In today's episode of "Can It Run Doom": DNS fucking TXT records.
Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.
RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.
Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.
blog: https://blog.rice.is/post/doom-over-dns/
repo: https://github.com/resumex/doom-over-dns
Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.
It was always DNS.
if you're one of the many people i've heard say "i used to have a website for my art and prose but bots and ai scrapers stomped all over it so i gave up and shut it down"
then please please have a look at this!
the creator of iocaine, a tool designed to poison those bots, is offering it as a free hosted service. the bots get poison and you receive only legitimate visitors
We’ve “learned our lesson”, though it’s not the one the white nationalists would prefer.
https://ninelives.karawynnlong.com/the-lesson-from-minneapolis/
A major milestone for next generation Covid vax: The first clinical trial for a pancoronavirus formulation of an existing vaccine was registered.
There are more clinical trial results for a vax for people with immunocompromise, & news on mucosal vax trials. Plus 12 preclinical reports.
In my monthly update @PLOS
Folks interested in science should be interested in Retraction Watch, which is now 15 years old. Started by medical journalists Ivan Oransky & Adam Marcus, the site is the only one (that I know of, anyway) that uncovers and tracks scientific retractions, errors, and other controversies. My best friend of 27 years happens to work there too, but that's besides the point! They do vital work no one else is doing. Their year-end summary is impressive.
https://aftermath.site/best-split-keyboards-diy-qmk-zmk-corne/
Chris Person speaking my language with this morning's bonus Aftermath blog about split keyboards