evilstevie boosted
evilstevie boosted
evilstevie boosted
evilstevie boosted

the endless frustration: hardware used to be cheap but I had no money, and now I do have money but hardware costs have disproportionately increased :(

evilstevie boosted

Some hero renamed the White House on Google Maps as Epstein Island. Bless you, whoever you are.
Post reporters called the White House. Their phones showed ‘Epstein Island.’ washingtonpost.com/style/power

evilstevie boosted

“I need to discuss science vs. engineering. Put glibly:

In #science if you know what you are doing you should not be doing it.
In #engineering if you do not know what you are doing you should not be doing it."

― Richard Hamming, "The Art of Doing Science and Engineering: Learning to Learn" (1997)

evilstevie boosted

In today's episode of "Can It Run Doom": DNS fucking TXT records.

Some absolute madlad (cough Adam Rice cough) compressed the entire shareware DOOM WAD, split it into around 1,964 chunks, shoved them into Cloudflare TXT records, and wrote a PowerShell script that reassembles and runs the whole goddamn game from DNS queries alone. Nothing touches disk. The DLLs are in DNS. THE FUCKING DLLS ARE IN DNS.

RFC 1035 was written in 1987. Those engineers are spinning in their graves fast enough to generate municipal power.

Bonus: this is a fully functional globally-distributed covert data exfil channel that your NGFW will never fucking see if you're not doing deep DNS inspection. Sleep well.

blog: blog.rice.is/post/doom-over-dn

repo: github.com/resumex/doom-over-d

Also lmao @ every blue team that has never once looked at their DNS query volume. How's that DLP policy working out for you.

It was always DNS.

#infosec #dns #doom #itisalwaysdns

evilstevie boosted
Show older
mastod1.ddns.net

Mastod1 be nice. (sorry, closed for new registrations after a bunch of 'commercial/spamming' accounts jumped in - rule 3 on site)