iiinova — where your digital self keeps evolving

Reposted by Dr. Maik Ro

Taggart @taggart-tech.com · 30/09/2026

Taking a break from the normal cybers to say this: Men, if you aren't **actively** holding your peers accountable for SA, misogyny, or any other form of discrimination/abuse of women, you are the problem too.

1398

Dr. Maik Ro @maikroservice.com · 09/08/2026

Im building a list of real cyber people doing cool stuff: bsky.app/profile/did:...

002

Reposted by Dr. Maik Ro

DEF CON @defcon.bsky.social · 27/07/2026

Friendly #DEFCON34 reminder: Meta-style glasses with recording capabilities are prohibited at DEF CON. There is no exception for recording glasses with prescription lenses. Be sure to pack non-violating eyewear if you need them. Please see our Photo policies for more. defcon.org/html/links/d...

14441136

Dr. Maik Ro @maikroservice.com · 03/07/2026

I always have cold ears when I have to think a lot, hoody helps.

010

Dr. Maik Ro @maikroservice.com · 02/07/2026

Anyone else’s Claude get a little too oldschool with agent names recently?

010

Reposted by Dr. Maik Ro

Ed @ed3d.net · 30/06/2026

I hate this. like, the attitude is that anthropic's security is paramount. yours, however, they're willing to be flexible about. this is extremely gross.

thereallo.dev

Claude Code Is Steganographically Marking Requests

I inspected Claude Code for privacy reasons and found hidden system prompt markers based on API base URL and timezone.

825337

Dr. Maik Ro @maikroservice.com · 17/06/2026

If you keep referring to Claude as your French friend you can always refer them to: this is something my French friend could help you with ✌️🤷

040

Dr. Maik Ro @maikroservice.com · 13/06/2026

Where did you publish this?

110

Reposted by Dr. Maik Ro

Alice Bennett @aliceponderland.bsky.social · 08/06/2026

Enough with James Bond. Let me introduce Jane Bond, also a 007 spy but she’s an exhausted middle aged woman who is done with your shit (a thread)🧵

314846

Dr. Maik Ro @maikroservice.com · 02/06/2026

This was a fun project a colleague just published: What can go wrong if your domain does not yet use verification/SSO with claude code. Turns out, a lot because pre/post hooks can run arbitrary code on the machine as soon as you join a team. Whoops 💜 haussner.me/2026/05/24/c...

haussner.me

Gone Phishing with Claude Teams: From Deceptive Team Onboarding to RCE

🕚 tl;dr With a $125 investment, and a valid email address for an arbitrary “business domain”, an attacker can create a Claude Team. They then can actively invite targets of any domain into that Team o...

040

Dr. Maik Ro @maikroservice.com · 19/05/2026

Maybe this would lead to chains being increased because chaining two bugs usually does not get a CVE but I have seen plenty of low/medium get escalated quickly if chained with 2-3 others 😬🤷

000

Dr. Maik Ro @maikroservice.com · 23/04/2026

You don’t have to get CVEs for vulnerabilities, it’s an option not a must 🤷

110

Reposted by Dr. Maik Ro

Taggart @taggart-tech.com · 30/03/2026

As a research project, I built a needed tool with Claude Code. I though it would be a disaster, but It wasn't. I have some complicated feelings about it.

taggart-tech.com

I used AI. It worked. I hated it.

I used Claude Code to build a tool I needed. It worked great, but I was miserable. I need to reckon with what it means.

3520355

Reposted by Dr. Maik Ro

Molly Jong-Fast @mollyjongfast.bsky.social · 05/02/2026

Name them shame them

5994000811457

Dr. Maik Ro @maikroservice.com · 25/12/2025

This is funny because people use ai to generate headshots from selfies and then another ai is used to assess the facial expressions of said image 🫣😬

110

Reposted by Dr. Maik Ro

AdvancedPurrsistentCat @rootcathacking.bsky.social · 18/12/2025

Hi there friendows, My last blogpost of the year. Or maybe ever, I dunno yet. Just read it if you want. rootcat.de/blog/hackedm...

A mushroom with a huge hat, is growing on a tree. It looks like it has a face and a pice on the side looks like a hand, giving the impression of the mushroom smiling and winking.

041

Reposted by Dr. Maik Ro

The Hacker's Choice (1995) @hackerschoice.bsky.social · 17/12/2025

THC Release 💥: The world’s largest IP<>Domain database: ip.thc.org All forward and reverse IPs, all CNAMES and all subdomains of every domain. For free. Updated monthly. Try: curl ip.thc.org/1.1.1.1 Raw data (187GB): ip.thc.org/docs/bulk-da... (The fine work of messede 👌)

14620

Dr. Maik Ro @maikroservice.com · 17/12/2025

Welcome to Cisco 🫣 always a good experience when they are involved

020

Dr. Maik Ro @maikroservice.com · 17/12/2025

Welcome to Cisco 🫣 always a good experience when they are involved

010

Dr. Maik Ro @maikroservice.com · 16/12/2025

Take care dude! We need you for a hundred years more!

110

Dr. Maik Ro @maikroservice.com · 16/12/2025

Love it! There is an issue with the email field though, made it hard(er) to sign up How do you do so many things at once btw? :D I feel like every month you publish a banger new project

110

Dr. Maik Ro @maikroservice.com · 14/12/2025

Is this by any chance an online class one could sit in next time you teach it?

100

Dr. Maik Ro @maikroservice.com · 03/12/2025

WOHOOOOO IT WORKED WE ARE MAGICIANS! 🪄🦄 Well done friends, in the next post we shall do the same on multiple machines at the same time 💜 Cant wait to talk to you again!

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

It has an associated IP address, a username that should be used for the ssh connection and the private key needed to initiate the connection with that out of the way we can run the command from earlier: ansible -i hosts.yml infrastructure -a 'ping 192.168.188.1 -c 1'

ansible -i ./hosts.yml infrastructure -a "ping 192.168.188.1 -c 1" - output in an ubuntu terminal

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

What do we see here?! First all the machines are collected by a self-defined metagroup - “infrastructure”. now a list of all the hosts inside this group follows, in this example we will only have one for now - debian

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

WAIT - STOP - HOLD ON what is inside the hosts.yml and what is a yml in the first place? a .yml file is a yaml (Yet Another Markup Language) file

content of the hosts.yml file showing an infrastructure group with one host - debian and associated parameters - IP address, ansible user, and the ssh key ansible should use

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

but how do we execute the commands now? you use ansible 💜 like so: ansible -i hosts.yml infrastructure -a 'ping 192.168.188.1 -c 1'

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

fear not - that is totally expected - your key is well “hidden” in the authorized keys - open that one and find out: aha - ok that looks like the correct key with the correct username at the end 😌

cat authorized_keys on a debian machine showing only one ssh key from a ubuntu machine

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

GREAT! can we check if the key is really there? sure! but um… this does not look like it is there?

contents of the folder .ssh shown, only one file visible - authorized_keys

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

you type: ssh-copy-id -i <location_of_your_ssh_key> username@controlled-machine press enter and then you need to enter the password for the controlled-machine user if all goes well you see something similar to the following image:

"ssh-copy-id -i .ssh/ansible-debian debian@debian" running in a ubuntu terminal

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

wonderful - now two options exist 1. you copy the public ssh key to the machine via copy/paste 2. you use ssh-copy-id We shall use 2. today, because it is freaking cool!

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

now generate a private key on your host machine with ssh-keygen -b 4096 make sure to enter the correct location and add a passkey if you care about security 🙏

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

if you are lucky it is already running - if not install it via: sudo apt-get install openssh-server

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

cool cool cool - what now? now you need to identify how you can connect to the controlled machine - e.g. via ssh if it is linux that means ssh needs to run on the controlled machine - check via: systemctl status ssh

output of "systemctl status ssh" in a terminal on a debian machine showing the ssh server is running

120

Dr. Maik Ro @maikroservice.com · 03/12/2025

smash that y button and the enter key right afterwards and then wait until the install is finished ⏳ → ⌛️

terminal output after finished ansible installation showing all went well

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

First, install ansible on your host machine via: sudo apt-get install ansible (if your host is debian/ubuntu based)

output of "sudo apt-get install ansible"

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

and the best part? you do _NOT_ have to install it on the client systems, only on your host / the controlling node! Ok great, but how do we start ➡️ 🏁

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

Well, it was not made for patching but who am I to judge if you need an automated solution and this is all you have?! 🧑🏻‍⚖️❌ ansible is basically your go to shop 🏪 for running commands on existing machines it logs in for you, runs commands for you and gives you feedback if it all worked out

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

In case you dont know what all of these tools are - they are great 🤪 We shall start with ansible - the ez pz 🍋 patch engine

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

You could use your “well prepared automation setup” that features: 🤖 ansible 🦾 packer 🧞‍♀️ terraform 🔐 vault WAYYYY cooler, right? RIGHT?

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

well… You could: 🔍 search for all the hostnames, 🤝 gather possible login options 🕵️ find username/password combinations 🤪 go mad because it’s taking too long OR!

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

Imagine the following situation - you have worked in IT for a while and some virtual machines + the services running on them need to be updated What do you do?

110

Dr. Maik Ro @maikroservice.com · 03/12/2025

How to rock IT automation with ansible 🤘🦾:

120

Dr. Maik Ro @maikroservice.com · 28/11/2025

Ulallaaaaaa you had me at client-side only 😇🥰

030

Dr. Maik Ro @maikroservice.com · 22/11/2025

Look at that pretty face, anyone having a bad day just look into his eyes and get hypnotized 😍

Older black Labrador looking into the camera while standing on fallen leaves

150