iiinova — where your digital self keeps evolving

Robin @digi.ninja · 27/09/2026

I'll probably start to regret this when the bulk of training kicks in next year, but I've just entered the Dragon's Back www.dragonsbackrace.com 390km with 19,000m elevation over six days. It's going to hurt a lot but also be epic.

dragonsbackrace.com

Dragon's Back Race® — Dragon's Back Race®

010

Robin @digi.ninja · 22/09/2026

Airport security, pulled at: Man: water left in drink bottle Bol: battery pack looked too large Dub: inner tube looked like rope with spike on end Don't know if lack of consistency is good or bad, will keep criminals guessing

030

Robin @digi.ninja · 20/09/2026

A very long day out yesterday, but I got round in 13:20:05, it was a very long day out. Swim: 1:18 Bike: 8:35 Run: 4:32 Could have done better on the bike but happy with the other two times given the sea swell and so long on the bike before marathon.

172

Robin @digi.ninja · 17/09/2026

I'll be running down this Saturday evening.

160

Reposted by Robin

BSides London @bsideslondon.bsky.social · 14/09/2026

The #BSidesLDN2026 Call for Volunteers is now OPEN! Volunteers are crucial to making BSides happen. We need reliable, motivated & responsible people to help make this year's event a success. Interested? For more info go to: bsides.london/volunteers #BSides #London #Community

076

Robin @digi.ninja · 14/09/2026

Does anyone know who is behind the new Mago OSINT app? I've been being spammed by them for over a week in emails and GitHub tickets. All emails to them bounce and so it looks to me like some fake money grab operation rather than anything legit. Avoid at all costs.

000

Robin @digi.ninja · 12/09/2026

Just to see what my videos are worth I turned on adverts. Looks like I'm worth about 2p per day!

010

Reposted by Robin

SteelCon @steelcon.info · 11/09/2026

Happy birthday to the most amazing AV guy in the world, @ministraitor.bsky.social . The conference scene wouldn't be the way it is without all the effort he puts in to every event.

091

Robin @digi.ninja · 08/09/2026

I've just updated a blog post I wrote in 2018 about how to use Burp macros and session handling rules to bypass CSRF protections. You can read the blog post here: digi.ninja/blog/burp_ma... But I've also done a video walk-through which you can watch here: www.youtube.com/watch?v=aQMl...

digi.ninja

Burp Macros and Session Handling - DigiNinja

A guide for what to writing Burp Suite macros and session handling rules

040

Robin @digi.ninja · 11/08/2026

I've had this stuck in my head for months trying to work out what it was. I've finally found out so sharing it with everyone to get it stuck in yours. youtu.be/p3G5IXn0K7A?...

youtu.be

Hampton the Hamster "The Hamsterdance Song"

YouTube video by MNRK Music Group

110

Robin @digi.ninja · 06/08/2026

@strandjs.bsky.social happy birthday mate. We need to get you over for @steelcon.info next year, it would be good to show you my bit of the UK

011

Robin @digi.ninja · 27/07/2026

@ihackedwhat.bsky.social It's been a long time mate, hope things are going well, and happy birthday.

100

Robin @digi.ninja · 24/07/2026

I hate it when an SPA that has a self-signed certificate forgets I trusted the cert and so the app looks like it is working but all the network requests are failing.

000

Robin @digi.ninja · 22/07/2026

If an app has a cvss 9 in it, but the config stops it being exploitable in your environment, does it still get flagged as having an issue and what score does that issue get? I can see valid reasons for anything from 0 upwards.

320

Robin @digi.ninja · 21/07/2026

The local Card Factory has started putting out its Christmas stock. It's July!

220

Reposted by Robin

SteelCon @steelcon.info · 21/07/2026

Slightly late to the list, but just as entertaining as the rest, we've just added Michelle's talk "Where Do We Go From Here? Towards A Philosophy Of Cyber Security" www.youtube.com/watch?v=hL5A...

033

Robin @digi.ninja · 21/07/2026

I got this in an email from Google about updates to their maps SDK. Is this a massive diss to Apple: "Use Apple silicon or use a real device"

We recommend planning for a hardware transition to Apple Silicon-based Macs or using real devices for development prior to Q3 2026 to ensure continued access to the latest SDK features. To avoid immediate impact, you may also lock your application to previously-released versions of the SDK.

220

Reposted by Robin

SteelCon @steelcon.info · 20/07/2026

Want a Monday morning treat? Our videos are now online: www.youtube.com/playlist?lis... We are missing a couple which will be added soon, and @zephrfish.yxz.red is keeping his private. Enjoy! Thanks @ministraitor.bsky.social

142

Robin @digi.ninja · 17/07/2026

The kids are home from school for the last time this school year so the school morning wake up alarm is now turned off till September. Looking forward to a fun summer break once I get my last couple of days of work finished.

020

Reposted by Robin

SteelCon @steelcon.info · 16/07/2026

The party booking form has just been signed. There is no backing out now.

052

Robin @digi.ninja · 16/07/2026

@infosecmo.bsky.social Fancy a road trip to Japan? www.youtube.com/shorts/migaS...

120

Robin @digi.ninja · 15/07/2026

I've remembered a talk I gave in 2018 about doing stuff outside work. I might see if I can revive it and give it an update. No idea when it would be ready, but I think it could be good.

020

Reposted by Robin

SteelCon @steelcon.info · 15/07/2026

The photo album is up and running, please submit your con photos here: photos.app.goo.gl/Vezq4o8Sef2R... @chrisratcliff.bsky.social is working hard on curating the ones he took on the day and they will be added shortly.

032

Reposted by Robin

SteelCon @steelcon.info · 15/07/2026

You heard it here first, SteelCon 2027 will (probably) be on July 16-18. We still need to sign paperwork and check the party venue, but those dates are looking good.

0115

Robin @digi.ninja · 15/07/2026

@scotthelme.bsky.social Happy Birthday, hope you get to enjoy it.

030

Robin @digi.ninja · 14/07/2026

I think a developer maybe heard angle brackets were bad but had no idea why so just banned them everywhere.

000

Robin @digi.ninja · 13/07/2026

I've never seen roadworks with so much markup so I asked what they were doing. This road has a gas main with a leak but also has three 275,000 volt cables running down it. One wrong move and we lose the south of Sheffield!

road covered in red and yellow roadwork markup

031

Reposted by Robin

SteelCon @steelcon.info · 08/07/2026

More swag, I don't know what is in this bundle, the delivery driver sent it to prove delivery but I don't know which company he was from.

161

Reposted by Robin

SteelCon @steelcon.info · 07/07/2026

Saturday night challenge for you all, Hacker AI Karaoke. For anyone coming to our after party you need to get AI to create a hacker themed song, either from scratch or rewriting an existing one.All songs will be played at the party and the best one will win a prize. Either you can sing it or the AI

042

Robin @digi.ninja · 06/07/2026

That was a big weekend, Endure24, how far can you run in 24 hours. I managed 16 laps giving a total of 130km/80miles.

Results from race, 435/1030 overall, 16 laps

240

Reposted by Robin

SteelCon @steelcon.info · 29/06/2026

If you left it too late and missed our main ticket drop, there are a couple of tickets that have been returned by sponsors. You can pick them up here. The extra cash for them will go to charity. ti.to/steelcon/202...

023

Reposted by Robin

SteelCon @steelcon.info · 29/06/2026

Not long to go now so we've just finalised our Saturday talk schedule. You can see the full details here: www.steelcon.info/2026-steelco... Or an overview here: docs.google.com/spreadsheets...

142

Robin @digi.ninja · 27/06/2026

It's Round Sheffield Run time again. 21k in nice small bite size pieces.

140

Robin @digi.ninja · 24/06/2026

A new concept bike has been released called the Hepha. In the UK countryside, if you say you are going to go and ride your heifer it means something completely different!

000

Reposted by Robin

Catalin Cimpanu @campuscodi.risky.biz · 23/06/2026

Two members of the Scattered Spider hacking group—Thalha Jubair and Owen Flowers—pleaded guilty to hacking Transport for London last year www.bbc.com/news/article...

bbc.com

Two men plead guilty over £39m Transport for London cyber attack

The data breach affected 10m customers and disrupted some services for three months in summer 2024.

1116

Robin @digi.ninja · 23/06/2026

I'll use a single quote rather than a double as it is smaller and I've not got much room in this exploit. I think the heat is getting to me!

150

Robin @digi.ninja · 20/06/2026

@strandjs.bsky.social happy birthday mate. You are one of the heroes of the community

020

Robin @digi.ninja · 18/06/2026

He seems to have completely disappeared off all social media, but happy birthday to F1nux. Wherever you are, I hope you have a good day mate.

030

Reposted by Robin

SteelCon @steelcon.info · 17/06/2026

We need help to design those cards. We need our logo on them in some way, but beyond that, we need something cheery that will make the recipients smile. Standard postcard size, no real restrictions, doesn't have to be world class artwork. Can you help? Email your designs to us or post them here

122

Reposted by Robin

SteelCon @steelcon.info · 17/06/2026

Imagine how cool it would be to see your design on a postcard and know 450 of them were sent out to people across the country? postcards@steelcon.info

022

Reposted by Robin

SteelCon @steelcon.info · 17/06/2026

We need some help. We are going to work with a charity this year to send postcards to people who are socially isolated, e.g. people in care homes or hospices. Everyone will get a card in their bag that they can put a message on and then we will do the distribution.

176

Robin @digi.ninja · 11/06/2026

My android left swipe news thing just lost the menu to tell it I'm not interested in things. I'm now getting pushed all sorts of stuff I don't want and can't say no.

000

Robin @digi.ninja · 11/06/2026

I just got a mention on radio two for my @steelcon.info job title of chief mischief maker.

091

Robin @digi.ninja · 05/06/2026

This is genius, store your card skimmer JS in Stripe and then when you've stolen the card data, store that in Stripe as well. Hats off to the criminals who thought of this. sansec.io/research/str...

032

Robin @digi.ninja · 30/05/2026

Is anyone I know going to be at UK Games Expo tomorrow?

010

Reposted by Robin

Javvad Malik @j4vv4d.com · 29/05/2026

Someone got humiliated by Microsoft and now promises to shatter their bones on July 14th. The vendor's response was to call the cops. This is what happ... www.theregister.com/security/2026/0…

021

Robin @digi.ninja · 28/05/2026

Just got a PR for dvwa to fix the fact it uses md5. The comment was along the lines "why would you use something insecure like that?"

3110

Robin @digi.ninja · 28/05/2026

I'm going to start a trend, open toe running shoes

300

Robin @digi.ninja · 22/05/2026

What a way to end a trip. @infosecmo.bsky.social I recommend a visit

150

Robin @digi.ninja · 22/05/2026

I asked hashes com to crack a hash for me in August 2023 and I just got an email to say it had done it. I've no idea what it was for and there is nothing in my calendar that helps, but it's cool I've finally got it.

190