Sign in

Karl

@dr.supersat.phd
1.9K followers 1.4K following 823 posts

KY0LO. Recovering hackademic. He/Him.

PostsRepliesMedia
Karl @dr.supersat.phd · 02/09/2026
at the time, we really buried this paragraph, but it's in there:
Highlighted text:

"While outside the scope of
this paper, we wish to be clear that vulnerabilities in such
services are not purely theoretical. We have developed the
ability to remotely compromise key ECUs in our car via
externally-facing vulnerabilities, amplify the impact of these
remote compromises using the results in this paper, and
ultimately monitor and control our car remotely over the
Internet."
010
Karl @dr.supersat.phd · 29/07/2026
DEF CON deploys this at the main stage, in one of the most surveilled cities in the world, with pervasive facial recognition and location tracking I'm trying to keep them intellectually honest
000
Karl @dr.supersat.phd · 29/07/2026
... except they hold it in Vegas, one of the most surveilled cities in the world, with facial recognition and then DEF CON deploys THIS on main stage to capture 360 degree video of the audience
100
Karl @dr.supersat.phd · 12/07/2026
Okay RF nerds, what am I looking at here? In particular, what's with the giant honking 50 ohm (and 150 ohm) resistors? This is supposedly a 3 stage UHF linear amplifier. But what does the orange wire do?? What's with the "stud diodes?"
010
Karl @dr.supersat.phd · 26/11/2025
It seems to go down wild rabbit holes occasionally. Mine was all cats today. Usually going back to the "Following" tab for a while resets it.
020
Karl @dr.supersat.phd · 19/11/2025
You know what's not shitty? Snipe-IT! We use it for asset tracking at our hacker space and a new member wanted to tag their stuff with a 😺 prefix... and it works!
340
Karl @dr.supersat.phd · 12/11/2025
Seriously, how are these clowns still in business?
130
Karl @dr.supersat.phd · 11/10/2025
HELLO, NERDS! Are you a Cisco expert? If so, I'm trying to configure a Cisco ISR to initiate V.120 ISDN data calls over a PRI, initiated by a connection to a particular TCP or SSH port I can initiate a test call, and the debug logs show the interface comes up, but I don't know how to use it
362
Karl @dr.supersat.phd · 30/09/2025
I don't remember the exact details, but I think this is one of the outcomes from the Cambridge Analytica scandal In my case, I actually tried to turn off Facebook apps so my friends using app that use Facebook APIs wouldn't get any information out of me. But I couldn't disable it!
020
Karl @dr.supersat.phd · 22/09/2025
@pronto.bsky.social This just came up in the old Shmoocon Slack Was this you?
241
Karl @dr.supersat.phd · 20/09/2025
I miss this view, which has absolutely nothing to do with direct line-of-sight to those satellite dishes below the Space Needle (cc: @theneedling.com)
030
Karl @dr.supersat.phd · 18/08/2025
Anyone I know have one of these bad boys? (Or really, anything MagicBand touchpoint-enabled)
040
Karl @dr.supersat.phd · 07/08/2025
000
Karl @dr.supersat.phd · 02/07/2025
You don't have to donate through ActBlue! Mail a check to her campaign HQ. She promises "NO scammy [fundraising] tactics"
To donate by mail, address checks to:

Kat for Illinois
PO Box 267
Evanston, IL 60204
030
Karl @dr.supersat.phd · 22/02/2025
This also sucks
000
Karl @dr.supersat.phd · 22/02/2025
@techconnectify.bsky.social just check out all this visual cruft on my YT subs page!!
140
Karl @dr.supersat.phd · 15/02/2025
also this
000
Karl @dr.supersat.phd · 15/02/2025
How I survived lockdown
100
Karl @dr.supersat.phd · 13/02/2025
At least they give you the error code
010
Karl @dr.supersat.phd · 06/02/2025
Hey @wyden.senate.gov @aoc.bsky.social ... WTF??
Screenshot of an award to Thomson Reuters Special Services LLC for “active social engineering defense (ASED) large scale social deception (LSD)”. Contract is for $9.1M
173
Karl @dr.supersat.phd · 05/02/2025
THANK YOU!! This was the book I was thinking of!
010
Karl @dr.supersat.phd · 01/02/2025
Looks like DEF CON pricing is out, via Blackhat registration form $540!! This is the pre-reg/credit card price, up from $480 last year
Screenshot of the Blackhat registration page with the optional DEF CON Pass add-on. $540 is highlighted.
490
Karl @dr.supersat.phd · 24/01/2025
lmao wat
A screenshot of updating Signal, with a download size of 37.33 MB
100
Karl @dr.supersat.phd · 23/01/2025
Just a few days every year for their anniversary. I think the one by you is doing 19 cent cheeseburgers tonight! (Limit 1 per person)
220
Karl @dr.supersat.phd · 21/01/2025
apparently they thought about this:
Excerpt from the TikTok Executive Order:

"(d)  Because of the national security interests at stake and because section 2(d) of the Act vests authority for investigations and enforcement of the Act only in the Attorney General, attempted enforcement by the States or private parties represents an encroachment on the powers of the Executive.  The Attorney General shall exercise all available authority to preserve and defend the Executive’s exclusive authority to enforce the Act."
100
Karl @dr.supersat.phd · 20/01/2025
Made it to Seattle but WTF is this I might freeze before the bus comes Door-to-door Link is much nicer 😬
010
Karl @dr.supersat.phd · 19/01/2025
We'll see if I make it. There's now an endless procession of snow plows
010
Karl @dr.supersat.phd · 19/01/2025
Unfortunately not
110
Karl @dr.supersat.phd · 19/01/2025
com.zhiliaoapp.musically has been pulled from Google Play play.google.com/store/apps/d...
000
Karl @dr.supersat.phd · 14/01/2025
110
Karl @dr.supersat.phd · 24/12/2024
This image via NBC. Everything beyond the green fence was closed for construction.
010
Karl @dr.supersat.phd · 24/12/2024
What's wrong with this pic?
000
Karl @dr.supersat.phd · 12/12/2024
This reminds me of the Sad Cat Eyes on Twitter x.com/AJamesMcCart...
A cat with very sad eyes
010
Karl @dr.supersat.phd · 11/12/2024
They got the wrong product. This is what they should have shown addfield.com/machines/dou...
000
Karl @dr.supersat.phd · 11/12/2024
They got the wrong product. This is what they should have shown addfield.com/machines/dou...
010
Karl @dr.supersat.phd · 07/12/2024
010
Karl @dr.supersat.phd · 07/12/2024
Alright @bsky.app, we need to talk. This hotel WiFi sucks, but Twitter/Facebook/Google Photos loads in a reasonable amount of time. Three minutes is not a reasonable time to load a site.
120
Karl @dr.supersat.phd · 06/12/2024
One of the cool things about working in buildings built post-COVID is that the old In-floor vents that were popular in theaters a century ago are back!
0110
Karl @dr.supersat.phd · 05/12/2024
020
Karl @dr.supersat.phd · 04/12/2024
They can occasionally have fun tho, especially when it's smacking down idiots
030
Karl @dr.supersat.phd · 28/11/2024
I think you can make out several features from this view (1301 3rd/The old WaMu Tower, the federal building, the ferris wheel)
Aerial view of downtown Seattle from Google Earth
000
Karl @dr.supersat.phd · 28/11/2024
Oops. Built it with GCC. Now this library is too large to link. Retrying with clang!
/usr/include/c++/13/bits/atomic_base.h:635:(.text.startup._Z41__static_initialization_and_destruction_0v+0x60): relocation truncated to fit: R_AARCH64_CALL26 against symbol `__aarch64_ldadd8_acq_rel' defined in .text section in /usr/lib/gcc/aarch64-linux-gnu/13/libgcc.a(ldadd_8_4.o)
000
Karl @dr.supersat.phd · 28/11/2024
don't mind me just testing something
020
Karl @dr.supersat.phd · 25/11/2024
The federal government supports sending local emergency alerts through IPAWS Open, operated by FEMA, but that is based on Internet feeds The only event type that provides direct, live broadcast of audio, is an EAN. There are multiple backups for those.
210
Karl @dr.supersat.phd · 24/11/2024
Okay this is pretty fucky (cc: @pfrazee.com)
140
Karl @dr.supersat.phd · 20/11/2024
Maybe we should just stop building trash gendered bathrooms. There are better ways.
An all-gender bathroom, with a round communal sink. On one side are stalls for urinals, and on the other side are stalls for toilets. All stalls have full doors.
290
Karl @dr.supersat.phd · 17/11/2024
so I see two records, which might be causing issues Only one account can be associated with the root domain
010
Karl @dr.supersat.phd · 16/11/2024
lol get fucked
140
Karl @dr.supersat.phd · 15/11/2024
Am I imagining things, or did the Signal icon in macOS get darker recently? I was running the exact same version on both devices!
100
Karl @dr.supersat.phd · 14/11/2024
devtools to the rescue!

{did: "did:plc:ic7n7z2yrxtl4ejl5dfjchmm", handle: "ocasio-cortez.house.gov",…}
associated
: 
{lists: 0, feedgens: 0, starterPacks: 0, labeler: false}
avatar
: 
"https://cdn.bsky.app/img/avatar/plain/did:plc:ic7n7z2yrxtl4ejl5dfjchmm/bafkreianxsptbosfmqg4vikteavli3typpmelrrrgotevncgozxi74upna@jpeg"
createdAt
: 
"2023-05-11T19:45:00.753Z"
description
: 
"Representing New York’s 14th Congressional District"
did
: 
"did:plc:ic7n7z2yrxtl4ejl5dfjchmm"
displayName
: 
"Rep. Alexandria Ocasio-Cortez"
followersCount
: 
37531
followsCount
: 
0
handle
: 
"ocasio-cortez.house.gov"
indexedAt
: 
"2024-01-26T00:18:59.238Z"
labels
: 
[]
postsCount
: 
0
viewer
: 
{muted: false, blockedBy: false,…}
110