iiinova — where your digital self keeps evolving

tactical_legacy_kirbo @da667cant.hax.lol · 01/05/2026

don't tax the billionaires! *pause* seize their assets, and launch them into the sun.

290

tactical_legacy_kirbo @da667cant.hax.lol · 26/04/2026

life is suffering, and I'll die when I'm dead.

120

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

These posts are mainly focused on topics of #ThreatResearch, #VulnerabilityResearch , #DetectionEngineering , getting people comfortable with #Snort and #Suricata, and #Homelab Enjoy!

120

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

at my absolute worst I was a size 60. Right now? I'm not quite able to fit into a size 48, but I'm very close. The only clothes that still fit me right now are the old ones I never threw out, my shirts, and my basketball shorts, which are drawstring and elastic anyway, lol.

230

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

Getting all of that managed made getting my workouts done so much easier. I use to struggle to do 20 minutes of cardio. I just got done doing 50 consecutive minutes for today's activity. I work out six days a week. I've also lost a bunch of pant sizes.

130

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

I'm feeling the best I have felt in years. The Potassium was making everything very difficult. Hyperkalemia does a lot of awful things to your body. Affects heart rate, makes the muscle tire out faster, and I was experiencing micro blackouts whenever I would stand up.

130

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

continue to manage my blood sugar, and generally NOT fuck things up, I've been told I very likely will not have to worry about dialysis or having to have a kidney transplant. I nearly cried when I got the bad news, THEN the good news.

3130

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

Oh yeah, also forgot, that I'm managing my Kidney filtration extremely closely, and my kidneys went from stage 4 CKD on the verge of failure from the kidney injury to stage 3a/stage 2. My kidneys will never be normal again, but if I can a healthy lifestyle, continue to lose weight,

170

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

But since I started the book, it has evolved a lot. Its less a book that is ONLY about Suricata, but I also have chapters on threat intelligence, security research, vulnerability research, TLS interception, etc. I'm proud of what I have accomplished, and I can't wait to have a finished product.

010

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

Why so long? Well, I have a day job as a Suricata rule writer. And sometimes after a long day, the last thing I want to do is write about the thing I wrote about all day. Ya get me?

110

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

I'm still writing my book: Suricata: An Operator's Guide. I'm hitting the closing stretch. I have 9 chapters written, and I have a plan to get another 3-4 done to cover some odds, ends, and new features. This has been my project for almost 3 years now.

120

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

I'm making sincere lifestyle choices, and since December I have: - Lost 70lbs - Got my BP back into the average/normal range for my age - my A1C is at 5.8, slightly above the "average" of 5.7 - Got some help with my seasonal depression I'm in the best shape I've been in at least six years.

2140

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

like, on an average day, 80-85 over 60-65. New nephrologist spotted the problem, I got hospitalized again, this time for a MUCH shorter period to have the potassium pumped out of me, I have been discontinued off of a lot of my medication

180

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

The kidney injury was from LOW blood pressure. She also determined I had hyperkalemia (high potassium) because I was on a potassium-sparing diuretic, because the first nephrologist put me on spirinolactone, and never adjusted dosages, so I got potassium poisoning, and my BP dropped a lot.

180

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

Still alive, still doing well. If you're on Mastodon, you know of my health concerns. If you're not, well... I was diagnosed with Chronic kidney disease in December. After dealing with a shit nephrologist for 10 months, I switched doctors. She determined I had an acute kidney injury.

1180

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

Oh my god, that was forever ago! I was so sad that Palo Alto turned it into abandonware. It was relatively nice to get an intel platform that could dedupe IP addresses effortlessly. If you're still into threat intel platforms, have you heard of Intel Owl? github.com/intelowlproj...

github.com

GitHub - intelowlproject/IntelOwl: IntelOwl: manage your Threat Intelligence at scale

IntelOwl: manage your Threat Intelligence at scale - intelowlproject/IntelOwl

110

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

Thank you again for pubbing my work, I just want to make sure that if teachers are using this, that they get the best I can offer, for free. Because learning is important to me I have plans for a third edition soon, AFTER I finish my suricata book: leanpub.com/suri_operator

leanpub.com

Suricata: An Operator's Guide

Learn the ropes of network intrusion detection, and how to get the most out of your Suricata network IDS deployments today.

160

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

The minimum price is free. All ya gotta do is set the slider all the way to the left, register with an e-mail address, and the PDF is free for anyone who wants it. leanpub.com/avatar2

leanpub.com

Building Virtual Machine Labs: A Hands-on Guide (Second Edition)

Learn to build a robust, secure virtual machine lab environment.

173

tactical_legacy_kirbo @da667cant.hax.lol · 25/04/2026

Hi there, I'm not on here often, but I wanted to let you know if you have any sway with the kids, or school computer classes, computer clubs, or whatever, I have a second edition of this book out. Even better is the digital version is "pay what you want".

160

tactical_legacy_kirbo @da667cant.hax.lol · 14/08/2025

Hey, we've gotten like, a shitload of stuff over the past day or two, so I just wanted to express my gratitude on behalf of the new first graders coming in to my wife's classroom this fall. Thanks again for helping out.

050

tactical_legacy_kirbo @da667cant.hax.lol · 12/08/2025

and if you're interested in my write-ups related to Suricata, rule writing and threat hunting, check out: community.emergingthreats.net/c/tutorials-... Look for the stuff posted by trobinson667. Tons of great advice for threat hunting, intelligence gathering, and rule writing. Cheers!

community.emergingthreats.net

Tutorials, Tips & Tricks

Share your knowledge and learn something new.

000

tactical_legacy_kirbo @da667cant.hax.lol · 12/08/2025

I know its not much, but I write up a bunch of blogs and how-tos related to virtual machine labs and Suricata IDS/IPs software. My books (in varying states of completeness) are over at: leanpub.com/u/da_667 My books are always "pay what you want", even if that means not paying at all.

leanpub.com

Tony Robinson

110

tactical_legacy_kirbo @da667cant.hax.lol · 12/08/2025

I'd also like to thank any of you all in advance if you elect to donate something. Trust me, I know times are tough in 2025 for anyone who isn't a billionaire, so I just want to make sure I express my appreciation.

100

tactical_legacy_kirbo @da667cant.hax.lol · 12/08/2025

dude this is incredibly generous and we both really appreciate it

010

tactical_legacy_kirbo @da667cant.hax.lol · 12/08/2025

and for those of you who aren't keen on donating to a stranger's amazon list, but still want to help your local teachers, consider donorschoose.org as an alternative to support your local schools. This may also be something that you can point your employer to as a worthy cause as well.

donorschoose.org

DonorsChoose: Support a classroom. Build a future.

DonorsChoose connects teachers in high-need communities with donors who want to help.

112

tactical_legacy_kirbo @da667cant.hax.lol · 12/08/2025

She serves as a first grade teacher at a title 1 school. If you're not familiar with the lingo, title 1 schools serve poor and impoverished communities. If you're kind enough to donate, I deeply appreciate it, even if you can't, thanks for taking the time to read this.

120

tactical_legacy_kirbo @da667cant.hax.lol · 12/08/2025

Hey y'all, Keeping this brief. My wife is getting ready to head back to her first grade classroom. She requested that I post up her amazon list to see if anyone was willing to contribute resources to her classroom: www.amazon.com/hz/wishlist/...

amazon.com

Check out my list on Amazon

184

Reposted by tactical_legacy_kirbo

Vendryth @voidcat.tv · 08/08/2025

listen, if I can get an appointment with doctor catte in less than three months, i'm gonna give it some serious thought.

021

Reposted by tactical_legacy_kirbo

Dr Ouch, MD, PhD, RN, DNR, EtOH, PHP, IP68, HD-DVD, VHS, CRT @drouchmd.bsky.social · 08/08/2025

Yeah can confirm not a doctor. But I has all the appointments available to select from.

011

tactical_legacy_kirbo @da667cant.hax.lol · 08/08/2025

Dr. Catte is not a real doctor. Do not let doctor catte touch you.

351

tactical_legacy_kirbo @da667cant.hax.lol · 05/08/2025

complete with the double quotes around the "do not eat", because nobody said I couldn't drink it.

020

tactical_legacy_kirbo @da667cant.hax.lol · 03/08/2025

Sometimes my blogposts on my personal blog are a little raw, so I create a more worksafe version that I put on the emerging threats community forum, that people might feel a little more comfortable reading and sharing: community.emergingthreats.net/t/detection-... Enjoy your Saturday

community.emergingthreats.net

Detection Exercise: D-Link DIR-513 (CVEs: 2025-8184, 8169, and 8168)

Detection Exercise: D-Link DIR-513 (CVEs: 2025-8184, 8169, and 8168) We’ve recently had an intern join the ET team (say hello to @kraghu). I went over how I turned a github repo with some PoC exploit ...

030

tactical_legacy_kirbo @da667cant.hax.lol · 03/08/2025

I posted up a write-up on how to archive exploit write-ups and PoC code, and turn that data into Snort rules, and Suricata rules, the differences between the two rule engines, their syntax, and why we do things what we do when creating rules: www.totes-legit-notmalware.site/home/detecti...

totes-legit-notmalware.site

Detection Exercise: D-Link DIR-513 (CVEs: 2025-8184, 8169, and 8168) | 667's shitpost box

This website is a personal blog with cybersecurity and technology themes. It also ventures into some nerd culture themes, and there is heavy use of strong lanuage. Generally, this website should be co...

151

tactical_legacy_kirbo @da667cant.hax.lol · 02/08/2025

I promise I'll have the PG version that you can (probably) share with your SOC analysts, boss and other people that can't stomach shitposting and white-hot spite sometime in the next few days. Until then, enjoy the weekend, fuck Cisco, stomp out the fascism before it takes root, and one love. later

030

tactical_legacy_kirbo @da667cant.hax.lol · 02/08/2025

-What the rule looks like in Suricata, including a break-down of the rule structure, keywords used, why we use them -An identical break-down for Snort that shows how we achieve feature parity between two vastly different IDS engines. www.totes-legit-notmalware.site/home/detecti... happy hunting

totes-legit-notmalware.site

Detection Exercise: D-Link DIR-513 (CVEs: 2025-8184, 8169, and 8168) | 667's shitpost box

231

tactical_legacy_kirbo @da667cant.hax.lol · 02/08/2025

-Where to find official documentation for both Snort and Suricata -How to properly archive proof of concept code so that the code isn't deleted on a whim and lost forever -The handful of vulns I wrote rules for themselves

120

tactical_legacy_kirbo @da667cant.hax.lol · 02/08/2025

Hey. I wrote up a Detection Engineering Exercise that I used to help train up our newly appointed intern on the emerging threats team. In this post, I covered:

162

tactical_legacy_kirbo @da667cant.hax.lol · 31/07/2025

this is why you don't capitulate to the fascists, they just demand more if you roll over.

031

tactical_legacy_kirbo @da667cant.hax.lol · 29/07/2025

I'll be honest, I've never used arch before. so I'm not used to it.

100

Reposted by tactical_legacy_kirbo

CrazyMyra @outonthemoors.bsky.social · 27/07/2025

I've reached quite a decent age without having a clue what pickleball is.

723762

tactical_legacy_kirbo @da667cant.hax.lol · 29/07/2025

You look at this thing and tell me it isn't a blob of semen.

030

tactical_legacy_kirbo @da667cant.hax.lol · 29/07/2025

Yeah for the most part, switching to debian and using librewolf instead has been nice, but every couple of days it just mysteriously has a Crash-to-Desktop moment. I suspect there's a memory leak somewhere, but I don't know. All web browsers are terminally awful and snap just made ti worse.

000

tactical_legacy_kirbo @da667cant.hax.lol · 29/07/2025

If you are looking for a worksafe version of some of the Suricata subjects I talk about on my blog that you can show your friends and co-workers who don't understand suffering and/or tech shitposting, go here instead: community.emergingthreats.net/u/trobinson6...

community.emergingthreats.net

trobinson667

020

tactical_legacy_kirbo @da667cant.hax.lol · 29/07/2025

There is a TON of other shit I've written about. I've been very active with regards to content since I started up this grav-powered website in January. On a separate note, grav is a cursed CMS. Most of my content is work/Suricata-related, but once in a while I'll just shoot the shit.

120