsug7q4rp068wmz3grtf440xxkqr8n008

Show more details

Last Notes

2026-07-15 05:03:21 CEST

- reply

I've read that before but they never provide the referenced studies to follow up.
But my biggest question is how it would enrich the billionaires. That one doesn't click.

2026-07-15 04:21:48 CEST

- reply

Sure, I'll bite. <li>Which doctors?</li><li>Which timezones and which parts of each timezone were referenced? Because the impact to each is very different.</li>

2026-07-14 20:53:16 CEST

Every windows computer right now.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/919/837/077/372/620/original/a4912b96193b6670.png

2026-07-14 20:45:08 CEST

Imagine if your car or bike manufacturer sent you a box of 570 new parts and said you had to replace them to fix the poor engineering and design of the product or else you are the one who will be considered negligent, not the negligent multi-trillion dollar corporation. And it will happen again every month for the foreseeable future. But it's on you to perform the replacements yourself.

2026-07-14 15:19:20 CEST

RE: https://flipboard.com/@theseattletimes/seattle-news-27p8llobz/-/a-0tGiZXs4Sv-m9v9gpL_MyQ%3Aa%3A2857557016-%2F0
Stop fucking with us and just pass it already.
#note1zkk…4tgx

2026-07-14 15:00:20 CEST

RE: https://infosec.exchange/@cR0w/116915966560002695
This got all sorts of fun shell tricks in the replies. If you have more, please add them. They will surely be new to someone.
#note1ke9…sflr

2026-07-14 04:27:51 CEST

You know how there are weird tricks with computer stuff that you think everyone knows but they don't? I live learning and teaching new things like those when they come up.
Today's was the carat substitution in bash. It probably works in other shells too but IDK, I'm too old to learn a new shell.
The way it works is fairly similar to the / in sed or similar. You can use them to run the previous command but with a string substitution.
For example, let's say I entered this command: dig A cascadiacrow.org
When it fails to resolve, I realize it was a .com domain. Rather than retyping the command, or hitting the up arrow to change the previous command, you could do this: ^org^com^
And it would run: dig A cascadiacrow.com
Kind of cool with those one liners you spend way too much time on and find a typo.
Anyway, I used it and someone thought it was magic so if it's new to you too, happy Monday.

2026-07-13 17:52:07 CEST

- reply

I'm helping something... :catte:

2026-07-13 17:51:05 CEST

- reply

I'm here to help.

2026-07-13 17:35:54 CEST

- reply

If someone there did have more info, it would be nice to hack up a quick uBlock filter for it.

2026-07-10 22:43:11 CEST

RE: https://infosec.exchange/@patrickcmiller/116897619718666207
Let me fix that headline real quick:
**The Hidden Security Risks of Understaffing**
#note1y8d…u6xf

2026-07-10 16:54:14 CEST

- reply

Is it converted to a trailer or is that their hokey way of pulling it behind an RV or... ?

2026-07-10 16:47:31 CEST

RE: https://mastodon.social/@effinbirds/116896223924595816
blue team dot jpg
#note1rs8…tnm4

2026-07-10 03:43:51 CEST

- reply

I like that attitude but maybe don't trust an Internet stranger with brakes. 😅

2026-07-10 00:24:30 CEST

- reply

Je suis désolé. Je ne comprends pas "des passoires."

2026-07-09 23:39:32 CEST

RE: https://mastodon.social/@simple_sabotage/116892167027134310
Already doing it. What's next?
#note1v0q…4cwq

2026-07-09 21:41:09 CEST

Every time I see my current pfp I'm like "WTF even is that?!" and then I remember I'm the one that did it to myself.

2026-07-09 21:40:19 CEST

- reply

:blobcatpopcorn: I'm going through so much popcorn today.

2026-07-09 21:39:36 CEST

- reply

Do people even read blogs anymore?

2026-07-09 21:22:44 CEST

- reply

Or better yet: Humans following legitimate engineering practices.

2026-07-09 19:03:07 CEST

RE: https://infosec.exchange/@BleepingComputer/116891090766065286
Let me fix that for you: Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover introduce vulnerabilities in its codebase.
#note16ur…ts9x

2026-07-09 16:01:22 CEST

- reply

"Technically right is the best kind of right" is not a good look for a vendor though.

2026-07-08 19:31:22 CEST

- reply

I recently had to repair my washing machine and I refuse to touch modern appliances if I don't have to. They're as bad as computers now. 😆

2026-07-08 19:12:19 CEST

- reply

Nice. Good luck. I've also thought about taking some classes at the tech college I used to teach at. Lots of real trades taught there.

2026-07-08 18:36:14 CEST

Where do people look for non-tech jobs? I've been in this hellscape too long and don't even know how to look for something else. Like say I decide I want to work at a bakery now because fuck computers. How would I find openings? Is it like the days of walking in with a resume and seeing if they're hiring?

2026-07-08 18:05:25 CEST

Patch your Palo shit.
https://security.paloaltonetworks.com/

2026-07-08 15:56:40 CEST

RE: https://infosec.exchange/@securestep9/116884683751982510
WTF? :brdLol:
#note1ulm…k8qz

2026-07-08 00:53:41 CEST

- reply

You're blocked by more people than follow you now too?

2026-07-07 23:29:57 CEST

- reply

I've heard about people doing this. I get the idea that it should be harder to crack, but that's assuming it's properly stored, properly salted, and GPUs wouldn't have gotten so much faster.

2026-07-07 23:00:04 CEST

- reply

Imagine the level of familiarity you would have with that o-ring by the time you were done tracing it carefully like that.

2026-07-07 22:34:22 CEST

hashtag tenda
#internetOfShit
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/880/594/263/574/819/original/e2b2692253640cec.jpg

2026-07-07 20:16:08 CEST

Rolling out my new password manager to piss off the CISSPs.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/880/055/388/423/065/original/b0e1f8eb3c0c4ee2.png

2026-07-07 18:27:29 CEST

- reply

Only if they aren't regularly drained.

2026-07-07 16:52:16 CEST

giggles
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/879/235/751/512/031/original/841b1846f70dca2a.png
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/879/246/613/043/802/original/deddf3bebe6b5d52.png

2026-07-06 21:58:52 CEST

RE: https://infosec.exchange/@cR0w/116874792103199684
Holy shit, y'all. This is over 15 years old now.
#note1nz7…jq6l

2026-07-06 21:56:39 CEST

- reply

That's fair. Remember vsftpd 2.3.4?

2026-07-06 21:53:50 CEST

- reply

You mean like a bugdoor? Yeah, good question.

2026-07-06 21:38:51 CEST

https://kb.cert.org/vuls/id/213560
> The web server binary /bin/httpd> contains an undocumented backdoor authentication mechanism in the login()> function. Initially, the function follows a normal authentication path using MD5-based password verification. However, if authentication fails, the function invokes GetValue("sys.rzadmin.password")> to retrieve an alternate password value from the device configuration. It then performs a direct strcmp()> comparison in plaintext between the user-supplied password and the configuration-stored value. A successful match grants role=2> admin-level access and creates a valid session.
> The associated username is not validated, so any provided username will succeed when paired with the backdoor password. This backdoor authentication mechanism is not documented or visible through any administrative interface.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/874/721/196/268/865/original/460f7d05d55bce28.png

2026-07-06 17:59:16 CEST

- reply

"Hey Claude, slightly modify my CV 1337 times and submit each one for me."

2026-07-06 17:19:09 CEST

- reply

In fairness, they've been dealing with some *things* lately. 😆
That said, I'm still waiting on a rejection email from them too.

2026-07-06 17:06:28 CEST

- reply

So many ghost jobs out there.

2026-07-06 15:54:36 CEST

- reply

Sounds familiar. And not just for myself. :-/

2026-07-02 22:46:56 CEST

- reply

It's also a bad time to put random objects into orifices as the ER is particularly busy that day.

2026-07-02 20:22:36 CEST

- reply

*Sorry, admin. I mistyped my password 37 times again.* :neocat_bottom:

2026-07-02 18:18:18 CEST

- reply

I've said it many times and will continue to do so: Ubiquiti is the Tesla of networking.

2026-07-02 17:20:09 CEST

25 Ubiquiti CVEs, seven of which are sev:CRIT and the rest are sev:HIGH. LMFAO.
https://community.ui.com/releases/Security-Advisory-Bulletin-066-066/984eceb3-49c8-4227-942d-671c289b3afc

2026-07-02 16:54:35 CEST

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/850/951/516/036/611/original/4037177c3e6621ba.png

2026-07-02 14:52:12 CEST

New project.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/850/469/396/709/968/original/d6fada3a0d3c9e81.png

2026-07-02 01:43:17 CEST

- reply

Worked out well for InfraGard too. 😆

2026-07-02 01:31:16 CEST

- reply

Do you mean Asset Inventory or Anal Intercourse?

2026-07-01 19:36:51 CEST

RE: https://infosec.exchange/@BleepingComputer/116845914301823740
If only the Department of Homeland Security had a national coordinator for critical infrastructure and resilience. Maybe call it something like the Cybersecurity & Infrastructure Security Agency. IDK, just a thought.
#note1924…n2ke

2026-07-01 15:15:27 CEST

- reply

Given how much utilities in the US rely on "private" networking from ISPs, good fucking luck since the feds gave up on evicting FUNKY BOOBSWEAT from the telcos.

2026-06-30 21:57:48 CEST

# O
wO

2026-06-30 21:49:59 CEST

What's the 2026 version of an earring on only the right ear?

2026-06-30 21:17:28 CEST

- reply

The Seattle Dog itself or being named the best in the US?

2026-06-30 20:21:29 CEST

RE: https://flipboard.com/@theseattletimes/food-drink-sqn1g7baz/-/a-iCDTADqdS56paJjmGb97vw%3Aa%3A2857557016-%2F0
Suck it you nerd-ass foodies.
*sees it's from NYT*
Dammit.
#note1l06…mcp6

2026-06-30 00:09:31 CEST

If you saw a building with a large sign that said Fruit Merchants and Banana Specialists what would you assume was going on inside?

2026-06-29 23:37:35 CEST

- reply

Sort of, yeah. But I don't expect that in any professional org you would expect to see it. And it's definitely being used for shady stuff, especially / specifically in conjunction with Yggdrasil private networking:
https://github.com/yggdrasil-network/yggdrasil-go

2026-06-29 22:32:10 CEST

- reply

Is this a panini press? 😆
But a GAYINT branded holster would be pretty hot.

2026-06-29 21:56:23 CEST

- reply

Oh shit this looks easy.

2026-06-29 21:55:29 CEST

- reply

:duckduckgo: how to make button pins

2026-06-29 21:47:59 CEST

- reply

Guess I better figure out how to have some pins made.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/835/119/063/727/133/original/7f771023ba85b465.png

2026-06-29 21:42:46 CEST

- reply

Ooh, I've never made pins, or had pins made for me. Just stickers and patches. :brdThink:

2026-06-29 20:00:57 CEST

If this project is new to you, maybe read through it and prepare a hunt. No reason. Just a typical happy Monday.
https://github.com/Revertron/Alfis
> This software provides:<li>Tiny and peer-to-peer synchronized database of domain names. The consistency of this database is based on blockchain technology that prevents retroactive changing of data, and has strict cryptographical consensus.</li><li>DNS server with cache and enhanced security features. It resolves the domains from database and forwards all regular DNS-requests to some other resolver – your router, Google DNS, Cloudflare DNS, or AdGuard DNS (if you want to block ads and trackers).</li><li>Other systems need you to organize and run several DNS-servers to resolve their domains and regular domains, we have both in one. Moreover, ALFIS can forward requests of regular domains to DNS-over-HTTPS server. The security and privacy is right here.</li><li>Convenient graphical user interface to create domains in this alternative domain system. If you want just to use it like a DNS-server you can run it with -n flag or just build/download the variant without GUI.</li>

2026-06-28 05:44:26 CEST

- reply

Does no one believe in the true meaning of cyber anymore?

2026-06-28 05:42:07 CEST

- reply

Wait, it's not required to consummate the follow?!

2026-06-27 01:57:14 CEST

RE: https://flipboard.com/@theseattletimes/local-politics-739ra6hbz/-/a-Kp6FOU8GRXiZBroMBlirxg%3Aa%3A2857557016-%2F0
Good for them. The Bible needed more HRT in it.
#note10wl…t4mu

2026-06-26 21:55:17 CEST

RE: https://flipboard.com/@theseattletimes/seattle-news-27p8llobz/-/a-Krdm3SqiQ3avro-EryAWnQ%3Aa%3A2857557016-%2F0
I'm tired of being teased like this. Please just let us finish. :neodog_glasses_bottom:
#note1vkj…vqmy

2026-06-26 15:39:19 CEST

- reply

Checking in from Washington. They're low but not common here like in California.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/816/681/893/044/468/original/9ccf3ef0641d4fb2.jpg

2026-06-26 04:15:05 CEST

- reply

N64.0?

2026-06-25 23:42:40 CEST

🎶 Imagine there's no Cyber
It's easy if you try
No snake oil to sell us
No unmaintained blinking lights
Imagine all the blue teams
Blocking by ASNs...
Imagine there's no vendors
It isn't hard to do
Nothing to buy or lie for
And no certifications, too
Imagine all the blue teams
Trusting their own tools...
You may say I'm a Boomer
But I'm not the only one
I hope someday you'll join us
And the net will be as one
Imagine no subscriptions
I wonder if you can
No need for greed or liars
No Fortinets or PANs
Imagine all the blue teams
Sharing their IOCs...
You may say I'm a weirdo
But I'm not the only one
I hope someday you'll join us
And the web will live as one 🎶

2026-06-25 23:17:13 CEST

- reply

Cyber gonna cyber. I always assume that any security org is either openly super shady or super shady and better at hiding it.

2026-06-25 05:32:28 CEST

#
**BUTTS**

2026-06-25 04:54:07 CEST

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/808/484/260/622/459/original/6f1cc5376068b7df.jpg

2026-06-25 04:01:19 CEST

Did @npub12as…yvvc kill his instance? Whoopsie.

2026-06-25 00:39:33 CEST

Anyone have a site keeping track of cyber orgs killing themselves by either choking on the AI pill like Greynoise or failing to hide their fuckups until reaching IPO like Huntress? Mostly looking for something to go with my popcorn and figure out who's worth even applying to.

2026-06-24 14:43:10 CEST

- reply

I guess there must be more to it than I'm aware of then because telling people about a problematic person doesn't seem to be on the same level as war and fighting.

2026-06-24 14:40:46 CEST

- reply

Has anyone from Florida tried shooting it yet?

2026-06-24 14:37:14 CEST

- reply

> all the wars, the fighting, the cancelling
🎶 One of these things is not like the others 🎶

2026-06-22 20:01:52 CEST

- reply

I have now learned that people really don't like to be called a slop jockey so that's another fun new one.

2026-06-22 04:24:34 CEST

copsucker

2026-06-20 17:49:22 CEST

- reply

I got mine from Logan at Rogue Dynamics but I don't know if he still makes them. If not, I now have a patch maker who I'm sure could do something similar. Maybe I'll mock something up for him. :brdThink:
Better yet, I was going to do a fundraiser again in early July so maybe I'll make that one of the tier prizes.

2026-06-19 15:54:17 CEST

- reply

Nah it's cool.

2026-06-19 15:27:26 CEST

- reply

Maybe if he spent less time getting hit by cars he could have finished his death ray.

2026-06-19 15:15:12 CEST

- reply

He didn't feed the duck to his pigeon did he?

2026-06-19 04:44:02 CEST

Check out my new collection:
https://infosec.exchange/collections/116774470770260996

2026-06-19 00:13:41 CEST

- reply

What is this, 1997? 😬

2026-06-18 20:58:16 CEST

I know it's been said before but the security industry has no incentive to actually help secure anything. They sell compliance and vibes. Otherwise they would go out of business.

2026-06-18 17:41:50 CEST

- reply

It's me. I'm that analyst.

2026-06-18 17:40:39 CEST

The kind of analyst who will let your entire org burn before letting their hash browns burn.

2026-06-18 17:27:13 CEST

- reply

I get what you're saying but he's calling others to action when he's in a position to **take** action. That's the theme: Those with resources expect others to do it instead of being the change they have the ability to be.

2026-06-18 17:15:02 CEST

- reply

And music streaming up there too.

2026-06-18 17:11:34 CEST

- reply

I met with a junior dev two days ago who wanted to get into security and they didn't believe me when I said I use Excel more than any other tool.

2026-06-18 16:34:32 CEST

- reply

Some companies even sell them with handles cut into them to make the easier but yeah, way better than risking bristles.

2026-06-17 19:32:12 CEST

- reply

LMFAO. Even I know those names.

2026-06-17 16:05:06 CEST

- reply

:sm64_a: :sm64_r: :sm64_t:

2026-06-17 14:31:09 CEST

- reply

I haven't had enough coffee to read about lobster sex yet.

2026-06-17 14:26:45 CEST

- reply

No, they destroyed quality of their product's experience. It's like a rancher not taking care of the pens and yeah it sucks for the livestock, but it's not impacting the profits in the short term. And long term goals are in energy, not advertising.

2026-06-16 22:21:44 CEST

> Nvidia CEO Jensen Huang — whose work helped enable artificial intelligence — stressed in an Associated Press interview Tuesday that society has no choice but to change in the advent of AI.
> “When I was growing up, I used to play in the streets,” Huang said. “When cars came along, you obviously can’t play in the streets now.”
I don't think there is a word strong enough for how bad this fucker needs to get absolutely fucked. Fuck these absolute sociopaths. Every single one of them.
https://www.seattletimes.com/business/ap-exclusive-nvidias-jensen-huang-says-society-needs-new-social-norms-in-the-age-of-ai/

2026-06-16 22:06:10 CEST

> Crypt::DSA versions before 1.21 for Perl reused the nonce across signatures
> **reused the nonce**