Druid

You can call me Druid. Nice to meet you.

Professional Security Curmudgeon. Breaker of things. Writer of questionable quality. Neuro-bonfire. Retro-futurist. Terminalcore connoisseur. Digital Nomad. Reactive AuDHDslave. Low-power Computing shill.

I preserve media. Make off-grid networks. Write software for humans.

#noai

Github: https://github.com/ADHDruid

Public Key

npub1d40lrvry540e2ucqgxe3ymdcz22fepn8mlj00j3en2qldmrtph2szjtnh0

NIP-05 Address

adhdruid_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsx6hl3kpj22hu4wvqyrvcjdkup99yusenale8hegue4q0ka34sm4gpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsetx93g

Publishing to

nostr.mom

relay.damus.io

nos.lol

Author Public Key

npub1d40lrvry540e2ucqgxe3ymdcz22fepn8mlj00j3en2qldmrtph2szjtnh0

Show more details

Last Notes

2026-09-17 09:59:25 UTC

- reply

Possibly a bit 😬 on the ablism, but that’s perfectly in line with their views on eugenics, don’t give them ideas.
Maybe we go with “Space” with a long ‘A’ and some visionary hand movements, because it’s the future, innit

2026-09-17 09:51:17 UTC

- reply

Surprised-Pikachu-as-a-Service

2026-09-17 08:14:31 UTC

Have we seen a single instance of AI attacking anything yet?
And by attacking, I don’t mean fucking morons automating exploit tools and pointing them at things.
None of it is novel. Pull the other one.

2026-09-09 17:45:19 UTC

- reply

as I’ve said for a long time.
Having low signal to noise is the same as having no signal.
“We found everything, we don’t really know what this means, there’s so many that only humans can verify, so we need humans to stop what they’re doing, and determine if the lie machine is lying about severity and validity, what do you mean this is just big tech outsourcing their responsibilities to volunteers who will be the most impacted if vulnerabilities are exploited?”

2026-09-04 19:46:40 UTC

Can anyone recommend a good e-reader app for android?
Not interested in subscriptions etc. I just have a lot of PDFs, epubs etc. that I need to juggle, keep position in, bookmark etc. at the same time.

2026-08-30 08:17:35 UTC

Very few security problems are solved by adding more software.

2026-08-29 16:52:08 UTC

- reply

Also, those arguing this was inevitable... nothing is inevitable if you have the power to say no.
The heat death of the universe is inevitable. A FOSS project caving to the whims of a mediocre few is not.
Worth remembering that #Debian is the upstream for the majority of the slop machines anyway.

2026-08-29 16:35:07 UTC

#Debian continues its trend of shitting the bed it would seem.
It wasn't even a decision made with conviction, it was the 'do nothing and hope it works out' option.
#Linux

2026-08-11 19:20:20 UTC

- reply

oh you’ve not done it again have you?

2026-08-04 10:03:50 UTC

This wasn’t an accident, but an inevitability.
In many ways, it was probably even intentional.
The thing about information is that once it is known, there’s no unknowing it.
These companies weaponise that fact, and use weaponised incompetence to further their agenda.
Maybe they’ll pay a fine, probably not. But the objective is complete. I am as near as can be certain that this is the operating model in the second phase of the Information Age.
Collateral damage is the cost of doing business.
https://www.publictechnology.net/2026/08/03/health-and-social-care/nhs-apologises-and-admits-palantir-engineers-have-access-to-identifiable-patient-data/

2026-08-04 06:56:14 UTC

- reply

and it wasn’t even very good to begin with.
HOWEVER.
I’ll take flawed and made by passionate people over incredible with no soul any day of the week.
Unfortunately here, it’s going to be bad, made will ill intent, AND a soulless husk.

2026-08-01 09:43:07 UTC

- reply

in my experience obscurity affords you protection from people that don’t know what they’re doing. Which is still protection.
On the other hand, I’ve come across very few things that couldn’t be identified and enumerated in seconds… which also has value.
I once watched for weeks as a threat actor tore my honeypot network apart, finding fake documentation and diagrams, trying to progress further into systems that didn’t exist.

2026-07-29 23:13:50 UTC

- reply

but didn’t you read it? They’re ‘at the ready’, waiting for the pro fpv pilot teachers to successfully evacuate the building with the equipment, set up a base at safe distance, and get dronin’

2026-07-29 23:08:10 UTC

- reply

there’s places we don’t even do that, just 4ft lengths a few inches apart over any large opening in buildings.
Completely invisible to drones. Event the cheap stuff would hold a hefty boi.
Area denial. Super common in conflict zones, just with higher test. You’d be amazed how little line stops someone making progress

2026-07-29 23:03:21 UTC

- reply

braided fishing line. 2lb test is all you need

2026-07-29 20:39:05 UTC

- reply

yeaaaah same, but that could just as well be the idiots putting them in Dropbox. Just another SaaS product

2026-07-29 20:28:14 UTC

- reply

Zero.

2026-07-29 16:04:25 UTC

- reply

i dunno, but BMW’s are done by Hans Zimmer and they sound pretty great haha.

2026-07-28 20:42:08 UTC

- reply

can confirm. We all send messages in the shower.
Why do you think they made mobile phones waterproof?!
*sent from Druid’s shower*

2026-07-26 22:39:38 UTC

- reply

Really dumb, but I believe most IDE > publish pipelines drop this in as Huawei isn’t permitted to use the same push notification infrastructure as most other Android versions.
Not a defence, and it’s lazy development.
But playing devils advocate you could argue Firebase is probably as risky if not more so, given what is on the other side of it. Might as well be “GitHub[dot]com/*”, it always makes me nervous.
Still, the evergreen statement that SBoMs and people that care about them are a dying breed.

2026-07-24 14:12:18 UTC

- reply

I’d just keeping going if I were you.
I don’t need to know what this means

2026-07-24 10:43:06 UTC

Um.
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/974/536/624/526/708/original/200ebe657f81ed1d.jpeg

2026-07-23 14:35:33 UTC

- reply

on fire today fella

2026-07-23 14:29:20 UTC

@npub1s6e…n008 the sandbox:
https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/969/764/147/709/421/original/89f3f700e3d38435.jpeg

2026-07-18 07:03:44 UTC

- reply

well, it limits the potential for you to be compared against absurd, unachievable, artificial benchmarks and limits the potential for you to be used and exploited, with the Sword of Damocles of “you can just be replaced if you don’t put the puppy in the puppy mashing machine”.
I’d say it limits their ability to hire high-functioning professional operators with integrity and a moral compass. And if they don’t want to hire those people, I don’t want to work with the people they have hired.

2026-07-14 19:08:30 UTC

- reply

you’ve heard of ‘syntactic sugars’ now get a load of #shellSugars

2026-07-14 19:05:41 UTC

It’s not Wednesday but it feels like it.
Welfare check folks. Hope you’re doing well.
Sleep. Hydrate. Eat. Take a break. Exercise. Take your meds. Close the doom scroll apps.
Whatever you need to do and haven’t, do a bit now.

2026-07-10 20:22:21 UTC

I did in fact push to prod today.