Gonçalo Ribeiro

358 Followers
489 Following
3.9K Posts
Defend. Pwn. Infosec. Free software. Vim nerd. #rustlang #electronics
websitehttps://goncalor.com
GitHubhttps://github.com/goncalor

IT'S HAPPENING

GITHUB, THE FIRST ENTERPRISE CLOUD SOLUTION TO REACH ZERO NINES RELIABILITY

https://mrshu.github.io/github-statuses/

#github

Holy shit you guys we just watched #Artemis go from the plane

(Edit: I posted videos in the replies, if that's of interest❤️)

#space #nasa #ArtemisII #Artemis2 #spaceflight

the fact that discord can use 1.5GB of memory WITHOUT having a memory leak is frankly unacceptable and anyone who helped make it that way should be ashamed of themselves tbh
One for the history books...

Amazing how many headlines parrot the corporate framing that Meta's new Hyperion data center would "deliver gigawatts of power" -

"AI data center ... will deliver five gigawatts of computational power to fuel the company's new AI" ❌

"[data center will] supply its new AI lab with five gigawatts of computational power" ❌

No. NO. Don't do that. Hyperion will *consume* 5GW of power, including three NEW new gas-turbine power plants, in order to run giant toxic content sludge generators. 💩 ✔

Horse Magnifier (sketbordcat)

game where you magnify horses

Warp Door

For many people, the #Linux vs #Windows vs #Mac debate is a privilege — it assumes you can choose. But working with the Computer Upcycle Project, I've seen the real choice is often Linux vs no computer at all.

~95% of donated computers are "too old" for Windows 11 or macOS. Linux installs on them anyway, adding 10+ years of life to machines #Microsoft and #Apple called trash.

This isn't Linux vs Windows. It's Linux vs e-waste.

I want to teach a class on repurposing electronics. We could start out just taking some broken things apart and seeing if we can fix them, but every student would have to pick something to repurpose or revive as a semester-long project. Maybe they want to turn an old propane lantern into an LED lantern, convert a cordless drill with dead nicad batteries to lithium, or jailbreak an e-bike. Everyone should leave the class with a device or appliance with a new lease on life. A community college should hire me for this

Physical security and cryptography can learn from each other, part 11367:

Hotels wisely don't put the room number on guest keycards so if someone finds your card, they'd have to exhaustively search the hotel to find the room it opens.

Some hotels now have elevators programmed to only let you call the floor for which your keycard is coded, preventing guests from wandering to other floors.

But it also means the elevator can be used as an efficient oracle to determine the floor of a found key.

In today's episode of "Can It Run Doom": DNS fucking TXT records.

Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: https://blog.rice.is/post/doom-over-dns/

repo: https://github.com/resumex/doom-over-dns

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns