Mastodawn

In today's episode of "Can It Run Doom": DNS fucking TXT records.

Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: https://blog.rice.is/post/doom-over-dns/

repo: https://github.com/resumex/doom-over-dns

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns

Show thread

Tim 23h ago

@clive your link is sad

Tim 5d ago

𝙉𝙤𝙖𝙝 𝙨𝙖𝙣𝙨 𝙨𝙚𝙧𝙞𝙛 Mar 10

I don’t understand why people named Timothy would shorten their names to “Tim” when “Moth” is quite clearly the superior choice.

Show thread

Tim Mar 18

@schnatterer just don’t do it on your main app-of-apps app. Or the app managing Argo CD. Ask me how I know.

Show thread

Tim Mar 13

@VOLEwtf thanks. I hate it.

Tim Mar 5

Show thread

Open Rights Group Mar 5

This is no longer about banning under-16s from social media.

It’s about control over all information and forcing adults to go through digital ID checks to access the Internet.

Forcing us to submit our identity or biometric data to an array of different providers poses significant privacy risks.

#privacy #freedomofexpression #ageverification #digitalID #onlinesafety #ukpolitics #ukpol

Tim Mar 3

Mandrake 🐎Mar 2

The UK Government has launched a public consultation which is seeking views on whether to ban children from using social media. This consultation will run until 26 May 2026.

It is highly likely that later this year, the establishment will attempt to introduce legislation which forces social media platforms (potentially including Mastodon) and VPNs to verify the age of their users. Therefore, this consultation is likely to be the only opportunity we will have to push back against these authoritarian measures.

Please take the time to read the consultation and answer the questions (especially if you are the parent or carer of a young person):
https://www.gov.uk/government/consultations/growing-up-in-the-online-world-a-national-consultation

Growing up in the online world: a national consultation

We are consulting on further measures to prepare children for the future in an age of rapid technological change. This includes potential age restrictions on social media and other services such as gaming sites and AI chatbots, restrictions on addictive design features and risky functionalities, and better support for parents and families.

GOV.UK

Tim Feb 28

I got bored yesterday so I made. https://thumbsgenerator.com/ hopefully it’s useful for someone.

Thumbs Generator

Tim Feb 23

Allpoints Feb 23

"In all cases, it's very important to bear in mind the roles and personas used in Gateway API. The use cases presented here are deliberately described in terms of Ana, Chihiro, and Ian: they are the ones for whom the API must be usable."

How about you just use the job titles instead of making me learn everyone's back story just to read basic documentation?

#OldManYellsAtClouds #TimeToRetire #DevOps #Developer

Show thread

Tim Feb 17

@ben hard agree. Clearly the gateway api team had a roadmap and then the nginx team completely obliterated that by throwing their toys out of the pram early.