someone found a command injection bug in a router two years ago. there is no poc or write up or any info. idk how they did it and it bugs the fuck outta me.

Yikes! This is just from the Splunk section.

Binge LIFE UNEARTHED on PBS, Apple TV and Amazon Prime Video. www.pbs.org/show/life-un...

Made the mistake of clustering a bunch of samples together without doing more analysis. Turned out to be an open source tool. lol

What TV characters most remind you of yourself? (2026)

I will hold an online session of the Paralus LLC Applied #CyberThreatIntelligence course from 27-31 July, 1400-1600 US Eastern/2000-2200 Central European time. Focused, to the point training, two hours per day for five days. Register your interest at the following form: forms.gle/M1LgQTomJGek...

Me: I wonder if this protocol is used for c2 in malware. I’d do it. *Googles to find that someone’s using it and there are malware analysis reports* Props to threat actors for being creative and putting in work. It’s stuff that can be caught with network monitoring most of the time though.

Drank matcha tea on empty stomach as pre workout. Pretty sure I’m gonna die throwing up now. Rip me.

Idk what’s going on here. I’m outside riding my bicycle while everyone is watching Indy 500 and there is less traffic. Outside is nice.

/r/technology is making up conspiracies about teampcp hacks…

✨I’m seeking a new REMOTE role✨ Now: Senior Solutions Consultant Specialties: • Cybersecurity strategy, governance, framework alignment, resilience • Secure engineering, architecture • Training planning, creation, instruction, delivery • Technical documentation, policy, process improvement, mapping

Surely someone has a canary token in Canvas somewhere.

Trying to find my notes on me doing vuln research on Canvas a decade ago. I was doing testing on a bunch of stuff my university used. The difference between hacking vs doing research is taking notes to send to the university soc and vendor.

ebay should let me search by regex

@rejectionking.bsky.social oh yeah, I listened to the video on historian channel. Why cover extremism rather than terrorism alone was useful to hear. Also I donated the extremism book from JM to my local library but they no longer have it :(

As some people may have heard (😩) I am on the job market. If anyone has any leads on netsec, offsec or anything similar let me know. I’m open to learning something new as well. In the mean time I’m available for 1099 work. Thanks ya’ll 🫶

Redditors: upload suspicious files to virustotal Me: wow who the fuck uploaded PII data to VT? Wtf.

NK threat actors after asking researchers to collaborate on a project:

I recommend this! I’ve done live course via antisyphon and I’m doing non-live version via coursestack right now. I had to DFIR semi-manually in the past and it was not fun. Velociraptor would’ve made life way easier.

Yes.

Supply chain attacks are no longer funny now that I have to keep that shit in mind while setting up stuff in homelab. Luckily me being lazy enough to not update anything is somehow beneficial.

i feel like society moved on from these too quickly

This doesn’t work anymore. Don’t do it!!

@arielwaldman.com did you have to do any training (physical, medical, emergency, etc) before visiting Antarctica?

My team at @greynoise.io is hiring a Junior Detection Engineer - somebody who understands network traffic and can write detection rules. Hit me up if you have any questions! job-boards.greenhouse.io/greynoiseint...

DARPA should do cyber grand challenge again but with modern tech. It has been a decade.

They plugged MS Copilot on High Potential lol

@censys.bsky.social @silascutler.bsky.social I don’t think I’m following any other censys researchers. I’ve been loving the ARC blog posts! They’re a fun read.

The Moon: oh wow you guys decided to come back Artemis II crew: earth’s haunted

Something nerds don't want to admit: they low-key enjoy the chaos Yeah, yeah, ransomware is bad, state sponsored threat actors are bad, but deep down when shit hits the fan it is exciting. Even though it's just a beep boop computer your adrenaline gets pumping

Just got done with the first episode. It’s great!

liquid swords!!

@profmsinha.bsky.social Wow you’re in this documentary!! I did not know.

I’m now a WYFI member. Got access to PBS Passport and NPR Plus!!! Ad free streaming and podcast is nice!

Reporters, are you looking to track down a non-public Community Note on X for a story? Use our Notetracker app to scan not-yet-visible notes to reveal early corrections or emerging disputes around a claim. See our Quick-Reference Cheatsheet for Reporters. notetracker.socialmedialab.ca#reporter-guide

I've been thinking a lot lately about how communities in the Antebellum North organized to protect Black Americans from kidnapping enslavers, and also how witnessing (and resisting) such kidnappings slowly radicalized a critical mass of white Northerners against slavery www.salon.com/2017/08/05/w...

@rejectionking.bsky.social this might interest you. (In person sadly :( )

Every person on this bar went DAME LA GASOLINA together, total zero to 60

Indoor cycling and PBS this old house and nova!

@rejectionking.bsky.social have you seen this? It’s 4hrs long. Wondering if it’s worth watching.

It’s called ‘vs code’ because the code is an enemy you are fighting

Watching a documentary on Wide Awakes I guess.

We’re doing a documentary/storytelling/history podcast series! The first episode is out now…

You'd better watch out! You'd better watch out YOᑌ'ᗪ ᗷETTEᖇ ᗯᗩTᑕᕼ OᑌT

Serious question: if you get a threat notification from Apple, WhatsApp, Google...and you are not a journalist ot dissident so you can't go to Citizen Lab/Amnesty/AccessNow, where do you go? Asking for an article, not for someone who's gotten that notification.

So basically this

Me when I cite myself:

Me when I close a security alert I myself caused.

remembering one of the all-time greatest twitter posts