Sign in

NeuroWinter

@neurowinter.com
3.5K followers 4.3K following 1.2K posts

Reformed #AI & #MLOps tinkerer turned #SRE, now keeping #opensource databases alive. Long-time #AppSec enthusiast, accidental sysadmin, and fueled almost entirely by espresso. Blogging sporadically at NeuroWinter.com

PostsRepliesMedia
NeuroWinter @neurowinter.com · 06/10/2026
Awww yeah so excited for this www.backerkit.com/c/projects/v... #darkestdungeon
backerkit.com
Darkest Dungeon: an original graphic novel
From Red Hook Studios and Vault Comics comes an original canon graphic novel set in the world of Darkest Dungeon.
030
NeuroWinter @neurowinter.com · 22/09/2026
Just had the idea of making a bunch of stickers for my nitropad. Not cool wild colourful stickers. But old early 2000s company asset tags and silver tamper seals and derive labels. All fake and all slightly wrong.
162
Reposted by NeuroWinter
NeuroWinter @neurowinter.com · 26/08/2026
051
Reposted by NeuroWinter
NeuroWinter @neurowinter.com · 30/08/2026
Set this up for my niece and nephew today to play with, also my eurorack synth. Gotta say it was a hit
0132
Reposted by NeuroWinter
NeuroWinter @neurowinter.com · 15/09/2026
Woo found a cool bend point on my Playstation !!! #crt #psx #circuitbending
051
NeuroWinter @neurowinter.com · 15/09/2026
Woo found a cool bend point on my Playstation !!! #crt #psx #circuitbending
051
NeuroWinter @neurowinter.com · 10/09/2026
Okay okay okay I NEED to find some DLSS 5 games to fuck around with ! Thank you @kata.codes for the share !
041
NeuroWinter @neurowinter.com · 30/08/2026
Set this up for my niece and nephew today to play with, also my eurorack synth. Gotta say it was a hit
0132
Reposted by NeuroWinter
Haszari @haszari.bsky.social · 29/08/2026
🧶🪡🍝 a thread of some moments from my Synth Circle live set at Whammy. I joke that I have been working on this set my whole life 😅 @neurowinter.com's glitched out CRT VHS abstract visuals really enhance the music 🔥 youtu.be/hnVit1kh8Ig #theoverload
youtu.be
Haszari live set @ Synth Circle A / visuals by NeuroWinter
YouTube video by Haszari
431
NeuroWinter @neurowinter.com · 26/08/2026
051
NeuroWinter @neurowinter.com · 24/08/2026
Snips from my recent VJ set
081
NeuroWinter @neurowinter.com · 23/08/2026
Massive tune !!
0131
NeuroWinter @neurowinter.com · 22/08/2026
072
NeuroWinter @neurowinter.com · 21/08/2026
1132
NeuroWinter @neurowinter.com · 19/08/2026
030
NeuroWinter @neurowinter.com · 18/08/2026
040
NeuroWinter @neurowinter.com · 18/08/2026
Been slowly working on my visuals
081
NeuroWinter @neurowinter.com · 31/07/2026
I should get grills
040
Reposted by NeuroWinter
NeuroWinter @neurowinter.com · 16/07/2026
Whats that ? A new post on the Chinese wool farming underground? And this time they are defrauding State owned media, and govt? wow:
neurowinter.com
Forging the government’s lottery: China’s civic apps run on a shared reward backend with no real secret
Dozens of Chinese city, civic and state-media apps run their points-and-lottery campaigns on a handful of shared B2B SaaS backends. The signing that protects them uses a public salt and a key the…
051
NeuroWinter @neurowinter.com · 29/07/2026
Next post in my Wool series is now live, this time its looking at the scene as a whole, and how to perform OSINT on repos, and how trying to hide your tracks is a singal on its own! neurowinter.com/security/202...
neurowinter.com
Sixteen strangers and a shared obfuscator: mapping the wool scene
A 16 actor map of a Chinese reward farming scene, built out from a single GitHub repo over a weekend. The operators know GitHub is dangerous and scrub their history religiously, but they defend the pa...
130
Reposted by NeuroWinter
one-eight-seven.bsky.social @one-eight-seven.bsky.social · 28/07/2026
JailCTF 2026 Format Write Up A pyjail with no output channel at all. You can only count prompts. `{0[N].__len__}` turns each character into an address, and ASLR moves whole pages, so the last 3 hex digits never move. #ctf #infosec #netsec #jailctf2026 blog.roblab.us/jailctf-2026...
blog.roblab.us
jailCTF 2026: format Write Up
The jail prints nothing and swallows every exception, so all you can measure is how many prompts come back. CPython's one-character string cache is what makes that enough.
022
NeuroWinter @neurowinter.com · 26/07/2026
Oh hell yeah
061
Reposted by NeuroWinter
GraphQL @graphql.org · 23/07/2026
Got a cool story? Want to share how you did something cool with GraphQL? Speak at GraphQL Day London! Applications close soon ➡ graphql.org/day/2026/lo...
graphql.org
GraphQL Day @ FOST London — Sep 30-Oct 1 | GraphQL Day 2026
GraphQL Day @ FOST — community-organized GraphQL events at Future of Software Technologies conferences worldwide.
032
Reposted by NeuroWinter
Justin Garrison @justingarrison.com · 20/07/2026
Starting my vacation and seeing if I can leave my phone in "dumb phone" mode all week
A phone with very large icons and limited functionality
5321
NeuroWinter @neurowinter.com · 21/07/2026
Welp heard about the new Kimi K3 model from Moonshot ai. Tried to sign up for it and all their packages are sold out !
010
Reposted by NeuroWinter
Christine Hall @brideoflinux.bsky.social · 20/07/2026
Here's an article we published nearly six weeks ago that's suddenly getting reads again: Arch Devs Scramble as 400 AUR Packages Infected With Malware - FOSS Force buff.ly/aj8UKqY
buff.ly
Arch Devs Scramble as 400 AUR Packages Infected With Malware - FOSS Force
Arch User Repository hit by a large-scale malware campaign, with maintainers racing to roll back malicious commits and lock out bad actors.
042
NeuroWinter @neurowinter.com · 20/07/2026
Well rip. I’ve nearly gotten my #Nitropad set up just the way I like it with salt managing my appvms and templates and now I have a really bad rattling fan that stops often. Tried playing air into it, no luck. I got the tamper evident screws so I can’t even get into it to diagnose:(
020
Reposted by NeuroWinter
安坂星海 Azaka || VTuber @azaka.fun · 20/07/2026
Full write up on X / infosec exchange!
011
NeuroWinter @neurowinter.com · 19/07/2026
I was always sent to primary school with a handkerchief in my pocket. But I don’t think I’ve touched one in years. Does anyone still use them ?!
470
Reposted by NeuroWinter
Brenden Jarrett @brendenjarrett.com · 19/07/2026
7.19.26 #creativecoding #processing #java #generativeart #code
082
Reposted by NeuroWinter
Cat 🐈 @mrsbadcrumble1975.bsky.social · 18/07/2026
He'd be the best PM ever. #larrythecat
291344113
Reposted by NeuroWinter
Micah @rincewind.run · 18/07/2026
the iMac G3 remains Peak Computer Design to this day
the iMac g3 in purple
341308150
NeuroWinter @neurowinter.com · 19/07/2026
I want to fill all those Comunity libraries with anarchist literature.
070
NeuroWinter @neurowinter.com · 19/07/2026
My wife and I are sick and miserable. But our cats are so damn happy they get to spend the day in bed with both of us
160
Reposted by NeuroWinter
Jonathan Bromley @bromleyj.bsky.social · 18/07/2026
h/t github.com/htck/bayeux
github.com
GitHub - htck/bayeux: Historic Tale Construction Kit - opensource and customizable version !
Historic Tale Construction Kit - opensource and customizable version ! - htck/bayeux
001
NeuroWinter @neurowinter.com · 18/07/2026
No thank you ! I don’t want Claude to have full access to impersonate me on 3rd party websites ! 1password.com/blog/1passwo...
1password.com
1Password for Claude: Give Claude access without giving up your credentials | 1Password
Give Claude access, without giving up control of your secrets. 1Password now enables AI agents to complete tasks requiring credentialed access, while keeping your credentials encrypted, secure, and in...
040
NeuroWinter @neurowinter.com · 17/07/2026
I’ve seen a lot of reporting that these two were the king pins of Scattered Spider, and this is the end of the group. However I find that hard to believe somehow. www.bleepingcomputer.com/news/securit...
bleepingcomputer.com
Scattered Spider members behind TfL hack get five years in prison
Two leading members of the Scattered Spider cybercrime collective were sentenced to five years and six months in prison each for hacking Transport for London (TfL) in 2024.
000
Reposted by NeuroWinter
Dexerto @dexerto.bsky.social · 17/07/2026
A suspected crypto scammer has been arrested for stealing $220,000 by hiding malware inside Steam games FBI tracked him through his Uber Eats deliveries
2214
NeuroWinter @neurowinter.com · 16/07/2026
Whats that ? A new post on the Chinese wool farming underground? And this time they are defrauding State owned media, and govt? wow:
neurowinter.com
Forging the government’s lottery: China’s civic apps run on a shared reward backend with no real secret
Dozens of Chinese city, civic and state-media apps run their points-and-lottery campaigns on a handful of shared B2B SaaS backends. The signing that protects them uses a public salt and a key the…
051
Reposted by NeuroWinter
Rui8bit @ruikaj.bsky.social · 24/06/2026
16colo.rs に自分のANSIart作品をアーカイブすることにした
0374
NeuroWinter @neurowinter.com · 15/07/2026
The exact model behind my Qubes OS build and well Qube OS as a whole! a qube per identity minimal Fedora templates and guess what all Salt managed. Let’s hope that helps with my upgrading os woes. #QubesOS #infosec
armitagesarchive.com
Highlight from A Hacker's Mind
<p> Compartmentalization (isolation/separation of duties): Smart terrorist organizations divide themselves up into individual cells. Each cell has limited ...
010
NeuroWinter @neurowinter.com · 15/07/2026
Super happy to be finally 1 year #sober !! It’s still hard, and some days are still a real slog but it’s better
2121
NeuroWinter @neurowinter.com · 15/07/2026
Welp I have found a new favourite coding font !
fsd.it
PragmataPro coding font designed by Fabrizio Schiavi
Monospaced font designed for coding and for engineering. It contents more than 18000 glyphs TrueType handinted for best possible readability at low sizes
020
NeuroWinter @neurowinter.com · 15/07/2026
Here are some of the passages from that article I thought were interesting: armitagesarchive.com/articles/vul...
armitagesarchive.com
Vulnerability Reports Are Not Special Anymore
Highlights and excerpts from the article: Vulnerability Reports Are Not Special Anymore.
000
NeuroWinter @neurowinter.com · 14/07/2026
Recently read this interesting article. words.filippo.io/vuln-reports/ While we 100% have an issue with an influx of horrible reports, I still belive that each and every even mildly applicable report should be given special attention. It’s the ones that don’t that will split through the cracks.
words.filippo.io
Vulnerability Reports Are Not Special Anymore
We needed the insight and confidentiality to protect our users, but now that anyone can get the same results from LLM?
010
NeuroWinter @neurowinter.com · 14/07/2026
Oof love a good CVSS of 10! mysites.guru/blog/balbooa...
mysites.guru
Balbooa Forms RCE - CVE-2026-56291 | mySites.guru
Balbooa Forms up to 2.4.0 (com_baforms) had an unauthenticated file upload flaw that let anyone drop a PHP file and run code. CVE-2026-56291, fixed in 2.4.1.
020
NeuroWinter @neurowinter.com · 14/07/2026
Lesson learnt from this trip to AU. Early morning flights suck. Security doesn’t even open at Auckland airport until 4:30 am. Late night flights suck. Landing near midnight means your next day is ruined
110
NeuroWinter @neurowinter.com · 08/07/2026
Don’t know if I posted this already but here is part 3 of my wool farming investigation series. In this episode we see potential log in stealing from one of the big script king pins. neurowinter.com/security/202...
neurowinter.com
Farming the farmers: smallfawn’s JD login tool routes harvested credentials to their own server
smallfawn sells JD.com login tools to other reward-farmers. By design, the buyer cannot log a victim in without calling smallfawn’s own server, and the plaintext passwords are relayed there three time...
010
Reposted by NeuroWinter
Allan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 06/07/2026
What kind of sociopath has EVER looked at a PDF document and said to themselves, "This could be a podcast?"
A screenshot from Adobe Acrobat showing the toolbar which includes the following options:
Edit a PDF
Generated Podcast [New]
Create PDF Space
Export a PDF
Create a PDF
2255598967
Reposted by NeuroWinter
scare-cadus (is this anything) 🎃 @birdapp.rip · 05/07/2026
ever since Tim got the tribal tattoo sleeve he’s felt hella tough
a mostly white cat that has tortoiseshell coloration on one leg
102200562492