Ian Campbell 🏴

Security ops engineer for DomainTools, DT Investigations threat researcher, writer, voracious reader. he/him. Fan of good trouble. Opinions here mine only. No LLM content from me, all flaws detected are human-generated. Autistic/depressed/anxious/hungry.

#infosec #cybersecurity #privacy #actuallyautistic #neurodivergent

Public Key

npub155t0ydv2yz5sc4sta5jmxnannmjm6y48rpur0huvj6seuqrseekszdnysn

NIP-05 Address

neurovagrant@masto-deoan-org.mostr.pub

Profile Code

nprofile1qqs229hjxk9zp2gv2c976fdnf7eeaedaz2n3s7phm7xfdgv7qpcvumgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsy9ssmk

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub155t0ydv2yz5sc4sta5jmxnannmjm6y48rpur0huvj6seuqrseekszdnysn

Show more details

Last Notes

2026-03-26 18:19:49 UTC

US or EU, Remote - Wiz - Threat Intelligence Researcher (Cloud)
Wiz has been doing some great work around TeamPCP lately, among other things.
According to LinkedIn ( https://www.linkedin.com/posts/benjamin-read-41817121_im-continuing-to-build-the-threat-intel-share-7442969734645608448-Gu-n?utm_source=share&utm_medium=member_desktop&rcm=ACoAABIZhqYBjXCQuV7JX7N_3xlpxZY6alHZ77o ) it's posted for US but open to EU. They're looking for two roles, one Cyber Crime and one Cyber Espionage.
(I am not affiliated with Wiz or at all involved in this hiring process.)
https://www.wiz.io/careers/job/4658917006/threat-intelligence-researcher-cloud

2026-02-26 16:39:41 UTC

- reply

@nprofile…29kj Good luck!
maybe i should take my toot down so less other people apply 👀

2026-02-26 15:49:51 UTC

USA, multiple offices - Amazon Cyber Threat Intelligence - Sr. Technical Program Manager
(I am not affiliated with Amazon or at all involved in this hiring process.)
USA, TX, Austin
USA, VA, Arlington
USA, WA, Seattle
USA, NY, New York
USA, MD, Annapolis Junction
USA, VA, Herndon
https://www.amazon.jobs/en/jobs/3189668/sr-technical-program-manager-amazon-cyber-threat-intelligence

2025-10-20 23:43:38 UTC

“Don’t forget, Family Meeting on Friday night to enroll everyone’s fingerprints in the toilet camera!”
#privacy
https://www.theverge.com/news/802727/kohler-health-dekoda-toilet-camera-optical-sensors

2025-10-13 21:00:58 UTC

The image below, as well as other recent examples, form part of an information operation meant to make my generation and older feel prematurely aged and infirm.
In this closed-door briefing i will….
https://masto.deoan.org/system/media_attachments/files/115/368/862/393/241/937/original/17dd541526a17b9f.jpeg

2025-10-12 23:06:12 UTC

So
not only this excellent graphic
but this graphic on this server name. https://toad.social/@amyedge/115363451499320006

2025-09-08 16:22:36 UTC

This is too good.
https://masto.deoan.org/system/media_attachments/files/115/169/594/749/659/184/original/e5aba7420452dd92.jpeg

2025-09-05 21:49:05 UTC

This is a hilariously harmless “fucked around and found out” story.
https://masto.deoan.org/system/media_attachments/files/115/153/891/629/362/909/original/4551a688edb4a5db.jpeg

2025-09-05 15:59:50 UTC

- reply

@nprofile…85tn It's Friday, might as well let that one go too...
https://masto.deoan.org/system/media_attachments/files/115/152/514/252/274/842/original/5b08eed32166f1ea.gif

2025-09-04 23:30:02 UTC

- reply

As a global operator, when you opt hundreds of millions of users into inherent overtrust without monitoring the explicitly engineered transparency mechanism for mistakes or abuse you are failing your users.
Full stop.

2025-09-04 23:25:36 UTC

Surprises me (kinda) that there's pushback about Microsoft bearing any responsibility over deciding to trust Fina CA without engaging in transparency log monitoring.
I'm with this guy:
"The story here is less the 1.1.1.1 certificate and more why Microsoft trusts this carelessly operated CA," Filippo Valsorda, a Web/PKI expert, said in an interview.
https://arstechnica.com/information-technology/2025/09/the-number-of-mis-issued-1-1-1-1-certificates-grows-heres-the-latest/

2025-08-18 20:58:19 UTC

splitting my office from my gaming area. should've done this ages ago but didn't really have the space before.

2025-08-16 18:39:20 UTC

- reply

@nprofile…82k3 Yeah, discovering them was a bit of a revelation for me!
"A service that still lets me download non-expiring MP3s? What's the catch?!?!?!"

2025-08-16 12:15:58 UTC

- reply

Adding my referral URL *in case* you want to sign up and use one, but no pressure here. I'd much rather folks use it as their comfort levels demand.
I have no connection to Libro.fm other than as a happy customer - approaching my 2 year anniversary, and zero problems over 32 purchases. I'm a member of their monthly plan ($15/mo for a book credit) to keep myself reading regularly, but it's 100% not necessary either.
https://libro.fm/referral?rf_code=lfm534571

2025-08-16 12:13:07 UTC

Audiobooks are a 100% valid way of reading, and if it's your primary way, I hear & honor ya.
Your irregular reminder that if you enjoy audiobooks Libro.fm is an incredibly good replacement for Audible.
Libro.fm provides DRM-free downloadable MP3 versions of the book (in addition to having an app you can use). They've had at least 90% of the books I've looked for.
They're also an employee-owned social corporation that allows you to support local independent bookstores with your purchases.

2025-08-15 02:29:25 UTC

Just got an ad on LinkedIn for wastewater sterilizing systems.
Pals that’s not what I mean when I say “sanitize your inputs.”
https://masto.deoan.org/system/media_attachments/files/115/030/423/156/300/060/original/32b4f388cd2b8db1.jpeg

2025-08-14 12:42:25 UTC

Incident Response company Profero on "AI-induced destruction" - a new incident category that they say now makes up 25% of their calls in which AI coding assistants deployed by legitimate insiders wreak havoc.
#infosec #RiskManagement
https://profero.io/blog/new-attack-vector--ai-induced-destruction

2025-08-14 01:02:20 UTC

- reply

@nprofile…7mte Makes me wanna watch They Live again too

2025-08-14 00:51:48 UTC

- reply

@nprofile…7mte oh that clip is a blast from the past

2025-08-14 00:39:40 UTC

bought groceries.
including vegetables.
i request applause.

2025-08-12 14:26:55 UTC

- reply

me trying to be less adversarial towards AI and then they specifically enable noclick DNS exfil
https://masto.deoan.org/system/media_attachments/files/115/016/257/520/876/258/original/e4a08ba850f6db52.mp4

2025-08-11 13:24:51 UTC

- reply

@nprofile…9a3s yup. cursed portmanteau for it.

2025-08-08 16:27:50 UTC

- reply

@nprofile…r5r2 @nprofile…9t9r yep, deck will be out, and we may end up doing an open rerun of the talk for those that couldn’t be there if it’s not recorded. Will keep ya posted.

2025-08-08 16:22:22 UTC

Just a reminder - @nprofile…9t9r and I talk malware in DNS later today!
If we get time, we might even read y’all in on a brand new mystery we’re trying to track down.
#defcon #infosec #malware
DEF CON 33: Attending Plain TXT, Malicious Context: Uncovering DNS Malware on Aug 8, 2025 at 15:10 in LVCC - L1 - Exhibit Hall West 1 - 303 (Malware Village)
#hackertracker

2025-08-08 03:22:36 UTC

- reply

Of the security ecosystem supernodes that *aren't* strictly people, the ones I have identified are:
-DNS
-Shitposters
-The Furry/Infrastructure Engineer overlap that keeps everything running
-The occasional eldritch being that's mostly too tired at this point to care about eating you
Let me know what I'm missing in this list.

2025-08-08 03:19:44 UTC

- reply

What I didn't understand from the outside, but have had great role models to learn from, is that security is an ecosystem of ecosystems, and most of the supernodes are people.
Treat it like a silo or a bunker and you just make your own systems more brittle.

2025-08-08 03:07:37 UTC

- reply

@nprofile…2ulp also relatable.

2025-08-08 03:07:08 UTC

- reply

@nprofile…2ulp BTW, you're not in Vegas this week are you?

2025-08-08 03:06:48 UTC

- reply

@nprofile…2ulp I miss the old Panasonic Toughbooks.
The real falling damage you had to worry about if they slipped out of your grasp was damage to the earth's crust.

2025-08-08 03:03:44 UTC

- reply

@nprofile…2ulp yeap. relatable. I'll leave some shifts open in the crying room for ya, it doesn't make it better but it does help.

2025-08-08 02:31:11 UTC

I tell you what, I moved to security partly to talk to people less, and that has not worked out how I thought it would.

2025-08-06 13:51:38 UTC

- reply

@nprofile…t638 @nprofile…rtth Brother, same. It took me years and still isn’t a sure thing for any year.
Keep pushin’.

2025-08-01 19:45:29 UTC

"The Dam Seems To Be Breaking" - and not in good ways.
This was a grim but good read from Fred Cohen.
#cybersecurity #GenAI #RiskManagement
https://managementanalytics.substack.com/p/the-dam-seems-to-be-breaking
PDF Link: http://all.net/Analyst/2025-08.pdf

2025-07-29 13:27:55 UTC

vibe for today
(Snagged from elsewhere, source unknown)
https://masto.deoan.org/system/media_attachments/files/114/936/741/095/439/257/original/a4d71dad99f9654a.jpeg

2025-07-28 21:21:40 UTC

- reply

my memory is a bit hazy on this but I think @nprofile…6r7m surfaced Vercel for me first a few months ago, and it turns out that was a bit prophetic.

2025-07-28 21:16:58 UTC

Hey folks, catching up on my reading and wanted to give defenders a cheat code.
The below-linked article from Okta on July 1 talks about threat actors using the AI-powered v0 tool from Vercel to create replica phishing pages.
Most Vercel creations are actually domains or subdomains CNAMEd in DNS to vercel[.]com subdomains. Additionally, many use vercel-dns[.]com nameservers. Might be worth adding some detections around this.
#threatintel #infosec #DNS
https://www.okta.com/newsroom/articles/okta-observes-v0-ai-tool-used-to-build-phishing-sites/

2025-07-24 13:20:34 UTC

Least convincing newly registered domain so far this year:
fixpassword[.]ru
(DON'T. GO. HERE.)
#infosec #threatintel

2025-07-23 18:43:43 UTC

fucking love LLMs.
Gemini: "I do not have an OCR component to analyze text in an image for you, I truly apologize."
delete chat
new chat
Gemini: "Sure, here's the translation..."

2025-07-22 16:51:38 UTC

- reply

@nprofile…hn3y WAN. where it is now is not where it was before, and despite overwriting it etc it's still calling out to the previous DNS resolution settings.
(not looking for advice, to clarify, just complaining to the universe)

2025-07-19 14:24:04 UTC

With respect to mastodon.arell[.]ai, which appears to be nonconsensually agentifying @nprofile…d2rl @nprofile…0tvd @nprofile…9ag4
Created 2025-04-02
Registrar: Porkbun (abuse@porkbun.com, whoisprivacy@porkbun.com)
mastodon.arell[.]ai appears to be on digital ocean at 64.225.125.80
https://www.digitalocean.com/company/contact/abuse
looks like it's using appflowy, gsuite, and github in its workflows.
Let's go after all their accounts. =)
#fediblock

2025-07-17 23:29:14 UTC

- reply

@nprofile…3c0j can you provide context? More mastodon phishing or something else?

2025-07-17 17:43:20 UTC

- reply

Incidentally, we saw ~100,000 subdomains named "mcp" in the last month or so.

2025-07-17 17:32:32 UTC

Exposing the Unseen: Mapping MCP Servers Across the Internet
"We identified a total of 1,862 MCP servers exposed to the internet. From this set, we manually verified a sample of 119. All 119 servers granted access to internal tool listings without authentication."
this is why I keep a very watchful eye on Knostic about AI stuff, they know the tech, the risks, *and* how human behavior will interact with them.
#infosec #cybersecurity #genai
https://www.knostic.ai/blog/mapping-mcp-servers-study

2025-07-16 12:05:22 UTC

- reply

@nprofile…u3tn ahhh gotcha, and yes, same. i would probably throw even more monies at them if i could.

2025-07-16 12:00:55 UTC

- reply

@nprofile…u3tn is it? i am excite.
but also am waiting to let some of the initial bugs smooth out and mods catch up.

2025-07-16 11:07:49 UTC

Anyone try the new Rimworld DLC yet?

2025-07-15 15:29:59 UTC

- reply

@nprofile…tdan @nprofile…rtth @nprofile…s6wl Yup! Not a new thing at all, like I said. But fun to spot and call out.

2025-07-15 13:06:59 UTC

Just a quickie from one of our @nprofile…rtth researchers today that I know @nprofile…s6wl will enjoy.
Malware in DNS - specifically, malware seen being assembled from DNS TXT records.
Not a "zomg new thing!" so much as a neat example in the wild.
#infosec #cybersecurity #DNS
https://dti.domaintools.com/malware-in-dns/

2025-07-13 16:36:26 UTC

friends don't let friends use .xyz domains.
just say no.

2025-07-13 16:11:33 UTC

i wonder if anyone writes about security in an ecosystem-like manner.
If you know of a good source there, please link me!
(no, i don't know what I'm talking about with "ecosystem-like analysis of cybersecurity" either. just roll with it.)

2025-07-13 15:57:53 UTC

- reply

@nprofile…xn4l
id-83636[.]world
created: 2025-07-02 (11 days old)
Registrar: Webnic[.]cc
Nameservers & IP: Cloudflare
Registrant is a privacy service out of Malaysia.
New since June 1 w/ same traits:
id-74852[.]world,
id-97462[.]world,
id-96432[.]world,
id-836252[.]world,
id-97366[.]world,
id-83636[.]world,
id-83736[.]world
subdomains indicate targets are mastodon, friendica, fiverr, etsy, whop, nzpost, and more.

2025-07-13 15:49:35 UTC

- reply

@nprofile…g7kn @nprofile…2jfw @nprofile…2ejz Feel free to hit me up if similar appears in the future so I can hunt a little if I have time.
@nprofile…rtth gives me wide latitude to use our tools for good, and our communities are very worth protecting.

2025-07-13 15:36:46 UTC

- reply

@nprofile…2jfw
id-83636[.]world
created: 2025-07-02 (11 days old)
Registrar: Webnic[.]cc
Nameservers: Cloudflare
Registrant supposedly out of Malaysia.
New since June 1:
id-74852[.]world,
id-97462[.]world,
id-96432[.]world,
id-836252[.]world,
id-97366[.]world,
id-83636[.]world,
id-83736[.]world
subdomains indicate targets are mastodon, friendica, fiverr, etsy, whop, nzpost, and more.
#mastoadmin #threatintel

2025-07-12 18:27:17 UTC

Why does this Apple Watch face look so angry?!?
https://masto.deoan.org/system/media_attachments/files/114/841/671/057/007/990/original/9868142966d6c9a1.jpeg

2025-07-12 00:42:30 UTC

“So, when we dropped the rudder post down, there was just a large amount of this goo that came rolling down the rudder shaft.”
https://www.wbur.org/hereandnow/2025/07/11/ship-goo-great-lakes

2025-07-10 23:19:58 UTC

- reply

@nprofile…u3tn YAY CHILLY. Been there. Really proud of you.
Let me know if you need to let out a bunch of swears or something, expressive cuss sessions can help.

2025-07-10 19:44:06 UTC

- reply

Also, I apologize for the infovisuals.
Graphic design is, uh, not my passion.

2025-07-10 19:30:32 UTC

- reply

I never expected something as simple as staring at nameserver activity to contribute to my misanthropy and yet, here I am.

2025-07-10 19:22:14 UTC

New research! Getchya new research heah!
DomainTools Investigations spent a month observing nameservers for notorious Russian bulletproof host DDoS-Guard to provide numerous acute threat intel observations as well as larger trends and traffic flows.
#threatintel #cybersecurity #infosec
https://dti.domaintools.com/where-everybody-knows-your-name-observing-malice-complicit-nameservers/
https://masto.deoan.org/system/media_attachments/files/114/830/554/341/044/809/original/3abc36757d94721f.jpg
https://masto.deoan.org/system/media_attachments/files/114/830/554/342/348/305/original/d01327201ca3c5bd.jpg

2025-07-08 15:27:10 UTC

Some of William Gibson's earlier fiction centered around global megacorps engaging in direct espionage, including kinetic action, around poaching specialists and executives.
It was one of the things that I never really thought was plausible to that extent. If we're not there yet, we're pretty damn close...
also, lol, Apple must be piiiiiissssssed.
https://www.pcmag.com/news/meta-poaches-apples-top-ai-exec-where-does-this-leave-apple-intelligence

2025-07-08 13:12:50 UTC

- reply

@nprofile…s6wl thank you friend! 🍻
Definitely feeling the post-publication high from it, it was a really great experience digging into it.

2025-07-08 10:12:58 UTC

- reply

Oh THIS is funny. I had to add a postscript to our post, as we just noticed something:
As of 2025-07-02, Safe Value AS42745 suddenly has two new clients, after years of having none.
Seychelles-based Safe Value now announces the IP routes for AS210644 and AS216246, both organizations being Aeza Group out of Russia, sanctioned by US OFAC the day before they became Safe Value clients.
https://home.treasury.gov/news/press-releases/sb0185

2025-07-08 07:20:31 UTC

For the past few weeks, @nprofile…rtth Investigations worked with OSINT analyst and investigative journalist grantees to help uncover connections between websites involved in the harassment of Ukrainian personnel and their families and the people and infrastructure involved.
We provide a technical writeup below on the observables and data involved.
#infosec #cybersecurity #threatintel #disinformation
https://www.domaintools.com/resources/blog/rdap-and-bgp-in-investigative-journalism/

2025-07-07 19:11:54 UTC

well
you gotta admit, their connectivity seems pretty great
https://infosec.exchange/@BleepingComputer/114813532052292015

2025-07-05 18:34:24 UTC

- reply

@nprofile…s6wl you got your self-boost off while i was in the midst of alt-texting this
https://masto.deoan.org/system/media_attachments/files/114/802/060/066/335/387/original/9bdaaab081ed3672.jpeg

2025-07-05 18:14:04 UTC

Interesting to see Cloudflare continue to accept domain transfers from Aeza group services, who were sanctioned by US OFAC last Tuesday, July 1.

2025-07-02 22:53:39 UTC

Next thing really may be securitized cryptocurrency tranches.
“Yeah we dipsampled the top twenty memecoins, moved a chunk to notional cold storage, now we’re selling ranked share securities based on anticipated quality and maturation…”

2025-07-02 12:27:48 UTC

- reply

In fact I think anyone with an SMS blasting rig should post it to social media for us to enjoy…
https://masto.deoan.org/system/media_attachments/files/114/783/634/388/212/367/original/d5fde5e37ca858b7.mp4

2025-07-01 22:30:39 UTC

i don't drink anymore, but i kind of want to invent a domain/DNS intel drinking game.
17-year old american farmer's market domain from a small southern webhost...expired, then suddenly cloudflared...that just passed from RU's DDos-Guard nameservers to alidns.
IP pivot leads to an all-american BBQ domain - expired in 2020, picked up in 2024 and cloudflared, then shifted to CN alidns.
some neat DGA subdomains.
landing page shows...
SLOT GACOR!
EVERYONE DRINKS!

2025-07-01 10:57:44 UTC

- reply

@nprofile…80wh Dad was a Jungian-leaning private practice psychologist for most of my life, so my predispositions reveal themselves ;)

2025-07-01 10:40:49 UTC

Been punching above my weight class as far as threat research goes lately, so of course last night was an hours-long stressful dream about fighting/fleeing from Kaiju in NYC.

2025-06-30 13:31:15 UTC

- reply

@nprofile…p8e5 alright that was an excellent, wholesome sentiment to start the week, thank you.

2025-06-30 13:28:27 UTC

- reply

@nprofile…z22s "here's how I do that on my ipad with no problems..."

2025-06-29 17:35:47 UTC

oh oof
that's a good point.
#infosec #cybersecurity
https://www.linkedin.com/posts/stuart-winter-tear_api-keys-thats-so-2024-wait-till-hacker-activity-7345094071029276672-RNPo?utm_source=share&utm_medium=member_desktop&rcm=ACoAABIZhqYBjXCQuV7JX7N_3xlpxZY6alHZ77o
https://masto.deoan.org/system/media_attachments/files/114/767/851/308/724/826/original/7ccce5e5f7d9df1c.png

2025-06-28 18:34:50 UTC

- reply

@nprofile…7mte okay that does sound like fun
mostly because it's something i would've done in GTA5

2025-06-28 18:32:19 UTC

- reply

@nprofile…7mte yeah but then you'd have to deal with those people and
y'know
their incessnat prattling on.

2025-06-27 19:07:43 UTC

- reply

@nprofile…fle4 @nprofile…f07u @nprofile…7mte What makes Apple unpalatable for you? (not challenging, not a fanboy, just curious)

2025-06-27 19:04:58 UTC

- reply

@nprofile…fle4 @nprofile…f07u @nprofile…7mte my worry is always depending on a small team with limited resources there, along with the ability of Google to pivot and screw up their roadmap with a single untelegraphed decision (like the handset stuff lately).

2025-06-27 18:24:08 UTC

- reply

@nprofile…7mte other than the usual, what all do you block?

2025-06-27 10:34:34 UTC

Folks who work with JSON a lot - any favorite app for reading through data in JSON format?
Preferably FOSS, but will shell out if it's premium and remarkable. Currently using VScode and want to move off it.

2025-06-23 23:02:11 UTC

- reply

@nprofile…u3tn also are they suuuuure that's coffee leaking from the coffeemaker

2025-06-23 23:01:23 UTC

@nprofile…u3tn would rather be on the cocktail flight than the poop flight i think

2025-06-22 00:00:15 UTC

- reply

@nprofile…hn3y @nprofile…7mte fuck those things
explosive ammo from afar is the only answer other than nuking the site from orbit

2025-06-21 23:35:17 UTC

- reply

@nprofile…7mte ohhhh i remember learning that during lockdown
*twitch*

2025-06-21 23:31:19 UTC

"horseshoe crabs are more like spiders than crabs"
thank you for that nightmare fuel

2025-06-21 22:49:09 UTC

- reply

@nprofile…7mte it's on my to-do to figure out how to leverage LLMs in adblock
juuuuuuust to see.

2025-06-18 12:16:36 UTC

In re: the Nobitex hack, have we seen many hacktivist-related cryptocurrency hacks, versus just financially-motivated?
Maybe @nprofile…6r7m knows?
https://www.elliptic.co/blog/iranian-crypto-exchange-nobitex-hacked-pro-israel-group

2025-06-18 00:21:26 UTC

Suddenly struck by the possibility that Apple’s virtualization framework could presage the ability to use virtual machines on ios/ipados.
That would be dope.

2025-06-16 17:18:20 UTC

- reply

@nprofile…6r7m @nprofile…87gl FTX? I can't imagine why Blackstone would want to scrub th-ohhhhhhhhhhh right

2025-06-16 16:57:40 UTC

I forget who I saw this advice from, think it was a professor, but I'm reviewing some research and want to reiterate: if you cite something on the internet, but especially a listing or article or other possibly ephemeral artifact, ARCHIVE IT.
Screenshot it locally, and plug the URL into the Wayback Machine. Don't expect the resource will always be there, and CYA.

2025-06-14 03:12:37 UTC

Tahoe hoe hoe now I have a machine learning

2025-06-13 22:29:02 UTC

In one of the Discord servers I’m on, someone made a mayo joke
so I did the absolutely expected thing and made a june-o joke.
Anyway that’s one less server I’m allowed back in…

2025-06-13 19:41:31 UTC

- reply

@nprofile…6r7m this is such a weird timeline

2025-06-13 01:15:12 UTC

“So the recipe requires ketchup or mustard, but when we add both it causes problems.”
“Let’s cut the mustard out then.”
“But what if we lose the ketchup?”
“Pffft when has that ever happened? Besides, we’re moving to a whole new oven soon.”
**The next day**
“So hey, funny thing, the ketchup ran dry.”
“Aw crap… hit the override and then we’ll fix it.”
“The override requires ketchup...”
——
And that, my friends, is Cloudflare learning heinzsight.

2025-06-12 09:14:20 UTC

- reply

@nprofile…389m Good call, SUNBURST was a fun one. I was with Farsight Security before DomainTools acquired em and we ended up providing a bunch more domains to Bambenek’s beacon list as it unfolded.
Almost forgot about it. Thank you!

2025-06-11 20:01:47 UTC

- reply

@nprofile…u3tn how i what

2025-06-11 19:33:33 UTC

everything okay over there, United Airlines?
https://masto.deoan.org/system/media_attachments/files/114/666/397/398/117/621/original/392ca9f0dd8f9976.png

2025-06-11 18:51:00 UTC

If y'all have good in-the-wild examples of DNS C2s, please hit me up with em.
#infosec

2025-06-10 17:52:24 UTC

- reply

@nprofile…cl5w I passed a thousand hours in Satisfactory a bit ago.
Hooked me a lot more deeply than Factorio, for some reason.

2025-06-07 13:21:11 UTC

So if I begrudgingly wanted to start learning more about the day-to-day cryptocurrency landscape, who or what sites would I follow other than @nprofile…eznj and @nprofile…6r7m ?