ss23 retweeted
The aluminum shell @PCBWayOfficial CNC'd for the project feels amazing, I will absolutely be doing more aluminum projects in the future!
ss23 retweeted
trying to get this score as low as possible
ALT Cloudflare Radar scan Ask AI (Beta) button Explain with AI button scan url: lyra.horse Agent Readiness: Level 0 - Not Ready Assesses how well this site supports AI agents and agentic web standards Nearly empty gauge: 13, Not Ready Discoverability: 1/4 Content Accessibility: 0/1 Bot Access Control: 1/2 Protocol Discovery: 0/9 Success - robots.txt Fail - Sitemap Fail - Link Headers Fail - DNS for AI Discovery (DNS-AID) Fail - Markdown Negotiation page continues, but is cut off on the screenshot
ss23 retweeted
The national party only ever have two campaign messages:
1. New Zealand, as a nation, can not afford to do anything.
2. National are gonna build the biggest fucking motorways its going to be sick
ss23 retweeted
EMUCON 0x00 - "PILOT". Thank you again to our speakers, organisers and attendees. See you next year...?
ss23 retweeted
Using Apple's Corelocation you can identify network devices in areas where Wigle simply doesn't have coverage.
This is Pine Gap, a joint Australian and United States satellite communications and signals intelligence surveillance base.
You cannot get within 25KM before getting stopped.
Using Apple's own infrastructure you can map out the location of over 140 Fortinet devices on the base.
ss23 retweeted
Ashida 2 in development, completely redesigned PCBs that should make it much easier to build. It’s also smaller than the original Ashida. Pretty neat!
ss23 retweeted
Blameless postmortems are about not blaming individuals, so we can understand the incentives that led to the incident. They're not about shielding the organizations that define those incentives from blame.
"Zero Standing Privilege" is a fake as fuck security control and everyone should stop pretending it isn't
ss23 retweeted
Introducing fortitool: one static Go binary that decrypts and unpacks FortiOS firmware end to end, no openssl, no binwalk, no Python, nothing but the binary itself.
Along the way I found something nobody's published before:
FortiGate config backups hide passwords behind a hardcoded AES key, and the common belief is Fortinet rotated it back in 2019 after CVE-2019-6693. They didn't. It rotated quietly at 7.4, and the new key's been sitting unpublished until I reversed it out of /bin/init:
91bc4d1e0e5e35dea0e84803bb1c4cc49699362830f9d6a6c75880b181f6c1db
Full writeup: blog.n0p.me/fortitool-fortio…
Code: github.com/mosajjal/fortitoo…
ss23 retweeted
As several people have pointed out, I got this one wrong. RSA and 2FA are totally different things. At the time I wrote the post, the conclusion seemed logical- factors, primes, it all fits together. But I lacked the domain expertise to understand the ways in which the argument was flawed.
This is known as a "zero-knowledge proof".
One of the ways websites keep your data safe is by leveraging the properties of semiprimes- numbers created by multiplying together two prime numbers. The multiplication is easy, but undoing this calculation is much harder. Login forms are able to use this quirk of mathematics to prevent anyone else from reading your password while it's in transit, since an attacker only sees the multiplied version and doesn't know the original pair of primes.
This is known as "two-factor authentication".
ss23 retweeted
i am no longer impressed by news of models escaping and hacking into external systems during cybersecurity testing . i want to see a model kill
ss23 retweeted
Think you're fast?
The Speedrun CTF returns to BSides Canberra 2026 on Thursday, hosted by @toasterpwn.
Race the clock through fast-paced technical challenges where every second counts.
Details:
cfp.bsidescbr.com.au/bsides-…
ss23 retweeted
tfw you laugh at idiot Microsofty lusers being globally tracked by the NSA because their GUID is hardcoded inside their TPM, but then you suddenly remember Linux also has /etc/machine-id and you forgot to setup your init daemon to periodically truncate and regenerate a new machine-id so you can't also be tracked because you are pretty sure that Chrome is reading it and sending it to Google as harmless "user telemetry analytics."
i stand by my claim that mf'er asshole Lennart Poettering really is the NSA's man on the inside on a mission to destroy Linux and install the NSA's backdoors through all his systemd slop
