A wizard did it :donor: 🇨🇦

Former child. Current goblin.

I've done everything from building drag cars to engineered soils testing.

Last decade has been in network and infrastructure administration, and I must've walked through the wrong door or something because now I do Cybersecurity. Privacy advocate, love finding loopholes and making systems do things they weren't designed for. Never felt more "these are my people" than I have in infosec. Extremely lucky to be here.

Probably the only person here with justified imposter syndrome and am hoping I can learn enough through osmosis by shitposting here that I'm capable of contributing something.

Pronouns: He/Him
Place: :cascadia:
Interests: Pretty much everything
Hobbies: like a thousand

Public Key

npub1gcrlcpul9fucphqkgscn8np2cx8m9nuy4ywrs8rds9nre5y9r70secetm9

NIP-05 Address

mustardfacial_at_infosec.exchange@momostr.pink

Profile Code

nprofile1qqsyvpluq70j57vqmstygvfnes4vrraje7z2j8pcr3kcze3u6zz3l8cpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dscly59t

Publishing to

relay.primal.net

nos.lol

relay.damus.io

Author Public Key

npub1gcrlcpul9fucphqkgscn8np2cx8m9nuy4ywrs8rds9nre5y9r70secetm9

Show more details

Published at

2026-06-04T04:27:00Z

Kind type

0 Metadata

Event JSON

{ "id": "20a005ca6ce0175b5c3b7246122475574f0e29c07a578af668476e49158eb323", "pubkey": "4607fc079f2a7980dc16443133cc2ac18fb2cf84a91c381c6d81663cd0851f9f", "created_at": 1780547220, "kind": 0, "tags": [ [ "emoji", "donor", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/183/594/original/61a35b247fc91e55.png" ], [ "emoji", "cascadia", "https://media.infosec.exchange/infosec.exchange/custom_emojis/images/000/491/672/original/21b9ef2253cec9b9.png" ], [ "proxy", "https://infosec.exchange/users/Mustardfacial", "activitypub" ], [ "L", "pink.momostr" ], [ "l", "pink.momostr.activitypub:https://infosec.exchange/users/Mustardfacial", "pink.momostr" ], [ "-" ] ], "content": "{\"name\":\"A wizard did it :donor: 🇨🇦\",\"about\":\"Former child. Current goblin.\\n\\nI've done everything from building drag cars to engineered soils testing.\\n\\nLast decade has been in network and infrastructure administration, and I must've walked through the wrong door or something because now I do Cybersecurity. Privacy advocate, love finding loopholes and making systems do things they weren't designed for. Never felt more \\\"these are my people\\\" than I have in infosec. Extremely lucky to be here.\\n\\nProbably the only person here with justified imposter syndrome and am hoping I can learn enough through osmosis by shitposting here that I'm capable of contributing something.\\n\\nPronouns: He/Him\\nPlace: :cascadia:\\nInterests: Pretty much everything\\nHobbies: like a thousand\\n\",\"website\":\"https://infosec.exchange/@Mustardfacial\",\"picture\":\"https://media.infosec.exchange/infosec.exchange/accounts/avatars/111/699/357/327/573/827/original/9e4be6e89fe06cd5.jpeg\",\"banner\":\"https://media.infosec.exchange/infosec.exchange/accounts/headers/111/699/357/327/573/827/original/9d9aa0d985c5878a.jpg\",\"nip05\":\"mustardfacial_at_infosec.exchange@momostr.pink\"}", "sig": "c5004cc384e0ea6a67b3a2f4e3d7eee85659afb52277cb8251a41ca860868f1ac383c3885099c1e88a55b122dcc22a2c6fe907c088538e9a7ec16af54c0c5bd0" }

Last Notes

2026-05-27 19:46:15 UTC

- reply

There are a number of replies in that thread about not using Brave, DDG, Ecosia, or Startpage from other people as well.

2026-05-27 19:41:05 UTC

- reply

You might want to read this.
https://infosec.exchange/@pip/116637032049016932
#note130s…lqnq

2026-05-27 19:05:58 UTC

- reply

I've been casually looking for a new search engine and frankly the available options are fucking dire . Either you put up with slop, the site is run by an advertising firm, I have to drop cash to try it or the engine just plain doesn't work very well.

2026-05-22 16:52:54 UTC

- reply

*exhale*
Quick and dirty, fair warning though; I haven't tested this and have no idea if it works or not. Obviously needs to run as local admin to write to the hosts file.<code>Write-Host @" /$$$$$$ /$$$$$$ /$$ /$$ /$$$$$$ /$$ /$$ /$$$$$$$$ /$$ /$$ /$$$$$$ /$$$$$$ /$$$$$$$$ /$$$$$$ /$$$$$$ /$$ /$$__ $$ /$$__ $$| $$ /$$/|_ $$_/| $$$ | $$|__ $$__/ | $$ | $$ /$$__ $$ /$$__ $$|__ $$__//$$__ $$ |_ $$_/ | $$ | $$ \__/| $$ \ $$ \ $$ /$$/ | $$ | $$$$| $$ | $$ | $$ | $$| $$ \ $$| $$ \__/ | $$ | $$ \__/ | $$ /$$$$$$$ /$$ /$$$$$$ /$$$$$$$ /$$$$$$ /$$$$$$ /$$$$$$ | $$ /$$$$| $$$$$$$$ \ $$$$/ | $$ | $$ $$ $$ | $$ | $$$$$$$$| $$ | $$| $$$$$$ | $$ | $$$$$$ | $$ | $$__ $$|__/ /$$__ $$ /$$_____/|_ $$_/ /$$__ $$ /$$__ $$ | $$|_ $$| $$__ $$ \ $$/ | $$ | $$ $$$$ | $$ | $$__ $$| $$ | $$ \____ $$ | $$ \____ $$ | $$ | $$ \ $$ /$$| $$$$$$$$| $$ | $$ | $$ \ $$| $$ \__/ | $$ \ $$| $$ | $$ | $$ | $$ | $$\ $$$ | $$ | $$ | $$| $$ | $$ /$$ \ $$ | $$ /$$ \ $$ | $$ | $$ | $$| $$| $$_____/| $$ | $$ /$$| $$ | $$| $$ | $$$$$$/| $$ | $$ | $$ /$$$$$$| $$ \ $$ | $$ | $$ | $$| $$$$$$/| $$$$$$/ | $$ | $$$$$$/ /$$$$$$| $$ | $$| $$| $$$$$$$| $$$$$$$ | $$$$/| $$$$$$/| $$ \______/ |__/ |__/ |__/ |______/|__/ \__/ |__/ |__/ |__/ \______/ \______/ |__/ \______/ |______/|__/ |__/| $$ \_______/ \_______/ \___/ \______/ |__/ /$$ | $$ | $$$$$$/ \______/ Eat my ass Palo Alto "@ $hostsPath = "%systemroot%\System32\drivers\etc\hosts" $remoteUrl = "https://gayint.org/blocklists/pf_prefixes.txt" Write-Host "Trying to pull the latest list of scumbag IPs..." try { $gayint = Invoke-WebRequest -Uri $remoteUrl -UseBasicParsing $badip = $gayint.Content -split "`n" } catch { Write-Host "Someone done fucked up. Be honest, it was probably you." exit } Write-Host "Targets Acquired. Fire at will" Add-Content -Path $hostsPath foreach ($badip in $badips) { $trimmed = $badip.Trim() if ($trimmed -and -not $trimmed.StartsWith("#")) { Add-Content -Path $hostsPath -Value $trimmed } } Add-Content -Path $hostsPath Write-Host "IPs successfully added. You've now done something that a multi-billion dollar corporation can't." </code>

2026-05-21 23:42:29 UTC

- reply

*viciously writes a script and GPO to add the GAYINT list to everyone's HOSTS file*

2026-05-15 18:29:18 UTC

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/580/003/978/809/232/original/09252495b0b602fe.jpeg

2026-05-15 17:29:53 UTC

- reply

gather round while I tell you the story of how I was pushed to self-host a password manager that was:<li>hosted on-prem</li><li>had no access to the internet</li><li>had a WAF in front of it (just in case)</li><li>had full passkey support</li><li>was fully logged out of every service that could write a log</li><li>DB encrypted (obviously) but also hosted on another server</li><li>encrypted backups that pushed to immutable storage</li><li>could be spun up from a bare VM with a single script</li>
And when it was all complete they went with a cloud hosting service because it was "less hassle/work"

2026-04-28 18:06:08 UTC

- reply

omg hahaha welp, I'm keeping this as my theme from now on.

2026-04-23 16:04:32 UTC

- reply

My hero!

2026-04-23 16:01:56 UTC

Does anyone have that really shitty kali linux dragon image where he has a derp face? I need a new wallpaper and can't find it.

2026-02-19 23:40:17 UTC

Better programmers than me, show me a less sketchy way to do this. I'm trying to make a bash script that will copy a file to a machine, then ssh into it and run a list of commands as sudo. All of these use password authentication (I know, don't ask), and I cannot login as root. I cannot think of a way to pass the password through the ssh tunnel so that it can be read on the other side. All I've come up with so far is to do this:#!/bin/bash servers=$(cat servers.txt) for cpu in $servers; do ssh -t $cpu << 'EOF' echo "[SUDO PASSWORD]" > ./pass cat pass | sudo -S [all the rest of my commands here] rm ./pass exit
This works, but oh baby is that a sketchy way to do things and there has to be a better solution to this.
#bash #linux

2026-01-16 17:54:23 UTC

- reply

HK protesters also put the tear gas canisters in bottles full of mud to neutralize them
https://media.infosec.exchange/infosec.exchange/media_attachments/files/115/906/054/732/442/106/original/adb08d89bea63577.mp4

2025-11-04 17:30:07 UTC

- reply

May I ask you what the benefit of a single-user instance is? It seems to me-from the outside look9ing in-to be the worst of both worlds:<li>All of the administration and costs of running your own instance</li><li>None of the "camaraderie" or common-interest discussion of a multi-user instance.</li>
Are there other benefits here I'm not seeing?

2025-10-31 15:52:59 UTC

- reply

EV chargers have software? Aren't they just relays and plugs? I haven't looked at the CCS or NACS standards recently, but I'm pretty sure you can build them purely mechanical.

2025-10-07 15:37:39 UTC

- reply

Why do you think Hanna Montana Linux has not seen the same success as Hanna Montana herself?

2025-08-20 23:25:34 UTC

- reply

I play iRacing in VR and noticed the same thing for the same reasons. The visual cues don't match up with what your body "expects" to feel. I was lucky and never got fully nauseous from it, but it did go away after I did it a couple of days in a row. I guess my body adapted to the situation and now I don't feel weird when racing.

2025-05-15 16:42:16 UTC

- reply

If they're not doing exfil on SMB's then where is the leverage? Is it just a smash & grab and a txt file that says "we encrypted your data. Pay $$$ to get the decryption key." ?

2025-03-06 16:20:51 UTC

- reply

I'll send you my old GTX 960 if you want a free GPU.
(please get this thing out of my house)

2025-03-03 16:12:32 UTC

- reply

isn't this only the case with colour printers?

2025-02-18 17:01:43 UTC

- reply

10 Wisdom is the starting amount when you do the point buy system though...

2025-01-27 17:58:55 UTC

- reply

I do find it interesting that both AMD and Intel haven't announced that they're going to start making AI-focused GPU's. Yes, nVidia has been the leader for raw GPU compute for a decade or more, but both AMD and Intel compete (somewhat) in the GPU market.
Or even that no China-based chip manufacturer hasn't stepped into the ring either.

2025-01-17 21:27:18 UTC

- reply

I've not used it before but Gameye is supposedly really good because you can scan the barcode on the package and it'll enter all of the details and box art for you
https://www.gameye.app/
I used to use Backloggery years ago just to make a nice list of games I owned. https://www.backloggery.com/

2025-01-16 00:30:10 UTC

- reply

Here's a list to get started with: https://www.opensecrets.org/2024-presidential-race/donald-trump/contributors?id=N00023864&src=t