Sign in

Snorre Fagerland

@snoffle.bsky.social
1.1K followers 3.1K following 994 posts

Dad. Husband. Threat researcher at Stealth Startup. He/Him. Maintainer of the Virus History Project. Bannskapsarkitekt. #infosec #cats #nature #science #art #antifascist #drawing #istandwithukraine

PostsRepliesMedia
Snorre Fagerland @snoffle.bsky.social · 5h
Anyone around that witnessed Greg Benford's FORTRAN virus in 1969? Would love to hear if anyone remember it. "I envisioned and wrote the first computer virus in 1969 but failed to see that viruses would become widespread." cacm.acm.org/opinion/futu... #virushistory #benford
100
Snorre Fagerland @snoffle.bsky.social · 26/09/2026
Fint at Bergen er på Oxford-lista. En av dem. Hvis du plukker ut livskvalitet. På overall-lista er de nr 40. Det er en drøss med slike lister. Global Liveability Index har dem ikke på lista. Ikke World's Best Cities heller. Ikke Monocle heller. Jug med statistikk. #ukeslutt #nrk
000
Snorre Fagerland @snoffle.bsky.social · 23/09/2026
@spaf.me As a computer security legend, you have seen a LOT of interesting incidents. I try to preserve data on malware and incidents from pre-2000 at github.com/SnorreFagerl... You would not happen to have retained any data that could benefit from preservation? Source, samples, notes, writeups?
github.com
GitHub - SnorreFagerland/virushistory: A museum of malicious samples from the DOS era
A museum of malicious samples from the DOS era. Contribute to SnorreFagerland/virushistory development by creating an account on GitHub.
110
Snorre Fagerland @snoffle.bsky.social · 22/09/2026
Ser at Steinar Suvatne betaler seg for NRK. Trekker inn den verste søpla i norsk mediebilde, antakeligvis for "engasjement". Nei, melder meg ut av den kanalen. Det er ikke mye nytt der lenger; dagbladifiseringen er nesten fullført.
000
Snorre Fagerland @snoffle.bsky.social · 19/09/2026
Someone is interested in prawns. #caturday
040
Snorre Fagerland @snoffle.bsky.social · 17/09/2026
<rant>Herreh, så lei jeg er av Norges tøffeste, dummeste, mesterste liste med b-kjendiser. Tragisk at disse hjernedøde realitykonseptene får fribillett til å gjentas sesong på sesong. 🤮 </rant>
000
Snorre Fagerland @snoffle.bsky.social · 28/07/2026
You know its a wet summer when snails feast on the cat kibble.
A snail is sitting in a bowl with a few wet cat kibbles in it.
010
Snorre Fagerland @snoffle.bsky.social · 22/07/2026
I dug into obscure Japanese viruses so you did not have to. How about a virus as priority boot device? No, not booting the infected disk. Booting the virus. www.linkedin.com/pulse/unforg...
linkedin.com
Unforgotten: Sharp and the reboot survivors
The title sounds like a niche 80'ies synth band. But no, this is another story about retro malware.
010
Snorre Fagerland @snoffle.bsky.social · 01/07/2026
@spaf.me Sent you an email to you job addy. There's no rush, so I won't say it is, but its not spam either. Happy sabbatical. PS: I never thought about using those words as part of my vocabulary, but now I have an urge to. argh.
010
Snorre Fagerland @snoffle.bsky.social · 27/06/2026
Another malware type dug out from the *almost* forgotten past. www.linkedin.com/pulse/unforg...
linkedin.com
Unforgotten: The MSX viruses
Sometimes you just find stuff. While researching another project, a search brought up a forum post from MSX.
000
Snorre Fagerland @snoffle.bsky.social · 01/06/2026
Har det skjedd noe på Gibostad? Brann eller noe?
000
Snorre Fagerland @snoffle.bsky.social · 30/04/2026
NASA FIRMS is not bad at spotting heat. In fact, some of the feeds seem to be better at spotting industrial heat sources than wildfires - here, it sees the ferromanganese smelter at Sauda, Norway. The circle shows the margin of error from a previous plot.
Map cutout showing a red spot where the NASA FIRMS satellite observations identified a heat source.
010
Snorre Fagerland @snoffle.bsky.social · 30/04/2026
Litt ironisk FP eller kreativt ansettelsestriks: E-tjenestens jobbannonse blokkeres av Telenor. Annonsen ender opp hos webcruiter, så den SER jo legit ut - men ring, for sikkerhets skyld.
000
Snorre Fagerland @snoffle.bsky.social · 26/04/2026
April is fun. It's like nature wants to make sure you cannot be entirely sure the winter is over. Here; have some snow <flwomp>.
The image shows a column of snow falling from the clouds above into the fiord.
030
Snorre Fagerland @snoffle.bsky.social · 15/04/2026
I *think* I've known only one Hungarian person - my old doctor. Pointed at me and said "bit fat, yeah?". Showed me a huge handful of biscuits; "you need to stay away from these"; before he wolfed them down. Liked him straight away.
110
Snorre Fagerland @snoffle.bsky.social · 06/04/2026
Thank you. Godspeed. #artemisii
000
Snorre Fagerland @snoffle.bsky.social · 05/04/2026
People complain about Facebook and Twitter as being full of disinfo and crap. But lordy, LinkedIn is giving them a run for their money.
000
Snorre Fagerland @snoffle.bsky.social · 02/04/2026
I know we live in an era of realpolitik, but I wish people would just say the truth straight up, and damn the torpedoes.
100
Snorre Fagerland @snoffle.bsky.social · 28/03/2026
Running hashcat over Newfoundland like a totally normal person
000
Snorre Fagerland @snoffle.bsky.social · 23/03/2026
Jeg tror jeg må være den eneste på planeten som synes at Ryan Gosling ikke er noen stor karakterskuespiller.
000
Snorre Fagerland @snoffle.bsky.social · 21/03/2026
I've started dumping Quantickle graphs on this repo. First out Sidewinder. There'll be more to come. github.com/RSAC-Labs/Qu...
github.com
Quantickle-Graphs/Cybersecurity/cases/sidewinder at main · RSAC-Labs/Quantickle-Graphs
Contribute to RSAC-Labs/Quantickle-Graphs development by creating an account on GitHub.
000
Snorre Fagerland @snoffle.bsky.social · 18/03/2026
Anyone left out there who used to work with the old Symantec Antivirus for Macintosh series of products? Love to chat.
002
Snorre Fagerland @snoffle.bsky.social · 17/03/2026
Not well known, but after Hypercard was released for Macs, people made viruses for it. One such was "Wormcode", but no sample could be found. However, Wikipedia says: Originally posted to the usenet group comp.sys.mac.hypercard" in a stack called "Font Preview". And what do you know.
Old USENET post showing someone posting a BINHEX-encoded hypercard stack - infected with the Wormcode virus.
111
Snorre Fagerland @snoffle.bsky.social · 16/03/2026
There are stories about a program - The Cookie Monster - at MIT/Brown in the 70's that would annoy users by asking for cookies all the time. Some have called it an urban legend. Not so much. The original CM was written in PL/1 for Multics and can be found here: www.multicians.org/pg/cookie.pl1
252
Snorre Fagerland @snoffle.bsky.social · 12/03/2026
If you are a veteran of infosec/malware scene in the 70-90'ies you may receive a cold mail/message from me asking if you have historical material. Sorry about being such a pest. Just pipe to dev\null if not interested. There will be only one ping, hopefully it should be manageable.
000
Snorre Fagerland @snoffle.bsky.social · 11/03/2026
In the 80-90'es Japan also struggled with DOS viruses - but with a twist. Their market was dominated by NEC PC-98 computers. They ran a DOS port on 8086 but BIOS was different, and disk IO was not via INT 13h but INT 1Bh. Thus Japanese boot viruses had to be custom made, like NEC/Hallow.
The NEC PC-9801 PCDisk write routine via INT 1B
110
Snorre Fagerland @snoffle.bsky.social · 10/03/2026
Almost every operating system has malware of some kind. Heard about MenuetOS? Small hobbyist OS project. Yet, there's at least two viruses for it (by the same person)
000
Snorre Fagerland @snoffle.bsky.social · 09/03/2026
After prowling old USENET postings I found two more VM/CMS CHRISTMAS EXEC copycats. One minor variant of the original, and another called "ICM EXEC" from March '94. github.com/SnorreFagerl...
100
Snorre Fagerland @snoffle.bsky.social · 08/03/2026
In 1987, a year before the Morris worm, the CHRISTMAS EXEC worm spread over email on EARN, BITNET and VNET. It's well documented. Did you know that several copycats followed on BITNET - at least 10 variants? Three of them - FACES, RAMA and ZT are uploaded to VHP. Below: RAMA aka Happy Ramadan.
Screencap of RAMA EXEC, a sendmail worm for IBM VM/CMS
010
Snorre Fagerland @snoffle.bsky.social · 07/03/2026
I just received a fantastic donation of historical material for the Virus History Project. It will take some time to catalogue, but there's stuff in here that I have never seen - like three CHRISTMA EXEC-like worms for VM/CMS.
Snippet of code from a VM/CMS worm with some ASCII art saying "put a hat on your head"
010
Snorre Fagerland @snoffle.bsky.social · 06/03/2026
This is going to be unpopular, but I think it's the truth. Just poked around at one of the AI-music generation services. The kids are taking to this as fish to water, generating, sampling, remixing. The quality of much of this is *really high*, any genre. Not slop. These are the new playlists.
000
Snorre Fagerland @snoffle.bsky.social · 04/03/2026
The DECNET Father Christmas worm of '88 hit (and notified its creator about) 35 out of >2500 NASA SPAN nodes. It's likely a coincidence, but one of them was OCEAN1 (node 6.58) - the box next to DIATOM (node 6.59) that was used as drop for the WANK worms the year after.
100
Snorre Fagerland @snoffle.bsky.social · 02/03/2026
One WANK worm is likely lost, but I have to try: From the Dreyfus book: "Underground" ... but the Easynet version ... was ... distinct. It had a strange line of code in it, *a line missing from any other versions*....no circumstances was it to attack computers inside DEC's area 48. Anyone seen it?
000
Snorre Fagerland @snoffle.bsky.social · 01/03/2026
I'm interested in getting in touch with anyone who was involved in the WANK/OILZ worm outbreak at NASA/CERN/DoE in 1989. I've talked to a few folks, but there are still blanks in this story - if you were part of that please ping me.
068
Snorre Fagerland @snoffle.bsky.social · 27/02/2026
I hate the Word spell checker the most out of all modern application features. This condescending, unimaginative, language-averaging automat has caused more damage to writing than anything else up to the AI era.
100
Snorre Fagerland @snoffle.bsky.social · 26/02/2026
@fuzzface.epsilon-ix.masto.host.ap.brid.gy btw: As I understand it you were integral in the WANK cleanup. Did you ever see the successor - OILZ?
000
Snorre Fagerland @snoffle.bsky.social · 25/02/2026
@fuzzface.epsilon-ix.masto.host.ap.brid.gy I think this might be an old acquaintance of yours :) github.com/SnorreFagerl...
github.com
virushistory/collection/vms/wank at main · SnorreFagerland/virushistory
A museum of malicious samples from the DOS era. Contribute to SnorreFagerland/virushistory development by creating an account on GitHub.
011
Snorre Fagerland @snoffle.bsky.social · 25/02/2026
Thanks to the legend that is @vessonsecurity.bsky.social , the WANK DECNet worms that caused issues for NASA in 1989 have now been preserved for posterity. github.com/SnorreFagerl... See also: en.wikipedia.org/wiki/WANK_(c...
en.wikipedia.org
WANK (computer worm) - Wikipedia
221
Snorre Fagerland @snoffle.bsky.social · 25/02/2026
@vessonsecurity.bsky.social Vess, have you seen copies of the WANK/OILZ worm that propagated on DECnet in 89?
100
Snorre Fagerland @snoffle.bsky.social · 25/02/2026
@spaf.me Spaf, did you ever see copies of the WANK/OILZ worms on DECNET? I've been trying to get hold of them so that they are preserved for posterity, but no repos or publications seem to have them. (I run a GH repo to make sure such things don't vanish)
110
Snorre Fagerland @snoffle.bsky.social · 24/02/2026
If Google's useless AI overview drives you nuts, add -AI to your search query.
001
Snorre Fagerland @snoffle.bsky.social · 24/02/2026
Free advice, works for any political orientation: Folks that have BLAME as their main message are useless politicians. Ignore and move on.
000
Snorre Fagerland @snoffle.bsky.social · 22/02/2026
Herreh, la oss slippe et nytt OL i Norge. I 2038 tror jeg dessuten vi har andre bekymringer.
020
Snorre Fagerland @snoffle.bsky.social · 16/02/2026
AI slop is so common that it changes my own writing. I have always been influenced by the things I read, and could see echoes of that in my own hand. Now I feel the familiar AI lilt is creeping into me. We have trained the AI, now the AI is training us. "That is not only ironic. It's devastating".
031
Snorre Fagerland @snoffle.bsky.social · 11/02/2026
So, apparently a person from my old school is mentioned in the Epstein files - Geir Ståle Frantzen; fmr Findus owner. That Findus brand was later sold to Lion Capital. Whose founder Lyndon Lea, oddly enough, is ALSO in the Epstein files.
100
Snorre Fagerland @snoffle.bsky.social · 09/02/2026
Is there some law firm willing to pick up Jane Doe's case after her previous law firm was too chickenshit to stand by her? I obviously don't have the full background on the case, but what little I have seen has been heartbreaking, and the girl should have legal help.
000
Snorre Fagerland @snoffle.bsky.social · 08/02/2026
Disse Epstein-møtene er jo, i tillegg til dodgy kontakt med en dømt forbryter, tvilsomme på flere måter. Det ser for meg ut som det svever mye eskortetjenester og liknende i dette bildet. Her er hvordan Epsteins egen stab omtalte møte med Jagland mfl i Paris i 2012.
000
Snorre Fagerland @snoffle.bsky.social · 05/02/2026
LLM's are of varying quality, but the "AI overview" in Google is...bad. Really bad. It hallucinates a LOT.
000
Reposted by Snorre Fagerland
Brent Toderian @brenttoderian.bsky.social · 05/02/2026
I’m having a hard time thinking of an interview between two human beings I enjoyed more than tonight’s interview of the great Ian McKellen by the great Stephen Colbert. Every moment of it was a pleasure that I highly recommend… but then came the most REMARKABLE ending that you really HAVE to watch.
youtube.com
"There's Nothing I Enjoy More Than Acting In The Theater" - Ian McKellen EXTENDED INTERVIEW
YouTube video by The Late Show with Stephen Colbert
23533169
Snorre Fagerland @snoffle.bsky.social · 05/02/2026
So I don't think everyone in Epstein's sphere is an abuser, though some clearly are. But what has become very visible is how desperate some people are to hang out with the rich and powerful, and how quickly they sell out any principles. That stuff is corrosive as hell.
020