A wizard did it :donor: 🇨🇦

Former child. Current goblin.

Computer cool, internet bad.

Pronouns: He/Him
Place: :cascadia:
Interests: Pretty much everything
Hobbies: like a thousand

Public Key

npub1gcrlcpul9fucphqkgscn8np2cx8m9nuy4ywrs8rds9nre5y9r70secetm9

NIP-05 Address

mustardfacial_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsyvpluq70j57vqmstygvfnes4vrraje7z2j8pcr3kcze3u6zz3l8cpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dscly59t

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1gcrlcpul9fucphqkgscn8np2cx8m9nuy4ywrs8rds9nre5y9r70secetm9

Show more details

Last Notes

2026-10-01 19:13:54 UTC

- reply

LOL fair. I have friends in Renton and Gig Harbour, I've hit that I-5 rush hour traffic enough times to know I wouldn't want to do it either.

2026-10-01 19:07:25 UTC

- reply

Aww that's a shame. You would probably have to move here (or commute from the US every now and then) though I think you're in the Seattle-area yeah? So it's not that far 😜

2026-09-29 20:56:03 UTC

- reply

Can you work in Canada?

2026-09-08 22:22:36 UTC

- reply

Testing is for the weak of spirit...
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/237/747/851/461/741/original/c39b943e0833ce7a.png

2026-09-01 15:42:21 UTC

- reply

If you open port 1337 the script will go away on it's own. I promise...

2026-09-01 15:40:38 UTC

- reply

Oh that was me, sorry. I wrote a network discovery script that got out of hand.

2026-08-27 23:31:27 UTC

- reply

So I went and looked up the P.Eng requirements in BC and saw this gem:Organizations often mistakenly assign the title “software engineer” (or other titles that imply that an individual is a “software engineer") to British Columbian employees with roles more appropriately characterized as software developers, designers, programmers, or architects.
https://www.egbc.ca/How-To-Apply/Register-As-An-Engineer/Software-Engineering-Applicants

2026-08-27 17:45:51 UTC

- reply

There is a reason why they're not eligible for a PE stamp.

2026-08-25 22:52:42 UTC

- reply

I'm sorry I was mistaken, it was in the BunkerWeb WAF and not a dedicated network firewall:
https://docs.bunkerweb.io/security-tuning/#blacklisting-and-whitelisting
https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/158/593/878/718/339/original/ed7268339cc19691.png

2026-08-25 15:42:23 UTC

- reply

I was legit just looking at firewall documentation the other day that had a blockASN parameter in it and I thought of you. I'll have to go dig it up.

2026-08-19 17:18:05 UTC

- reply

we cut our alerts by 20% by just outright blocking .xyz and .top

2026-08-13 16:42:59 UTC

- reply

haha iPhone app go brrr

2026-08-13 16:29:45 UTC

- reply

I mean it makes sense that a Solar panel battery inverter would be computer, but computer does not need to be on internet.

2026-08-13 15:44:32 UTC

- reply

Dude, it's too early in the morning. At least let me finish my coffee.

2026-08-10 20:17:01 UTC

- reply

This hits me in a special spot lmao

2026-08-10 19:57:35 UTC

- reply

I recently had a meeting with a vendor where they were pushing their AI-based SOC and I responded to them with:Cybersecurity is largely a solved problem. Asset inventory, patch management, monitoring, and attack surface reduction will cover 95% of the threats out there. We don't need an AI for that
They were incredulous and had trouble justifying the product after that.

2026-08-06 21:19:12 UTC

- reply

lol, perfect.

2026-08-06 21:17:06 UTC

- reply

I need an opposite meme to this where you roll in but all of the linux machines are Ubuntu

2026-07-29 21:34:28 UTC

- reply

I can watch it without being signed in. Weird. Try this one?
https://www.youtube.com/watch?v=NPVOVaL1scY

2026-07-29 16:23:33 UTC

- reply

We need to hit up the Synacktiv Team and see if we can change the Tesla noise to this one: https://youtu.be/isUf6SFSZ9A?si=efUbagHghVjO2idY&t=960

2026-07-23 15:28:42 UTC

- reply

Posts a series of 🔥 memes, refuses to elaborate, leaves.

2026-07-13 15:52:57 UTC

- reply

You're doing the Lord's work.

2026-07-13 15:50:32 UTC

- reply

You son of a bitch, I choked on my coffee 😂

2026-07-10 15:45:18 UTC

- reply

Because I literally cannot imagine myself doing anything else.

2026-07-09 23:30:35 UTC

- reply

There is a reason some Civil Engineers wear an iron ring: https://en.wikipedia.org/wiki/Iron_RingThe ring serves as a reminder to the engineer and others of the engineer's obligation to live by a high standard of professional conduct.Kipling's calling sought to emphasize the responsibilities of an engineer, affirming their responsibility to "not henceforward suffer or pass, or be privy to the passing of, Bad Workmanship or Faulty Material."
I know a lot of software engineers, and none of them would ever meet that standard of conduct.

2026-07-02 16:35:25 UTC

- reply

✅ Ring included

2026-07-02 16:20:22 UTC

- reply

I've said the exact same thing.
Ubiquiti is the Tesla of networking
Meraki is the Apple

2026-07-02 15:55:45 UTC

- reply

Just when I though no one could put Fortinet to shame, Ubiquiti steps up to the plate and smashes it out of the park.

2026-06-22 15:43:40 UTC

- reply

100% the same. I stopped drinking about a year ago and now I really don't like looking people in the eye.

2026-06-18 20:42:38 UTC

- reply

I regret that I have but one boost to give to this statement.

2026-06-12 16:09:09 UTC

- reply

Real talk though, there aren't a lot of good choices.
Shitposting, Azure Firewall.

2026-06-09 16:26:24 UTC

- reply

If I remember correctly, some of the ProofPoint sending domains are:*@corp-outlook.com*@office-365-notifications.com*cloud-notification-services.com

2026-06-01 15:25:59 UTC

- reply

I guess just write it up as an issue in the codeberg? My memory is awful and I usually need to write stuff down so I can refer to it later.
By all means, do not feel obligated to write anything substantial. All of my codework is because I taught myself how to do this from reading other people's code and then looking up what all of the words mean in MS docs. I'm sure there is a whole "best practices" bit to this that I am missing, but I don't do enough of this to learn how to do it properly, or keep what I have learned in my head.

2026-05-30 15:48:45 UTC

- reply

I had to make a codeberg for this. plz don't hack.
I would hope that someone much better at coding would completely re-write this before offering it to gayint. There are things in here that I know are poorly done but it was done because the recommended way of doing it wasn't working so I did it the idiot way.
https://codeberg.org/MustardFacial/Frisky_Kitten_Silent_Spider.git

2026-05-30 15:25:13 UTC

- reply

I turned off HTML emails in my org once and people LOST. THEIR. SHIT.

2026-05-29 18:43:33 UTC

- reply

I gotta learn Python now?!? Man, fuck computers.

2026-05-29 18:36:47 UTC

- reply

So uhh...I worked on this a bit more. The full blocklist was causing problems (as much as we all hate Cloudflare, they and a couple other CDN's are necessary evils) so I made one that just pulls from the categories I wanted and pushes them all to a single blocklist.txt that I can do whatever I want with.
As stated before, I'm a very amateur programmer so I was unable to get it working in a single script. Instead it's done in 2 separate scripts but upon completion of the first one it launches the second.
Let me know if you want the code. I'll post it up somewhere.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/659/288/329/177/512/original/ce90127155f0c22a.mp4

2026-05-27 19:46:15 UTC

- reply

There are a number of replies in that thread about not using Brave, DDG, Ecosia, or Startpage from other people as well.

2026-05-27 19:41:05 UTC

- reply

You might want to read this.
https://infosec.exchange/@pip/116637032049016932
#note130s…lqnq

2026-05-27 19:05:58 UTC

- reply

I've been casually looking for a new search engine and frankly the available options are fucking dire . Either you put up with slop, the site is run by an advertising firm, I have to drop cash to try it or the engine just plain doesn't work very well.

2026-05-22 16:52:54 UTC

- reply

*exhale*
Quick and dirty, fair warning though; I haven't tested this and have no idea if it works or not. Obviously needs to run as local admin to write to the hosts file.<code>Write-Host @" /$$$$$$ /$$$$$$ /$$ /$$ /$$$$$$ /$$ /$$ /$$$$$$$$ /$$ /$$ /$$$$$$ /$$$$$$ /$$$$$$$$ /$$$$$$ /$$$$$$ /$$ /$$__ $$ /$$__ $$| $$ /$$/|_ $$_/| $$$ | $$|__ $$__/ | $$ | $$ /$$__ $$ /$$__ $$|__ $$__//$$__ $$ |_ $$_/ | $$ | $$ \__/| $$ \ $$ \ $$ /$$/ | $$ | $$$$| $$ | $$ | $$ | $$| $$ \ $$| $$ \__/ | $$ | $$ \__/ | $$ /$$$$$$$ /$$ /$$$$$$ /$$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$$$| $$$$$$$$ \ $$$$/ | $$ | $$ $$ $$ | $$ | $$$$$$$$| $$ | $$| $$$$$$ | $$ | $$$$$$ | $$ | $$__ $$|__/ /$$__ $$ /$$_____/|_ $$_/ /$$__ $$ /$$__ $$ | $$|_ $$| $$__ $$ \ $$/ | $$ | $$ $$$$ | $$ | $$__ $$| $$ | $$ \____ $$ | $$ \____ $$ | $$ | $$ \ $$ /$$| $$$$$$$$| $$ | $$ | $$ \ $$| $$ \__/ | $$ \ $$| $$ | $$ | $$ | $$ | $$\ $$$ | $$ | $$ | $$| $$ | $$ /$$ \ $$ | $$ /$$ \ $$ | $$ | $$ | $$| $$| $$_____/| $$ | $$ /$$| $$ | $$| $$ | $$$$$$/| $$ | $$ | $$ /$$$$$$| $$ \ $$ | $$ | $$ | $$| $$$$$$/| $$$$$$/ | $$ | $$$$$$/ /$$$$$$| $$ | $$| $$| $$$$$$$| $$$$$$$ | $$$$/| $$$$$$/| $$ \______/ |__/ |__/ |__/ |______/|__/ \__/ |__/ |__/ |__/ \______/ \______/ |__/ \______/ |______/|__/ |__/| $$ \_______/ \_______/ \___/ \______/ |__/ /$$ | $$ | $$$$$$/ \______/ Eat my ass Palo Alto "@ $hostsPath = "%systemroot%\System32\drivers\etc\hosts" $remoteUrl = "https://gayint.org/blocklists/pf_prefixes.txt" Write-Host "Trying to pull the latest list of scumbag IPs..." try { $gayint = Invoke-WebRequest -Uri $remoteUrl -UseBasicParsing $badip = $gayint.Content -split "`n" } catch { Write-Host "Someone done fucked up. Be honest, it was probably you." exit } Write-Host "Targets Acquired. Fire at will" Add-Content -Path $hostsPath foreach ($badip in $badips) { $trimmed = $badip.Trim() if ($trimmed -and -not $trimmed.StartsWith("#")) { Add-Content -Path $hostsPath -Value $trimmed } } Add-Content -Path $hostsPath Write-Host "IPs successfully added. You've now done something that a multi-billion dollar corporation can't." </code>

2026-05-21 23:42:29 UTC

- reply

*viciously writes a script and GPO to add the GAYINT list to everyone's HOSTS file*

2026-05-15 18:29:18 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/580/003/978/809/232/original/09252495b0b602fe.jpeg

2026-05-15 17:29:53 UTC

- reply

gather round while I tell you the story of how I was pushed to self-host a password manager that was:<li>hosted on-prem</li><li>had no access to the internet</li><li>had a WAF in front of it (just in case)</li><li>had full passkey support</li><li>was fully logged out of every service that could write a log</li><li>DB encrypted (obviously) but also hosted on another server</li><li>encrypted backups that pushed to immutable storage</li><li>could be spun up from a bare VM with a single script</li>
And when it was all complete they went with a cloud hosting service because it was "less hassle/work"

2026-04-28 18:06:08 UTC

- reply

omg hahaha welp, I'm keeping this as my theme from now on.

2026-04-23 16:04:32 UTC

- reply

My hero!

2026-04-23 16:01:56 UTC

Does anyone have that really shitty kali linux dragon image where he has a derp face? I need a new wallpaper and can't find it.

2026-02-19 23:40:17 UTC

Better programmers than me, show me a less sketchy way to do this. I'm trying to make a bash script that will copy a file to a machine, then ssh into it and run a list of commands as sudo. All of these use password authentication (I know, don't ask), and I cannot login as root. I cannot think of a way to pass the password through the ssh tunnel so that it can be read on the other side. All I've come up with so far is to do this:#!/bin/bash servers=$(cat servers.txt) for cpu in $servers; do ssh -t $cpu << 'EOF' echo "[SUDO PASSWORD]" > ./pass cat pass | sudo -S [all the rest of my commands here] rm ./pass exit
This works, but oh baby is that a sketchy way to do things and there has to be a better solution to this.
#bash #linux

2026-01-16 17:54:23 UTC

- reply

HK protesters also put the tear gas canisters in bottles full of mud to neutralize them
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/906/054/732/442/106/original/adb08d89bea63577.mp4

2025-11-04 17:30:07 UTC

- reply

May I ask you what the benefit of a single-user instance is? It seems to me-from the outside look9ing in-to be the worst of both worlds:<li>All of the administration and costs of running your own instance</li><li>None of the "camaraderie" or common-interest discussion of a multi-user instance.</li>
Are there other benefits here I'm not seeing?

2025-10-31 15:52:59 UTC

- reply

EV chargers have software? Aren't they just relays and plugs? I haven't looked at the CCS or NACS standards recently, but I'm pretty sure you can build them purely mechanical.

2025-10-07 15:37:39 UTC

- reply

Why do you think Hanna Montana Linux has not seen the same success as Hanna Montana herself?

2025-08-20 23:25:34 UTC

- reply

I play iRacing in VR and noticed the same thing for the same reasons. The visual cues don't match up with what your body "expects" to feel. I was lucky and never got fully nauseous from it, but it did go away after I did it a couple of days in a row. I guess my body adapted to the situation and now I don't feel weird when racing.

2025-05-15 16:42:16 UTC

- reply

If they're not doing exfil on SMB's then where is the leverage? Is it just a smash & grab and a txt file that says "we encrypted your data. Pay $$$ to get the decryption key." ?

2025-03-06 16:20:51 UTC

- reply

I'll send you my old GTX 960 if you want a free GPU.
(please get this thing out of my house)

2025-03-03 16:12:32 UTC

- reply

isn't this only the case with colour printers?

2025-02-18 17:01:43 UTC

- reply

10 Wisdom is the starting amount when you do the point buy system though...

2025-01-27 17:58:55 UTC

- reply

I do find it interesting that both AMD and Intel haven't announced that they're going to start making AI-focused GPU's. Yes, nVidia has been the leader for raw GPU compute for a decade or more, but both AMD and Intel compete (somewhat) in the GPU market.
Or even that no China-based chip manufacturer hasn't stepped into the ring either.

2025-01-17 21:27:18 UTC

- reply

I've not used it before but Gameye is supposedly really good because you can scan the barcode on the package and it'll enter all of the details and box art for you
https://www.gameye.app/
I used to use Backloggery years ago just to make a nice list of games I owned. https://www.backloggery.com/

2025-01-16 00:30:10 UTC

- reply

Here's a list to get started with: https://www.opensecrets.org/2024-presidential-race/donald-trump/contributors?id=N00023864&src=t