@scottley
Security Architect | Power Platform and Dynamics
I do some things slightly better than poorly, but where I truly excel is at failing tasks successfully.
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
If you dont think this affects you, please take a minute to realize that disability is in the eye of the beholder. There are many people around you that have some degree of disability. Policies like this do not make anyone better, they make people hide and suffer without treatment.
"Make Star Trek real"
Uh do you know what happened before the Vulcans showed up
@nprofile1q... https://www.startrek.com/news/ds9s-take-on-homelessness-is-all-too-real
Dont forget Sanctuary Districts... that was a couple years ago...
Dont forget Sanctuary Districts... that was a couple years ago...
Totally went down a bunch of research holes after watching today's flawless Artemis II launch. There's probably a better, more complete video explaining what helium-3 is, why it's so rare and valuable...
@nprofile1q... he-3 is the best fusion fuels.
God I hate these slides, but the content is salient
https://ocw.mit.edu/courses/22-012-seminar-fusion-and-plasma-physics-spring-2006/e2e8eb876c7ec0dff934149b83f8c3fa_helium3_fusion.pdf
God I hate these slides, but the content is salient
https://ocw.mit.edu/courses/22-012-seminar-fusion-and-plasma-physics-spring-2006/e2e8eb876c7ec0dff934149b83f8c3fa_helium3_fusion.pdf
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq0anhx6f586ax8kvsxv92d3rt0vzu467esyjmmwewmvysqewj6dqqzhymgt Yep, and the staged malware dependency. No longer an active threat, but a hunting proj...
@nprofile1q... i have to cover my devs, my servers, my customers... having npm dive on the grenade says a lot... that is enormous... they learned a lot from Shai Halud. Package providers have a much bigger responsibility than they expected...
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7yf7cxzxz4kwf24zmflvyqqtrylsjwm5q9a074u5ger57rmzz0aqe544dh thank you! Appreciate the sharing!!!
@nprofile1q... looks like npm delisted the vulnerable versions quickly...
1
Oh good, more pointless quantum hype.
Once again, totally fine to get to PQ if you can. It ain't happening in 2029; the qubit math doesn't add up.
https://arstechnica.com/security/2026/03/google-bum...
@nprofile1q... always question work created by those that would benefit from the requested change.
Always trust an expert in a field.
This is the quantum superposition of trust... we must simultaneously adhere to and doubt the work of mega corps with incredible research capabilities
Always trust an expert in a field.
This is the quantum superposition of trust... we must simultaneously adhere to and doubt the work of mega corps with incredible research capabilities
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpq7lgy0rj5a2nwpnyc4hup6ufpfz7wz6dzcgd3crm6fm2yd34dcz0q4lg4vn Right but the server was compromised between September and December, which maps to tho...
@nprofile1q... @nprofile1q...
Indicators of compromise of users would look like post exploit behavior of an RCE vuln in the auto updater process... I haven't looked at details, but if you have process logging (4688s), if you find processes started by the notepad++ process, that is your haystack (not all updates would have been targeted, let's say...) to find the needles, you'll need to go hunting for the malicious update returned by hostile auto updater service.
Indicators of compromise of users would look like post exploit behavior of an RCE vuln in the auto updater process... I haven't looked at details, but if you have process logging (4688s), if you find processes started by the notepad++ process, that is your haystack (not all updates would have been targeted, let's say...) to find the needles, you'll need to go hunting for the malicious update returned by hostile auto updater service.