hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 48mCan we just stop the bombastic hype already? 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 1hWhy manually check if Chainguard is a CNA every so often when I can just have it on a schedule? ischainguardstillacna.rud.is (Don't expect this to change anything. The one for Mitch didn’t.) 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 1hI see POTUS is now truthing fortune cookies. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 7hAfter poking at the payloads on @griffinguard's dashboard (h/t to Delft U's Threat Intelligence Lab, too) — infosec.exchange/@griffinguard/1174… — it is going to be super annoying if generic bots pick up this technique and include in […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 7hIs… is CISA drunk emailing (again)? Are they letting Grok do updates now? WTHeck? 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 8hrud.is/b & ai.rud.is have been tweaked to show a banner if you're using a client that still trusts emSign certs. Prbly only useful if you're on a foreign machine since I assume everyone here has let updates happen. I need to file an issue with Helium as […] [Original post on mastodon.social] 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 10hInitial report on the Helium browser test setup to replace the dying Arc. NOTE: I did not install a local Helium server yet. Chrom[e|ium] already adopted browser-wide pinned tabs & sidebar tabs (i really don't use Spaces in Arc or the Space-pinned tabs) […] [Original post on mastodon.social] 010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026NOOOOOOOOOOOOOOOOOOOOOOOOOOO arc.net Well, this is one way to get me to use the internets less. 020 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026more of this, pls. defanging the ref b/c it's riddled with javascript overlays if you aren't using an really good adblocker. economictimes[.]indiatimes[.]com/markets/stocks/news/stock-crash-alert-emudhra-shares-plunge-37-in-just-two-sessions-whats-unfolding/articleshow/135112232.cms 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026For the ongoing [c]git war's battles, I had to be a bit more aggressive with the conditionals for issuing server-forced aborts. There's at least one bot coordinator that is testing what headers need to be present to get a pass and then they reconfig the other […] [Original post on mastodon.social] 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026seems like there should be an investigation of BDO PLT, Chartered Accountants, Kuala Lumpur, Malaysia and they shld prbly — at a minimum — be kicked out of BDO's umbrella org. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026One more example of an org who was already in a codebase fixing a reported security weakness and just didn't bother poking around for other possible bugs in the same area of code. The minute a regex bug was found GitLab shld have done a full regex code […] [Original post on mastodon.social] 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026Don't hold your collective breaths. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 21/10/2026This week's Chrome Stable release report is up. tbljrmp60k.joplinusercontent.com/sh… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 21/10/2026“SpeakON's MagSafe AI communicator turns spoken ideas into action” so they want you to attach yet-another always on eavesdropping device to the existing always on eavesdropping device so you can avoid picking up a pen? 010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 21/10/2026Am very pleased in the recent momentum shift in the [c]git bot battles Having Caddy issue server forced abort is the only thing that seems to get your host off the lists of the really bad AI git scrapers. The reconfigured Akin signature trigger (from 403 to […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026Just a heads up that SkyNet Ltd. — AS35807 & Rial Com JSC — AS34456 (both 🇷🇺 affiliated) did/are doing a mass 443 "are you there" sweep to find open endpoints mostly in France network (hitting our 🇫🇷-hosted Sponge honeypot fleet nodes). 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026🤦 www.manageengine.com/threat-analysi… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026Before they came up, I slapped a minimal search and reporting UI over the ASN transfers data I collect — transfers.rud.is I have some tweaks to make based on some private feedback (ty those folks!) shld get them in this week. This search is a […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026Great weekend + Monday with the wee lads, but they are on the way home, now, and I'm back in front of glowing rectangles. Took a look at how the [c]git battles are going. I modified the Caddyfile to block_abort on a list of Akin HTTP fingerprints that's […] [Original post on mastodon.social] 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026the cgit battles have stalled a bit but defenses are holding steady. doing some agritourism with the grandkids tomorrow but I shld have time later in the afternoon to write up recent changes and plans for next week. (toying with a possible new addition to {hrbrthemes} too) 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026Latest issue of the Super intelligencier (SI) is out. hrbrmstr.si 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 16/10/2026@shellsharks nice update to the tracker! So, we've just about had three "eras" and I sincerely hope that AIs don't start naming and logo-ing their vuln finds b/c I rly don't want to see what their fourth era would look like on the chart. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026[me being overly mean to 🐍] not quote-tooting or including the handle b/c my comment isn't abt the OP. Python is the fugliest, least expressive, and abject dumbest language ever invented, and I am so sad for the world that folks who cannot use better […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026We are so f'd as a country and society. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Triaging Vendor Patch Avalanches With Jev Juniper shipped 106 CVEs in one October release. CVSS won't tell you what to do abt them b/c a 9.8 in the BGP daemon is worth zero if you don't run BGP. Wrote up feeding each CVE record w/infrastructure scenarios to […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Tuesday's Chrome Stable release summary report is finally up (I rly hate holiday-caused 4-day weeks): tbljrmp60k.joplinusercontent.com/sh… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026re: the glincker/sslx post I just [un]boosted there's strong evidence of LLM assist or full vibe coding, starting w/unaligned ASCII boxes across all boxed outputs. verify never checks a sig. It compares issuer & CA names as text, plus expiry. O_O […] [Original post on mastodon.social] 120 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Don't use asidehq[.]app For starters, the model providers (I'd assert all of them) have proven themselves woefully untrustworthy, so relying on their next-token predictors to not generate "what to say next" that shapes your biz (or society) seems daft/risky […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026From Bloomberg Law's "Bankruptcy" (O_O) section: Coreweave’s (the AI cloud-computing provider) unsecured debt due in 2032 traded below 80 cents on the dollar on Wednesday, according to Trace pricing data. That’s widely considered the threshold for when a […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Since I'm firing up RStudio more often now, I ported the Kanso theme family from Zed (and other places) to it since that's what I use everywhere else. Have at thee #RStats: rud.is/git/kanso 020 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026I can't comment as I might like to, but the half of the species that wants implicit trust in what they say might want to speak out abt this person pretty vocally. nitter.xitter.cc/business/status/21… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026wow. we reconfigured the fleet for targeted deception vs absorbing all the noise a bit ago so we saw a dip in daily unique IPs but it's been growing since then and we're coming close to the peak after we first launched the fleet. a sizeable chunk of the […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 13/10/2026"Bug #2170556 reported … 23 hours ago" If this wasn't triaged ahead of time with all the advance notice everyone had, my hopes for an uneventful 2038 (tech-wise, as we'll likely be in full 1984 mode by then, globally) are not very high […] [Original post on mastodon.social] 104 4
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026in the interim, here's a plot going into the blog post so you can see just how hungry the AI folks are for git content. it's the full window from the start of hosting /git/ to a couple hours ago. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026I carved out an hour later in the day to write up the [c]git battles since the Akin blocks are holding for a few days straight now. I'll detail what's next for the config (spoiler: ipset additive blocking the Akin triggered IPs). 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026ran ~28K Caddy log lines from ai[.]rud[.]is site through TypeSafe's Jev decision model: $1.80, zero failures, 147ms median API response time. it flagged 44 attack probes and found 70 requests my (ginormous) SQL classifier filed as ordinary visitors — Laravel […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026#4 messaged me that he saw the Rocinante in No Man's Sky and TIL there's a whole NMS subculture built around creating the Roci in NMS kagi.com/search?q=No+Man%E2%80%99s+… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026the bots are starting to mind their P's and Q's i need to dig a bit more but i suspect this change (PQ rates were declining for a while thanks to dumb mirai nodes) in what hits my primary domain site is due to the clients being used to hammer my [c]git are […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 11/10/2026More Yandex 🧬💣💥 from 🇺🇦 pls if it'll help keep the 🇷🇺 bots at bay. 010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 11/10/2026🦾 the momentum has def shifted in the [c]git wars, with recent tweaks clearly working to fend off the AI bot crawlers. Still need to dig into the data and update the observatory, but just an eyeballing of this most recent chart passes the gut check (there […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 10/10/2026The regular pulls seem to be working and it also pulls the latest cone and spaghetti models (caption has the stamp). I figured out how to do an hourly pull of every location, so there def will be a new Waffle House Index up this week. 010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 10/10/2026I might be able to re-up my ancient attempt at a Waffle House Index #RStats package! Their new hidden API is great. ~5% of Waffle House locations are temporarily closed as of a query a couple minutes ago. 121 2