Sign in

iiinova is part of the Atmosphere — an open, public network where you own your identity.

hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4

@hrbrmstr.mastodon.social.ap.brid.gy
515 followers 17 following 6.2K posts

Pampa • Don't look @ me…I do what he does—just slower. #rstats avuncular • 👨‍🍳 • ✝️ • 💤 • VP Super Intelligence/ML @ Censys • Carnegie Mellon lecturer […] 🌉 bridged from ⁂ mastodon.social/@hrbrmstr, follow @ap.brid.gy to interact

PostsRepliesMedia
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 48m
Can we just stop the bombastic hype already?
Black October: Widespread AI cyberattacks are sounding alarms around the world
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 1h
Why manually check if Chainguard is a CNA every so often when I can just have it on a schedule? ischainguardstillacna.rud.is (Don't expect this to change anything. The one for Mitch didn’t.)
This image isn't just a status page; it is a piece of digital protest—a "shame site" designed to hold a specific company accountable in a very public, stark way.

The website, `ischainguardstillacna.rud.is`, functions like a minimalist scoreboard. Against a void-like black background, a massive, bright orange **"Yes"** dominates the screen. This isn't a "Yes" of celebration, but rather a "Yes" of indignation. It answers a question that the creator of the site clearly finds problematic: *Does Chainguard still have the privilege of being a CVE Numbering Authority (CNA)?*

For context, a CNA is a trusted organization authorized to assign CVE IDs to security vulnerabilities. It is a position of trust in the cybersecurity ecosystem. The narrative text below the "Yes" reveals the grudge: Chainguard is accused of breaking a professional trust—specifically, shipping fixes for PHP six hours before a coordinated "embargo" (a secret agreed-upon release date) had expired. 

The tone of the writing is biting and sarcastic. By stating that the company "still assigns the identifiers everyone else coordinates around," the author is highlighting a perceived hypocrisy: that a company which ignored the rules of coordination is still the one entrusted to lead that very coordination.

The "Details" section adds a layer of clinical surveillance. With a "Last Checked" timestamp and links to JSON source files, the site presents itself as an automated watchdog, refreshing hourly to see if Chainguard has been stripped of its status. 

The final footer acts as a "Read More" invitation, promising to explain the full story of the PHP 8.5.12 embargo disaster of October 2026. Overall, the image captures a moment of high tension within the niche, high-stakes world of software security, where a breach of etiquette can lead to the creation of a permanent, public digital monument to a grudge.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 1h
I see POTUS is now truthing fortune cookies.
A healthy person has a thousand dreams. A sick person has only one (to get better)! President DONALD J. TRUMP
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 5h
more of this, pls.
This image shows a financial data dashboard for Brent Oil.

### Header Information
At the top left, the asset is listed as **OIL (BRENT)**. Its current price is **116.17**, which is an increase of **3.00**, or **+2.65%**, highlighted in green. A timestamp reads "10:31:01 AM MI Indication." In the top right corner, there is a button labeled "Add to watchlist."

### Chart Configuration
Below the header, there are time-range options. The **"1y" (one year)** view is currently selected. To the right, there are two dropdown menus: "Indicators" and "Mountain-Chart."

### Price Chart Analysis
The main part of the image is a dark blue mountain chart showing price fluctuations over the past year.

*   **Axes:** The left vertical axis shows the price in dollars, ranging from 60.00 to 110.00. The right vertical axis shows percentage change from 0.00% to 90.00%. The horizontal axis tracks the months from November through October.
*   **Trend:**
    *   **November to February:** The price starts around 60-70 and remains relatively stable with some minor fluctuations.
    *   **March to May:** There is a sharp, steep climb, with the price peaking above 110.00 in late April and early May.
    *   **June to July:** The price experiences a significant drop, falling back down toward 70.00.
    *   **August to October:** The price enters a steady recovery phase, trending upwards again to finish near its high point of 116.17 in October.
*   **Reference Line:** A horizontal dashed line runs across the chart. On the right side, it is marked with a green label showing **84.56%**.
110 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 7h
After poking at the payloads on @griffinguard's dashboard (h/t to Delft U's Threat Intelligence Lab, too) — infosec.exchange/@griffinguard/1174… — it is going to be super annoying if generic bots pick up this technique and include in […] [Original post on mastodon.social]
payload example
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 7h
Is… is CISA drunk emailing (again)? Are they letting Grok do updates now? WTHeck?
Based on the image provided, here is the list of vulnerabilities mentioned:

*   **ICSMA-26-295-01** – InterSystems Corporation InterSystems IRIS for Health
*   **ICSA-26-295-01** – Kilioview E3 NDI Encoder
*   **ICSA-26-295-02** – Siemens Industrial Edge App Publisher
*   **ICSA-26-295-03** – Siemens Software Center
*   **ICSA-26-295-04** – Siemens Capital Embedded AR Classic
*   **ICSA-26-295-05** – Siemens SENTRON 3NA COM Fuse
*   **ICSA-26-295-06** – Siemens PSS(R)SINCAL
*   **ICSA-26-295-07** – Siemens SIMATIC IPCs
*   **ICSA-26-295-08** – Siemens APOGEE, TALON and Desigo PXC/PXM Products
*   **ICSA-26-295-09** – Siemens Industrial Edge Device Kit
*   **ICSA-26-295-10** – Siemens SIMATIC S7 Webserver API
*   **ICSA-26-295-11** – Siemens SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP
*   **ICSA-26-295-12** – Siemens RUGGEDCOM CROSSBOW
*   **ICSA-26-295-13** – Siemens WinCC
*   **ICSA-26-295-14** – Siemens SIMATIC S7 PLCs Web Server
*   **ICSA-26-295-15** – Siemens RUGGEDCOM CROSSBOW Station Access Controller
*   **ICSA-26-295-16** – Siemens SIMATIC S7-1500 TM MFP
100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 8h
rud.is/b & ai.rud.is have been tweaked to show a banner if you're using a client that still trusts emSign certs. Prbly only useful if you're on a foreign machine since I assume everyone here has let updates happen. I need to file an issue with Helium as […] [Original post on mastodon.social]
eMudhra CA compromise — update your browser and OS.Eight eMudhra intermediate CA private keys were compromised on 17 Oct 2026. Your TLS stack still trusts that chain. Apply your browser and system updates so forged eMudhra-signed certificates are rejected.Details at Mozilla.
100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 10h
Initial report on the Helium browser test setup to replace the dying Arc. NOTE: I did not install a local Helium server yet. Chrom[e|ium] already adopted browser-wide pinned tabs & sidebar tabs (i really don't use Spaces in Arc or the Space-pinned tabs) […] [Original post on mastodon.social]
The image shows a web browser in dark mode. The browser is displaying an Inoreader feed, but the central focus is a floating "Command Palette" or search menu open in the upper right area of the screen.

Here is a description of the browser interface:

*   **Top Bar:** A standard browser address bar at the top shows a URL for an Inoreader folder. To the right of the address bar are browser controls, including zoom settings and a series of small extension icons.
*   **Left Sidebar:** A narrow, vertical dark navigation bar contains several icons for folder navigation and a profile icon at the bottom.
*   **Main Viewport:** The main area of the window shows a list of news feed entries with a dark background and light text.
*   **Command Menu Overlay:** A rectangular, dark gray popup menu is overlaid on the right side of the screen. At the top of this menu is a search field that says "Type to search...". Below the search field is a list of quick-action options, including:
    *   New Tab
    *   New Window
    *   Open History Page
    *   Open Passwords Page
    *   Open Downloads
    *   Open Extensions
010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
NOOOOOOOOOOOOOOOOOOOOOOOOOOO arc.net Well, this is one way to get me to use the internets less.
We’ve decided to sunset Arc on December 22, 2026
That’s not an easy sentence to write. We spent years building Arc and celebrating each and every release along the way: we have so much pride and love for what we made alongside the Arc community.

Our priority is to deliver best-in-class security for our members. Keeping a browser secure takes constant, dedicated work that is only increasing in the age of AI. Dia was built from the ground up to meet today’s security standards, so that’s where our engineering and security teams will focus moving forward.

We’ve worked to make switching to Dia as easy as possible for Arc members. Here’s how:

Your passwords, bookmarks, extensions and history come over to Dia seamlessly.
Spaces, Folders, and Tab Groups are in Dia and import over with your data intact.
Dia now surpasses Arc benchmarks in stability, speed, and security.
The browser features you use in Arc are free in Dia, and the AI is optional.

Thank you for using Arc, for pushing us to make it better, and for building alongside us. The team that made Arc is the same team behind Dia, and some of our most ambitious work is just ahead. We’d love for you to be there with us when it lands.
020 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
More of this pls.
This image is an **S&P 500 Heatmap**, a treemap visualization showing the stock market performance of companies in the S&P 500, grouped by sector. The size of each rectangle represents the company's market capitalization, while the color indicates the daily percentage change: **green for gains** and **red for losses**, with darker shades representing more extreme changes.

### Summary by Sector:

*   **Technology (Top Left):** This is the largest sector shown. It is predominantly red, indicating a downward trend. 
    *   **NVDA** is down 3.96% (red).
    *   **AAPL** is up 0.64% (green).
    *   **MSFT** is down 1.75% (red).
    *   Other significant drops include **INTC** (-7.38%), **LRCX** (-11.14%), and **AVGO** (-3.83%).
*   **Financial Services (Top Center):** Mixed performance, with several large gains.
    *   **BRK-B** is up 1.90% (green).
    *   **V** is up 1.45% (green) and **MA** is up 1.44% (green).
    *   **JPM** is slightly down at -0.07% (dark red/grey).
*   **Consumer Cyclical (Top Right):** Mostly red.
    *   **AMZN** is down 4.46% (red).
    *   **TSLA** is down 2.04% (red).
    *   **HD** is a notable gain at +3.52% (green).
*   **Healthcare (Center):** Predominantly green, showing strong positive performance.
    *   **LLY** is up 2.95% (green).
    *   **UNH** is up 1.96% (green).
    *   **JNJ** is up 3.77% (green).
*   **Communication Services (Bottom Left):** Heavily red.
    *   **META** is down 7.14% (red).
    *   **GOOGL** is down 2.49% (red) and **GOOG** is down 2.48% (red).
*   **Consumer Defensive (Bottom Center):** Strong green performance.
    *   **PG** is up 5.80% (green).
    *   **WMT** is up 2.53% (green).
    *   **KO** is up 2.28% (green).
*   **Energy, Utilities, and Basic Materials (Bottom Right):** 
    *   **Energy** is mixed to negative, with **XOM** at -0.63% and **CVX** at -0.43%.
    *   **Utilities** are mostly green.
    *   **Basic Materials** are mixed, with **LIN** up 2.62% and **NEM** down 2.88%.

### Legend:
A color scale at the bottom indicates the percentage change:
*   **Deep Red:** Losses of 3% or more.
*   **Dark Grey/Black:** Near 0% change.
*   **Deep Green:** Gains of 3% or more.
012 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
Picard four lights meme but 

the private key is four
033 3
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
more of this, pls. defanging the ref b/c it's riddled with javascript overlays if you aren't using an really good adblocker. economictimes[.]indiatimes[.]com/markets/stocks/news/stock-crash-alert-emudhra-shares-plunge-37-in-just-two-sessions-whats-unfolding/articleshow/135112232.cms
Headline: Stock crash alert! eMudhra shares plunge 37% in just two sessions. What’s unfolding?
Author: Veer Sharma, ETMarkets.com
Date: October 22, 2026
Key Event: eMudhra's share price dropped significantly (37% over two sessions) following a critical security incident.
Cause: The crash was triggered by the compromise of private keys linked to eight intermediate Certificate Authority certificates.
Impact:
Business: The incident affected the global TLS business, which accounts for approximately 1% of the company's revenue.
Services: MeitY stated that Indian digital signature and eSign services remain unaffected.
Risk: Despite the low revenue impact, significant reputational risks remain.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
For the ongoing [c]git war's battles, I had to be a bit more aggressive with the conditionals for issuing server-forced aborts. There's at least one bot coordinator that is testing what headers need to be present to get a pass and then they reconfig the other […] [Original post on mastodon.social]
The chart, titled "Status of the /git/* wars," depicts a timeline of request traffic and the corresponding defensive measures implemented to combat bot activity between early September and late October.

The "war" began around September 4th with the deployment of cgit, which triggered a massive surge in requests, peaking at over 125,000. During this initial phase, nearly all traffic "slipped through" as either legitimate humans or undetected bots. A first attempt to mitigate this occurred on September 9th, when robots.txt was updated to disallow the /git/ path, resulting in a sharp decline in overall request volume.

As the situation evolved, more aggressive technical defenses were deployed. On September 19th, the system began using "server forced aborts" based on IP behavioral heuristics, marked by the introduction of orange bars in the data. This shifted the strategy from merely discouraging bots to actively terminating their connections.

The conflict intensified again in early October. On October 6th, "Akin-based behavioral 403 rejections" were enabled, introducing pink bars to the chart. This led to another spike in requests, many of which were blocked with a 403 Forbidden error. Finally, on October 18th, the Caddy Akin trigger was reconfigured to issue server forced aborts instead of 403 errors, which is reflected in the final days of the chart as the pink bars transition back into orange.
100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
seems like there should be an investigation of BDO PLT, Chartered Accountants, Kuala Lumpur, Malaysia and they shld prbly — at a minimum — be kicked out of BDO's umbrella org.
All statements listed were signed by BDO PLT, Kuala Lumpur.

For the Thai Digital ID Company Limited (TDID), there are three separate statements. Two of these cover the period from March 1, 2024, to February 28, 2025: the first is a Standard NTCA G2/G3 statement (attachmentId=bca181b2-30c7-419f-a8a2-cfafbb7217d7), and the second is a TLS BR, NTCA G2 statement (attachmentId=8dca7ab7-44e4-4bca-bd17-aa31d1aadf24). A third statement for TDID, relating to the Standard Thai Digital ID CA G3 (attachmentId=61d3355a-b73a-4018-95f2-09b3067a121f), covers the following period from March 1, 2025, to February 28, 2026.

Additionally, there is a statement for eMudhra / emSign PKI (attachmentId=3d8070c2-...), which covers the period from June 1, 2025, to May 31, 2026.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
One more example of an org who was already in a codebase fixing a reported security weakness and just didn't bother poking around for other possible bugs in the same area of code. The minute a regex bug was found GitLab shld have done a full regex code […] [Original post on mastodon.social]
10/13

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server via a specially crafted regular expression in a CI/CD configuration, due to insufficient regular expression validation.10/22

An issue has been discovered in GitLab CE/EE affecting all versions from 7.0 before 18.11.13, 19.0 before 19.0.10, 19.1 before 19.1.9, 19.2 before 19.2.9, 19.3 before 19.3.6, 19.4 before 19.4.3, and 19.5 before 19.5.1 that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary code on the GitLab server due to integer overflow when compiling a specially crafted regular expression.
100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 22/10/2026
Don't hold your collective breaths.
anakin meme

Chainguard violated embargo for the  PHPocaplyse Vuln 

So the CVE Board is going to revoke their CNA status, right?

Right?
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 21/10/2026
This week's Chrome Stable release report is up. tbljrmp60k.joplinusercontent.com/sh…
This release contains 353 CVEs across 4 severity levels with a total bounty pool of $50,000.

Critical: 6
High: 61
Medium: 197
Low: 89
Bounty-bearing: 24
External reporters: 54
Severity Distribution
Severity	Count	% of Total
Critical	6	1.7%
High	61	17.3%
Medium	197	55.8%
Low	89	25.2%
Vulnerability Type Breakdown
Type	Count	% of Total
Other	209	59.2%
Use After Free	125	35.4%
Out of Bounds	18	5.1%
Type Confusion	1	0.3%Critical & High Severity Analysis
67 CVEs at Critical or High severity.

By vulnerability type:

Other: 37
Use After Free: 26
Out of Bounds: 4
By component:

ANGLE (Graphics): 14
XR: 13
V8 (JavaScript): 4
Paint/Layout: 3
GPU: 3
Input Handling: 3
WebRTC: 2
File System/Input: 2
Canvas: 2
Forms: 2
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 21/10/2026
“SpeakON's MagSafe AI communicator turns spoken ideas into action” so they want you to attach yet-another always on eavesdropping device to the existing always on eavesdropping device so you can avoid picking up a pen?
Promotional image for SpeakON, a physical button accessory for smartphones. The image features the slogan "Your voice, ready when you are," showing the device attached to the back of an iPhone and triggering a voice recording app on the screen.
010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 21/10/2026
Am very pleased in the recent momentum shift in the [c]git bot battles Having Caddy issue server forced abort is the only thing that seems to get your host off the lists of the really bad AI git scrapers. The reconfigured Akin signature trigger (from 403 to […] [Original post on mastodon.social]
Alt text: A stacked bar chart titled "Status of the /git/* wars" showing request volume from September 4 to October 19. The chart illustrates a shift from a high volume of "Slipped Through" requests (blue) in early September to a majority of blocked requests via "Server Forced Aborts" (orange) and "Akin Triggers/403s" (pink) by mid-October as security measures were implemented.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026
Just a heads up that SkyNet Ltd. — AS35807 & Rial Com JSC — AS34456 (both 🇷🇺 affiliated) did/are doing a mass 443 "are you there" sweep to find open endpoints mostly in France network (hitting our 🇫🇷-hosted Sponge honeypot fleet nodes).
A dot plot comparing values for various companies on October 19 and October 20 (partial). The x-axis uses a log scale ranging from 10 to 1 million. Blue dots represent data for Oct 19, and yellow dots represent data for Oct 20.

Data for each company (Oct 19 value, Oct 20 value, and multiplier):
- SkyNet Ltd.: 72,159, 141,320, 2x
- Rial Com JSC: 18,432, 18,432, 1x
- Modat B.V.: 124, 109, 1.1x
- STEEL WEB (BR): 1,024, 1,021, 1x
- Hetzner: 19, 15, 1.3x
- SolidNetwork: 508, 508, 1x
- Cyberzone S.A.: 36, 20, 1.8x
- GTT: 509, 570, 1.1x
- DigitalOcean: 1,031, 993, 1x
- Google LLC: 2,292, 2,114, 1.1x
- FranTech: 28, 28, 1x
- Amazon: 1,165 (Oct 19 only)
- Wifi Telekom (TR): 256 (Oct 20 only)A bar chart titled "Sponge unique IP counts soared starting yesterday," with a subtitle stating that "SkyNet Ltd. — AS35807 & Rial Com JSC — AS34456 are mostly to blame."

The x-axis shows dates from September 01 to after October 15. The y-axis measures "Unique IPs" from 0 up to 150,000.

From September 01 until approximately October 15, the unique IP counts remained relatively stable and low, generally fluctuating below 50,000. Following October 15, there is a sudden and sharp increase, with the final bars spiking dramatically, the last one reaching well above 150,000 unique IPs.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026
🤦 www.manageengine.com/threat-analysi…
Integrity gap: Neither configuration file is cryptographically authenticated by the client, and the checksum used to validate the downloaded archive is declared inside the same unauthenticated file that names it.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026
Before they came up, I slapped a minimal search and reporting UI over the ASN transfers data I collect — transfers.rud.is I have some tweaks to make based on some private feedback (ty those folks!) shld get them in this week. This search is a […] [Original post on mastodon.social]
A screenshot of a network analysis dashboard titled "TRANSFER STATION" used to look up data transfers by ASN, organization name, or IP block. 

The top search area shows a query for "university" with "Any side" selected for direction and "Regex" for text match. A data snapshot date of 2026-10-20 is displayed with 134,122 records.

The main body is split into two columns:
* **Left Column (Transfer Activity):** 
    * A **Calendar** heatmap showing daily transfer counts over the last 12 months.
    * A **Resource Composition** section displaying key statistics: 133 ASN Ranges, 1.4K IPv4 Ranges, 32 IPv6 Ranges, and 27.6M IPv4 Addresses.
    * A **Direction Split** horizontal bar chart showing transfer counts: Source (548), Destination (343), and Both (101).
* **Right Column (Network):** 
    * An interactive **Network graph** showing source and destination entities as orange dots and circles connected by lines, representing the top 60 entities and 200 links by transfer count.A table showing a detailed list of 790 transfer records, currently displaying page 1 of 16. The table is organized into six columns: **DATE**, **FROM**, **TO**, **RIRS**, **RESOURCES**, and **MATCHED**.

The records list network resource transfers involving universities. Most entries show a university as the source of the transfer, highlighted by an orange "SOURCE" tag in the final column. Examples include:
* **St Mary's University (CA)** transferring 2 IPv4 ranges to **Salesforce, Inc. (US)** via ARIN $\rightarrow$ ARIN.
* **Clark University (US)** transferring 2 IPv4 ranges to **Teslar Software (US)** via ARIN $\rightarrow$ ARIN.
* **University of Idaho (US)** transferring 2 IPv4 ranges to **FRESENIUS MEDICAL CARE HOLDINGS, INC (US)** via ARIN $\rightarrow$ ARIN.

One entry shows a university as the recipient, highlighted by an orange "DESTINATION" tag:
* **GULFNET COMMUNICATIONS CO. WLL (KW)** transferring 2 IPv4 ranges to **Abdullah Al Salem University (KW)** via RIPE NCC $\rightarrow$ RIPE NCC.A detailed record view of a specific resource transfer labeled "RESOURCE_TRANSFER." The transfer is from **Clark University** to **RESEARCH PRODUCTS INTERNATIONAL CORPORATION**, occurring on 2026-10-02 within the ARIN region.

The page is divided into several sections:
* **Transfer & Parties:** The top section provides temporal data, showing the transfer date (2026-10-02) and the original registration date (1990-05-21). It identifies Clark University (US · ARIN) as the source and Research Products International Corporation (US · ARIN) as the recipient.
* **Resources:** This section specifies the technical assets moved. While ASNs and IPv6 ranges are empty, it lists an IPv4 original range of `140.232.078.000-140.232.081.255` and a transferred IPv4 range of `140.232.080.000-140.232.081.255`.
* **Provenance:** The bottom section contains metadata for the record, listing the source as "live" and providing a long alphanumeric unique Record ID.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 20/10/2026
Great weekend + Monday with the wee lads, but they are on the way home, now, and I'm back in front of glowing rectangles. Took a look at how the [c]git battles are going. I modified the Caddyfile to block_abort on a list of Akin HTTP fingerprints that's […] [Original post on mastodon.social]
Stacked bar chart titled Status of the /git/* wars showing daily request counts from September 4 to October 19. The y-axis represents the number of requests, scaling up to 125,000. The bars are color-coded: blue for Slipped Through Bot/Legit Humans, orange for Server Forced Abort, and pink for Akin Trigger (403). In early September, following the deployment of cgit on September 4, there are massive spikes of blue requests, peaking over 100,000. After robots.txt was updated on September 9, request volume drops significantly. Starting September 19, orange bars appear as server forced aborts based on IP heuristics are enabled. From October 6, pink bars become dominant as Akin-based behavioral 403 rejections are enabled. On October 18, Caddy Akin trigger is reconfigured to issue server forced aborts, resulting in a shift from pink back to orange bars at the end of the timeline.
100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026
the cgit battles have stalled a bit but defenses are holding steady. doing some agritourism with the grandkids tomorrow but I shld have time later in the afternoon to write up recent changes and plans for next week. (toying with a possible new addition to {hrbrthemes} too)
Alt text: Stacked bar chart titled Status of the /git/ wars, showing daily request counts from early September to mid-October in three colors: blue for requests that slipped through as bots or legit humans, orange for server-forced aborts, and pink for Akin trigger rejections.

After cgit was deployed on September 4, traffic spiked to about 100,000 to 113,000 requests per day, nearly all blue. On September 9 a robots.txt Disallow of /git/ was added late in the day, and traffic collapsed to roughly 7,000 to 28,000 per day, still almost entirely blue.

On September 19 a server-forced abort was enabled based on IP behavioral heuristics. Orange abort segments appear from then on, and as traffic gradually climbed back to 20,000 to 45,000 per day, an increasing share was aborted, at timesaborting half or more of the requests.

On October 6, Akin-based behavioral 403 rejections were enabled. The following day shows about 54,000 pink rejected requests out of roughly 62,000 total, and from then on pink dominates: most daily requests in the 25,000 to 45,000 range are rejected, with smaller orange and blue portions slipping through. By the final day shown, traffic drops to nearly zero.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026
Latest issue of the Super intelligencier (SI) is out. hrbrmstr.si
A satirical broadsheet newspaper front page, dated Friday, October 16, 2026, Volume S I, Number 4. The masthead reads "The Super Intelligencer," with the word SUPER pasted on a yellow label over the old name, and the tagline "America's Most Accurately Named Newspaper, Est. Four Tuesdays Ago." The price line says "one (1) token, super. Also accepted: one (1) new technology." A navigation bar lists News, Government, World, Opinion, Enemies List, By the Numbers, and On the Record. A red breaking banner reads, "si.gov loads. Experts call it the first federal super intelligence product to contain content."

The lead story is headlined "NASA Launches Phase Two Of New Word Two Weeks Ahead Of Schedule," illustrated by a photograph of a rocket launching at night, its bright orange exhaust trail arcing up from black water into a deep blue sky, captioned "NASA's new terminology clears the tower." The article reports that NASA's effort to stop saying two letters went live two weeks early, giving the agency a punctual launch consisting entirely of find-and-replace. A four-phase rename runs October 9 to December 23; staff must use "super intelligence" and "S I" in all in-scope content and may not acknowledge the old terminology, except in the single allowed sentence "S I, also known as A I." The words machine learning, large language model, and chatbot remain permitted. A quoted propulsion engineer says, "We put people on the Moon with slide rules... we cannot put the old name in parentheses. I want to be clear that the slide rules were easier." Phase Three will change the U R L of the Ask Sage tool, called a breaking change, making it the first federal super intelligence deliverable whose release notes include the words "breaking change." Researchers are advised to write papers about super intelligence that cite twenty years of papers about something else. Phase Four is at risk of finishing early.

A right-hand column carries short items: "ai.gov Now Forwards To si.gov, Ends Week-Long Career As The Enemy"; "Army Cyber Command Confirms 'S I Is Real,' Ending Speculation," with attendees embracing it and noting it felt exactly like the old one; "Former A I Czar Joins Super Intelligence Force, Title Exempt Under Section 2(b) As Historical Document"; "Doomers Report Their Warning Now Reads Like An Event Listing"; and "Nation's Medium Writers Publish Five Explainers On Rename, Reach Consensus That It Is A Rename."

A second row has three stories. The first shows hands holding a glowing globe of the Earth against a dark background, and is headlined "U.S. Asks World To Say 'Super Intelligence;' World Counteroffers 'New Technology,'" about I M F and World Bank meetings where delegates consider using neither term, "new technology" having also described the steam engine, the fax machine, and the Segway. The second shows an empty corporate boardroom with rows of office chairs and computers, headlined "Super Intelligence Force Holds First Meeting, Agrees To Study Risks Of Super Intelligence Before Anyone Calls Them Risks," about a force of 120 days' reporting balancing its charter against preventing overregulation, including a quote from a congressional aide invented for the sentence. The third is a gray opinion box headlined "I Am The Phrase 'S I, Also Known As A I,' And NASA Says I Cannot Exist," by A Parenthetical, in which the parenthetical laments being banned while machine learning walks the halls freely, large language model has a badge, and chatbot is cleared for every publication.

The bottom row has three boxes. "The Week, By The Numbers" lists facts like phases in NASA's plan: 4; weeks Phase Two moved up: 2; H T T P status of si.gov, last week 403, this week 200, times it says A I: 0; days until the White House owes itself a definition: 43. "The Enemies List, Week Two" lists outlets that used the old term, with ai.gov removed and the I M F pending. "On The Record" states that every person quoted outside the box is invented while everything inside was actually said, and quotes NASA guidance, a NASA employee comparing treatment of the old term to Voldemort or Macbeth, Lt. Gen. Christopher Eubank saying "S I is real... it's here to stay," Treasury Undersecretary Erin Browne, the si.gov homepage, and Rep. Lori Trahan.

Below a dashed-border WANTED notice—asking for one explanation of what "S I" stands for in words NASA employees may say aloud, without the old name, a parenthetical, or the letter A in a suggestive position—a footer disclaims that The Super Intelligencer is satire, that everyone quoted outside On The Record is fictional, and credits Unsplash photographers Bill Jelen, Greg Rosenke, and Benjamin Child, with back issues numbered one, two, and three.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 16/10/2026
@shellsharks nice update to the tracker! So, we've just about had three "eras" and I sincerely hope that AIs don't start naming and logo-ing their vuln finds b/c I rly don't want to see what their fourth era would look like on the chart.
A line graph titled "shellsharks Vulnerability Garden Tracker" shows the cumulative sum of 1,270 tracked "celebrity" vulnerabilities over time.

The x-axis represents the publish date, with markers for 1990, 2000, 2010, and 2020. The y-axis shows the number of vulnerabilities, with scale markers at 0, 500, and 1,000.

The trend line remains nearly flat and close to zero from before 1990 until approximately 2013. Starting around 2014, the line curves sharply upward in an exponential growth pattern. The count reaches roughly 400 vulnerabilities by 2020 and continues to rise steeply, ending above the 1,000 mark on the y-axis.

The source is listed as https://vulnerability.garden/.A line graph titled "shellsharks Vulnerability Garden Tracker" shows the cumulative sum of 1,270 tracked "celebrity" vulnerabilities over time, plotted on a $\log_{10}$ scale for the y-axis. The subtitle explains that on a log scale, a straighter line indicates steadier growth, and a steeper line indicates faster growth.

The x-axis represents the "Publish Date" with markers for 1990, 2000, 2010, and 2020. The y-axis, "# Celebrity Vulns," uses a logarithmic scale with markers at 1, 10, 100, and 1,000.

The graph is divided into three distinct "eras" by vertical dashed lines:

*   **2000–2013:** The first era saw 28 vulnerabilities in 14 years, with the total doubling approximately every 4.1 years.
*   **2014–2018:** Labeled as a "Breakout" period, growth accelerated from 19 per year to 63 per year, with the total doubling approximately every 1.7 years. This is represented by a visibly steeper segment of the line.
*   **2019–2026:** This era is described as "Steady compounding," with the total doubling approximately every 3.3 years.

An arrow at the end of the line points to the final data point, noting that by October 15, 2026, there were 265 vulnerabilities, compared to 151 in all of 2025. The final cumulative count ends above the 1,000 mark.

The source is listed as https://vulnerability.garden/.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
[me being overly mean to 🐍] not quote-tooting or including the handle b/c my comment isn't abt the OP. Python is the fugliest, least expressive, and abject dumbest language ever invented, and I am so sad for the world that folks who cannot use better […] [Original post on mastodon.social]
my favorite Python 3.15 feature is flattening using `[*ls for ls in [[1], [2]]]` because the old syntax is impossible to remember and no amount of reply-guying “you just have to imagine two for loops bro" has ever changed anything about it: I always added a `flatten()` helper.  I can remember the new syntax BECAUSE IT MAKES SENSE 🥲
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
We are so f'd as a country and society.
An image of a dark blue promotional banner. On the left, it displays the text "62% chance Democrats win the Senate" and a link below that reads "Trade 2026 Midterms" with a right-pointing arrow. On the right side of the banner is a photograph of the white dome of the US Capitol building. There is a small "X" close button in the top right corner.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
Triaging Vendor Patch Avalanches With Jev Juniper shipped 106 CVEs in one October release. CVSS won't tell you what to do abt them b/c a 9.8 in the BGP daemon is worth zero if you don't run BGP. Wrote up feeding each CVE record w/infrastructure scenarios to […] [Original post on mastodon.social]
A diverging bar chart titled by scenario: S1 internet-edge router, S2 data-centre fabric, and S3 branch firewall. For each, responses are grouped by "Summary," "Record," and "Summary + record." S1 shows a significant split between "not applicable" (52-62) and "patch now" (15-44). S2 and S3 show a heavy bias toward "not applicable," with counts ranging from 83 to 94, and very few "patch now" or "schedule" responses.Two density plots titled "2026-10-14 Juniper Patch Avalanche CVSS Raw Score Distribution" based on 106 CVEs. The left plot (CVSS 3.1) shows several peaks with the highest concentrations between 6.5 and 8.5. The right plot (CVSS 4.0) shows two very prominent, sharp peaks around 7.5 and 9.0.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
Tuesday's Chrome Stable release summary report is finally up (I rly hate holiday-caused 4-day weeks): tbljrmp60k.joplinusercontent.com/sh…
An image showing a summary of security vulnerabilities for a software release. 

At the top, a sentence states, "This release contains **37 CVEs** across **3 severity levels** with a total bounty pool of **$1,000**."

Below this is a bulleted list of detailed statistics:
*   **Critical:** 7
*   **High:** 29
*   **Medium:** 1
*   **Low:** 0
*   **Bounty-bearing:** 1
*   **External reporters:** 12

Further down, there is a section titled "**Vulnerability Type Breakdown**," which contains a table with three columns: "Type", "Count", and "% of Total". The table has the following entries:
*   **Use After Free:** Count of 25, which is 67.6% of the total.
*   **Other:** Count of 11, which is 29.7% of the total.
*   **Type Confusion:** Count of 1, which is 2.7% of the total.A table presenting a breakdown of data by component, organized into three columns: "Component," "Count," and "% of Total."

The table contains the following data:

*   **XR**: Count of 8, representing 21.6% of the total.
*   **Media**: Count of 7, representing 18.9% of the total.
*   **PDF**: Count of 3, representing 8.1% of the total.
*   **Password Manager**: Count of 3, representing 8.1% of the total.
*   **V8 (JavaScript)**: Count of 3, representing 8.1% of the total.
*   **SVG**: Count of 2, representing 5.4% of the total.
*   **DOM**: Count of 2, representing 5.4% of the total.
*   **ANGLE (Graphics)**: Count of 1, representing 2.7% of the total.
*   **Browser Core**: Count of 1, representing 2.7% of the total.
*   **Networking**: Count of 1, representing 2.7% of the total.
*   **Extensions API**: Count of 1, representing 2.7% of the total.
*   **WebRTC**: Count of 1, representing 2.7% of the total.
*   **Updater/Installer**: Count of 1, representing 2.7% of the total.
*   **Mojo (IPC)**: Count of 1, representing 2.7% of the total.
*   **Canvas**: Count of 1, representing 2.7% of the total.
*   **File System/Input**: Count of 1, representing 2.7% of the total.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
re: the glincker/sslx post I just [un]boosted there's strong evidence of LLM assist or full vibe coding, starting w/unaligned ASCII boxes across all boxed outputs. verify never checks a sig. It compares issuer & CA names as text, plus expiry. O_O […] [Original post on mastodon.social]
A technical screenshot on a dark background showing the details of a digital certificate, enclosed within a thin cyan border.

At the top, a downward arrow is followed by the text "signed by," and a cyan line highlights the text "Certificate 4 of 4 (CA)."

The main body of the image displays the following certificate information:
*   **Subject:** In white text, it reads "C=US, O=Internet Security Research Group, CN=ISRG Root X2".
*   **Issuer:** In cyan text, it reads "C=US, O=Internet Security Research Group, CN=ISRG Root X1".
*   **Serial ID:** In cyan text, it shows a hexadecimal string: "6C:8F:1D:C7:27:C7:11:7F:...".
*   **Valid:** In white text, the date range is "2026-05-13 $\rightarrow$ 2032-09-02".
*   **Expires:** This line features a bright green horizontal highlight bar, followed by the text "2149 days remaining [✓]" in bright green.
*   **Key:** In white text, it reads "ECDSA P-384 (384 bit)".
*   **SHA-256:** In cyan text, it shows another hexadecimal string: "EE:5F:7A:BD:69:81:BB:02:...".

Faint, ghosted text is visible behind the primary information, and at the bottom, there is another downward arrow with the words "signed by" and "Certificate 4 of 4 (CA)."
120 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
Don't use asidehq[.]app For starters, the model providers (I'd assert all of them) have proven themselves woefully untrustworthy, so relying on their next-token predictors to not generate "what to say next" that shapes your biz (or society) seems daft/risky […] [Original post on mastodon.social]
An advertisement or landing page image featuring a soft color gradient background that transitions from a light periwinkle blue at the top to a pale peach at the bottom. 

In the top left corner is the "aside" logo, which consists of a black circle with a small red dot on its top right edge, followed by the word "aside" in a clean, black sans-serif font.

Centrally located is a large, bold, dark grey headline that reads, "Know what to say next." Below this, a smaller sub-headline in a medium grey font says, "Meeting notes on your Mac, and guidance during the call."

At the bottom center is a dark grey, pill-shaped button. Inside the button, on the left, is a red rounded rectangle with a white horizontal line across its center, followed by three small dots. To the right of the dots, white text reads, "Ask who signs off above Sarah."
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
From Bloomberg Law's "Bankruptcy" (O_O) section: Coreweave’s (the AI cloud-computing provider) unsecured debt due in 2032 traded below 80 cents on the dollar on Wednesday, according to Trace pricing data. That’s widely considered the threshold for when a […] [Original post on mastodon.social]
A line chart titled "CoreWeave Bonds Fall Into Distressed Territory," with a subtitle stating, "Company's debt was trading below 80 cents on the dollar on Wednesday." 

The chart tracks the "Price of CoreWeave bonds due in 2032" over the course of 2026. The horizontal x-axis marks the months of July, August, September, and October. The vertical y-axis represents the bond price, ranging from 75 to 100.

The line starts near 98 in early July and shows a steady decline with several fluctuations. There is a sharp dip in early August, followed by a partial recovery and then another general downward trend throughout September and October. By the end of October, the line drops sharply, ending just below the 80 mark.

The source of the data is listed as Bloomberg.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
Since I'm firing up RStudio more often now, I ported the Kanso theme family from Zed (and other places) to it since that's what I use everywhere else. Have at thee #RStats: rud.is/git/kanso
A grid of eight screenshots showcasing different color themes for a code editor, each displaying the same snippet of CSS code. The images are organized into two columns. The left column features four themes: Kanso Zen, Kanso Ink, Kanso Mist, and Kanso Pearl. The right column shows the identical versions of these themes but without italicized text, labeled as "No Italics." All themes utilize a dark background with subtle variations in grey and accent colors for syntax highlighting.
020 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026
I can't comment as I might like to, but the half of the species that wants implicit trust in what they say might want to speak out abt this person pretty vocally. nitter.xitter.cc/business/status/21…
Header: Bloomberg ✅ @business "We think you want to be on more Western models, frankly."

Post Body: Businesses opting to use low-cost Chinese AI models are taking a cybersecurity risk, OpenAI CFO Sarah Friar tells @TomMackenzieTV bloom.bg/47IJDWD

Text overlay on video: OpenAI CFO says firms using Chinese AI models are risking safety
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026
Seen in Gorham, #Maine
FOR SALE
Susan Collins

yard sign
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026
wow. we reconfigured the fleet for targeted deception vs absorbing all the noise a bit ago so we saw a dip in daily unique IPs but it's been growing since then and we're coming close to the peak after we first launched the fleet. a sizeable chunk of the […] [Original post on mastodon.social]
A bar chart titled 'Sponge Daily Unique Source IPs (non-spoofable)' showing daily unique source IP counts from March to October. The vertical axis is labeled 'unique IPs' and ranges from 0k to 40k. The data generally fluctuates around the 20,000 mark, with a significant spike exceeding 40,000 in late March/early April, followed by steady activity with smaller peaks throughout the summer and into October.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 13/10/2026
FML www[.]si[.]gov
Screenshot of a browser showing si.gov. The page has a dark navy background. At the top left, a cream-colored “SI GOV” wordmark has a small eagle emblem between the two words. The center of the page shows the letters “SI” in a large serif typeface, rendered as a dot-matrix pattern of mostly white dots with some red and blue dots mixed in. At the lower left, a large white serif headline reads “America is in a race for Super Intelligence. We intend to win it.” The words “Super Intelligence.” are set in light blue italics. At the lower right, smaller gray text reads “The official home of America’s work to lead the world in Super Intelligence, from the Genesis Mission to the next generation of American innovators.” A red button labeled “Explore Initiatives” sits below that text. Along the right edge, a vertical row of seven small circles works as section navigation, and the first circle is filled and labeled “Super Intelligence.” In the bottom right corner, a red circular “Menu” button has “SI.GOV · SUPER INTELLIGENCE” printed around its edge. Along the left edge, rotated text reads “Home” and “si.gov.”
201 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 13/10/2026
"Bug #2170556 reported … 23 hours ago" If this wasn't triaged ahead of time with all the advance notice everyone had, my hopes for an uneventful 2038 (tech-wise, as we'll likely be in full 1984 mode by then, globally) are not very high […] [Original post on mastodon.social]
Description:

On October 11, 2026, IANA executed a DNSSEC Key Signing Key (KSK) rollover. systemd-resolved on Ubuntu 24.04 (and likely older releases) relies on compiled-in/hardcoded KSK keys. Following this rollover, Ubuntu 24.04 hosts configured with strict DNSSEC validation (DNSSEC=yes in /etc/systemd/resolved.conf) can no longer resolve domain names.

Impact:

If a system relies on DNS resolution, this issue results in a complete denial of service for DNS lookups. Crucially, because system updates (via apt / unattended-upgrades) rely on DNS to reach package mirrors, affected systems can no longer fetch updates automatically. Systems relying on automatic security updates stop receiving updates entirely, making this a critical issue.
104 4
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026
in the interim, here's a plot going into the blog post so you can see just how hungry the AI folks are for git content. it's the full window from the start of hosting /git/ to a couple hours ago.
Stacked bar chart titled "Status of the /git/* wars" showing daily request counts to the cgit instance at rud.is/git/ from September 4 through October 12, 2026. The vertical axis runs from 0 to 125,000 requests. Each bar is split into three categories: requests that slipped through (bots or legitimate humans) in blue, server forced aborts in gold, and Akin triggers in crimson. Three dotted vertical lines mark configuration changes.

The first marker, September 4, notes that cgit went live. Traffic jumped immediately and was entirely unfiltered: roughly 100,000 requests on September 5, 51,000 on the 6th, a peak of about 112,000 on the 7th, 109,000 on the 8th, and 82,000 on the 9th. Volume then fell sharply, sitting mostly between 7,000 and 11,000 per day through mid-September, with bumps to around 28,000 on the 11th and 20,000 to 26,000 on the 17th through 19th.

The second marker, September 19, notes that server forced aborts based on IP behavioral heuristics were enabled. Over the following two weeks daily totals ranged from about 11,000 to 50,000. The gold abort share grew from a sliver to a large fraction of each bar, notably around September 25 and 26 (totals near 33,000 and 40,000) and October 3 (about 49,000, of which roughly 28,000 were aborted). Blue pass-through traffic still made up a substantial portion on most days, generally 5,000 to 21,000.

The third marker, October 6, notes that Akin-based behavioral 403 rejections were enabled. October 6 itself totaled about 47,000, mostly blue. On October 7 the total reached about 65,000, with roughly 53,000 caught as Akin triggers and only about 9,000 slipping through. From October 8 to 12, daily totals held between about 28,000 and 35,000, with Akin triggers accounting for the large majority, small gold abort caps on top, and pass-through traffic reduced to roughly 1,000 to 6,000 requests per day.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026
(link in alt txt) O_O
see it at https://bsky.app/profile/tylergscott.com/post/3mwbl2drkus2e
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026
I carved out an hour later in the day to write up the [c]git battles since the Akin blocks are holding for a few days straight now. I'll detail what's next for the config (spoiler: ipset additive blocking the Akin triggered IPs).
Stacked bar chart titled "Status of the /git/* wars" showing request volumes from Sept 7 to Oct 12. Requests are categorized by those that "Slipped Through" (blue), were "Server Forced Aborts" (yellow), or hit an "Akin Trigger" (red). It shows an initial spike of unfiltered requests in early September, followed by an increase in blocked requests (yellow and red) by early October.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026
ran ~28K Caddy log lines from ai[.]rud[.]is site through TypeSafe's Jev decision model: $1.80, zero failures, 147ms median API response time. it flagged 44 attack probes and found 70 requests my (ginormous) SQL classifier filed as ordinary visitors — Laravel […] [Original post on mastodon.social]
Bar chart: Jev classified 89.0% of 28,000 requests as serve, 6.9% throttle, 4.0% signed-agent serve, 0.16% refuse.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026
#4 messaged me that he saw the Rocinante in No Man's Sky and TIL there's a whole NMS subculture built around creating the Roci in NMS kagi.com/search?q=No+Man%E2%80%99s+…
the roci
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 12/10/2026
the bots are starting to mind their P's and Q's i need to dig a bit more but i suspect this change (PQ rates were declining for a while thanks to dumb mirai nodes) in what hits my primary domain site is due to the clients being used to hammer my [c]git are […] [Original post on mastodon.social]
This image is a data dashboard from a tool called "pqwatch," showing statistics regarding Post-Quantum (PQ) cryptography adoption over a 24-hour period.

**Timeframe:**
The data covers the period from October 11, 2026, at 09:00:05 UTC to October 12, 2026, at 09:01:17 UTC.

**Summary Metrics:**
At the top of the dashboard, five key metric cards provide high-level totals:
*   **Total Connections:** 90,640 connections to the monitored host.
*   **Unique IPs:** 36,173 distinct source IP addresses.
*   **Unique SNIs:** 50 unique hostnames.
*   **PQ Offer Rate:** 61.4% (defined as offering x25519mlkem768 or draft).
*   **PQ Key-Share Rate:** 61.0% (defined as sending a PQ key share).

**Detailed Chart: PQ Adoption Over Time**
Below the metrics is a stacked bar chart showing connection volume by hour.
*   **Y-Axis:** Total connection count, ranging from 0 to 8,000 in increments of 1,000.
*   **X-Axis:** Time of day in one-hour increments, from 09:00 on the first day to 09:00 on the second day.
*   **Legend:** The bars are split into two colors: Green represents "PQ" connections, and a reddish-pink represents "Non-PQ" connections.

**Chart Trends:**
*   **Baseline Volume:** For most of the 24-hour period, the total connection volume fluctuates between approximately 2,500 and 4,000 connections per hour.
*   **Peak Volume:** There is a significant spike in traffic starting at 13:00 and peaking at 16:00, where total connections reach over 7,000.
*   **PQ vs. Non-PQ Distribution:** The green "PQ" portion of the bars remains remarkably consistent throughout the entire period, staying steady at approximately 2,000 connections per hour. The fluctuations in total volume, including the large peak between 14:00 and 17:00, are driven almost entirely by the increase in "Non-PQ" (reddish-pink) connections.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 11/10/2026
More Yandex 🧬💣💥 from 🇺🇦 pls if it'll help keep the 🇷🇺 bots at bay.
• Source Network: AS13238 YANDEX – Yandex LLC (Russian Federation)
• Traffic Breakdown: Prior to the drop, bot traffic accounted for roughly 99.6% of requests compared to 0.4% human traffic.
• Event Cause: The sudden plunge to zero on October 11, 2026, corresponds to a reported military/drone attack on Yandex's data center facility in Vladimir, Russia—marking the third reported attack on Yandex data infrastructure since October 8.
010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 11/10/2026
🦾 the momentum has def shifted in the [c]git wars, with recent tweaks clearly working to fend off the AI bot crawlers. Still need to dig into the data and update the observatory, but just an eyeballing of this most recent chart passes the gut check (there […] [Original post on mastodon.social]
A stacked bar chart titled "Status of the /git/* wars" displays the number of requests over time from late September to mid-October. The y-axis is labeled "# Requests" and ranges from 0 to over 60,000. The x-axis marks dates including Sep 28, Oct 05, and Oct 12.

The data is divided into three categories:

- "Slipped Through Bot/Legit Humans" (represented by blue)
- "Server Forced Abort" (represented by yellow)
- "Akin Trigger" (represented by magenta)

The chart shows a progression in the type of requests. Initially, from late September to early October, the majority of requests are blue ("Slipped Through"), with an increasing amount of yellow ("Server Forced Abort"). Following Oct 05, magenta ("Akin Trigger") requests begin to appear and rapidly increase, culminating in a massive spike around Oct 09 where the total requests exceed 60,000, dominated almost entirely by the "Akin Trigger" category. By Oct 12, the total volume has decreased, but "Akin Trigger" remains the primary component.
000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 10/10/2026
The regular pulls seem to be working and it also pulls the latest cone and spaghetti models (caption has the stamp). I figured out how to do an hourly pull of every location, so there def will be a new Waffle House Index up this week.
An image titled Waffle House Temporary Closures shows a map of the southeastern United States illustrating the impact of Hurricane Isaias on Waffle House locations. Text states that 5% of locations in the path of the storm are temporarily closed. A legend indicates that grey dots represent open locations and orange dots represent temporarily closed locations. The map features a shaded grey area and several blue "spaghetti model" lines depicting the storm's path moving northwest across the region. Most Waffle House locations across the southeastern US are shown as open grey dots, with several clusters of orange closed locations appearing along the coast and inland. A footer indicates the data was pulled from Waffle House on 2026-10-10 at 16:00:04.
010 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 10/10/2026
much better
A map titled "Waffle House Temporary Closures" shows the operational status of locations following Hurricane Isaias. A caption states that 5% of locations are temporarily closed. Grey dots represent open locations and orange dots represent temporarily closed locations. The map displays state outlines for the southeastern US, with grey dots widely distributed and a concentration of orange dots primarily along the Gulf Coast in states like Louisiana, Mississippi, and Alabama.
220 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 4 @hrbrmstr.mastodon.social.ap.brid.gy · 10/10/2026
I might be able to re-up my ancient attempt at a Waffle House Index #RStats package! Their new hidden API is great. ~5% of Waffle House locations are temporarily closed as of a query a couple minutes ago.
A map titled "Waffle House Temporary Closures" shows the operational status of locations following Hurricane Isaias. A caption states that 5% of locations are temporarily closed. Green dots represent open locations and red dots represent temporarily closed locations. The map shows green dots widely distributed across the southeastern US, with a dense cluster of red dots concentrated in the southeast region, indicating the storm's path.
121 2