Ian Campbell
@neurovagrant
Security ops engineer and investigator @ DomainTools, writer, voracious reader. he/him. Opinions here mine only. Autistic/depressed/anxious/hungry.
immediately became my favorite meme of the year. via: autistics.life/@aptronym/11...
I wanna know whether this promo email was scheduled before the explosive diarrhea thing or nah.
Disclosure requires supporting evidence. Until then, it's copy. A learned friend asked if they could (using AI) create sticker images from a quote of mine about OpenAI's claims around compromising HuggingFace. Here they are. (no physical stickers available, feel free to grab or make your own)
anyone know what the "Disinformation Social Media Alliance" is or who's involved? disa[.]org At first glance it appeared they gave AI access to prod and in an unsurprising turn of events it changed all titles instead of just the article they wanted a suggestion for.
Cloudflare and Epik, are there any services more philosophically and criminally aligned? Cluster of 40 domains impersonating open source packages in order to maliciously divert traffic, 37 of which are protected by Cloudflare. CSV of cluster details: drive.proton.me/urls/GP3T0K2...
ngl, free won’t is the best concept I’ve heard of in a while I now finally understand that Windows error message, "Task failed successfully."
This one ought to be interesting. Emergency cryptocurrency wallet firmware update email from Trezor sent from noreply@loyola.edu. Have not dug into headers yet.
I have no idea what this is from but it instantly became my go-to gif for explaining the security profession today.
Hey has anyone asked Tanstack what they think of their Gold-level "partner" Cloudflare enabling Breachforums and TeamPCP in the compromise of...Tanstack?
Every time you see news about TeamPCP or Breachforums, you should remember that Cloudflare actively protects breached[.]st. Right now the site is advertising the TeamPCP/Breachforums "Supply Chain Competition."
Here's a nodegraph of 500 domains out of 3400. 10 minutes work off a single domain in Iris Investigate.
Looks like Steam (•_•) ( •_•)>⌐■-■ ...developed a wrinkle. (⌐■_■) YEEEEEEAAAAHHHHHHHHHH
a learned co-conspirator just perfectly phrased it thus: "the horrors of giving the angry vibrating crystals agency in an adversarial environment" grith.ai/blog/clineje...
TFW you impulse-order a book and then completely forget about it until it arrives.
I have been remiss in having forgotten to mention that Da Boss, Daniel Schwalbe, will be speaking tomorrow at BSides Seattle! Go see him work his magic. Bonus points if you ask him what the "F" in "DFS" stands for. #infosec #cybersecurity #bsidesseattle
One of my favorite things to do on days like today is cue up Stephen King's "Storm of the Century" - a very underrated 1998 miniseries about a massive winter storm hitting a small island town in Maine. Howlin' outside still, boy howdy.
Listening to this as an audiobook and really grateful for it. It will probably take a few listens to sink in, but it’s short. More than that, it’s grimly practical as well as compassionate, and “regular” life tasks are one of those places I have the most trouble experiencing compassion for myself.
New gel-cushion filtration mask acquired for travel/etc - Envo Pro N99. Band has a distributed headhold rather than the ear hangers from my last one, so much more comfy.
Snagged what looks like attempted phish/CSRF Portrayed itself as a secure banking message. Initial hyperlink directed to petroleuminvestigations[.]com Looks like a VPS with openresty doing some lua-based filtering -> AWS endpoint -> cookies from bin.dreatrithoo[.]online #threatintel
How my 2025 ends. But not all is lost. I can achieve all things through spite, my friends. 2026 is already looking spicy.
it's just a 6.3, i'm sure it's fine, everything's fiiiiiiine logging.apache.org/security.htm...