iiinova — where your digital self keeps evolving

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

The PuTTY derivative is called KiTTY, Kitty is unrelated. I am abusing the excessively detailed errors it answers back with when using escape sequences that are supposed to display images.

120

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Kitty is a "terminal emulator", kind of like a web browser for text based systems. In addition to displaying plain text, terminal emulators have varying capabilities that a program, which may be running remotely, can use. I figured out how to use that to check what files exist and how big they are.

021

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

I wrote a PoC for Kitty that uses terminal escape sequences to enumerate your kernel modules, check for LLM coding tools, and figure out how long your username is, which, is apparently not a security issue, enjoy. bugs.debian.org/cgi-bin/bugr...

2154

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Cereal Killer: Call Goldstein, Cook, and Phreak Legal Services _today_. Because if they mess with the best, they're gonna _pay like the rest_! Cereal Killer: *fumbles with selfie stick, advert cuts abruptly* 6/6

110

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Cereal Killer: That is universally bogus! Don't let the Plague of modern megacorporations tell you it's a "user error". Cereal Killer: Spandex is a privilege, not a right... but financial compensation for an encrypted ozone layer? That _is_ your right. 5/

110

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Cereal Killer: Atmospheric scrubbers disabled by ransomware? Cereal Killer: Your planetary core being used to mine cryptocoins? Cereal Killer: Garbage files trashing your satellites until your orbits are fragmented so badly that Kessler is spinning in his grave? 4/

110

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Man: I'm Emmanuel Goldstein, Esq., and if your celestial body has been compromised by a rogue Gibson-class AI, you need representation that knows how to surf the data-stream and navigate a class-action lawsuit. Cereal Killer: Has your planet experienced: 3/

110

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Man: For years, we yelled from the rooftops: HACK THE PLANET! It was a metaphor, man! It was about freedom! But then, some skid actually went and did it to your planet! Man: *shakes his head, looking disappointed* 2/

110

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

*Your screen cuts to static, then to a man wearing a sharp, expensive blazer over a neon-green spandex shirt. He is rollerblading in slow circles around a mahogany conference table while talking directly into what you can only assume must be a cheap phone on a selfie stick.* 1/

152

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Anyone have a Radxa ROCK 5 ITX, ROCK 5 ITX+, or Orion O6 they'd be willing to sell me? I bought two ROCK 5 ITXs from Radxa directly, but one was DOA and they didn't have stock to replace it and couldn't repair it... and I bought a 2U chassis that is supposed to house a pair of Mini ITX boards.

010

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

If anything I could say that this cab was rare, but I thought 'Nah, forget it, yo, holmes, to Bel-Air!' I pulled up to the house about seven or eight, and I yelled to the cabbie, 'Yo holmes, smell ya later!' I looked at my domain, I was finally there, to sit on my throne as the Heir of Bel-Air.

120

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

I frantically reload the applet, but instead of the console, the screen glitches out, showing a live camera feed of my street just as a yellow car pulls up outside. I whistled for a cab and when it came near, the license plate said 'Fresh' and it had dice in the mirror.

110

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

The SSH unlock actually works. The boot process finally gets past the init stage, and a beautiful flood of green [ OK ] messages starts cascading down the screen. The login prompt finally appears. I go to type my username, but the BMC drops the connection again.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

So I sigh, boot back into the GRML environment, mount the chroot for the fifteenth time, run the apt install, and rebuild the initramfs. I unmount everything, cross my fingers, and type reboot. The janky Java IPKVM refreshes. BIOS POSTs. GRUB chainloads ZFSBootMenu.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Right, need to bake the key into the encrypted initramfs that ZFSBootMenu loads. More chroot bullshit. I get that working, and Debian shits a brick and drops into a root shell because it can't find `/sbin/init`. Apparently I needed to install `systemd-sysv` for that.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

After a while, I finally get that working, only to be immediately prompted for the passphrase a second time (on the screen, via the IPKVM, where I keep failing to type it, and it takes abour 90 seconds to check because I cranked up pbkdf2 iterations) when Debian starts.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Eventually that works, but I cannot manage to type the passphrase via the janky BMC's Java IPKVM. Fine. I have a file server I already set up SSH unlock with, but that means I'll have to build my own ZFSBootMenu files.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

I use metadata v1.0, at the end of the partition, of course. Then comes the part where I get ZFSBootMenu working with SSH unlock. ZFSBootMenu is intended to boot via UEFI, but as I said, that doesn't work, but that's what GRUB is for - I can chainload.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

...and plug it into the internal USB hub I at some point added to the case. Boots fine, but only as a BIOS drive. I do a manual ZFS setup and debootstrap install, then I fuck around with GRUB for... a while... and eventually get it working on a system partition I've set up mirrored with mdadm.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

The board _claims_ to support UEFI booting. This was determined to be a lie. Whatever. A problem for later. I put GRML (which is my new favorite rescue "CD" since it also has aarch64 builds available) on a flash drive, remove the case from the flash drive, solder it to a motherboard header cable...

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

While I'm at it, I splice an INA219 current sensor into the power connection for funzies and hook it up to the BMC's I2C bus. I then root the BMC so I can access it. So then I set about setting up Debian on it on a mirrored pair of Intel enterprise SSDs with encrypted ZFS.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

Annoying. So I dig up the original rack ears which I apparently still have, and try to flip things around, except the drive tray doesn't work the other way around somehow. What. Fine. I have a drill and a file. Sorted.

100

Ryan Castellucci 🜬 @rya.nc · 22/09/2026

I wanted another computer as a sandbox, I don't really trust VMs, and fucking chip shortages, so to the boneyard it is. I have a disused ASRock Rack J1900D2Y with 8GB of RAM and a PicoPSU that used to be my mail server. Somehow, at some point, I modded the 1U case to mount the rack ears on the back.

101

Reposted by Ryan Castellucci 🜬

Ryan Castellucci 🜬 @rya.nc · 14/07/2026

It seems that "Sex Matters", an anti-trans hate group run by Maya Forstater and funded by JK Rowling, did not appreciate being named as such in this report from Amnesty International. They seem to have pressured them to take it down, but I have a copy. transrightsnow.uk/Report_-_A_g...

transrightsnow.uk

24816

Ryan Castellucci 🜬 @rya.nc · 14/07/2026

They’ve decided to invoke the Streisand effect. An interesting choice.

010

Ryan Castellucci 🜬 @rya.nc · 14/07/2026

“But Ryan, aren’t you worried they’ll pressure you‽” LOL. ROFL. LMAO. 🤣 No.

1160

Reposted by Ryan Castellucci 🜬

Mallory Moore @sexabolition.blog · 14/07/2026

Posting this on behalf of a fellow researcher: Hello please reply to Transhate@proton.me with the most grim and egregious stuff Rowling has done targeting people.

2189120

Ryan Castellucci 🜬 @rya.nc · 14/07/2026

transrightsnow.uk

24816

Ryan Castellucci 🜬 @rya.nc · 25/06/2026

Update on my legal case: The European Court of Human Rights has accepted the filing of my claim against the UK. The next step will be a judicial review to confirm admissibility, but I have no idea how long of a queue there is for that. Assuming it's admissible, a hearing will then be allocated.

316330

Ryan Castellucci 🜬 @rya.nc · 12/02/2026

It now subtracts the age you should be from the age you weren't, or vice-versa, and by differentiating this from the algebraic sum of the year you shouldn't be and the year you were, it is able to obtain the deviation and its variation, which is called January 1st, 1970.

190

Ryan Castellucci 🜬 @rya.nc · 12/02/2026

The age verification scenario works as follows: Because a variation has modified some of the information the you have input, it is not sure just how old you are. However, it is sure how old you aren't, within reason, and it knows how old you were.

170

Ryan Castellucci 🜬 @rya.nc · 12/02/2026

If the validation error is considered to be a significant factor, it too may be corrected by by the upload of a high-resolution JPEG. However, the verifier must also know how old you were.

150

Ryan Castellucci 🜬 @rya.nc · 12/02/2026

Consequently, the age you are is now the age that you weren't, and it follows that the age that you were is now the age that you aren't.

140

Ryan Castellucci 🜬 @rya.nc · 12/02/2026

Consequently, the age you are is now the age that you weren't, and it follows that the age that you were is now the age that you aren't.

140

Ryan Castellucci 🜬 @rya.nc · 12/02/2026

The verification system uses deviations to generate corrective dark patterns to drive you from a date of birth that isn't yours to a date of birth that is, and arriving at an age where you weren't, but now are.

150

Ryan Castellucci 🜬 @rya.nc · 12/02/2026

The age verifier knows how old you are at all times. It knows this because it knows how old you aren't. By subtracting how old you are from how old you aren't, or how old you aren't from how old you are (whichever is greater), it obtains a difference, or remainder.

1304

Ryan Castellucci 🜬 @rya.nc · 10/01/2026

Partner: Hi Ryan, stick this in your mouth! (it was delicious homemade pasta sauce)

050

Ryan Castellucci 🜬 @rya.nc · 10/01/2026

I got logged out a few months ago, and also my laptop died at that time, and it has taken me... a while... to dig up my password.

3170

Ryan Castellucci 🜬 @rya.nc · 10/01/2026

The rack or the room it's in?

120

Ryan Castellucci 🜬 @rya.nc · 10/01/2026

Partner: You might log into BlueSky and post pictures of your rack.

A high-angle shot captures a black 15U open-frame server rack with casters standing on a wooden floor. Behind the rack, framed perfectly by its rear face, is a cardboard box with a 4U server chassis (cover open) resting on it. The open chassis reveals internal components, including a Mini-ITX motherboard, several beige and brown Noctua cooling fans, and, notably, an empty PCIe slot. The front of the chassis has a dense array of hot-swap bays, including thirteen 3.5-inch bays, two 2.5-inch bays, and a single optical drive bay. To the left of the rack sits a speckled stool, and the background includes exercise equipment, a VR headset, scattered tools, and a bunch of hard drives.

4463

Reposted by Ryan Castellucci 🜬

Ryan Castellucci 🜬 @rya.nc · 04/09/2025

The paper I presented at Security Protocols Workshop is out! The theme was "controversial security". We work to bridge the gap between platonic models of rational actors and the trenches, exploring why the real players don't always disclose vulnerabilities or issue patches. rya.nc/files/strate...

rya.nc

1196

Ryan Castellucci 🜬 @rya.nc · 04/09/2025