My new post in the CERIAS blog:
https://www.cerias.purdue.edu/site/blog/post/more-than-the-code
Third in a series on AI hype. If LLMs cannot replace experienced people, what is the right preparation for a computing career? The capacities AI labs now hire philosophers to provide — communication, ethics, social literacy, the capacity to argue and interpret — are cultivated in the humanities and fine arts now being cut. Advice for students choosing electives, and food for thought for the rest of us.

The Center for Education and Research in Information Assurance and Security (CERIAS) is currently viewed as one of the world’s leading centers for research and education in areas of information security that are crucial to the protection of critical computing and communication infrastructure.
NASA astronaut and Artemis II Commander Reid Wiseman took this picture of Earth from the Orion spacecraft’s window after completing the translunar injection burn. There are two auroras and zodiacal light is visible as the Earth eclipses the Sun.
https://bsky.app/profile/alexjamesfitz.com/post/3milw6miovk2q
In today's episode of "Can It Run Doom": DNS fucking TXT records.
Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.
RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.
Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.
blog: https://blog.rice.is/post/doom-over-dns/
repo: https://github.com/resumex/doom-over-dns
Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.
It was always DNS.