Sign in

Carroll

@thecontractor.io
42 followers 26 following 34 posts

thecontractor.io

PostsRepliesMedia
Carroll @thecontractor.io · 15/05/2026
Let it happen in Palestine without consequences I don’t know why anyone is surprised
150
Carroll @thecontractor.io · 07/05/2026
Professional suggests the existence of … antifessional … and I like that
110
Carroll @thecontractor.io · 28/01/2026
This is my favourite mouse for work Pulsar for gaming 😌
000
Carroll @thecontractor.io · 27/01/2026
Some thoughts on my latest souring @bugcrowd.com experience thecontractor.io/bugcrowd-res...
thecontractor.io
BugCrowd & Researcher Philosophy Thoughts
Organisations Should never use in-house triage, Hunters and researchers should only use them as a payment platform. that's it on a napkin.
000
Carroll @thecontractor.io · 25/01/2026
thecontractor.io/synology-dsm...
thecontractor.io
Synology DSM 7.3.2
Chaining three issues to gain root from a low privileged user.
010
Carroll @thecontractor.io · 25/01/2026
thecontractor.io/hp-aruba-pri...
thecontractor.io
HP Aruba Privileged Escalation Dec 2025
The HP Aruba VIA VPN client for Linux contains a local privilege escalation vulnerability that allows any unprivileged local user to gain root access. - CVE-2025-37186
000
Carroll @thecontractor.io · 25/01/2026
thecontractor.io/bugcrowd-res...
thecontractor.io
BugCrowd & Researcher Philosophy Thoughts
Organisations Should never use in-house triage, Hunters and researchers should only use them as a payment platform. that's it on a napkin.
000
Carroll @thecontractor.io · 03/01/2026
030
Carroll @thecontractor.io · 07/12/2025
Last one thecontractor.io/hacklore #wifi … for now ? 😂
thecontractor.io
Hacklore ...
What Hacklore get's wrong. and the precursor to https://lolwifi.network
011
Carroll @thecontractor.io · 05/12/2025
What hacklore.org and its signatories misunderstands is that it erroneously attempts to replace contextual advice with foundational advice and then thanks its self for fixing something that never existed, other than suppress conversations that they have failed to put to bed (why?)
hacklore.org
Stop Hacklore!
011
Carroll @thecontractor.io · 04/12/2025
And just a week earlier I’d put lolwifi.network online to stop this kind of population-level risk advisory cosplay
lolwifi.network
lolwifi.network - Public WiFi Security Assessment
Public WiFi security assessment and education. Understand the risks that occur when joining networks.
010
Carroll @thecontractor.io · 04/12/2025
And just a week earlier I’d put lolwifi.network online to stop this kind of population-level risk advisory cosplay
lolwifi.network
lolwifi.network - Public WiFi Security Assessment
Public WiFi security assessment and education. Understand the risks that occur when joining networks.
010
Carroll @thecontractor.io · 04/12/2025
The majority of that list will never have access to victim data, it’s pious of them to think they’re in a place to give that advice … or maybe it’s just staying relative with Dunning-Kruger and the gang
110
Carroll @thecontractor.io · 30/11/2025
Concerned about trust erosion in your content security policy entries, or just looking for trouble ? I got you github.com/Splinters-io... #appsec
github.com
GitHub - Splinters-io/ghosted: Ghosted is a Trust Erosion scanner, pulling domains from your CSP checking if they're available to buy.
Ghosted is a Trust Erosion scanner, pulling domains from your CSP checking if they're available to buy. - Splinters-io/ghosted
010
Carroll @thecontractor.io · 30/11/2025
I put this online lolwifi.network just to remind people joining a untrusted #publicwifi isn’t solely about the qualities of TLS (and to gaslight people who take offence to broader views)
lolwifi.network
lolwifi.network - Public WiFi Security Assessment
Public WiFi security assessment and education. Understand the risks that occur when joining networks.
021
Carroll @thecontractor.io · 24/06/2025
I vibe coded a little data jurisdiction app juri.host consider it a highly functional PoC with some artisanal bugs - there’s an onion too if you want to Tor up - for the curious, @anthropic.com’s Claude-code was MVP here
juri.host
Juri | Data Jurisdiction Risk Assessment
Analyze data jurisdiction risks for domains and IP addresses. Professional risk assessment tool for data sovereignty compliance.
010
Carroll @thecontractor.io · 01/06/2025
000
Carroll @thecontractor.io · 08/05/2025
is it the markdown that appeals to you ?
120
Carroll @thecontractor.io · 08/05/2025
They don’t want you to have MFA as a default baseline (shitty) and there’s a condescending vibe to most of the responses you get from them, I got band from the forums because I was holding up a mirror to their bullshit hah. But … it’s less security overhead than Wordpress…
110
Carroll @thecontractor.io · 08/05/2025
I use proton, it costs, I know I owe you emails but I had the same issues
110
Carroll @thecontractor.io · 18/04/2025
Oh dear! I’ll have a good mooch around tomorrow, see if we can suss it out :) thanks for this ^
100
Carroll @thecontractor.io · 18/04/2025
Hey Emily, thanks for reading, I’ve been using it without incident for some time now with chrome and others, could you get into the specifics ?
100
Carroll @thecontractor.io · 18/04/2025
Where are those images loaded from?
050
Reposted by Carroll
SARS‑CoV‑2 (COVID-19) @covid19disease.bsky.social · 04/04/2025
BREAKING: Bird Flu Hospitalizes Two More in U.S. as Human Cases Rise Slowly, Animal Infections Accelerate.
13416138
Carroll @thecontractor.io · 05/04/2025
Former John is furious
100
Carroll @thecontractor.io · 05/04/2025
I didn’t use Google, I hope you’re feeling happy now.
110
Reposted by Carroll
SARS‑CoV‑2 (COVID-19) @covid19disease.bsky.social · 21/03/2025
We are entering a dangerous phase of the H5N1 outbreak. With spring migration underway, the virus will spread faster, threatening wildlife, livestock, and humans. Migratory birds will carry the D1.1 (D701N) variant worldwide, raising the risk of mammal outbreaks.
14586179
Carroll @thecontractor.io · 03/03/2025
Nice Mo!
110
Reposted by Carroll
SARS‑CoV‑2 (COVID-19) @covid19disease.bsky.social · 01/03/2025
BREAKING: New restrictions prohibit CDC from publishing with WHO on disease research.
8376127
Reposted by Carroll
Jonjust @jonjust.bsky.social · 21/02/2025
Todays hero
Scientist eliminates HPV
28290334479
Reposted by Carroll
SARS‑CoV‑2 (COVID-19) @covid19disease.bsky.social · 22/02/2025
BREAKING: The USDA has confirmed five additional dairy herds in California have tested positive for the virus, raising the total to 732. Currently, 74% of the state's dairy herds are infected with H5N1.
552135335286
Reposted by Carroll
God @skeetofgod.bsky.social · 20/02/2025
Sorry. I just couldn’t let you get off that easy. apple.news/AqjfAq0eXQu6...
apple.news
Odds of recently discovered asteroid hitting Earth drop nearly to zero — The Washington Post
Another night of observations revealed there is little to fear from the football-field-sized Asteroid 2024 YR4.
1971775143
Reposted by Carroll
SARS‑CoV‑2 (COVID-19) @covid19disease.bsky.social · 19/02/2025
JUST IN: Minnesota declares ‘state of emergency’ after outbreak of three diseases. Minnesota declared a state of emergency after three viral infections were detected at commercial farms, indicating a widespread bird flu outbreak which will result in an even larger egg shortage.
10583178
Reposted by Carroll
Sarah Jones @sarahjones.bsky.social · 16/01/2025
428327646792
Reposted by Carroll
Trasufoma @trasufoma.bsky.social · 13/01/2025
936366686
Reposted by Carroll
DAILYSPARK @dailyspark.bsky.social · 31/12/2024
Revenge isn’t the answer to a betrayal.
812407315
Carroll @thecontractor.io · 05/12/2024
Who gives a shit about qualification when the primary goal is met
000
Carroll @thecontractor.io · 03/12/2024
ravenglass-railway.co.uk 😁
ravenglass-railway.co.uk
Ravenglass and Eskdale Railway - The La'al Ratty
The Ravenglass and Eskdale Railway is a narrow gauge railway in the Lake District offering steam train journeys through stunning scenery. Visit us today!
010
Carroll @thecontractor.io · 01/12/2024
Playing with the new X2D,‘I’ve had the luxury of playing with many cameras and way too much glass but … this feels like a new adventure, I think I’m going to have to up my light shaping game, one flash isn’t enough, profoto are really intuitive too so … no fears just playtime #photography
040
Reposted by Carroll
Space @redditspaceviewes.bsky.social · 21/11/2024
A night shot of Paris from the ISS
402797177
Carroll @thecontractor.io · 19/11/2024
Oops
000
Carroll @thecontractor.io · 18/11/2024
Did anyone point out that Sans means ‘without’ … anyway enjoy your sans training 😂
010
Reposted by Carroll
Toby Lewis @tobaslouis.co.uk · 18/11/2024
With reports of "fake" bsky accnts impersonating UK MPs, its important to note that accnt verification (akin to the pre-Musk Twitter "Blue tick") is left to the user, not @bsky.app. This is done using a method similar to how email spoofing is mitigated, with a special DNS record:
bsky.social
How to set your domain as your handle - Bluesky
Using a domain as your handle helps with account identity, verification, and portability. Here's how to set your domain as your handle.
023
Carroll @thecontractor.io · 17/11/2024
Hah nice youtu.be/RV_SdCfZ-0s?...
youtu.be
AI Scambaiters: O2 creates AI Granny to waste scammers’ time
YouTube video by O2
000
Carroll @thecontractor.io · 17/11/2024
A Little selfie with Florence ❤️
030
Carroll @thecontractor.io · 17/11/2024
Feels a bit nicer in here
040