NeuroWinter @neurowinter.com · 06/10/2026Awww yeah so excited for this www.backerkit.com/c/projects/v... #darkestdungeonbackerkit.comDarkest Dungeon: an original graphic novelFrom Red Hook Studios and Vault Comics comes an original canon graphic novel set in the world of Darkest Dungeon. 030
NeuroWinter @neurowinter.com · 22/09/2026Just had the idea of making a bunch of stickers for my nitropad. Not cool wild colourful stickers. But old early 2000s company asset tags and silver tamper seals and derive labels. All fake and all slightly wrong. 162
Reposted by NeuroWinterNeuroWinter @neurowinter.com · 30/08/2026Set this up for my niece and nephew today to play with, also my eurorack synth. Gotta say it was a hit 0132
Reposted by NeuroWinterNeuroWinter @neurowinter.com · 15/09/2026Woo found a cool bend point on my Playstation !!! #crt #psx #circuitbending 051
NeuroWinter @neurowinter.com · 15/09/2026Woo found a cool bend point on my Playstation !!! #crt #psx #circuitbending 051
NeuroWinter @neurowinter.com · 10/09/2026Okay okay okay I NEED to find some DLSS 5 games to fuck around with ! Thank you @kata.codes for the share ! 041
NeuroWinter @neurowinter.com · 30/08/2026Set this up for my niece and nephew today to play with, also my eurorack synth. Gotta say it was a hit 0132
Reposted by NeuroWinterHaszari @haszari.bsky.social · 29/08/2026🧶🪡🍝 a thread of some moments from my Synth Circle live set at Whammy. I joke that I have been working on this set my whole life 😅 @neurowinter.com's glitched out CRT VHS abstract visuals really enhance the music 🔥 youtu.be/hnVit1kh8Ig #theoverloadyoutu.beHaszari live set @ Synth Circle A / visuals by NeuroWinterYouTube video by Haszari 431
Reposted by NeuroWinterNeuroWinter @neurowinter.com · 16/07/2026Whats that ? A new post on the Chinese wool farming underground? And this time they are defrauding State owned media, and govt? wow:neurowinter.comForging the government’s lottery: China’s civic apps run on a shared reward backend with no real secretDozens of Chinese city, civic and state-media apps run their points-and-lottery campaigns on a handful of shared B2B SaaS backends. The signing that protects them uses a public salt and a key the… 051
NeuroWinter @neurowinter.com · 29/07/2026Next post in my Wool series is now live, this time its looking at the scene as a whole, and how to perform OSINT on repos, and how trying to hide your tracks is a singal on its own! neurowinter.com/security/202...neurowinter.comSixteen strangers and a shared obfuscator: mapping the wool sceneA 16 actor map of a Chinese reward farming scene, built out from a single GitHub repo over a weekend. The operators know GitHub is dangerous and scrub their history religiously, but they defend the pa... 130
Reposted by NeuroWinterone-eight-seven.bsky.social @one-eight-seven.bsky.social · 28/07/2026JailCTF 2026 Format Write Up A pyjail with no output channel at all. You can only count prompts. `{0[N].__len__}` turns each character into an address, and ASLR moves whole pages, so the last 3 hex digits never move. #ctf #infosec #netsec #jailctf2026 blog.roblab.us/jailctf-2026...blog.roblab.usjailCTF 2026: format Write UpThe jail prints nothing and swallows every exception, so all you can measure is how many prompts come back. CPython's one-character string cache is what makes that enough. 022
Reposted by NeuroWinterGraphQL @graphql.org · 23/07/2026Got a cool story? Want to share how you did something cool with GraphQL? Speak at GraphQL Day London! Applications close soon ➡ graphql.org/day/2026/lo...graphql.orgGraphQL Day @ FOST London — Sep 30-Oct 1 | GraphQL Day 2026GraphQL Day @ FOST — community-organized GraphQL events at Future of Software Technologies conferences worldwide. 032
Reposted by NeuroWinterJustin Garrison @justingarrison.com · 20/07/2026Starting my vacation and seeing if I can leave my phone in "dumb phone" mode all week 5321
NeuroWinter @neurowinter.com · 21/07/2026Welp heard about the new Kimi K3 model from Moonshot ai. Tried to sign up for it and all their packages are sold out ! 010
Reposted by NeuroWinterChristine Hall @brideoflinux.bsky.social · 20/07/2026Here's an article we published nearly six weeks ago that's suddenly getting reads again: Arch Devs Scramble as 400 AUR Packages Infected With Malware - FOSS Force buff.ly/aj8UKqYbuff.lyArch Devs Scramble as 400 AUR Packages Infected With Malware - FOSS ForceArch User Repository hit by a large-scale malware campaign, with maintainers racing to roll back malicious commits and lock out bad actors. 042
NeuroWinter @neurowinter.com · 20/07/2026Well rip. I’ve nearly gotten my #Nitropad set up just the way I like it with salt managing my appvms and templates and now I have a really bad rattling fan that stops often. Tried playing air into it, no luck. I got the tamper evident screws so I can’t even get into it to diagnose:( 020
Reposted by NeuroWinter安坂星海 Azaka || VTuber @azaka.fun · 20/07/2026Full write up on X / infosec exchange! 011
NeuroWinter @neurowinter.com · 19/07/2026 I was always sent to primary school with a handkerchief in my pocket. But I don’t think I’ve touched one in years. Does anyone still use them ?! 470
Reposted by NeuroWinterBrenden Jarrett @brendenjarrett.com · 19/07/20267.19.26 #creativecoding #processing #java #generativeart #code 082
Reposted by NeuroWinterCat 🐈 @mrsbadcrumble1975.bsky.social · 18/07/2026He'd be the best PM ever. #larrythecat 291344113
Reposted by NeuroWinterMicah @rincewind.run · 18/07/2026the iMac G3 remains Peak Computer Design to this day 341308150
NeuroWinter @neurowinter.com · 19/07/2026I want to fill all those Comunity libraries with anarchist literature. 070
NeuroWinter @neurowinter.com · 19/07/2026My wife and I are sick and miserable. But our cats are so damn happy they get to spend the day in bed with both of us 160
Reposted by NeuroWinterJonathan Bromley @bromleyj.bsky.social · 18/07/2026h/t github.com/htck/bayeuxgithub.comGitHub - htck/bayeux: Historic Tale Construction Kit - opensource and customizable version !Historic Tale Construction Kit - opensource and customizable version ! - htck/bayeux 001
NeuroWinter @neurowinter.com · 18/07/2026No thank you ! I don’t want Claude to have full access to impersonate me on 3rd party websites ! 1password.com/blog/1passwo...1password.com1Password for Claude: Give Claude access without giving up your credentials | 1PasswordGive Claude access, without giving up control of your secrets. 1Password now enables AI agents to complete tasks requiring credentialed access, while keeping your credentials encrypted, secure, and in... 040
NeuroWinter @neurowinter.com · 17/07/2026I’ve seen a lot of reporting that these two were the king pins of Scattered Spider, and this is the end of the group. However I find that hard to believe somehow. www.bleepingcomputer.com/news/securit...bleepingcomputer.comScattered Spider members behind TfL hack get five years in prisonTwo leading members of the Scattered Spider cybercrime collective were sentenced to five years and six months in prison each for hacking Transport for London (TfL) in 2024. 000
Reposted by NeuroWinterDexerto @dexerto.bsky.social · 17/07/2026A suspected crypto scammer has been arrested for stealing $220,000 by hiding malware inside Steam games FBI tracked him through his Uber Eats deliveries 2214
NeuroWinter @neurowinter.com · 16/07/2026Whats that ? A new post on the Chinese wool farming underground? And this time they are defrauding State owned media, and govt? wow:neurowinter.comForging the government’s lottery: China’s civic apps run on a shared reward backend with no real secretDozens of Chinese city, civic and state-media apps run their points-and-lottery campaigns on a handful of shared B2B SaaS backends. The signing that protects them uses a public salt and a key the… 051
Reposted by NeuroWinterRui8bit @ruikaj.bsky.social · 24/06/202616colo.rs に自分のANSIart作品をアーカイブすることにした 0374
NeuroWinter @neurowinter.com · 15/07/2026The exact model behind my Qubes OS build and well Qube OS as a whole! a qube per identity minimal Fedora templates and guess what all Salt managed. Let’s hope that helps with my upgrading os woes. #QubesOS #infosecarmitagesarchive.comHighlight from A Hacker's Mind<p> Compartmentalization (isolation/separation of duties): Smart terrorist organizations divide themselves up into individual cells. Each cell has limited ... 010
NeuroWinter @neurowinter.com · 15/07/2026Super happy to be finally 1 year #sober !! It’s still hard, and some days are still a real slog but it’s better 2121
NeuroWinter @neurowinter.com · 15/07/2026Welp I have found a new favourite coding font !fsd.itPragmataPro coding font designed by Fabrizio SchiaviMonospaced font designed for coding and for engineering. It contents more than 18000 glyphs TrueType handinted for best possible readability at low sizes 020
NeuroWinter @neurowinter.com · 15/07/2026Here are some of the passages from that article I thought were interesting: armitagesarchive.com/articles/vul...armitagesarchive.comVulnerability Reports Are Not Special AnymoreHighlights and excerpts from the article: Vulnerability Reports Are Not Special Anymore. 000
NeuroWinter @neurowinter.com · 14/07/2026Recently read this interesting article. words.filippo.io/vuln-reports/ While we 100% have an issue with an influx of horrible reports, I still belive that each and every even mildly applicable report should be given special attention. It’s the ones that don’t that will split through the cracks.words.filippo.ioVulnerability Reports Are Not Special AnymoreWe needed the insight and confidentiality to protect our users, but now that anyone can get the same results from LLM? 010
NeuroWinter @neurowinter.com · 14/07/2026Oof love a good CVSS of 10! mysites.guru/blog/balbooa...mysites.guruBalbooa Forms RCE - CVE-2026-56291 | mySites.guruBalbooa Forms up to 2.4.0 (com_baforms) had an unauthenticated file upload flaw that let anyone drop a PHP file and run code. CVE-2026-56291, fixed in 2.4.1. 020
NeuroWinter @neurowinter.com · 14/07/2026Lesson learnt from this trip to AU. Early morning flights suck. Security doesn’t even open at Auckland airport until 4:30 am. Late night flights suck. Landing near midnight means your next day is ruined 110
NeuroWinter @neurowinter.com · 08/07/2026Don’t know if I posted this already but here is part 3 of my wool farming investigation series. In this episode we see potential log in stealing from one of the big script king pins. neurowinter.com/security/202...neurowinter.comFarming the farmers: smallfawn’s JD login tool routes harvested credentials to their own serversmallfawn sells JD.com login tools to other reward-farmers. By design, the buyer cannot log a victim in without calling smallfawn’s own server, and the plaintext passwords are relayed there three time... 010
Reposted by NeuroWinterAllan “Ransomware Sommelier” Liska @ransomwaresommelier.com · 06/07/2026What kind of sociopath has EVER looked at a PDF document and said to themselves, "This could be a podcast?" 2255598967
Reposted by NeuroWinterscare-cadus (is this anything) 🎃 @birdapp.rip · 05/07/2026ever since Tim got the tribal tattoo sleeve he’s felt hella tough 102200562492