Rick Hunter

13 Followers
59 Following
289 Posts
Got roped into product security by sitting in the wrong cockpit at the wrong time.

In today's episode of "Can It Run Doom": DNS fucking TXT records.

Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: https://blog.rice.is/post/doom-over-dns/

repo: https://github.com/resumex/doom-over-dns

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns

Infosec news cycle:
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
CVE is in danger
CVE is saved
Today's #Muppets GIF of the Day is...
Meta Is Buying Moltbook

Meta is acquiring Moltbook, the social media platform for AI agents, for an undisclosed sum.

Lifehacker
Have a Super MAR 10!

 "Privacy is a human right."

-- @torproject & Universal Declaration of Human Rights

#FOSSASIA #TorProject #Tor #UN #UnitedNations #HumanRights

I stopped buying random USB‑C cables after learning what 'USB4' actually means https://www.makeuseof.com/stopped-buying-random-usbc-cables-after-learning-what-usb4-means/
I stopped buying random USB‑C cables after learning what 'USB4' actually means

I used to buy cables by price, now I buy them by capability.

MUO

I thought I'd check out the winter olympics by watching some ski jumping.

Then I ended up watching the bobsleigh, downhill, freestyle skiing and luge as well.

It's a slippery slope.

On this day, forty years ago: 28 January 1986.

I was working on my astronomy PhD in the terminal room at the Royal Observatory Edinburgh.

Someone came in & told us the awful news. After so many launches & astronauts, we’d grown blasé & didn’t pay much attention anymore.

That changed in 73 seconds on that cold day & we learned again that space is hard.

I still remember their names:

Onizuka, Smith, McAuliffe, Scobee, Jarvis, Resnick, & McNair.

Ad astra, STS-51L Challenger crew ✨

#space

RE: https://c.im/@arstechnica/115844496966769996

Thank you, @benjedwards, for giving Stewart Cheifet the obit he deserves. For so many of us, he was the first person we ever saw on television talking PC tech in a way that wasn't gee-whiz or stupidified, but down to earth, clear-eyed and clear-headed.

#retrocomputing