:niggy:

Public Key

npub1d0npefkxtfkcptjdawvwkfu58japhjfaljt4hqtpq2xqn8pt2nwqdjahqw

NIP-05 Address

niggy@poa-st.mostr.pub

Profile Code

nprofile1qqsxhesu5mr95mvq4ex7hx8ty72rewsmey7le96ms9ss9rqfns44fhqpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dss3669n

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1d0npefkxtfkcptjdawvwkfu58japhjfaljt4hqtpq2xqn8pt2nwqdjahqw

Show more details

Last Notes

2024-08-02 17:38:18 UTC

chinks are getting crafty
volexity.com/blog/2024/08/02/stormbamboo-compromises-isp-to-abuse-insecure-software-update-mechanisms/

2024-07-21 07:32:27 UTC

her name is niggy
#note1wse…52u4
https://i.poastcdn.org/dbc64e1b3b20c7f18314275eff8ed2960b5547fb07b4ff1019f4efa6940ea20c.jpeg

2024-07-19 13:05:41 UTC

- reply

https://i.poastcdn.org/7badfd66998a2e59d30625e3171768e77f93a006e76c8464a21d72f53740d016.jpeg

2024-07-19 10:06:37 UTC

- reply

windows xp is rare but I still regularly encounter server 2003 in networks of large organizations. there's a lot more ancient legacy shit out there running stuff than people realize.

2024-07-19 07:41:52 UTC

I think people would be surprised how much of the worlds infrastructure just runs on top of ordinary Windows computers, not fundamentally much different from your home PC.
A single buggy kernel driver update from CS Falcon is showing it.
Even grocery store checkout machines aren't safe.
#note10ke…8ln7

2024-07-13 09:23:02 UTC

- reply

telcos are the most hacked networks on the planet to a level people not in the field wouldn't believe, 99% of it's never publicly reported. this one's only unusual that it got in the media.
unfortunately you should just assume everything you do over the phone is being monitored by countless random unknown entities.

2024-06-21 03:20:05 UTC

- reply

Kaspersky is the only major company that actually investigates and reports on US and five eyes hacking ops, they've burned many over the years. Something media's not mentioning in these articles, but definitely a factor in this ban.
Just last year they burned NSA tooling targeting iphones:
securelist.com/operation-triangulation/109842/

2024-05-14 22:36:28 UTC

- reply

thank you friend

2024-05-14 05:43:54 UTC

- reply

thank you friend

2024-05-14 05:33:35 UTC

youtube.com/watch?v=3B0kjlac3o4
nightcore time

2024-05-13 06:03:59 UTC

- reply

no friend, don't worry
I'm just wondering if hypothetically one were to break in future, what the impact could be :hapyniggy:

2024-05-13 05:21:10 UTC

important question. any scientific oomfies here know what a "profilometer" is used for?
I can see they're very expensive and and read the wikipedia article for what they do, but what are they actually used for in the real world?
like if there was a secured cleanroom lab in a university with one of these, what could it be used for? some type of student work? research? manufacturing? how could their operations be affected if this "profilometer" were to break?
thank you oomfies

2024-02-13 04:46:26 UTC

- reply

what are they cooking

2024-01-20 15:24:04 UTC

created a custom ssh + sftp client
may actually open source this, one of my few tools that can't really be signatured
https://i.poastcdn.org/36936d4470c4b85dffa78d762e729f48cd51d409cfb35d4929a011ea3878b972.png
https://i.poastcdn.org/8cda6bf00ca3cfa7dc457615aebfb0cbdc27bba36fb9b4282a32afadb86c6c40.png

2023-12-26 04:26:21 UTC

- reply

it just looks better because the niggy & riamu, which I didn't draw
actually was very quick and crude. don't have any experience at this stuff, only vector art

2023-12-26 02:32:05 UTC

drew something I saw in a dream
https://i.poastcdn.org/badf07c284a02363987faefd4d3b0f2ee733291d5162fe869b3372ff48aa6a87.png

2023-12-23 16:17:00 UTC

hello oomfies, welcome to daily standup
https://i.poastcdn.org/0821b575ffd083b9d40a1895c32d519402af0c815af0b4511c2eb51daadf997f.png
https://i.poastcdn.org/d728587c5da0baf39633d87007de07798d7f3226c4f8d8c3577917a82394192b.png

2023-12-22 09:33:07 UTC

- reply

happy birthday friend
https://i.poastcdn.org/d351d526ac744f55dbb03d2058e5205c6a12b3ec855226cba02dcb1e5ccd4a98.png

2023-12-22 08:28:41 UTC

- reply

could look into doing a BGP attack with this, been a few years since the last good one of those

2023-12-22 08:07:39 UTC

- reply

the credentials I first had were students and staff
basically I exploited server on the internet, extracted credentials from that server, and tunneled through it to access other stuff in their internal network, including that SMB share

2023-12-22 07:45:35 UTC

- reply

yes friend I'll explain. it means they have spent lots of money on "advanced" stuff, while forgetting the basics
EDR is like an antivirus, it monitors computers for suspicious activity, sending alerts to a central dashboard
they have 2 different ones (CS Falcon & MS Defender Endpoint) installed on most systems, unusual and expensive
but they left system backups open for me to freely take, and extract credentials from

2023-12-22 07:32:43 UTC

- reply

oomfies, we now officially control and entire /16 ASN
https://i.poastcdn.org/b01b2cbcb7725656f0ba2e3d7332c36ac873da94455cfbee4dfb80b16a85b2c7.png

2023-12-06 03:24:57 UTC

- reply

yes friend, there's actually many of them, just don't poast about most
just this one for showing off a tool I made

2023-12-05 12:47:07 UTC

- reply

thank you friend
https://i.poastcdn.org/07b1b7b80ad31e0194868a159568de13b3ef78485e488da059c59847e19ad691.jpg

2023-12-05 12:41:24 UTC

- reply

first field use :hapyniggy:
https://i.poastcdn.org/6321a9802b1cb245856bae99e9c472357550a49b09f6efdbda5c54bf410dbe24.png

2023-12-03 12:23:49 UTC

- reply

thank you friend, I love this niggy

2023-12-03 05:51:23 UTC

- reply

thank you friend

2023-12-03 05:50:35 UTC

- reply

what did they say
https://i.poastcdn.org/41963166893dc78ec28a431598601594f760222269fe67d7594480b2593f91fa.png

2023-12-03 05:46:20 UTC

- reply

did consider zig, chose rust instead mostly just because it's more popular, also has some extra nice high-level features like implicit mem management and functional programming stuff

2023-12-03 05:32:34 UTC

- reply

2nd random boomer from that instance to block me for no reason

2023-12-03 05:23:41 UTC

- reply

oh she is very cute

2023-12-03 05:21:42 UTC

thousands of padorus made, yet not a single one of niggy

2023-12-03 05:00:36 UTC

learning rust :hapyniggy:

2023-11-25 11:24:34 UTC

- reply

asp.net agent done
https://i.poastcdn.org/c3ae972efd7b68aebe311308b903560e74aa4c51090ab74d6382ab741423ee47.png

2023-11-25 08:28:30 UTC

friends, its officially 11/25. wish her a happy niggy day
project-imas.wiki/Sachiko_Koshimizu
https://i.poastcdn.org/8c8e2c8717c43dfe6c80aeb58d8364089fbf3df428648947a6d080072607945e.jpeg

2023-10-06 11:42:52 UTC

- reply

miss that old @, btw this was in response to me drawing fanart for this guy
twitter.com/ArgyleAchilles/status/1389116663522480132
https://i.poastcdn.org/8b4c78b3a15e3990543da5ba94165911f7a0e948de64a45deae8586005242daf.jpg

2023-09-29 10:05:05 UTC

I am racist

2023-09-26 09:35:47 UTC

- reply

her name is niggy
https://i.poastcdn.org/1bd8a911423775e66b296e45beed3c398a2eb25740066fd6f6d016c6a5ff88aa.jpg

2023-09-19 04:02:28 UTC

- reply

I love you ms Owl

2023-09-14 02:06:19 UTC

squeezing water from the stone that is php4 (released 2000)
https://i.poastcdn.org/2de4407ec2133530d2967da284bdb9033631852dace646bc0d91d7a3a5410e27.png

2023-08-30 19:28:23 UTC

look oomfies im on tv
youtube.com/watch?v=BFIvxu7xwLI

2023-08-30 03:49:52 UTC

nightcore time
youtube.com/watch?v=cr1ApdTn6JY

2023-08-30 03:16:00 UTC

https://i.poastcdn.org/000a0dd20b6ffbdad60e07d37aff4126c33ce7d49e4ac9207df2fab4e94c9c00.gif

2023-08-25 10:06:58 UTC

- reply

https://i.poastcdn.org/d3b2f7ace1f8f71a4501c67a1c92e3567b0e400c9feff4e1d7b99113bea363e6.mp4

2023-08-24 15:45:26 UTC

- reply

meme nickname 4chan people created for niggy

2023-08-24 15:43:28 UTC

- reply

come faster if you say sachiko

2023-08-24 03:01:52 UTC

- reply

2023-08-21 14:25:46 UTC

- reply

these security features do work friend, they make our lives very difficult. it's hard to get a malicious UEFI binary signed, it's a significant barrier to the vast majority of attackers. If I went online
now and tried I couldn't do it

2023-08-20 22:53:40 UTC

- reply

hmm
https://i.poastcdn.org/4705ab562141e0f92a32888581d73c688ad6280ce8ba5b56336f0128fd74b3ce.png

2023-08-15 20:03:58 UTC

- reply

yes friend it sounds like that could work, anything beyond that depends on your needs. eg could even set up your clients on individual vlans to monitor and control traffic per-client at the router level

2023-08-15 19:50:51 UTC

- reply

no real way to protect against dns rebinding in a standard web app codebase unfortunately, it's a system-level issue. would have to handle dns resolution in the app itself which is impractical

2023-08-15 19:43:34 UTC

- reply

easy way is on the system use dns server with rebinding protection (most do) and just disable ipv6. that just leaves simple input validation for ipv4 rfc1918/link-local, could just block ipv4 urls completely

2023-08-15 19:06:02 UTC

- reply

yes friend that makes sense, standard managed switches should work, just set up connected to the router with port isolation
the setup for how switches connect to the router depends on bandwidth requirements more than anything, you could connect multiple switches to eachother as long as the link to the router can handle it
for a smaller operation with a couple hundred connections you should be able to get by with pretty normal networking gear and setups without anything too special

2023-08-15 18:25:45 UTC

- reply

hello friend do have a scale in mind for your ISP? there's no technical reason you can't be a boutique provider of just direct fiber lines to a pfsense router, though that's not how normal large corporate operations work
hardware/software choice mostly varies by region in my experience, choices just based a lot on commercial support. mikrotik is popular in the middle east area so maybe that's why you've seen it a lot

2023-08-15 04:32:55 UTC

- reply

feds backdooring everything like that is mostly a myth, NSA doesn't need to get backdoors from vendors when they can just buy exploits from L3Harris, easier and less risk
mostly a myth, I think there's been a couple of public cases over the decades

2023-08-13 03:27:35 UTC

- reply

her name is niggy
https://i.poastcdn.org/8e09a629b2d3fdd4ffaa579067f20be4ea0a5d4f87529e88c50ea3da6e76d582.jpg

2023-08-10 14:24:44 UTC

- reply

I like the album art friend

2023-08-09 16:54:41 UTC

- reply

https://i.poastcdn.org/7571b0af89b1f1ea8d437cfb992c16fa551c943de2bb078df818af76b5bfecf6.png

2023-08-05 03:52:05 UTC

- reply

https://i.poastcdn.org/f2c3080c4c55877c1c34c7a36abd987aeb975ac835bae53870bc5e1103b1828a.gif

2023-08-04 16:13:28 UTC

- reply

thank you friend, not the full report but I have posted a redacted version here, should be a few posts down on my timeline

2023-08-04 14:59:04 UTC

- reply

@npub1c5j…emu0 friend can you translate these lunar sigils?

2023-08-04 14:49:35 UTC

- reply

don't worry friend, I am auditing it

2023-08-04 12:47:29 UTC

nightcore time
youtube.com/watch?v=RCmuKz-i9Ic