Iain'; CREATE TABLE toots; -- Wallace 

107 Followers
155 Following
770 Posts
Principal security consultant @nettitude_labs. CHECK Team Leader (Applications).
Webhttps://strawp.net
Twitter@Strawp
"The fact that some people can't distinguish between etymology and entomology bugs me in ways I can't put into words" -- Anon

In today's episode of "Can It Run Doom": DNS fucking TXT records.

Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: https://blog.rice.is/post/doom-over-dns/

repo: https://github.com/resumex/doom-over-dns

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns

The main cause of racism is not immigration, or multiculturalism, or even confected 'culture wars'. It's constipation. That's why these purple-faced, fashy cunts are so angry with everything. You'd be too, if your diet of garbage left you backed up for a week.
On Linux forums I, a woman, would get ignored and disrespected. These days I ask my question, then switch to a fake account to give a completely wrong answer, then switch back again to thank them and praise their Linux knowledge. The experts show up right away. Sorted.
Oh myyy! 😅
Forced to use AI at work, hate it. Usage is monitored so I can't avoid it. I've set up mine to play a Sim City clone. It burns through tokens, making crap cities that quickly go bankrupt. Just been told that I'm getting a bonus for being a top user.
Lmao.

“pandoc for the people”, the pandoc wasm web-app, is now available at https://pandoc.org/app/
It allows to run any kind of document conversion that pandoc supports in the browser. The documents never leave the computer, thus ensuring *full privacy*.
Conversions to pdf are done via Typst.

#pandoc #wasm #typst

pandoc for the people

I've been a stage hand for a while now. Every time I do a mic check I say something like "hey google, set an alarm for 3am". Serves them right for enabling a stupid feature with no secuirty.