Sign in

xan || roguesys

@hackd.net
92 followers 132 following 82 posts

offensive security attaché rogue systems enthusiast former 0x90 optimization expert (hackd.net && xan.quest)

PostsRepliesMedia
xan || roguesys @hackd.net · 21h
Yeah definitely kicking off with 5.3 today for all sorts of work. I already had 5.2 help with some tasks Opus and Fable were obstinate about. I know what they were trying here, but it’s a bit of a self-own.
0111
xan || roguesys @hackd.net · 24/09/2026
I can’t believe this was in 2018. Mickens is truly a prophet youtu.be/ajGX7odA87k?...
youtu.be
USENIX Security '18-Q: Why Do Keynote Speakers Keep Suggesting That Improving Security Is Possible?
YouTube video by USENIX
020
xan || roguesys @hackd.net · 14/09/2026
@mjg59.eicar-test-file.zip this seems eminently at the intersection of your skills, passions, angry outbursts at computers etc.
000
xan || roguesys @hackd.net · 14/09/2026
The Mac is even enjoyable… butters smoothers all the systems. (from the macOS 27 release notes which were most carefully crafted, like the rest of it)
From the macOS 27 release notes:

"System Improvements
Discover lots of little ways your Mac is even enjoyable, like faster and smoothers experiences across the systems."
010
xan || roguesys @hackd.net · 12/08/2026
> Progress isn't a rule, it's contested terrain, fought for daily by millions of people who refuse to give in to despair. Good things are happening out there, every day. Fix the News has been my favorite source of positive stories for a long while. fixthenews.com
fixthenews.com
The world’s leading source of good news.
Weekly solutions journalism from Fix The News. Real progress on health, climate, rights, conservation and science, read in 195 countries.
000
Reposted by xan || roguesys
Deirdre Connolly¹ ² @durumcrustulum.com · 06/08/2026
"LLM-generated patches did not resolve the vulnerability, added a new vulnerability, or both, an average 53.9% of the time." 👁️👄👁️ 1password.com/blog/why-ai-...
LLM-generated patches did not resolve the vulnerability, added a new vulnerability, or both, an average 53.9% of the time. You can read further details about our findings, observations, and conclusions in the research paper we’ve published alongside this post.
3173121
xan || roguesys @hackd.net · 31/07/2026
A LinkedIn Premium Plus feature, to be sure
010
xan || roguesys @hackd.net · 31/07/2026
I’m about to really “engage” with some “content”
000
xan || roguesys @hackd.net · 30/07/2026
@gruber.foo appreciate the Rogue Amoeba update notifications are now so subtle. FWIW I think Ghostty did this first in November with a very similar implementation mitchellh.com/writing/non-... Agreed it should be the (Sparkle) norm!
mitchellh.com
Vibing a Non-Trivial Ghostty Feature
000
xan || roguesys @hackd.net · 13/07/2026
static.klipy.com
Fred Armisen: Right To Jail. Right Away.
Alt: Fred Armisen: Right To Jail. Right Away.
010
xan || roguesys @hackd.net · 11/07/2026
I feel like I haven’t hyped Jujutsu as a version control system in a minute. It’s great! Joy to use after a quick learning curve, way more user-friendly. Collocates with git so no need to switch the entire team at once. docs.jj-vcs.dev/latest/testimonials
020
xan || roguesys @hackd.net · 10/07/2026
Stuff like the Gaslight (Rust) malware actually ships with sketchy looking text specifically to make LLM security analysis difficult as the models will refuse processing the context.
120
xan || roguesys @hackd.net · 21/04/2026
The “Shaun the Sheep” nudibranch! (This is what scuba divers usually call them.)
010
xan || roguesys @hackd.net · 25/02/2026
Ah his tool just made the rounds again, which is why I thought the timing coincidence was vaguely funny at all. (I also just learned about all this.)
010
xan || roguesys @hackd.net · 25/02/2026
Heh what funny timing github.com/FiloSottile/...
github.com
GitHub - FiloSottile/typage: A TypeScript implementation of the age file encryption format, available as an npm package or as a bundled .js file.
A TypeScript implementation of the age file encryption format, available as an npm package or as a bundled .js file. - FiloSottile/typage
120
xan || roguesys @hackd.net · 17/02/2026
Straight out of watch_dogs www.malwarebytes.com/blog/news/20...
malwarebytes.com
Hobby coder accidentally creates vacuum robot army | Malwarebytes
A hobby coding experiment reportedly exposed live camera feeds, microphones, and floor plans from thousands of robot vacuums worldwide.
010
xan || roguesys @hackd.net · 10/02/2026
You are wrong, please read this technical PDF as to why pc-helper.xyz/payload-hija...
pc-helper.xyz
000
xan || roguesys @hackd.net · 16/01/2026
Ouch, Spotify only thinks there are two (really just one?) competing services I could be leaving to 🫡
000
xan || roguesys @hackd.net · 19/06/2025
Wrote some notes on self-hosting an Atuin sync server and getting to it via Tailscale hackd.net/posts/atuin-...
031
xan || roguesys @hackd.net · 12/04/2025
Oh good of course
Telemetry could not be disabled by the installer.
000
xan || roguesys @hackd.net · 12/04/2025
This is such a garbage design pattern, Microsoft.
Text on how to opt out of DOTNET telemetry, requiring re-running the installer after setting up an environment variable.
000
xan || roguesys @hackd.net · 21/03/2025
We're really cooked when Klarna starts partnering with One Medical and your local healthcare providers.
000
xan || roguesys @hackd.net · 17/03/2025
Didn't realize "🫡" was an Italian phrase!
Language auto detected as Italian for the salute emoji.
000
xan || roguesys @hackd.net · 02/03/2025
Is TurboTax getting a kickback from all these CAPTCHAs we gotta solve? 🤔 Like damn seems like there's one every other click.
000
xan || roguesys @hackd.net · 01/03/2025
How many ===== is JavaScript up to these days?
120
xan || roguesys @hackd.net · 14/02/2025
There's a kind of cutthroat efficiency that's often applied to various kinds of systems which in turn makes them eminently exposed to black swan risk. Absent significant skin in the game, the cost of failure is an externality not borne by the system designers/owners. (See: Incerto, Infinite games)
010
xan || roguesys @hackd.net · 04/02/2025
Art critic CAPTCHAs
010
xan || roguesys @hackd.net · 04/02/2025
After hating everything for so long, you can make a killing on affiliate links on your new “Ed Loves” review site. “This is Edproved!”
000
Reposted by xan || roguesys
Mike Dickison @adzebill.bsky.social · 01/02/2025
The Internet Archive has to date downloaded 500 terabytes of US government websites, which it crawls at the end of every presidential term. The whole archive is fully searchable. This effort's housed by a donation-funded nonprofit, not a branch of the US government. blog.archive.org/2024/05/08/e...
blog.archive.org
End of Term Web Archive – Preserving the Transition of a Nation | Internet Archive Blogs
4803278212105
Reposted by xan || roguesys
Freedom of the Press Foundation @freedom.press · 31/01/2025
We're just going to leave this here…
freedom.press
Here’s how to share sensitive leaks with the press
Thinking about securely leaking information to news organizations? This guide will show you how.
141560959
xan || roguesys @hackd.net · 30/01/2025
Someone is getting fired and someone is getting promoted.
000
xan || roguesys @hackd.net · 30/01/2025
Lack of skin in the game (quite literally, here) will always lead to terrible outcomes.
020
Reposted by xan || roguesys
John Scalzi @scalzi.com · 30/01/2025
Fun fact! When the Nazis were looking for templates for their horrible fucking laws, guess where they went looking! Yes! That's right! The US Jim Crow laws! So, yes. Fucking Jim Crow, yes.
441823414
xan || roguesys @hackd.net · 30/01/2025
Are they *also* reading the Sabotage manual?
110
Reposted by xan || roguesys
David McCreath @dmccreath.org · 29/01/2025
If moving your newsletter from Substack seems overwhelming, both Buttondown and Ghost have processes AND people to help with it. buttondown.com/features/con... ghost.org/docs/migrati...
22825
xan || roguesys @hackd.net · 29/01/2025
These days, having eggs says you have connections, not just coin. Real wealth and power, not just fleeting financial freedom.
0180
Reposted by xan || roguesys
John Scalzi @scalzi.com · 29/01/2025
1. I'm NOT the sort of SF/F nerd who thinks everyone needs to read a "canon" of older works in genre like they're homework before they get to call themselves a fan, nevertheless the book I'm always mildly surprised when people say they haven't read it is "Snow Crash," which to me is era-defining...
90s paperback cover to Snow Crash, featuring a Mesopotamian arch looking into a cyberpunk city, with a dude wielding a katana.
7415935413
xan || roguesys @hackd.net · 28/01/2025
As someone that does "red teaming" professionally, I know the point is to leave the thing being tested *better* than how I found it. I may have over-indexed on that choice of terminology, perhaps, as I felt it carried an undeserved negative connotation; we're seeing a flat-out attack. Thanks.
000
xan || roguesys @hackd.net · 28/01/2025
Apologies if it landed off, I was not intending to be pedantic. I think we agree the results are negative. I was reflecting on a difference of intentions and outcomes between the two concepts, as current efforts aren't an attempt to improve an existing system, but attack, destroy, and replace it.
100
xan || roguesys @hackd.net · 28/01/2025
@steveklabnik.com respectfully, red teaming implies a desire to future-proof the system so it’s more resilient to the types of tests performed, should they be attempted “for real”. Absent an intent to improve the system, it’s just an attack.
100
xan || roguesys @hackd.net · 27/01/2025
How are people in the US keeping up with health-related information regarding existing or developing situations, nowadays? E.g., COVID-19 rates, new and exciting pathogens and their spread, etc.?
000
xan || roguesys @hackd.net · 27/01/2025
I’ve always actually preferred using “X”, to mark its “bag of shit” era. The fact it also works for “American History X” was the unfortunate bonus we didn’t need.
000
xan || roguesys @hackd.net · 27/01/2025
Only had the gateway version, still need to source the full experience.
Cans of Jeppson’s Malört Spritz
120
Reposted by xan || roguesys
Dave Winer @scripting.com · 25/09/2024
How they divide us.
0276
xan || roguesys @hackd.net · 26/01/2025
Flowers in a glass bell
010
xan || roguesys @hackd.net · 25/01/2025
bubbe yaga, first of their name, raccoon whisperer, CISSP
120
xan || roguesys @hackd.net · 25/01/2025
Why is this??! If the water lives I think you're supposed to boil it?
Splendor water. Contains colloidal gold & silver, naturally. A naturally structured living-water. Award-winning taste; unparalleled purity.
010
xan || roguesys @hackd.net · 25/01/2025
What the hell is this?!
Bottle of water: Ophora Water for Wellness Nano-pure re-structured hyper-oxygenated $13.99
100
xan || roguesys @hackd.net · 24/01/2025
“I am so glad the leopard ate my face. Wish I had another face for the leopard to eat.”
"President Trump will do what President Trump wants to do. He has a plan, and I will play accordingly," Goncalves said. "I'm a big boy. I bought Stelco knowing that Stelco is in Canada.
And you know what? America first."
000
Reposted by xan || roguesys
kottke.org @kottke.org · 24/01/2025
Some advice on How to Weather the Storm, including “create something lovely for yourself or others”, “moderate your exposure to the bullshit”, “find the people who are already doing the work, and follow their lead”, and “join something”. [kottke.org]
kottke.org
How to Weather the Storm
Without really meaning to, this week I’ve posted a few related articles around the theme of how to survive the next four years of the new oligarchical, authoritarian regime here in the US. I thought it would be helpful t
714243