nyan/11

Little goblin with catears.

Unfinished projects, complaining about computers, reinventing the wheel (badly), has not fully read any docs since 2015. Certified cognitohazard.

Proud bot parent to many failsons:
[@enojifier_bot](https://infosec.exchange/@enojifier_bot )
[@dreizehnzwoelf_bot](https://infosec.exchange/@dreizehnzwoelf_bot )
Infosec related: https://infosec.exchange/collections/116931760660109009

Testimonials:
"not helpful" Lucas Werkmeister (npub13c3…u3pk)
"silly 😌" also Lucas Werkmeister (npub13c3…u3pk)

All my opinions are that of my employer but they don't know it yet & I am not telling you were I work. Apropos: If you need some idiot to kick computers for purposes of making them secure hmu, this job fucking sucks (vulnerability management, automation/engineering for your soc/isrt, ...).

PFP by Jen

Languages: German, English
Pronomen (🇩🇪): egal
Pronouns (🇬🇧/🇺🇸): name reference > they/it > whatever

Public Key

npub1t9qkvlgeus9htqvhdh0jp0aw9qpz76ph74r8e9hsudma57azvj3qndr0p6

NIP-05 Address

[email protected]

Profile Code

nprofile1qqs9jstx05v7gzm4sxtkmheqh7hzsq30dqml23nujmcwxa760w3xfgspqqd8jj4q

Publishing to

Author Public Key

npub1t9qkvlgeus9htqvhdh0jp0aw9qpz76ph74r8e9hsudma57azvj3qndr0p6

Show more details

Published at

2026-09-10T07:39:25Z

Kind type

0 Metadata

Event JSON

{ "id": "4b8c2161930563e8e9dbdf15b10e0507b962fae4a2f24e871ed9b531716c63a5", "pubkey": "5941667d19e40b7581976ddf20bfae28022f6837f5467c96f0e377da7ba264a2", "created_at": 1789025965, "kind": 0, "tags": [ [ "proxy", "https://infosec.exchange/users/nyanbinary", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/nyanbinary", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"nyan/11\",\"about\":\"Little goblin with catears.\\n\\nUnfinished projects, complaining about computers, reinventing the wheel (badly), has not fully read any docs since 2015. Certified cognitohazard.\\n\\nProud bot parent to many failsons:\\n[@enojifier_bot](https://infosec.exchange/@enojifier_bot ) \\n[@dreizehnzwoelf_bot](https://infosec.exchange/@dreizehnzwoelf_bot )\\nInfosec related: https://infosec.exchange/collections/116931760660109009\\n\\nTestimonials:\\n\\\"not helpful\\\" nostr:npub13c3kftgc7926gshaumen3g9ms37p6eess59fwsh4ams8n5x89kvqpeu3pk\\n\\\"silly 😌\\\" also nostr:npub13c3kftgc7926gshaumen3g9ms37p6eess59fwsh4ams8n5x89kvqpeu3pk\\n\\nAll my opinions are that of my employer but they don't know it yet \u0026 I am not telling you were I work. Apropos: If you need some idiot to kick computers for purposes of making them secure hmu, this job fucking sucks (vulnerability management, automation/engineering for your soc/isrt, ...).\\n\\nPFP by Jen\\n\\nLanguages: German, English\\nPronomen (🇩🇪): egal\\nPronouns (🇬🇧/🇺🇸): name reference \u003e they/it \u003e whatever\\n\",\"website\":\"https://infosec.exchange/@nyanbinary\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/114/432/345/207/412/313/original/b4feed76ab89c6a5.gif\",\"nip05\":\"[email protected]\"}", "sig": "cb8cbd8e2ad816b4b48e927991508caa39fc36bc28bf7fd8d897fe1d912d1910590f9a33ddf7dc04a5a4fe9d7c1e6d5ac21cdc0d1885a29629afa8ac054eab42" }

Last Notes

2026-09-10 07:42:05 UTC

- reply

I appreciate certainty in my life

2026-09-10 07:34:10 UTC

- reply

Kirkmas is an attempt by the Secular Left to prevent us from celebrating what actually matters - 9/11

2026-09-10 07:07:52 UTC

Happy 1y anniversary to something rather funny.

2026-09-09 17:27:53 UTC

Flashback to the time a security policy was written & multiple people raised the question "ok, we defined cvss (latest version) as our metric for acceptable vulnerability remediation periods. Whose CVSS value & B or B+TE or B+T or ..." and the answer from our governance team was "idk, y'all figure it out *hits publish on policy*"

2026-09-09 15:45:51 UTC

- reply

something something we finally found the guy that impregnated clippy

2026-09-09 15:37:21 UTC

- reply

slow down, man, do you know what this naughty ASN inflation does to the economy?

2026-09-09 15:14:44 UTC

- reply

GNU * (Electron + Linux) / (Eletron*Linux) :thinking_very_hard:

2026-09-09 15:01:17 UTC

i should get tattoos.
how does one visualize aes in a tattoo-suitable form :thinking_cirno:

2026-09-09 14:02:19 UTC

- reply

nicht wirklich Sprite, Sinalco Zitrone Zero, wir sind ein ein guter Deutscher Haushalt!

2026-09-09 13:56:50 UTC

- reply

you are right, I should use The Lords Softdrink (Mate)

2026-09-09 13:55:05 UTC

Was wenn ich Blaubeertee in Sprite mache...

2026-09-09 13:33:54 UTC

- reply

Cmon, @npub1s6e…n008 , thats not a vulnerability, thats a feature :3

2026-09-09 12:03:26 UTC

- reply

sometimes you just know you took a wrong turn somewhere a couple of days ago.

2026-09-09 12:03:05 UTC

I guess we are implementing our own custom tree to take advantage of pythons range...

2026-09-09 11:22:12 UTC

- reply

thats too many modifiers, I'm scared :neocat_scream_scared:

2026-09-09 09:18:26 UTC

you know you went wrong when you start creating dicts of context managers... (also: til about pythons contextlib.ExitStack)

2026-09-09 08:13:52 UTC

Linux, or as I have come to calling it, Electron+Linux

2026-09-08 20:23:43 UTC

istg, tfw you put so much effort into optimizing a downloader tool, just to be hit by a rate limit...

2026-09-08 20:07:52 UTC

- reply

(1 is the correct answer in this case btw, the difference between 1 and 9 is *checks notes* ~1%)

2026-09-08 20:06:39 UTC

I can't be asked to do the math, someone tell me which zip compression level to use please.

2026-09-08 18:36:25 UTC

- reply

I'm also quickly going to mention this, explicitly not as a complaint but as a good case study of a well chosen "SHOULD" & why should is better than must here:
https://www.cve.org/ResourcesSupport/AllResources/CNARules#section_5-1_Required_CVE_Record_Content
> 5.1.1 SHOULD contain sufficient information to uniquely identify the Vulnerability and distinguish it from similar Vulnerabilities.
This, uh, will be a bit of an issue with https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83972 & https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-83970 . You it actually doesn't matter. The fix is the same, fucking update. And it doesn't matter if you got owned through -83972 or -83970, given the current firehose. It's actually one of those cases where I'd be happy to relax the "one record per vuln" rule, in no world does the differentiation of these two matter to anyone.

2026-09-08 18:26:10 UTC

- reply

I explicitly don't want to complain about MSRC here, this is a bigger topic, but I am a bit confused here:
Compare these two:
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-81954 - AV:L,UI:R
> Q: According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
> A: An attacker must send a user a malicious Office file and convince them to open it.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-80081 - AV:N,UI:R
> Q: How could an attacker exploit this vulnerability?
> A: An attacker could send a specially crafted PowerPoint presentation containing malicious linked media to a target user. The user would need to open the presentation, start the slideshow, and allow the linked content. Successful exploitation could allow the attacker to execute code on the user's system. Authentication is not required.
To me the attack flow looks equivalent wrt to attacker location. We can argue about #2 being actually harder to execute, having more social engineering prerequisites... which is why it totally makes sense for #2 to scored higher on CVSS as it's apparently network & the other one local.

2026-09-08 18:15:07 UTC

- reply

also like another 10-20 with the exact same contents

2026-09-08 18:13:22 UTC

https://db.gcve.eu/vuln/cve-2026-81953
> Microsoft Excel Remote Code Execution Vulnerability
*looks inside*
> Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.

2026-09-08 17:57:47 UTC

- reply

(alas, the (un)employment agency uses teams, so... uh... fuck)

2026-09-08 17:56:43 UTC

- reply

gods, I enjoy being unemployed. Good luck, yall

2026-09-08 17:55:53 UTC

Meow

2026-09-08 14:16:28 UTC

- reply

pfff, no reason figuring out identity in cyberspace should be easier than just me figuring out my own :3

2026-09-08 13:34:25 UTC

I guess you can just make honey candy in the microwave if you are bored enough :3

2026-09-08 11:37:52 UTC

you know this feeling when you brute force a problem, you realize the solution is very peculiar & you could have guessed it, and then you Ctrl-F the docs & realize you could have just read those?

2026-09-08 09:29:20 UTC

- reply

cloud.intranet.bund.de is a beautiful chain of words :3

2026-09-08 09:26:18 UTC

Weeeee
https://files.nyanbinary.de/ct/misc/bund.de.txt

2026-09-08 07:21:03 UTC

- reply

for the poc I took the LetsEncrypts Oak 2025H1 log. In the format I pulled it it's about 800GB compressed, about 1.6TB uncompressed. I have only done leaf-local deduplication & that left me with about 30ish GB of domain names. Taking .de as a test case for deduplication, normalization & removal of wildcard subdomains means deduplication reduces the domain count from 50M to 30M. I suspect this 40% doesn't translate 1-to-1 filesize though :neocat_pensive:
And you know, that 15GB .com file is still staring at me judgingly, with me fully knowing this is just one half-a-year from one of many logs.... :brdScared2:

2026-09-08 07:05:40 UTC

- reply

touching Certificate Transparency logs & seeing what data re: domains & domain relations I can wring out of them. I'm telling myself this is about creating a public domain intel data set but it's mostly about seeing where the limits re: data set size with my skills is :3

2026-09-07 20:05:02 UTC

- reply

...is this a trick to get more chicken tikka masala? :brdThink:

2026-09-07 17:45:52 UTC

- reply

statebank it is.

2026-09-07 17:45:10 UTC

- reply

...gibt wesen ohne? :neocat_shocked:

2026-09-07 17:43:47 UTC

- reply

(yes, of course my CV is written in LaTeX. I actually put in effort this time, last time it was a literal .txt)

2026-09-07 17:39:12 UTC

> Please explain that gap in your CV
> \bigskip

2026-09-07 17:26:35 UTC

- reply

though, honestly, .gov is the one that bothers me the most. Just use gov.us like a normal country.

2026-09-07 17:25:38 UTC

- reply

oh, in that case: .statebank. Which state bank? Well, India of course. They now hold the sole ownership of the .statebank TLD. Every other state bank? Shit out of luck. Including *checks note* the State Bank of Pakistan.

2026-09-07 16:28:52 UTC

- reply

what was it before the reset? 👀

2026-09-07 16:19:37 UTC

.... .wolterskluwer is a fucking tld?

2026-09-07 15:57:06 UTC

- reply

(it's the cheapest category of spinning rust, my severance wasn't THAT good)

2026-09-07 15:56:00 UTC

- reply

Will the 12TB worth of drives I bought factor into this

2026-09-07 15:54:32 UTC

How many more times will I fail to appreciate the scope of the project during this one project?

2026-09-07 13:28:05 UTC

- reply

Thinking about stuff before posting it? I'd never

2026-09-07 13:25:30 UTC

Effective Altruism :neofox_drake_dislike:
Effective Autism :neofox_drake_like:

2026-09-07 11:50:34 UTC

- reply

pfff, die nehmen uns mit der automatisierung auch alle jobs weg, back in my day mussten wir noch regelmäßig einmal gegen den Tisch treten... :neocat_pensive:

2026-09-07 11:47:58 UTC

- reply

what if it loaded more internet puppies :neobot_angel_pleading:

2026-09-07 10:49:05 UTC

- reply

I can't afford current cloud prices, lmao

2026-09-07 08:40:54 UTC

- reply

I think I have done this exact joke before but my posts autodelete way too quickly so I'll never know.

2026-09-07 08:40:16 UTC

- reply

STOP DOING CERTIFICATES.<li>CONNECTIONS WERE NOT MEANT TO BE TRUSTED</li><li>YEARS OF ISSUED CERTIFICATES yet NO REAL-WORLD USE FOUND for going beyond TOFU</li><li>Wanted to have implicit trust for a laugh? We had a tool for that: It was called "WEB OF TRUST"</li><li>"Yes please give me a CERTIFICATE for the site. Please make it signed by ANY OF THESE DOZEN ROOT CAs" - statements dreamed up by the utterly Deranged</li>
LOOK at what TLS LIBRARIES have been demanding you Use for all this time, with all the public key pinning & BGP routing improvements we built for them (These are REAL Certificates, issued by REAL CAs):
[...]
"Hello, I would like 🔒️ for apples.com please"
They have played us for absolute fools.

2026-09-07 08:30:09 UTC

grmph, file so big even my biggest 'puter can't hold it in ram at once, this will be a pain...

2026-09-07 07:12:13 UTC

- reply

www.nic.xn--vermgensberater-ctb ... did I fuck up or do they just let any idiot write to CT logs :dragon_confused:

2026-09-07 06:01:30 UTC

- reply

reduce reuse recycle :neobot_giggle:

2026-09-07 05:57:09 UTC

Fediverse account hijacking campaign but they get turned into catsalads :3

2026-09-06 18:30:12 UTC

- reply

übernahme? fühle mich mehr nach übergeben :(

2026-09-06 18:23:10 UTC

- reply

...so, I think I am leaking memory somewhere. Amusingly process-based parallelization appears to "fix" this issue as it just respawn worker processes after a task is done, limiting the leak to just one task which is ... not good but good enough?
My money is on cryptography.x509 leaking somewhere, fwiw.

2026-09-06 17:46:05 UTC

- reply

why though...

2026-09-06 17:40:27 UTC

- reply

counterpoint: I shouldn't, the system is already swapping...

2026-09-06 17:07:18 UTC

I should have parallelized this script, lmao

2026-09-06 15:56:40 UTC

- reply

ikr?

2026-09-06 15:42:41 UTC

...looks like I broke a webshop by setting my username to :3 :3

2026-09-06 14:35:20 UTC

- reply

saaaaame

2026-09-06 14:09:27 UTC

3.5in SATA SSD :3

2026-09-06 13:42:48 UTC

- reply

same & in my experience it always struggled with very large queries ("give me all .de domains"), even when directly using the psql endpoint. I mean, makes sense, it's not built for that & neither of the other sites I found so far do that either so ... I guess we are downloading a few TBs? :3

2026-09-06 13:40:06 UTC

- reply

:party_porg:
Good thing I didn't come over there to say hi then :3

2026-09-06 13:25:09 UTC

- reply

Im Westen durch die Bank bei 20%, was saufen die Leute

2026-09-06 13:24:42 UTC

Die verfickte AfD steht in den Ossi Umfragen bei verfickten 40%? Was zum Scheiß, da ließt man einmal nen paar Monate keine Umfragen und dann macht ihr sowas? Ey was ist falsch mit euch.

2026-09-06 13:11:24 UTC

- reply

honey works great :ablobcatnodfast:
Fortunately this was just black tea without honey so less of a sticky spill :3

2026-09-06 13:10:11 UTC

- reply

it's one of multiple (found 9 so far) such domains:<code>sjlzlksf5gsd7y64ef5h6l52wjrfcacaabptazaa6b2aaah7oaaaazyaaaakby6[.]7rt6h7d74ccdjaad3twulilrzvyauoxdjp3l6naqapqmpx5yawfluzxgvabidxi[.]2amxlzijc7v25sx5xcwyj5jrpm5ptna2t2r6y5vtehwpasajr5uehto3gbvhzx5[.]4jjqclcfjzi2opcbax7bsmkpxu667ebwec7[.]ns-movec[.]trendsbongo[.]com 27f4shdyiordnyziid5x7myovadvcacaacbummia3r2qeae5x4caazyaaaaoidc[.]varhryzv65rwsmobelqyrhckewpuzdnx3schjnys7sx5zwsvfqkxltyahudzjq4[.]exufu2fvh5dkgc6lnlm6d2pvd5zyzcas752u7uiutso5wizke6cq6agombqf6bg[.]bazv2llvor2vstemb3y7srlnh2a7drrqa6f[.]ns-movec[.]trendsbongo[.]com 553adnbqvngizyzowymx6b5osrifcacaab4ntniaujcaaaeteyaaazyaaaali63[.]gmqpwecio2ccnzfkr6ioaontpymgxj6s5u7zlx55vj2fb2lvvfkz7j2hsijp6ux[.]mogbeukmjubffgq6ouwj6bbqbcntyavkd4m7a2jjqgic6vz23gislppkgvbmmku[.]d6c65bqjcfupo2hhljpa6z7c4sr27dga52h[.]ns-movec[.]trendsbongo[.]com 62f4rmnihcxp7y7aprux6gm7k5kfcacaabg5laaaelfaaaemzmaqazyaaaaajlz[.]m4gk4le2zniamig6egbtmhsuto6qbtui2x7435t3ch42kyhxqjqd2vhch6jmdb6[.]mx33v5cssxhkgnusvkzhenijf6wd7xbea6ctcv3ou72ok4bm63fpjz22nzmwj3g[.]y6s3hzliixkikseg3yoycezx55yvlq53uce[.]ns-movec[.]trendsbongo[.]com kwap6tv44axh5y3zgahh7sjw4sffcacaad54fgib2ikqaadidiaaazyaaaakjsg[.]q4t4glnd4w3lc5ckqr37l72meifjo7njkddllvernof3yexv5ioyiwfvckqbaaa[.]bb4jrcv56dowjvfnw33egg5bfsqkcnsxs77on5kxqzfeoaah6thlc76ed7gi4t5[.]a6l7q3j2hwpkukzn2cwia46ry7hcufozguy[.]ns-movec[.]trendsbongo[.]com 7zzg3a7yivnrty5pcq5h6j3t5ykvcacaadd3rxqa6ngqaadg24aaazyaaaajmsu[.]7k42borj3zuho6wx7eb53jcelyh5ztps5f25fnslpcs5ixs3n7oq7jodink5afh[.]aw7rhtoqclola24ypr6c3f4wdwq3xyfcre3op7bfn3ufmza5evkkqdos7vtd7ja[.]bui6ydg4tp74ystbaydivrojhnmgk4bjph2[.]ns-movec[.]trendsbongo[.]com 6dh4swbmiv6o7y4y5i6h7zgs7yofcacaacyfo7ab5vcaaad5jaaaazyaaaaodz7[.]zqmtwbrpmgt5a42f6kjsilogn36et45m5rkvdhoja4om3zv2h3tvodz7a7du5s4[.]2hqym37rqwcp4apkyqj27bn4lgp6tu2nifcb4ubrhzpynev6ivpkbjru77xjjkk[.]5c5gxwentinanvpfu4vgng4w5bp4nhost4i[.]ns-movec[.]trendsbongo[.]com vu4t2bh4uawaxyzjuiqx7buajlbfcacaadgb4baavbgqaacng4aaazyaaaah4wn[.]qzbufzdwtezvdjb7jfkvcbx2f3opsuh7u66noumpqmy4ty64hnldibj3jr7vw3z[.]rnsxicgjjhyyfw5hbnbjxvarnnu6f2h5pr5gpr7544o6fni34prcrpkio4j2up3[.]iv6mucxopnr5rdbtdkf5qxrqfl7dc25yvzd[.]ns-movec[.]trendsbongo[.]com dmkb7lhsocgcvy456m2x7dxf27tvcacaaab2qeaa3ugacafnfeaqazyaaaaoirr[.]2x6y363bbbbe6o5xvorgjtzz5roiawhk7iilcpyuptw3dqnud5pbskjysx4r5qc[.]t7oyimmnaqeid7l2t445c4p2vurrwc2wmefaam3nvkz42ykprd22azyercm4u23[.]2ekjcsfvarcenzdugwr7hh3yga2f534572j[.]ns-movec[.]trendsbongo[.]com </code>
Checking more recent CT logs (https://ctlogs.dev/cert/0000031a05f232408add163008870554f7b8b4a84013 ) there is also versions that aren't just random? Higher level domains (e.g. trendsbongo[.]com) are serving stub websites that also aren't helpful in figuring this shit out... :dragon_confused:

2026-09-06 12:46:52 UTC

- reply

all I know that LetsEncrypt issued a certificate to them at least once, I'm afraid to find out more :3

2026-09-06 12:44:53 UTC

- reply

sjlzlksf5gsd7y64ef5h6l52wjrfcacaabptazaa6b2aaah7oaaaazyaaaakby6.7rt6h7d74ccdjaad3twulilrzvyauoxdjp3l6naqapqmpx5yawfluzxgvabidxi.2amxlzijc7v25sx5xcwyj5jrpm5ptna2t2r6y5vtehwpasajr5uehto3gbvhzx5.4jjqclcfjzi2opcbax7bsmkpxu667ebwec7.ns-movec.trendsbongo[.]com you what?

2026-09-06 12:38:02 UTC

- reply

unrelated, someone got a couple extra TBs of SSD I could borrow?

2026-09-06 12:36:19 UTC

...how much effort could be parsing CT logs for all domains ever be? :neobot_floof_devil:

2026-09-06 10:08:58 UTC

hi, yes, I'd like to report an idiot who can't read and just wasted fucking hours because "well, that one clause in that if can't have been that important". yes, that idiot is me

2026-09-06 08:00:57 UTC

I spil my tea mods help help

2026-09-06 07:59:28 UTC

SOC stands for Sleep Operations Center, it's all nap specialists.

2026-09-06 07:57:51 UTC

- reply

...hell yeah, would

2026-09-06 07:52:35 UTC

- reply

tfw a tld is so obscure you dont even need to defang it

2026-09-06 07:51:13 UTC

- reply

... www.www.www.catgirl.loan nah man, I ain't checking that one

2026-09-06 07:49:26 UTC

*compiles a list of domains from CT logs*
*greps for "nyanbinary"*
*finds nyanbinary.gay*
*of course they have a fedi account*
*oh, also a fedi bot* ( [@stalker_txt](https://toot.cat/@stalker_txt ) )
... of course [@da_667](https://infosec.exchange/@da_667 ) already follows that one...

2026-09-06 07:39:28 UTC

- reply

oh, I'm so looking forward to the darfs misadventures with european public transport :ablobcatpopcorn:

2026-09-05 21:31:54 UTC

- reply

and yeah, it was EITW: https://cert.pl/en/posts/2026/09/vulnerabilities-in-mikrotik-routeros-actively-exploited/

2026-09-05 21:25:50 UTC

https://db.gcve.eu/vuln/cve-2026-67276
ahahahaha

2026-09-05 20:58:59 UTC

Neuland.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/220/435/417/218/140/original/0c426ca0ea2c5b19.png

2026-09-05 13:10:29 UTC

- reply

what the fuck @npub1qul…lv96 :neobot_giggle:
@npub1s6e…n008

2026-09-05 12:54:59 UTC

The computer is a resistive electric space heater that happens to solve puzzles as a sideeffect.

2026-09-05 09:02:15 UTC

...what if we did CT logs in DNS :neobot_angel_pleading:

2026-09-05 08:19:22 UTC

Am very eepy & suggestable, what am I doing today?

2026-09-04 21:06:33 UTC

- reply

if only we knew someone who touches DNS inappropriately as a job :3

2026-09-04 21:05:17 UTC

- reply

ok, but, just so I understand it correctly, it's not "free shell", it's just "essentially exposing one specific service/port/socket/whatever you run there to the interweb", right? The thing we, back in my day, before I started volunteering to get a static IP, just did with onion services.

2026-09-04 20:59:10 UTC

- reply

zefuq am I reading...

2026-09-04 20:41:19 UTC

...istg...
https://db.gcve.eu/vuln/cve-2026-5522

2026-09-04 12:42:32 UTC

- reply

https://mikrotik.com/supportsec/september-2026-vulnerability/ ... I mean, that reads as if we are talking about 0 day exploitation, doesnt it? Who are they protecting then?

2026-09-04 08:13:56 UTC

RE: https://mastodon.au/@xrobau/117210850701587801
> What's new in 7.24.2 (2026-09-03):
> This is an important security update. Most configurations are not at risk, but upgrading is highly recommended. To give time to update your systems, we are not currently publishing detailed information.
Thanks, very helpful, Mikrotik....
#note1s7n…a2dm

2026-09-03 21:05:19 UTC

- reply

putting whole new spin on "raiding"

2026-09-03 21:03:07 UTC

- reply

please ignore the 300kb worth of filters this account has now, I'll delete them tomorrow :3

2026-09-03 20:58:55 UTC

- reply

so, mastodon. Boring answer: Private statuses. More interesting answer: Filters.