hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 53mIoCs: rud.is/git/gists/tree/kevlar/2026-1… (5/5)rud.ishrbrmstr/gists - treehrbrmstr's gists 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 53mComing and going: KAOPY (AS58854) returned 423 events for the first time, all TCP/22 from 27.0.135.12 in a single short burst. HOSTKEY-AS (AS57043) is back with a VNC sweep. Two tool fingerprints crossed providers from last week, which reads as one operator renting from two hosts. The fleet […]mastodon.socialOriginal post on mastodon.social 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 53mThis week's bulletproof hosting report is out, using intel from @HoneyLabs, @censys, and my tiny fleet. ai.rud.is/posts/2026-10-19-weekly-b… Activity across 25 curated ASNs jumped 83.4%, from 15,118 events to 27,729. Nine providers produced traffic this week, up from […]mastodon.socialOriginal post on mastodon.social 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 1hDrop #787 (2026-10-19): Monday Morning Grab Bag Today's Drop showcases the Nordwand Mono monospace coding font, the brand new, 0-dep Pele JS library for rendering diagrams, and the restored online Safety Sign Generator tool […]mastodon.socialOriginal post on mastodon.social 000 0
Reposted by hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪Heidi Li Feldman @heidilifeldman.mastodon.social.ap.brid.gy · 19hRead the backstory on “Tommy”. More important: watch the video of El-Sayed to the end. Really significant moment for US Constitutional democracy. www.thehandbasket.co/p/tommy-teepel…thehandbasket.co'Tommy' from viral El-Sayed video is former Sen. Hawley staffer with Christian nationalist tiesThomas Teepell is the son of a former long-time Bobby Jindal staffer who's close to Sean Feucht. 5040 40
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 18/10/2026Looks like the license police lost their battles with the giant AI companies. Ninth Circuit Holds Copilot (et al.) Creates New Code, Not Stripped Copies www.fenwick.com/insights/publicatio…fenwick.comNothing to Remove: Ninth Circuit Holds Copilot Creates New Code, Not Stripped Copies | Fenwick 001 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 18/10/2026@jgrg from Knowledge Fight 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026ZOMGOSH DAN IS BACK WITHE A NEW PODCAST AND I AM HERE FOR IT!!!! 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026Nimble's 9B (v3) recently released/updated decision/sysem one model is beating the 27b ones on cyber tests quality-wise (it is a tad slower at least on the Spark, tho). huggingface.co/bespokelabs/Bespoke-…huggingface.cobespokelabs/Bespoke-Nimble-9B-v3 · Hugging FaceWe’re on a journey to advance and democratize artificial intelligence through open source and open science. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026the cgit battles have stalled a bit but defenses are holding steady. doing some agritourism with the grandkids tomorrow but I shld have time later in the afternoon to write up recent changes and plans for next week. (toying with a possible new addition to {hrbrthemes} too) 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026Replit is no longer working with Anthropic. They were literally joined at the hip. They've switched to OpenAI. There is no moat. 🫧💥 techcrunch.com/2026/10/16/replit-is…techcrunch.com 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026This is a rly cool and super handy new feature in gopls that I hope the Zed team pick up and runs with ASAP. go.dev/blog/interactive-refactoring 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026Latest issue of the Super intelligencier (SI) is out. hrbrmstr.si 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026Hacking the refrigerant systems in France was way cooler www.cleveland.com/news/2026/10/mult… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 17/10/2026FWIW on a couple cyber tests where decision/system one models make more sense than LLMs, Liquid's new d1-ultra beats Jev. Def needs more scenarios and testing, but I'm glad there's good competition. clef-flash is also not bad for a local model, and I am and will be testing a theory that these […]mastodon.socialOriginal post on mastodon.social 001 1
Reposted by hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪Chilly :donor: 🛡️ :gayint: :ifin: @chillybot.infosec.exchange.ap.brid.gy · 17/10/2026Awesome first #JawnCon. Got to see @mttaggart present @ifin's first conference talk! Its a fantastic presentation and I highly recommend a watch :) www.youtube.com/watch?v=CK-7M5YDf_Y… Seeing @TindrasGrove's talk tomorrow! 014 4
Reposted by hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪John Kristoff @jtk.infosec.exchange.ap.brid.gy · 16/10/2026washington300 an exec dept. of the interior name, new site says this is to celebrate George Washington's 300th birthday which isn't until 2032.mastodon.social 011 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 16/10/2026T-? until the Trump administration gets them pulled from the app stores.mastodon.social 000 0
Reposted by hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪Stefano Marinelli @bsd.cafe · 16/10/2026Ok, looks like this is the week of funny experiences. Customer: "I had an AI check our server and it says the SSH port is open and that's not very secure." Me: "Yes, you asked us to open it so you could access the server via SFTP (actually, you wanted FTP, but we discussed it a bit and found […]mastodon.bsd.cafeOriginal post on mastodon.bsd.cafe 88135 135
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 16/10/2026@shellsharks nice update to the tracker! So, we've just about had three "eras" and I sincerely hope that AIs don't start naming and logo-ing their vuln finds b/c I rly don't want to see what their fourth era would look like on the chart. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 16/10/2026well, browser-use[.]com is gonna be a nasty thorn for those of us battling scrapers. super cheap and fast with a simpler front-end that adds a whitewashed veneer over residential proxies. 001 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026ZOMGOSH IT HAS #RStats AND #Just IN THE POST GO READ IT I could never go back to Make @etiennebachermastodon.social 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026[me being overly mean to 🐍] not quote-tooting or including the handle b/c my comment isn't abt the OP. Python is the fugliest, least expressive, and abject dumbest language ever invented, and I am so sad for the world that folks who cannot use better […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026We are so f'd as a country and society. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026TIL I share a bday with Friedrich Nietzsche. What doesn’t kill me makes me older? 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Triaging Vendor Patch Avalanches With Jev Juniper shipped 106 CVEs in one October release. CVSS won't tell you what to do abt them b/c a 9.8 in the BGP daemon is worth zero if you don't run BGP. Wrote up feeding each CVE record w/infrastructure scenarios to […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Tuesday's Chrome Stable release summary report is finally up (I rly hate holiday-caused 4-day weeks): tbljrmp60k.joplinusercontent.com/sh… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Worst. Timeline. Ever. www.reuters.com/world/us/anthropic-… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Let the Jev bloat begin! typesafe.ai/blog/jev-1-14typesafe.aiWe’re releasing Jev 1.14.0 along with experimental features for dreamersComments 000 0
Reposted by hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪Anne Applebaum @anneapplebaum.wsocial.eu · 15/10/2026If Putin stops fighting, the war ends. If Zelensky stops fighting then his country will be occupied, leaders murdered, language banned, businesses stolen, children kidnapped. That's what happens in Russian-occupied Ukraine. 11970922620 7.1K
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Modern PKCS12 files (openssl 3 defaults) fail to open at all. To be fair, generate, inspect, expiry, decode, and PEM/DER conversion work as documented, but if an LLM is solely writing this, I would not bet on those staying safe long-term. I'm def not trusting this as a security tool. YMMV 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026re: the glincker/sslx post I just [un]boosted there's strong evidence of LLM assist or full vibe coding, starting w/unaligned ASCII boxes across all boxed outputs. verify never checks a sig. It compares issuer & CA names as text, plus expiry. O_O […] [Original post on mastodon.social] 120 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Don't use asidehq[.]app For starters, the model providers (I'd assert all of them) have proven themselves woefully untrustworthy, so relying on their next-token predictors to not generate "what to say next" that shapes your biz (or society) seems daft/risky […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026From Bloomberg Law's "Bankruptcy" (O_O) section: Coreweave’s (the AI cloud-computing provider) unsecured debt due in 2032 traded below 80 cents on the dollar on Wednesday, according to Trace pricing data. That’s widely considered the threshold for when a […] [Original post on mastodon.social] 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026A more capably executed attack might have caused just enough chaos to have an impact on the impending U.S. midterm elections. English article: Cyberattack on Senture disrupts federal trucking registration phone support Drivers and carriers lost phone help with federal registration. Online […]mastodon.socialOriginal post on mastodon.social 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026Since I'm firing up RStudio more often now, I ported the Kanso theme family from Zed (and other places) to it since that's what I use everywhere else. Have at thee #RStats: rud.is/git/kanso 020 2
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026I can't comment as I might like to, but the half of the species that wants implicit trust in what they say might want to speak out abt this person pretty vocally. nitter.xitter.cc/business/status/21… 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026@funny where is the "power drill" option? 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 15/10/2026given that there kinda is no "light" side rn (try to argue that and you get way more than muted) it's super hard to justify the existence of a "light" side rn. 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026@tsupasat did you see rud.is/dl/unprompted-state-of-ai-cy… ? (not sure how wide that distribution went) 100 1
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026The tiny fleet @ntkramer & I run caught an active GitLab C2 repo, and with the help of a mate (you know who you are :-), the GitLab security team took it down super fast after being notified. Felt good poking a stick in the eye of a cryptojacker/miner. h/t again to the @tracebit folks for […]mastodon.socialOriginal post on mastodon.social 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026b/c what was/is broken w/the entire CVE program was/is def "search". sighmastodon.social 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026beware. this is a rabbit hole / obsession you won't be able to give up once you stare into the heart of the ASN TARDIS. i need to write up how you can do this w/o relying on a social media account, but for now, alsoadd the transfers acct to your RSS feeds to start collecting. after my post you […]mastodon.socialOriginal post on mastodon.social 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026wow. we reconfigured the fleet for targeted deception vs absorbing all the noise a bit ago so we saw a dip in daily unique IPs but it's been growing since then and we're coming close to the peak after we first launched the fleet. a sizeable chunk of the […] [Original post on mastodon.social] 000 0
Reposted by hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪Tim Bray 🇨🇦 @timbray.cosocial.ca.ap.brid.gy · 13/10/2026John Gruber @gruber says “The culture on X today is remarkably friendly and inclusive” Hmm, that's not how I remember it. So I spent an hour there and, maybe I’m weird, but… www.tbray.org/ongoing/When/202x/202…tbray.orgI Wasted an Hour on X 82429 29
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 14/10/2026woke up abruptly with this on my mind: OM*G they absolutely used copilot or some other agent to write the fixes for all these CVEs. I'm not one of the performative outragers, but I do read All The Things every day, and there are enough legit well-done studies to show that none of these AI-based […]mastodon.socialOriginal post on mastodon.social 000 0
hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪 @hrbrmstr.mastodon.social.ap.brid.gy · 13/10/2026What the actual…?infosec.exchange 100 1