Buttered Jorts

Not that Jorts.

parent, security analyst, sleepy
former sysadmin and user support

I generally #FollowForFollow, don't be scared if my profile is locked.

blog: https://blog.brazos3d.com
Bsky: https://bsky.app/profile/ajn142.bsky.social

Public Key

npub1kws0pqglc03r9m3gufqgztzcu2xp5s0ahaqt398f906h64as38psg40n5s

NIP-05 Address

[email protected]

Profile Code

nprofile1qqst8g8ssy0u8c3jac5wysyp93vw9rq6g87m7s9cjn5jhata27cgnscpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsvy39gm

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1kws0pqglc03r9m3gufqgztzcu2xp5s0ahaqt398f906h64as38psg40n5s

Show more details

Last Notes

2026-09-24 12:12:16 GMT

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/117/325/946/100/732/091/original/c0e6f33248cd2083.jpeg

2026-09-24 12:09:12 GMT

RE: https://tech.lgbt/@Natasha_Jay/117319058821907774
@npub1da6…7fuv you can guess how this went...

2026-09-17 01:21:09 GMT

- reply

i'll install some extra VSCode extensions, just for you.

2026-09-17 00:39:23 GMT

- reply

I will either pass out in an hour or so getting the kids to bed or i'm gonna be up until 2 synthesizing VSCode Dev Containers, Github Local Actions, and installing DockerEngine under WSL2 while it's quiet and nobody is expecting anything from me.

2026-09-17 00:36:17 GMT

Fuck... i'm powering through bad brain and moving into work brain... it is 7:30 at night... not now, brain...

2026-09-13 16:19:43 GMT

- reply

why second best specifically?

2026-09-01 01:22:25 GMT

- reply

it’s an offshoot of deaf metal

2026-09-01 01:21:58 GMT

- reply

hard-of-hearing-core

2026-08-28 23:36:15 GMT

- reply

I measure by ratio of shitposts

2026-08-27 02:45:06 GMT

- reply

i feel like you had one the other day?

2026-08-26 13:28:17 GMT

- reply

:guillotine:

2026-08-26 13:22:00 GMT

Note to self: Do not touch unshielded freezer lines with unprotected skin that you want to keep.

2026-07-31 00:42:20 GMT

- reply

just wait until you see the shiny thing @npub1s6e…n008 left you (it’s an orphan source)

2026-07-14 16:53:57 GMT

- reply

sometimes I think people don’t like me as much as they act like they do…

2026-07-14 16:28:46 GMT

- reply

my *sh secret is [@atuin](https://hachyderm.io/@atuin )

2026-07-10 21:11:26 GMT

Who named this preppy lookin’ motherfucker Sam ***Alt***man?

2026-06-30 12:41:08 GMT

- reply

is getting acquired by Accenture a win condition or another failure case?

2026-06-29 21:47:04 GMT

- reply

yeah, the context of “prepare a hunt” probably isn’t transparent to the vast vast majority of folks who aren’t in the business of being professionally weird like @npub1s6e…n008
Tangential, one more crow in this convo and we have a murder.

2026-06-29 21:39:57 GMT

- reply

I think the context is that there isn’t a good reason for most people to be using this, and it presents an alternative root structure that could be used by bad actors to deliver command and control (C2) traffic for malware while obscuring that traffic from a lot of typical logging systems.
https://icannwiki.org/Alternative_Roots
Basically as an infosec person, if you see this on your network and can’t explain it, it’s very probable it’s being used for something malicious.

2026-06-20 14:43:56 GMT

Think I’m going dark for a bit.

2026-06-19 14:16:57 GMT

- reply

Also, do not buy lifesaving supplies from Amazon! Go direct to manufacturer!

2026-06-19 13:57:35 GMT

- reply

for sure, it gets a call out because my experience says that outside of those with military backgrounds, folks who hunt, do target shooting, etc., are both inordinately aware of the risks should something go wrong in those activities, and inordinately unprepared to deal with the consequences.

2026-06-19 13:39:52 GMT

- reply

Limited audience on Mastodon, but if your hobbies include poking very small holes through various objects at very high velocities, you owe it to yourself and those around you to also be able to close those holes, should the worst happen and one end up where it shouldn’t.

2026-06-19 13:35:30 GMT

> Man, I really wish I hadn’t had that first aid kit.
Said no one ever.
https://www.narescue.com/2026-sos-sale.html

2026-06-18 23:30:22 GMT

- reply

I know it's largely communication preferences, but I prefer to say "I don't know, but I'll find out" early and often, rather than waiting until things are concrete to say anything.

2026-06-18 23:20:40 GMT

- reply

probably the latter, but the fact he waved me off replying until he gets answers (Monday hopefully, or telling the head of Networking is moot) rather than letting me say “You found an edge case. We’ll include Networking informationally. If we determine they need to act, we’ll get back to you and them.” makes it feel like the former.

2026-06-18 22:52:28 GMT

- reply

I just wasn’t expecting it to be controversial that “protecting the network” and “protecting the computers on the network” were two separate things

2026-06-18 22:37:12 GMT

- reply

the analogy starts breaking down here, but the context is somebody came to me asking
> I heard you’re putting antivirus on computers, will that impact the Network, do we need to CC the head of Networking?
My initial response was: “No, we have a firewall to protect the network part of the Network, but you’re still gonna need AV on the the computers connecting to it, so yes, let’s include them informationally”, but because I’m the computers guy and not the firewall guy that Networking deals with, I ran my response by the firewall guy before I caused a schism.

2026-06-18 22:17:30 GMT

- reply

topic obfuscated with the closest parallels I could come up with at the speed of shitpost lol.
TBF, I don’t know enough about the tools and capabilities for protecting $Thing to say they’re wrong, and they are the expert, it may legitimately be all we need. I just know enough about $ThingOnTopOfThing to have my doubts and formulate a scary example that shows the gap I’m worried about.

2026-06-18 22:13:09 GMT

- reply

Do we need to run antivirus on computers on our network?
> We have a best in class stateful firewall with deep packet inspection, our network is protected.
Ok, so if somebody gets admin on a box the firewall will stop them from running cryptolocker?
> Let me get back to you.

2026-06-18 22:05:32 GMT

I love it when I ask someone a question in the abstract and they say “No, that’s fine” and then I say ok, so we don’t need to worry about $ConcreteExample and they go “uhhhh let me get back to you”.

2026-06-17 22:36:03 GMT

- reply

Technically this is taco meat in a tomato-based sauce, in a tortilla, not sure if that makes this a sloppy José, or what other variations we can make riffing on cuisines and names rooted in other cultures.

2026-06-17 22:22:13 GMT

Nothing like a fridge-temp sloppy Joe

2026-06-17 11:24:27 GMT

- reply

wanna put money on how many ../ were involved in the making of this incident?

2026-06-17 00:06:00 GMT

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/762/512/937/618/994/original/fa4afaad064550bf.jpeg

2026-06-15 16:39:20 GMT

- reply

age sex network?

2026-06-12 13:52:20 GMT

- reply

no I mean the model is towards the low end of ac, none of these spider ass netgear or asus thingamijigs

2026-06-12 13:41:01 GMT

- reply

yeah, when it became apparent there would be no more updates I moved to something that does get them. At this point even when hardware changes I will likely stick to something that can run OpenWRT, but there’s also no rush to change hardware, low end 802.11ac is all I’ll need for years.

2026-06-12 13:37:04 GMT

- reply

OpenWRT lol

2026-06-12 13:35:13 GMT

- reply

you can pry my archer A7s from my cold dead hands

2026-06-12 13:34:39 GMT

- reply

tp-link

2026-06-11 20:11:34 GMT

- reply

shitposting is a lifestyle.

2026-06-11 19:55:48 GMT

RE: https://infosec.exchange/@gayint/116733168773208404
I created a codeberg account just for this
https://codeberg.org/gayint/lists/pulls/1
#note1jsz…ysa4

2026-06-11 19:43:02 GMT

- reply

why are you blocking bofa?

2026-06-11 00:40:27 GMT

- reply

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/728/683/281/208/297/original/a5757e57dd9c4e81.jpeg

2026-06-11 00:31:45 GMT

- reply

yeah but every time you pick up the phone to dial, the connection drops.

2026-06-10 20:54:57 GMT

- reply

if I put those on my résumé, well employers realize I’m the one who wrote the vuln, not the discovery?

2026-06-10 20:51:22 GMT

- reply

can I get CVEs for publishing a bash script with hardcoded credentials? What about one that uses telnet to download stuff in the clear?

2026-06-10 20:43:42 GMT

- reply

https://github.com/kubev2v/assisted-migration-agent there’s the actual product.

2026-06-10 20:42:09 GMT

- reply

looks to be some small time AI bullshit at least.

2026-06-10 00:41:02 GMT

- reply

please tell me you put pants on for this hug.

2026-06-10 00:38:58 GMT

RE: https://infosec.exchange/@ajn142/116717483546559424
And again…
#note1x5j…pnas

2026-06-09 23:44:17 GMT

- reply

*reports @npub1s6e…n008 for being a dirty bird*

2026-06-09 23:38:02 GMT

- reply

a likely story

2026-06-09 01:11:01 GMT

Getting really tired of having more bad brain days than good.

2026-06-08 14:12:02 GMT

- reply

yes.

2026-06-08 14:06:04 GMT

- reply

Betteridge's law strikes again.

2026-06-08 13:50:30 GMT

- reply

Cop-pilot

2026-06-08 13:14:49 GMT

RE: https://infosec.exchange/@CyberSecurityNewsDaily/116714655896207665
I’m curious how they’ll consistently identify extensions as malicious within 2 hours.
cc @npub1s6e…n008
#note1cqp…6gm2

2026-06-06 00:10:49 GMT

- reply

oh shit it is malware!
https://discourse.ifin.network/t/microsoft-disabling-repos-related-to-azure-functions-durable-task/549/1

2026-06-05 20:55:39 GMT

- reply

lol preview card image says photobuf not protobuf

2026-06-05 17:48:33 GMT

- reply

Probably just the usual crap tier engineering though.

2026-06-05 17:06:35 GMT

- reply

That would be a really fun way to cause chaos after compromising GitHub's codebase via a malicious VSCode Extension...
Hypothetically.

2026-06-04 21:51:03 GMT

- reply

but my rainbow brackets!

2026-06-04 15:03:45 GMT

- reply

maybe I should go write crap POCs, doesn't seem like it's a barrier to success ;)

2026-06-01 02:45:49 GMT

- reply

ahh, the reverse Charlie Kirk

2026-05-30 21:55:29 GMT

- reply

well uhhhhhh, we’re definitely doing that at work. Not sure how many offhand tho.

2026-05-15 11:36:22 GMT

- reply

look, I’m not gonna be the one to tell the bear whether he’s fancy or not.

2026-05-15 02:10:03 GMT

- reply

fancy bear?

2026-05-12 21:10:12 GMT

- reply

wow, this guy has figured out how to monetize hating IPv6
https://www.gofundme.com/f/help-build-ipv8-the-next-generation-of-the-internet

2026-05-05 13:50:56 GMT

https://media.infosec.exchange/infosec.exchange/media_attachments/files/116/522/286/531/366/642/original/d60eac1086b3ba8f.png

2026-05-05 02:43:52 GMT

- reply

ooo scary, knife pigeon

2026-05-05 02:40:32 GMT

- reply

you’re saying these memes aren’t for the birds?

2026-05-05 02:19:31 GMT

- reply

but are there memes?

2026-05-02 15:11:33 GMT

- reply

If you like this, you’ll love ../, and the sequel, ../../

2026-05-01 01:22:06 GMT

- reply

I wonder if parallel dd if=/dev/zero of={} status=progress ::: /dev/{*} would work

2026-05-01 01:18:09 GMT

@npub16td…ucf7 --no-preserve-root, it’s the only way to be sure!

2026-04-30 13:18:39 GMT

- reply

at least let me have the lava lamps

2026-04-28 14:31:01 GMT

- reply

It's me, I'm the guy.

2026-04-28 12:47:41 GMT

- reply

Apparently this question has a cycle time of about a year… finding questions I asked on GitHub issues and then going wait I know that guy.

2026-04-28 03:09:34 GMT

- reply

look I don’t remember why I followed you, but I’m pretty sure it was neither. I blame @npub1s6e…n008

2026-04-28 02:56:30 GMT

Nothing quite like poking at a GitHub repo, then checking out the author's profile and finding a Mastodon account.
Related, if I seem to suddenly be following you out of the blue without prior interaction, that may be why xD

2026-04-27 17:39:53 GMT

Am I bored enough to try learning Pester for testing PowerShell again?
...

2026-04-24 14:55:04 GMT

- reply

I say this because we have too many damn comfy towels, and still a bunch of uncomfy ones, because they’re too bad to donate, too good to throw away, and more than we could reasonably use.
And yet we still run out because they end up becoming a laundry backlog that we can’t keep up with.

2026-04-24 14:51:34 GMT

- reply

I might not root for the animal beforehand, but certainly good for them, and I won’t shed a tear on the outcome.

2026-04-24 14:50:24 GMT

- reply

please tell me you get rid of the old, uncomfy stuff?

2026-04-24 14:48:55 GMT

- reply

look man, I grew up hunting, and reading the romanticized accounts of Africa from Bell, Taylor, and Capstick. I can’t honestly say that if I ever had the opportunity to go on a safari I wouldn’t. But as far as I’m concerned them’s the breaks. If you decided to go hunt things that could kill you, you inherently deserve it when those things kill you. That’s the bargain you made.

2026-04-23 13:22:27 GMT

- reply

ours isn’t open, but also not that restricted. Too many partner orgs who use Teams and need to collaborate.
It’s the tight integration, Microsoft stack sucks but beats G Suite+Slack+Zoom any day. Unfortunately as an org we Reyn all of the above, and more besides…

2026-04-23 13:14:09 GMT

- reply

oh, the former. There could be something better, but it happens to be my flavor of least-bad-bad-option.

2026-04-23 13:08:29 GMT

- reply

I actually love Teams.

2026-04-14 00:21:49 GMT

- reply

I suppose you’ve already tried the venerable C415A and CH751?

2025-11-04 02:28:14 GMT

- reply

may I introduce you to the idea of the shirtless sleeve? Imagine if you will, a pair of long sleeves connected by nothing but that stretchy cotton/elastic webbing used in jockstraps.

2025-08-12 15:05:59 GMT

AITA for automating the process of texting all my contacts to wish them happy birthday?

2025-07-15 20:35:09 GMT

- reply

it’s his duty as thought leader to be where the people are, not where they should be ;)

2025-06-19 17:48:34 GMT

- reply

I feel like @npub1p09…m5vl has said something on this topic before, or related.

2025-06-13 22:29:37 GMT

- reply

waitaminute, the smiley face is a rotary phone dial?

2025-05-15 17:46:27 GMT

Realizing that I don’t have an inner monologue, I have talking to myself, internal or external.

2025-05-05 00:42:59 GMT

- reply

lol y’all haven’t seen my thoughts yet xD

2025-05-05 00:37:31 GMT

- reply

tangent: I’ve got nothing to say yet, but between watching you blog and some other stuff, I’ve been convinced to start my own.
https://blog.brazos3d.com

2025-04-29 23:56:57 GMT

- reply

how is this not just externalizing your costs on the Internet Archive?
I do mean that in the nicest way possible, I legitimately want to understand.