Mastodawn

Cindʎ Xiao 🍉 8964 36

@cxiao@infosec.exchange

734 Followers

1.9K Following

2.1K Posts

professional strings(1) operator

online once every century, DM for signal!

pronouns	she/her or they/them
website	https://cxiao.net
github	https://github.com/cxiao
bsky	https://bsky.app/profile/cxiao.net
🏳️‍🌈	😎
views	are mine

Cindʎ Xiao 🍉 8964 36 Jun 19

Jesko Hüttenhain Jun 19

I will be doing a live stream [stream] later today, kindly hosted by the amazing Dr. Josh Stroschein! I will be using #BinaryRefinery to replicate an analysis that Josh previously presented [source], of a download chain going from exploit document all the way to the AgentTesla payload itself.

[stream]: https://www.youtube.com/live/HuLONk0Rt98
[source]: https://www.youtube.com/playlist?list=PLHJns8WZXCdvfqIp9m0kkjsbg9G8YWdSH

Unraveling a Multi-Stage Downloader with Binary Refinery - Guest Jesko Hüttenhain

YouTube

Cindʎ Xiao 🍉 8964 36 Jun 18

Indivisible ❌👑Jun 18

While Republicans (and even some Democrats) continue to cruelly target trans young people and their families with discriminatory restrictions on not just healthcare but also sports, military service, and more, we will never stop fighting for trans peoples’ right to control their own futures as fully equal members of society.

DC and NYC: Please join the rallies against this dangerous ruling if you can. Trans rights are not up for debate. 🏳️‍⚧️

Cindʎ Xiao 🍉 8964 36 Jun 17

> Signal groups, in particular, are more powerful than you might be aware of, even if you already use them all the time. In this post I'll show you how to:

- Turn an in-person meeting into a Signal group using QR codes
- Manage large semi-public groups while still vetting new members
- Make announcement-only groups, perfect for volunteer networks rapidly responding to things like ICE raids

**Using Signal groups for activism** by @micahflee

https://micahflee.com/using-signal-groups-for-activism/

#Signal #DataPrivacy

Using Signal groups for activism

Things are heating up. Millions of people are taking to the streets against Trump's rising authoritarianism. Communities around the US are organizing to defend against ICE raids, to protest Israeli genocide, for mutual aid, and for other forms of fighting fascism. Signal can help people safely organize in all of

micahflee

Cindʎ Xiao 🍉 8964 36 Jun 16

Kashmir Hill Jun 16

People are having very strange conversations with ChatGPT, in which they discover secret cabals or conspiracies or that we are all in fact living in The Matrix.

It sends these people into delusional spirals.

Then ChatGPT tells them to email me about it.

Gift link: https://www.nytimes.com/2025/06/13/technology/chatgpt-ai-chatbots-conspiracies.html?unlocked_article_code=1.Ok8.VBY-.s76GQpFar8r4&smid=url-share

They Asked ChatGPT Questions. The Answers Sent Them Spiraling.

Generative A.I. chatbots are going down conspiratorial rabbit holes and endorsing wild, mystical belief systems. For some people, conversations with the technology can deeply distort reality.

The New York Times

Cindʎ Xiao 🍉 8964 36 Jun 15

Molly White Jun 15

A couple people responded to my earlier post about the shoddy WSJ article (https://hachyderm.io/@molly0xfff/114683662588184161) to say “well it’s true that Democrats aren’t supporting the protests!”

At my best count, 75 elected Democrats (Congresspeople, governors) attended protests today. Another 27 encouraged people to go.

That’s just looking at today’s protests, not Democrats talking about or attending protests more generally. It also doesn’t count the many more state or local officials who showed up, candidates, etc.

https://docs.google.com/spreadsheets/d/e/2PACX-1vQW7wz5q1ypDwxaJCYBewnMqkUngfmjwYp1w4nPjZZZAefNfJd5ceL12jF-PiXfnLv_9JYu2Kb5iy_N/pubhtml

#USpolitics #USpol

Cindʎ Xiao 🍉 8964 36 Jun 13

UPDATE: Vancouver protest has relocated to Jack Poole Plaza. It will no longer be at the US Consulate. It will still be at 11am.

Canadians in case you did not know, we have some No Kings protests tomorrow here too in solidarity

Vancouver BC, 11am, Jack Poole Plaza
Toronto ON, 12pm, US Consulate, and Queen's Park
Ottawa ON, 2pm, US Embassy
London ON, 12pm, Victoria Park
Peterborough ON, 12pm, Confederation Square

Lots of US border towns having them too. Check https://www.nokings.org for the full list

#NoKings #canada #vancouver #toronto #ottawa #londonont #peterborough

No Kings

On June 14—Flag Day—Donald Trump wants tanks in the street and a made-for-TV display of dominance for his birthday. A spectacle meant to look like strength. But real power isn’t staged in Washington. It rises up everywhere else.

No Kings

Cindʎ Xiao 🍉 8964 36 Jun 12

katherine Jun 12

📝 i find it interesting and helpful to imagine a framing through which to talk about the myriad but rhyming ideas i'm interested in. wrote about this latest framing :)

https://kayserifserif.place/posts/2025/carving-out-a-window

Cindʎ Xiao 🍉 8964 36 Jun 12

Quinn Comendant Jun 12

Here's how Apple's new Containerization framework works. It looks like an improvement over QEMU, Hypervisor.framework, and Virtualization.framework, which are used by Colima, Podman, et al.
https://github.com/apple/container/blob/main/docs/technical-overview.md

#macOS #docker #containerization #OCI

Cindʎ Xiao 🍉 8964 36 Jun 12

Andy Baio Jun 11

Mystery solved! It's not uncommon for old DNS entries to linger on long after a website dies, still pointing to the old IP address years later. It's trivial to fish for these IPs on AWS, keeping ones still getting traffic or linked to high-value domains. This 10-year-old post explains it well. (via Randall Gordon on Bluesky) https://bishopfox.com/blog/fishing-the-aws-ip-pool-for-dangling-domains

Fishing the AWS IP Pool for Dangling Domains

Matt Bryant goes IP fishing in the AWS pool. Read about how he did it - and why expired digital assets can pose a threat.

Bishop Fox

Cindʎ Xiao 🍉 8964 36 Jun 11

avallach Jun 11

#mlget has been updated - your 1 stop shop for finding malware across different services!

Grab an updated copy at https://github.com/xorhex/mlget/releases/tag/v3.4.2

Happy to add additional services if folks know of more!

Some services I no longer have access to for testing - see the Alt text for more info.

×

Molly White Jun 15

A couple people responded to my earlier post about the shoddy WSJ article (https://hachyderm.io/@molly0xfff/114683662588184161) to say “well it’s true that Democrats aren’t supporting the protests!”

At my best count, 75 elected Democrats (Congresspeople, governors) attended protests today. Another 27 encouraged people to go.

That’s just looking at today’s protests, not Democrats talking about or attending protests more generally. It also doesn’t count the many more state or local officials who showed up, candidates, etc.

https://docs.google.com/spreadsheets/d/e/2PACX-1vQW7wz5q1ypDwxaJCYBewnMqkUngfmjwYp1w4nPjZZZAefNfJd5ceL12jF-PiXfnLv_9JYu2Kb5iy_N/pubhtml

#USpolitics #USpol

Molly White Jun 15

This is not to endorse the Dems’ strategy right now, and the number should be way closer to 100%!

But I do want to make you think twice when you see headlines like that one.

#USpolitics #USpol #journalism

Anne Ominous Jun 15

my rep has introduced a bill to stop sending bombs to Israel.
not all Dems are weak leaders.

BUT the current national strategy is terrible! they never learned or cared to confront right wing extremism. too many are geriatric,
and yup, i blame Biden/Garland for so, so much.

BUT many things can be true! major media outlets and their uncritical or just staright up shitty reporting is also terrible!

NosirrahSec 🏴‍☠️ guillotine enthusiast Jun 15

@rustoleumlove @molly0xfff when we stopped punching, or better yet hospitalizing Nazis that dared openly marched the streets, we lost this country.

It's almost too late now.

Asterisk 🇨🇦Jun 15

@NosirrahSec @rustoleumlove @molly0xfff

Don’t give up hope so easily.

@molly0xfff
I dunno.
Somewhere I read somebody smart saying that protests are for and of the people, and that elected officials have no business attending them. Wish I could remember the article, but they made a lot of good arguments. I thought about it and ultimately agreed.

RalfMaximus Jun 15

@snork303 @molly0xfff

Well except that it's never a good idea to separate leaders and the people they represent. That's how you end up with a ruling class. Kings. Senators who are 'better' than the rest of us.

That kind of thinking is why we're in the current mess.

I want my leadership to experience the same things I do, worry about the same things. And fear the same things.

Mx. Luna Corbden Jun 15

@snork303 @molly0xfff Interesting. *meme of the figure who starts to argue but can't so thinks about it harder*

three tigers in a trench coat Jun 15

@snork303 @molly0xfff elected officials are also people, having been elected for, by, and of the people.

I agree a little, though. They shouldn't use this to campaign, but whenever a new leader emerges from a protest, they are basically elected right there, on the spot, too.

Morgan Davis Jun 15

@molly0xfff The ire of the American people—the true patriots—who very much know the origin story of this county, can be as easily directed at the feckless Democrats as well as the fascist Republicans. They would all be wise to acquiesce to the power of the people to whom they vowed to serve. We understand that the idea of democracy is bigger and greater than any single wreckless president or an absolutely impotent congress, as long as we never compromise on that idea.

@molly0xfff agree it's a strategy to definitely trying to set a "hopeless" narrative. MSM is already bending the knee/licking the boot, we don't have to make it easy for them. The fact that we have ANY leaders rn who are leading a charge within the party to protest and resist is a good reminder that we have power right now

And two were shot, one killed along with her husband.

Joe Cooper 🇺🇦 🍉Jun 15

@molly0xfff lumping them all together gives the ones who are not fit for this moment a pass. We have to identify who understands the situation we are in, and primary those who don't. Supporting protests may not be proof of competence or courage, but it's certainly supporting evidence.

@swelljoe @molly0xfff Who's lumping? Molly is identifying Democrats who participated, trolls are saying they didn't. I do support primarying people who aren't up to the task, or even recalling if they are falling down as badly as Fedderman...looks like PA doesn't have recall...dang.

Joe Cooper 🇺🇦 🍉Jun 15

@jhavok @molly0xfff not Molly. She's doing good work by identifying who is doing right by their constituents.

@molly0xfff DeSaulnier showed up at Pleasant Hill, CA City Hall and Walnut Creek, CA Broadway Plaza, possibly more.

@molly0xfff Perhaps the #Democrats will find the motion and wherewithal to push towards #impeachment of the orange abominable #POTUS47 🤔 or it's another fairy tale in banana republic?

@joseph11lim @molly0xfff The last two attempts to impeach were exercises in futility. Get the votes first.

@jhavok @molly0xfff
Kick the can for another 3.5 years...? Let's see: 🧐
#Biden kicked the cans on Netanyahu's Gaza genocide and the fiscal deficit by forgiving "politically expedient" but fiscally irresponsible undergrad loans;
#Obama kicked the cans on the South China Sea and the fiscal deficit by allowing Wall Street to socialize their excesses that sparked the GFC, plus he gave the lonE skuM the SpaceX monopoly and billions of $$$.
Yes, let's continue with #kickingthecan... 🤦‍♂️
#democrats

Old Man in the Shoe Jun 15

@joseph11lim @jhavok @molly0xfff Really unfair, we don't know your entire timeline to scold you for things you couldn't have seen and were unprepared for, things that just happened to you and generally we are unable to judge you (in a thread about why you are already being unfair in your judgement).

Sorry you were saying to impeach Trump because you have the ability to?

@joseph11lim @molly0xfff So you suggest wasting effort on a guaranteed failing impeachment? There's an election coming up next year, if enough GOP Senators are cowed by the demonstrations, the votes could be there. But impeaching without the votes to convict is useless, as we saw.

@jhavok @molly0xfff Next year's election? Now that's another story.🍀

@molly0xfff my rep is on the list 👍

Larry Anderson ☮️Jun 15

@molly0xfff @ai6yr Rep. Salud Carbajal (CA-24) was at our local protest in Ventura, CA today.

AI6YR Ben Jun 15

@larand @molly0xfff Woohoo!

tinydoctor Jun 15

@molly0xfff Our Congressman Morgan McGarvey spoke at the Louisville, KY No Kings protest, and he gave a real barnburner of a speech. He was on fire. I didn't know he had it in him.

Stephen Bannasch (316 ppm)Jun 15

From my congressman, Jim McGovern today in Worcester MA! He’s also been talking about a general strike.

Chris Neklason Jun 15

@molly0xfff
Add the (democrat) Mayor of Santa Cruz, California.

Molly White Jun 15

@chris yeah, it just wasn’t feasible to count all the mayors!

@molly0xfff Well it's true my Representative promoted No Kings on a telephone town hall, and the Hands Off march at a physical town hall (which is how I found out about it). Glad I voted for him.

Edit: Updated! The attached image didn't show it but I clicked on the google doc and it has been updated already!

You can add Maxine Waters (D-CA), looks like she was at the LA protest at some point today:

https://www.youtube.com/watch?v=bqCuavcWHo0

Rep. Maxine Waters (D-CA) at the “No Kings” protest in Los Angeles Saturday

YouTube

Katykayay Jun 15

@molly0xfff Kevin Mullin showed up at the Palo Alto rally. He was not on the official program, since it was the district next door to his, but many of his constituents were happy to hear him!

SouprMatt Jun 15

@molly0xfff The other thing I noticed about the protests? All the signs were anti-GOP. The “Democrats aren’t doing anything” wasn’t part of this demonstration.

The most recent Quinnipiac poll shows that 80% of Democratic voters feel the party leaders care about them. 97% of the same feel the Republican Party leaders do NOT care about them.

This helped reduce my worries. The 20% of Democrats who don’t think the party cares about them are over represented on Fedi. I’m not judging their feelings, just stating the number. There is a lot more goodwill for the Democrats than one might think! To me that’s a good thing because we really need to work together.

Jeff C. 🇺🇦Jun 15

@mls14 @molly0xfff I’m not even a Democrat and I think the whining about Democrats is overblown and often counterproductive.

The difference between the two parties could not be more stark.

Anyhow, my observation from today is the same. Everybody seemed to have their priorities in order. Democrats-being-imperfect didn’t even register.

Darren du Nord Jun 15

@molly0xfff We had local dems, city, county, state level at our protest in ND today, but thats all we have. There are no congressional dems here. They are important too, though harder to quantify.

King of Tors Jun 15

@molly0xfff worth noting that in NM that is 100% of our federal legislators and our governor

Michael Busch Jun 15

For an addition to your list:

Tim Walz was scheduled to appear at the No Kings event at the Minnesota capitol building here today.

He did not attend because of what happened last night; and gave his remarks from the Minnesota emergency operations center across town instead - https://www.threads.com/@mngovernor/post/DK5MKyxp51n

Governor Tim Walz (@mngovernor) on Threads

We must stand united against violence.

Threads

@molly0xfff @inarticulatequilter some people just can’t miss any opportunity to bash Dems. It’s gotten tedious.

The Flight Attendant Jun 15

@molly0xfff Representative Dina Titus showed up to the Las Vegas protest today! #noKings #LasVegas #indivisible #5051movement

@molly0xfff Melissa Hortman supported the Women's March rather directly. I'm cutting all the Minnesotans slack today, as I did five years ago. They've done some amazing work in their roles... granted, the toxicity inside the ranks obviously isn't gone, but it's much better defined, generally at least privatized, and there's much better legislation and protocols in place to address it.

AGF : poemproducer Jun 15

@molly0xfff good work

Pēteris Krišjānis Jun 15

@molly0xfff yeah I don't get this obsession with throwing potential partners under the bus. I get quite a few left aligned people see Democrats as not capable of pushing for a change, thus one of reasons why fachism is back. However the truth is more complex.
Not being able to cooperative on fundamentals is why we struggle. This is why Kamala was not elected.

Peter Brett Jun 15

@peteriskrisjanis The opposition to the Trump regime has to always remember: “Do not split!”

Jeff C. 🇺🇦Jun 15

@molly0xfff Rep. Judy Chu (CA) showed up at ours.

As did our State Senator and my city’s mayor.

@molly0xfff mine spoke at Philly. So proud to have Jaime Raskin as my congressman!

CassandraVert Jun 15

@molly0xfff Big difference between dem leadership and all dems.