Cindʎ Xiao 🍉 8964 36

@cxiao@infosec.exchange
731 Followers
1.9K Following
2.1K Posts

professional strings(1) operator

online once every century, DM for signal!

pronounsshe/her or they/them
websitehttps://cxiao.net
githubhttps://github.com/cxiao
bskyhttps://bsky.app/profile/cxiao.net
🏳️‍🌈😎
viewsare mine

I will be doing a live stream [stream] later today, kindly hosted by the amazing Dr. Josh Stroschein! I will be using #BinaryRefinery to replicate an analysis that Josh previously presented [source], of a download chain going from exploit document all the way to the AgentTesla payload itself.

[stream]: https://www.youtube.com/live/HuLONk0Rt98
[source]: https://www.youtube.com/playlist?list=PLHJns8WZXCdvfqIp9m0kkjsbg9G8YWdSH

Unraveling a Multi-Stage Downloader with Binary Refinery - Guest Jesko Hüttenhain

YouTube

While Republicans (and even some Democrats) continue to cruelly target trans young people and their families with discriminatory restrictions on not just healthcare but also sports, military service, and more, we will never stop fighting for trans peoples’ right to control their own futures as fully equal members of society.

DC and NYC: Please join the rallies against this dangerous ruling if you can. Trans rights are not up for debate. 🏳️‍⚧️

> Signal groups, in particular, are more powerful than you might be aware of, even if you already use them all the time. In this post I'll show you how to:

- Turn an in-person meeting into a Signal group using QR codes
- Manage large semi-public groups while still vetting new members
- Make announcement-only groups, perfect for volunteer networks rapidly responding to things like ICE raids

**Using Signal groups for activism** by @micahflee

https://micahflee.com/using-signal-groups-for-activism/

#Signal #DataPrivacy

Using Signal groups for activism

Things are heating up. Millions of people are taking to the streets against Trump's rising authoritarianism. Communities around the US are organizing to defend against ICE raids, to protest Israeli genocide, for mutual aid, and for other forms of fighting fascism. Signal can help people safely organize in all of

micahflee

People are having very strange conversations with ChatGPT, in which they discover secret cabals or conspiracies or that we are all in fact living in The Matrix.

It sends these people into delusional spirals.

Then ChatGPT tells them to email me about it.

Gift link: https://www.nytimes.com/2025/06/13/technology/chatgpt-ai-chatbots-conspiracies.html?unlocked_article_code=1.Ok8.VBY-.s76GQpFar8r4&smid=url-share

They Asked ChatGPT Questions. The Answers Sent Them Spiraling.

Generative A.I. chatbots are going down conspiratorial rabbit holes and endorsing wild, mystical belief systems. For some people, conversations with the technology can deeply distort reality.

The New York Times

A couple people responded to my earlier post about the shoddy WSJ article (https://hachyderm.io/@molly0xfff/114683662588184161) to say “well it’s true that Democrats aren’t supporting the protests!”

At my best count, 75 elected Democrats (Congresspeople, governors) attended protests today. Another 27 encouraged people to go.

That’s just looking at today’s protests, not Democrats talking about or attending protests more generally. It also doesn’t count the many more state or local officials who showed up, candidates, etc.

https://docs.google.com/spreadsheets/d/e/2PACX-1vQW7wz5q1ypDwxaJCYBewnMqkUngfmjwYp1w4nPjZZZAefNfJd5ceL12jF-PiXfnLv_9JYu2Kb5iy_N/pubhtml

#USpolitics #USpol

UPDATE: Vancouver protest has relocated to Jack Poole Plaza. It will no longer be at the US Consulate. It will still be at 11am.

Canadians in case you did not know, we have some No Kings protests tomorrow here too in solidarity

Vancouver BC, 11am, Jack Poole Plaza
Toronto ON, 12pm, US Consulate, and Queen's Park
Ottawa ON, 2pm, US Embassy
London ON, 12pm, Victoria Park
Peterborough ON, 12pm, Confederation Square

Lots of US border towns having them too. Check https://www.nokings.org for the full list

#NoKings #canada #vancouver #toronto #ottawa #londonont #peterborough

No Kings

On June 14—Flag Day—Donald Trump wants tanks in the street and a made-for-TV display of dominance for his birthday. A spectacle meant to look like strength. But real power isn’t staged in Washington. It rises up everywhere else.

No Kings

📝 i find it interesting and helpful to imagine a framing through which to talk about the myriad but rhyming ideas i'm interested in. wrote about this latest framing :)

https://kayserifserif.place/posts/2025/carving-out-a-window

Here's how Apple's new Containerization framework works. It looks like an improvement over QEMU, Hypervisor.framework, and Virtualization.framework, which are used by Colima, Podman, et al.
https://github.com/apple/container/blob/main/docs/technical-overview.md

#macOS #docker #containerization #OCI

Mystery solved! It's not uncommon for old DNS entries to linger on long after a website dies, still pointing to the old IP address years later. It's trivial to fish for these IPs on AWS, keeping ones still getting traffic or linked to high-value domains. This 10-year-old post explains it well. (via Randall Gordon on Bluesky) https://bishopfox.com/blog/fishing-the-aws-ip-pool-for-dangling-domains
Fishing the AWS IP Pool for Dangling Domains

Matt Bryant goes IP fishing in the AWS pool. Read about how he did it - and why expired digital assets can pose a threat.

Bishop Fox

#mlget has been updated - your 1 stop shop for finding malware across different services!

Grab an updated copy at https://github.com/xorhex/mlget/releases/tag/v3.4.2

Happy to add additional services if folks know of more!

Some services I no longer have access to for testing - see the Alt text for more info.