https://yabu.me https://yabu.me/npub1mwgrtm0h3hnlfw9hvzqvhfchz9wzy2dvua0q6zr7lqwuxuu6hpms8xvjjk https://yabu.me/nevent1qqsql59w3n5j7qnc7lp62luvjg4pxuspny4vlr0sa960wwat9rgh4uqzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wtq9sl4 So, I recently got nerd-sniped into making my own Linux distribution - focused on declarative security constraints - inspired by #OpenBSD, #NixOS, #Wolfi, #Alpine, and #CrOS - as well as processes like #SOC2 - focused on VMs. The idea is: if you don&#39;t declare the behaviors up front, it won&#39;t work - including malware and (most) kernel exploits.<br/><br/>I&#39;m not ready to share it yet, but I&#39;m curious - what gripes do you have with Linux distro&#39;s today? 2026-10-09T13:17:28Z https://yabu.me/nevent1qqs2g9lemy6ve8a5f57wwgrx6c9yckq8yt55qfznhau8frjkvhhe58qzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wnk3j9t While working on GDPR/SOC-2 compliance paperwork for <a href="https://isotope13.io/">https://isotope13.io/</a> - I got nerd-sniped into making my own Linux distribution.<br/><br/>That&#39;s how much I hate working on compliance paperwork. 2026-10-06T16:39:49Z https://yabu.me/nevent1qqsq9u5fzl2f7dyyl77ckt0fq5pdnxnr0k3xrsn9gdl8afkhwtcqsrgzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8w7h5w7c In the 30 years since #Java launched, there has only been 1 attack in which a Java project has been compromised to distribute malware that didn&#39;t involve #Minecraft. It turns out that even malware authors have taste.<br/><br/>As someone who has studied every supply-chain attack where an official upstream distribution point was compromised, that&#39;s my fun fact to share. 2026-09-18T02:18:46Z https://yabu.me/nevent1qqsz2yz9hwl68kgtd0w4gk7y4nvuxl9mwfyz5tfg40g44xkqugk9k3qzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wcuueak In reply to <a href='/nevent1qqsfaj5xrtuv82t9uht35pt00ckd08sn8kd985qjv3g4u3kmqq9uzqcu376w2'>nevent1q…76w2</a><br/>_________________________<br/><br/>As someone who uses AI tools as a productivity crutch (with the excuse of a debilitating degenerative joint disease caused in part by decades of typing); I feel conflicted every day. I do think we&#39;re going to look back at this era though as somewhere between the Dada movement in Art, and the MCSE movement of ~2000 where people listened to radio commercials thinking they could get a high-paying job as a sysadmin just by taking some overpriced course.<br/><br/>It&#39;ll be interesting, nonetheless. 2026-09-12T12:48:57Z https://yabu.me/nevent1qqsy764qzujtt6lapv0xa5xykgs6742t7vksp44useyenjsclj8ck3szyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wrkwqe4 I have listened to an unhealthy amount of #SkinnyPuppy this week. What have you been listening to? I could use a musical reset and welcome any suggestions. 2026-09-12T12:39:03Z https://yabu.me/nevent1qqs84rpd8ndh72fyj0ch484yyky7jpmd3464mgrgqk5wp08m2w8clegzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wqqwfsd It&#39;s not every day that I get to show up my old friends at #Google so hard. This graph demonstrates #atomdrift&#39;s uncanny ability to detect 0-day #malware (median sample age 10 h, youngest 0.7 h):<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/117/238/312/888/208/170/original/f4c5e81216a27490.png"> <br/> 2026-09-09T00:44:49Z https://yabu.me/nevent1qqsz82rjakl5ak8ydvl5gss9uzfr4n3tqgw4ahwv9ggj037dd7thpyqzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wkfqgp9 There aren&#39;t many times when my work feels like the Matrix; but flashing the SPI on this Honeycomb LX2 comes pretty close (imagine output like this streaming for 20 minutes).<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/117/100/550/277/179/274/original/f7f1d8ba0b4472dc.png"> <br/> 2026-08-15T16:50:26Z https://yabu.me/nevent1qqsz5tx3tkvepsmayx59e56nuanyh65l6763tdddeg77vkrknkculzczyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wlylcqd Multiple security vendors reached out this week about integrating #atomdrift.<br/><br/>One asked: &#34;What are your project&#39;s principles?&#34;. So now we have some:<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/117/095/677/732/243/655/original/6b58ae1a2c1853c3.png"> <br/> 2026-08-14T20:13:30Z https://yabu.me/nevent1qqs8qjqxqgmvg9w6jl7nus7lh0s6zp2lmdqhvd9ec545q2a8zvvjahszyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wcqxc42 In starting #Atomdrift - I&#39;ve been driven by a single goal: reliably detect the next xzutils-style supply-chain attack, whether created by a human or AI. Our #Scan project was phase 1, and now we&#39;re looking for design partners for phase 2. If interested or just curious, DM me.<br/><br/>(Yes, this is a shitty LLM-generated image based on its design doc; plz roast)<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/117/055/456/944/545/128/original/a38aa2a363f2f4c8.png"> <br/> 2026-08-07T17:45:11Z https://yabu.me/nevent1qqs2xzxek584vvnwm9wyh57nn4gmp0xdausnm49kxzeqxpeayz8sxzqzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wul9yz3 As much as I dislike whoring myself out like this, I could use some help!<br/><br/>#atomdrift just relocated from codeberg to github; so all of our &#34;stars&#34; reset. If you have a GitHub account, take a moment to star our project: <a href="https://github.com/atomdrift-project/scan">https://github.com/atomdrift-project/scan</a> - for better or worse, folks use stars to determine whether a project is worthwhile; this one certainly is. 2026-08-06T22:07:22Z https://yabu.me/nevent1qqs0h69n2rs73v3av85a7wgmf5yt9umsw4hc46rjrrmqv328khmldlgzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wh2h0tz I&#39;ve been trying to stay quiet about it over vacation, but I&#39;m damned impressed with how #atomdrift is showing up in the malware detection charts. Nothing comes close to it for #supplychainsecurity. Have a question? Leave a comment.<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/116/975/003/048/418/417/original/a8e2f4de0c86f04a.png"> <br/> 2026-07-24T12:41:42Z https://yabu.me/nevent1qqswevkyhwh6xm8aar3crh8xxlsu5gdxl0fvygmqek73jgrxtg969uczyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8w4z80ed I&#39;ve been lazy about blogging this year, but the recent #Codeberg announcement banning LLM-based projects triggered me: <a href="https://choosehappy.dev/posts/2026/so-long-codeberg-and-thanks-for-all-the-fish/">https://choosehappy.dev/posts/2026/so-long-codeberg-and-thanks-for-all-the-fish/</a><br/><br/>[no AI was used in writing or editing this post] 2026-07-24T10:01:43Z https://yabu.me/nevent1qqsf3mtkuqjs9mrmguvsyefnyv6fl8x7tm32r7qkqnu4n4ucnh86vsgzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8w798g9t Things are not looking so good for the Linux box that serves the #atomdrift API for serving, foraging, and generally managing sample files.<br/><br/>Definitely a shame to be 7000km away from the power button for the next 3 weeks, as it doesn&#39;t respond to soft reboot requests.<br/><br/>Kinda wish I&#39;d gotten around to enabling remote ZFS snapshots before I left. 🤦<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/116/871/748/416/262/907/original/b12897da7f7a2406.png"> <br/> 2026-07-06T07:06:47Z https://yabu.me/nevent1qqswyl4h8lcfgdprh6qtwy5e2ccxwdhn52tksmlnllqj20wddz633fgzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wpk9mej TFW when you need to quadruple the storage on your machines because your open-source project is finally successful.<br/><br/>On that note, <a href="https://lab.atomdrift.org/">https://lab.atomdrift.org/</a> will be down for the next couple of hours so I can upgrade our #OmniOS #PostGreSQL master &amp; #FreeBSD frontend replica to 4TB of NVME so that the drive doesn&#39;t fill while I go on vacation. 2026-06-22T17:56:29Z https://yabu.me/nevent1qqsr8xgmvc6mx7gr7zk6epr6kx49cmltfwt27j60lvpk5mq2v55pa8qzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wylw0r2 In reply to <a href='/nevent1qqsgdgn0wate9wc99fraxmyajvqdmqeppyfqg7sxpgf37j7pqylpvgsag7tte'>nevent1q…7tte</a><br/>_________________________<br/><br/><a href="https://lab.atomdrift.org/">https://lab.atomdrift.org/</a> is almost certainly one of them, but we don&#39;t poll as aggressively as some. I hadn&#39;t considered what it would do to download counts. 2026-06-18T12:13:42Z https://yabu.me/nevent1qqsx0zudpcxfgsjaxwvsfw4ph5crgqcam5zs8edwqvyqmx34ardxxrqzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wpuqk6y In reply to <a href='/nevent1qqsf6hx0wftacvjzc9079dkq89gkrztg5qre7h5w6jr532xcyejjpxcfpsqx2'>nevent1q…sqx2</a><br/>_________________________<br/><br/>Yeah, evidently it would take too much load on their system :( 2026-06-09T22:17:28Z https://yabu.me/nevent1qqsvt97j6f32zrw3qya5rn5zhmdcc0pxrh4tm9tlz3j5qez8ry55n8gzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8w502qa0 In reply to <a href='/nevent1qqsdfp62en0ufq8dcpew5922xafun98s2wa37n56pq8408pyxdgqkzsvfth9h'>nevent1q…th9h</a><br/>_________________________<br/><br/>Oof, that reminds me of having a discussion with Rapid7 when we were SIEM searching.<br/><br/>At the time, their platform had bare-minimum built-in rules for macOS endpoints, so I figured we could just port them via Sigma - except they had some absurdly low limit like ~30 custom rules allowed.<br/><br/>I was told I could possibly get an exemption for ~70. Like, what in the actual fuck? 2026-06-09T21:40:16Z https://yabu.me/nevent1qqsgpal8csygmzglxc40tspk3rpzx48gsv7xqm5rgcwx26t09e6m0rszyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wz9980w In reply to <a href='/nevent1qqsp5f486dtf4zh5g28n770rvnalwyu5uaulhuk5yfpm72ue7c0s0vcs54ztx'>nevent1q…4ztx</a><br/>_________________________<br/><br/>obligatory htop screenshot.<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/116/659/335/184/028/717/original/12f625e489a585c1.png"> <br/> 2026-05-29T18:43:13Z https://yabu.me/nevent1qqsp5f486dtf4zh5g28n770rvnalwyu5uaulhuk5yfpm72ue7c0s0vczyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wtynppk 128 ARM64 cores {Altra Max}, 256GB of RAM, 24 hot-swappable NVME drives; definitely the craziest machine I&#39;ve ever built. Holy hell, this one is fast #FreeBSD box though.<br/><br/>Why not just rent from the Cloud? After just 33.8 days, the hardware pays for itself versus the equivalent from GCP. That&#39;s insane.<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/116/659/199/831/176/650/original/4e7d467d7c331ae3.jpg"> <br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/116/659/200/595/123/837/original/80096e768131a91c.png"> <br/> 2026-05-29T18:09:04Z https://yabu.me/nevent1qqsdfz9ea80nrn9hvh4m29lpgyplq06l3wtwd5ednez5tlp78k5dwxgzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wxc3m9r Beware of geeks bearing gifts; or in this case, npm packages containing reverse-shells (system-user-identifier-cli). It&#39;s an trivial find, but a decent demo to show how our open-source detection factory is coming along: <a href="https://atomdrift.org/discoveries/2026/05/system-user-identifier-cli/">https://atomdrift.org/discoveries/2026/05/system-user-identifier-cli/</a><br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/116/636/185/909/178/349/original/3ce3100f61dbe34d.png"> <br/> 2026-05-25T16:36:02Z https://yabu.me/nevent1qqs09p0v2g92qrmwat3py7xtcctcs568mxff9fl0m7s0a6zx236us8gzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wj54dev I always felt like IBM/Lenovo made some of the ugliest computers ever; but damned if their hardware engineering wasn&#39;t amazing.<br/><br/>Still, PS/2 ports on a board alongside 10GbE ports is weird as hell. 2026-05-12T01:00:06Z https://yabu.me/nevent1qqsvvga7fzm3yesz42kngjqr2pex6un8cpv5c2zwukfl8s3jmp0qd2szyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8ww0ckva In reply to <a href='/nevent1qqsp5ym269dvpl0z9ghacr537re8ccpjj4aymr65vetpttkaywh9uxq6w5tz9'>nevent1q…5tz9</a><br/>_________________________<br/><br/>Probably not - it&#39;s running #illumos at the moment :) 2026-03-10T21:36:53Z https://yabu.me/nevent1qqs8mupgmqxnzpwrvptaw9035ztsy88czdzh9sgwxw2336f7klnh4pczyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wc4eada One of the biggest component upgrades I&#39;ve ever done: from a 4GB GPU to 96GB. It feels weird to hook such an overpowered beast to a JetKVM rather than a monitor.<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/116/206/963/355/882/552/original/a644de48e05d93fe.jpg"> <br/> 2026-03-10T21:19:50Z https://yabu.me/nevent1qqszhqqg5jvhtr4fzxk5n4yl9sx2xxcu38aa43mzcmm6ppnpen9h2vqzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wtwgkze In reply to <a href='/nevent1qqsfyx284lgcs4305y9xcd4vu6petugherakupnjcvr7ewnn0ggj07cew04ka'>nevent1q…04ka</a><br/>_________________________<br/><br/>Just curious? What did you hit? <br/><br/>I&#39;m of the opposite opinion at home - I&#39;d rather not have the complexity of keeping their admin interfaces secure (no code to patch; no code to maintain) - I&#39;d adwittedly feel differently in a professional context. 2025-11-02T01:25:35Z https://yabu.me/nevent1qqsqak67pzgaw3tu9kafm3u73d3q6hdlwcn0qmx6l2vfu46qp0akwsszyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wkn2nx8 The recent NPM compromise highlights a frustrating reality: the security tools exist, but nobody uses them.<br/><br/>I had planned to keep my mouth shut about the affair, but someone DM&#39;d me to ask if the supply-chain attack detection tools I created and open-sourced while at #Chainguard would have caught the attack. Yes—both malcontent and ucd detected it; the latter with surprising precision. [1/3]<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/115/208/965/088/856/657/original/f1acf519b0cf88f5.png"> <br/> 2025-09-15T15:15:53Z https://yabu.me/nevent1qqsqld0rn5d07483p8677lcjuck78jm2aljk2nme5zgkfnvgdkns82gzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wumxrk9 In reply to <a href='/nevent1qqs93cxkl0d9wnyp2qkp00p0rnsqg393jlhcyxl54yy9e2t824urs0sxauexn'>nevent1q…uexn</a><br/>_________________________<br/><br/>It probably won&#39;t help you, but it&#39;s worth knowing that <a href="https://github.com/rusq/slackdump">https://github.com/rusq/slackdump</a> exists. :) 2025-07-24T22:31:26Z https://yabu.me/nevent1qqs80xf33dexn9k47kef8ty3d7lankpsm5g2gxlqg6f6hjfczwwd6mszyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8w8u8g4w After two weeks of non-stop #AI usage to get my startup off the ground, I&#39;m finally starting to see the cracks in the facade.<br/><br/>It&#39;s been great for rapid prototyping in a way that doesn&#39;t irritate my osteoarthritis, but asking LLMs to maintain complex state machines is like asking a toddler to clean the house. Both take forever to get anything done, but with AI, entire rooms may suddenly disappear just because you asked it to put away the laundry. 2025-07-16T01:10:44Z https://yabu.me/nevent1qqst437pydy3hl36wh9hvq068dysclnaw5l5dh6a59sl9eerl66cf4szyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wspv65n That feeling when your employer decides to pay another company to maintain an OSS tool you donated to them and were subsequently banned from contributing to. Ugh.<br/><br/>I hope I can find it a nice home. 2025-05-13T17:34:16Z https://yabu.me/nevent1qqsys95xdn5jg0q7yfpn5tddazm39scgclegla4mdyx7g4945wyuzngzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wn2t4sk Step 1 in my my bee-inspired home office rennovation.<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/114/388/275/580/601/566/original/f5dd7d4aad8baf93.jpeg"> <br/> 2025-04-23T16:42:55Z https://yabu.me/nevent1qqsvt6kg6gy57q4378csn43edsvz3rse7t2m6k5ytdq08cw48ezv40qzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wnrtrda In reply to <a href='/nevent1qqsxwj4xw3mh3s6fywmdzf4qszkrk2cc0j44205de2eygqw88e7laegwpvp4g'>nevent1q…vp4g</a><br/>_________________________<br/><br/>Coaxing Gemini into emulating BeOS is like dragging a cat around the neighborhood. It really really doesn&#39;t want to. As soon as you get it to realistically emulate one command, another mysteriously breaks. 2025-03-14T01:08:56Z https://yabu.me/nevent1qqsxwj4xw3mh3s6fywmdzf4qszkrk2cc0j44205de2eygqw88e7laegzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wyrs9df For reasons that defy explanation, I placed another weird artifact on the Internet (try it! there is no ssh password).<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/114/157/396/967/500/656/original/8c772dcc4f87e955.png"> <br/> 2025-03-13T22:07:36Z https://yabu.me/nevent1qqs2eelsh2czm0um6exaq2yredfyp6743u79z08966mdgwslzh944sczyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8whgj2zf While battling RF noise for my new #hamradio shack - I learned more about RF interference than I will ever retain: <a href="http://k9yc.com/RFI-Ham.pdf">http://k9yc.com/RFI-Ham.pdf</a><br/><br/>If nothing else, it helped me to understand the necessity of a common ground and why you probably shouldn’t place a transceiver against an Ethernet switch. 2025-03-10T14:35:55Z https://yabu.me/nevent1qqspy8ln45lzrsprm6a6cnne5yu8gwt5k732t7ywk9tum35qn6tjdtqzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wsm973g Stolen shamelessly from Reddit.<br/> <img src="https://cdn.masto.host/triangletootparty/media_attachments/files/113/879/450/215/654/208/original/f03f38eff4c5ff3d.webp"> <br/> 2025-01-23T20:02:39Z https://yabu.me/nevent1qqsygm80w9ratm3s6myta5h56qnzglahr4nwwavgvmvyuap550g9y9qzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wngnlh8 In reply to <a href='/nevent1qqsdnd9jardhd8p50et7u50jzp0dwfm4qx7sj6smh03p6pflcm4yhjccnv90x'>nevent1q…v90x</a><br/>_________________________<br/><br/>I depend on Security Keys for the systems that support it - which is great as long as you have a plan for when the keys break (every 4-5 years in my experience, if you travel with them).<br/><br/>I decided to store backup codes this time around, but am trying Ente out for 2FA management. I like having my passwords &amp; 2FA managed by separate apps to lessen my exposure when one gets compromised. It sounds annoying, but in practice I only use TOTP keys ~once a month. 2025-01-19T15:58:21Z https://yabu.me/nevent1qqs8z30ggeamvaampjkq8qar0xue2g9q79p8fw6fs577r3gp0wye4ggzyrdeqd0d77x70a9ckasgpja8zug4cg3f4nn4urgg0mupmsmnn2u8wtwqcf4 Moving all my #2FA keys away from #Authy was not the nightmare that I thought it would be: only about an hour of work.<br/><br/>Not only did I miss having a desktop app, but I had forgotten my Authy password and was down to 1 logged in device. 2025-01-19T15:44:30Z