@Quad
Guy with beep boop boxes.
Sort as E-waste after death.
Relays (1)
- wss://relay.ditto.pub – read & write
Recent Notes
This was a real election, btw
https://media.valkyrie.world/media/7d/3b/d5/7d3bd556049deb14a67a0511411b9c3ef555bfc6810fe5edf551fce203c66e96.webp
@:VD15_0::VD15_1::VD15_2::VD15_3::VD15_4::VD15_5::VD15_6::VD15_7: I'm glad he got a kick in his pride.
Would've been even more fun if binface won though. But can't really expect that from a boomer haven like clacton
Would've been even more fun if binface won though. But can't really expect that from a boomer haven like clacton
1
The weebs don't want you to know, but you can put furigana on anything ( ザー ウィーブズ ドーント ウォント ユー ター ノー バット ユーキャン プット フリガナ オン エニシング)
The Bleach TYBW Part 3 Blu-ray is a bit of a funny accessibility catastrophe.
Every Bleach TYBW part has a specific accent color. Part 1 was magenta, Part 2 was cyan. The european publisher (All The Anime) decided at the start to make their blu-ray releases be "<accent color> on black".
Unfortunately for them, when we got to Part 3, it turns out its accent color was... black.
Yet the absolute fucking MADLADS actually just went ahead and printed the part 3 blu-ray with its color scheme being black on black.
You can BARELY tell there's something printed on there, only because the printed parts reflect slightly more light at the correct angle. I managed to get a somewhat visible photo of the front, wasn't as lucky with the spine.
Every Bleach TYBW part has a specific accent color. Part 1 was magenta, Part 2 was cyan. The european publisher (All The Anime) decided at the start to make their blu-ray releases be "<accent color> on black".
Unfortunately for them, when we got to Part 3, it turns out its accent color was... black.
Yet the absolute fucking MADLADS actually just went ahead and printed the part 3 blu-ray with its color scheme being black on black.
You can BARELY tell there's something printed on there, only because the printed parts reflect slightly more light at the correct angle. I managed to get a somewhat visible photo of the front, wasn't as lucky with the spine.
1
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqrdx2n6wevczkah2ec5pdf4lkantqjm6lrd4j0t9m2ha4ghu28ffq88fccl nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqemn79m7cwed95v770tavrp98xpkavds...
@Haelwenn /элвэн/ :triskell: @rin a number of these straight up advertise that they're for phone farms
big things happening on taobao
https://post.ebin.club/media/e158c41e-c2b0-43e6-bd47-023819006baf/IMG_5958.jpeg
@rin GaN chargers have really managed to push chinese bomb tech forwards
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqrdx2n6wevczkah2ec5pdf4lkantqjm6lrd4j0t9m2ha4ghu28ffq88fccl Yeah, although Home Assistant in a QEMU being IPv4-reachable via at least VNC seems a ...
@Haelwenn /элвэн/ :triskell: on the other hand, a honey put serving CLI over VNC rather than ssh/telnet seems just as ridiculous.
1
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqrdx2n6wevczkah2ec5pdf4lkantqjm6lrd4j0t9m2ha4ghu28ffq88fccl Well, not saying it has to be.
But like, anything IoT is exactly the sort of crap I'd ...
@Haelwenn /элвэн/ :triskell: My personal experience tells me that for every 1 raspberry pi plugged into the internet as a honeypot, there are 99 idiots doing it simply because they're incompetent.
1
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqrdx2n6wevczkah2ec5pdf4lkantqjm6lrd4j0t9m2ha4ghu28ffq88fccl Or maybe it's there to be an honeypot.
@Haelwenn /элвэн/ :triskell: oh you poor soul, so full of trust and optimism still
1
every time i feel paranoid about whether or not i've secured my self-hosted stuff well enough, i just take a gander over to VNC resolver.
Always makes me feel better when someone can leave their homeassistant accessible via passwordless VNC since 2025, still running 2025.4.4 because they never updated it ever, apparently with no password enabled for cli access.
and somehow it's still there over a year later without going down.
i'd be surprised if it's not part of some kind of botnet though.
Always makes me feel better when someone can leave their homeassistant accessible via passwordless VNC since 2025, still running 2025.4.4 because they never updated it ever, apparently with no password enabled for cli access.
and somehow it's still there over a year later without going down.
i'd be surprised if it's not part of some kind of botnet though.
1
nostr:nprofile1qy2hwumn8ghj7un9d3shjtnyd968gmewwp6kyqpqrdx2n6wevczkah2ec5pdf4lkantqjm6lrd4j0t9m2ha4ghu28ffq88fccl The classic of castle-and-moat security…
@Haelwenn /элвэн/ :triskell: What I find most curious is that they mention the attacks resetting or reconfiguring various things like the Moxa switches, Wago controllers, Teltonika router and the Fortigate firewall itself.
But they don't mention how any of these things are compromised. I wonder if all the things needed for the attack chain just had the same crappy password or something
But they don't mention how any of these things are compromised. I wonder if all the things needed for the attack chain just had the same crappy password or something
1
This is a pretty funny breach, ngl: https://www.bleepingcomputer.com/news/security/hackers-breached-a-small-polish-energy-plant-via-private-apn-last-year/
Power plant tried to put their operational stuff on a private APN (esseitally a private virtual mobile network), which has been a bit of a trend lately. There's benefits/drawbacks to it like ease of device deployment, resiliency and different security considerations, but I won't get into the details about that here.
The funny part is that despite all the equipment being on a private APN, the attacker just had to compromise a Fortinet shitbox like usual, from there it seems like there was were basically zero barriers preventing them from just bridging onto the mobile network and talking to whatever they wanted.
Power plant tried to put their operational stuff on a private APN (esseitally a private virtual mobile network), which has been a bit of a trend lately. There's benefits/drawbacks to it like ease of device deployment, resiliency and different security considerations, but I won't get into the details about that here.
The funny part is that despite all the equipment being on a private APN, the attacker just had to compromise a Fortinet shitbox like usual, from there it seems like there was were basically zero barriers preventing them from just bridging onto the mobile network and talking to whatever they wanted.
1