professional strings(1) operator
online once every century, DM for signal!
| pronouns | she/her or they/them |
| website | https://cxiao.net |
| github | https://github.com/cxiao |
| bsky | https://bsky.app/profile/cxiao.net |
| 🏳️🌈 | 😎 |
| views | are mine |
My summer tattoo flash drop is arrived!
Feel free to share and if you want a design and can come to Montreal for it you can book one over here: https://ritualdust.com/tattoo/flash/
“Coun. Zeb King wants to see Canadian political leaders adopt alternative social media platforms like the Fediverse”
“He proposes the Fediverse, a decentralized social network built on the ActivityPub protocol, as a viable and privacy-focused alternative.”
“King has sought out Chris Alemany, a member of the team that runs SocialBC.ca, to help Botterell's staff get on Mastodon.”
As an old fart in #xdev, I get asked often, mostly by young coworkers, how to get into binary exploitation in 2025. I looked around, and here’s my recommendation:
#pwncollege is a huge collection of free #lectures and practical #challenges maintained by a team of #hackers at the Arizona State University. Check it out!
from my link log —
SIMD.info: searchable reference for C intrinsics.
saved 2025-07-08 https://dotat.at/:/NXU1R.html
附屬住房之歌 The Accessory Dwelling Unit Song🏘️🎵
This was fun to write, lyrics go from how to build an ADU to becoming a homebuilder, building ADUs in mythical lands, then back down to earth with family.
Original version is Mandarin Chinese but I've written the English translation to be singable as well!
This song was inspired by the California Department of Housing and Community Development's new Chinese-language ADU handbook, which contains info for people interested in building ADUs. It's also available in English, Spanish, and Vietnamese at
https://www.hcd.ca.gov/policy-and-research/accessory-dwelling-units
Ontario architect's seal forged by remote worker believed to be North Korean fraudster
https://www.cbc.ca/news/canada/ontario-architect-seal-north-korean-remote-worker-1.7577096?utm_source=flipboard&utm_medium=activitypub
Posted into World @world-cbcnews
In mid-May, an online researcher posted a series of professional stamps on X bearing the names of engineers across the United States. The researcher claimed they were being used by North Korean remote workers. Among them was the seal of Canadian architect Stephen Mauro.
Really interested in seeing what new avenues this opens for threat hunting.
https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/
Since Let’s Encrypt started issuing certificates in 2015, people have repeatedly requested the ability to get certificates for IP addresses, an option that only a few certificate authorities have offered. Until now, they’ve had to look elsewhere, because we haven’t provided that feature. Today, we’ve issued our first certificate for an IP address, as we announced we would in January. As with other new certificate features on our engineering roadmap, we’ll now start gradually rolling out this option to more and more of our subscribers.
Countries aren’t consumer goods you pick and choose, in spite of what digital nomads and passport bros say. For the same reason that retired people in Singapore who could live a more luxurious life in culturally similar Malaysia, Thailand or Taiwan eventually go home, not to mention places that aren’t similar, it’s not reasonable to assume that everyone can or should move halfway across the world. Even if they figure out visa restrictions eventually, I think this conversation lacks nuance and understanding for things like language, social isolation, access to friends, family, support structures that you simply cannot put a dollar figure on.
Even if you’re the sort of person who doesn’t think they have any of that, just ‘knowing how things work’ and ‘being a default person where you are’ is a sort of privilege you’ll likely never get back, as an immigrant from anywhere to anywhere (maybe unless you went as a child).
DEATHCon online/remote ticket sale round 1 will start Monday 7th of July at 00:01 UTC! https://www.worldtimebuddy.com/?pl=1&lid=100,8,5,3860259,2759794,1735161&h=100&date=7/7/2025%7C3&hf=1 Last year they sold out in 24h 😳
On-site tickets will be available on 7/7 at around 10am local time for each site.
All details here: https://deathcon.io/tickets.html
This year, we're making online tickets affordable no matter what your geography, economy, or work situation with pay-what-you-can pricing. We want everyone to have access to great workshops and hands-on threat hunting training!
#mlget has been updated - your 1 stop shop for finding malware across different services!
Grab an updated copy at https://github.com/xorhex/mlget/releases/tag/v3.4.2
Happy to add additional services if folks know of more!
Some services I no longer have access to for testing - see the Alt text for more info.
Lizbeth
@reiver ⊼ (Charles) 
Marco Ivaldi
Tony Finch
Alfred Twu
Andrew Stroehlein
CBC News
Silas Cutler
Adrianna Tan
DEATHCon
avallach