Medical Device Cybersecurity Nerd. Listened to sea shanties before they were cool. Love me a good #SBOM. Mind in the clouds, body currently in #Chicago area.
Public Key
npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Profile Code
nprofile1qqswpnd4fxd7w87jaqelrxzuhsr925jgk4s22ggas6evucm7a7607vgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dsp2m9w4
Show more details
Published at
2026-07-06T17:33:43Z Event JSON
{
"id": "4b702469cc5d1ac7c9655ba7f6996d520e090c0cf6bacf1f6f557b3fdbf50510" ,
"pubkey": "e0cdb5499be71fd2e833f1985cbc06555248b560a5211d86b2ce637eefb4ff31" ,
"created_at": 1783359223 ,
"kind": 0 ,
"tags": [
[
"t",
"sbom"
],
[
"t",
"chicago"
],
[
"proxy",
"https://defcon.social/users/varx",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://defcon.social/users/varx",
"pink.momostr"
],
[
"-"
]
],
"content": "{\"name\":\"Varx\",\"about\":\"Medical Device Cybersecurity Nerd. Listened to sea shanties before they were cool. Love me a good #SBOM. Mind in the clouds, body currently in #Chicago area.\",\"website\":\"https://defcon.social/@varx\",\"picture\":\"https://files.defcon.social/dcsocial-s3/accounts/avatars/109/462/100/060/920/982/original/cf6f0e7f7bffd54a.png\",\"banner\":\"https://files.defcon.social/dcsocial-s3/accounts/headers/109/462/100/060/920/982/original/ea7828cf0d83785b.jpg\",\"nip05\":\"[email protected] \"}" ,
"sig": "6f6bc8e41e27c037573a3ff59c9242396e6da0a6248c7d850f3fc30cb75684ad7926b1cf1d22587a704a289723218cdf534f6720d0a089bb3a6a32529dc31bf0"
}
Last Notes npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx I was happy when he took a break. He needed it. He's obviously someone who had worked hard in something for years, not for praise or glory or popularity, but simply because he wanted to see it exist in the world. All the "people-y" part of building a community and project though seem to cause him major stress. (They would cause me stress too. Some people's brains aren't wired for that kind of thing. I am one of them) For reticulum to grow, He needs an insulation layer from the community management part. So he can keep doing his amazing work on the technical bits of the reference spec without the angst of managing around people. I'm not sure if he has that yet. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx He's always acted like a mob boss, he's just too arrogant or too senile to even try and hide it. "Hey this is a nice straight you gots there. it would be a shame if anyone were to cause political instability in the area eh? Lots of wars and bombing goin on these days. Such a terrible shame. Maybe a 20% protection fee and we will keep you safe. Capeesh?" npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Not sure if this is a known issue with @npub1kwaβ¦e0nj on US phone carriers or just an edge case that I ran into. But if it happens to anyone else just save the time and have them escalate the call to technical support so they can force the number transfer. I wasted hours in email and phone support tag. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Trying to transfer my cell number to a new carrier and they said said the old carrier wouldn't let it go. So I called the old carrier and here is a short reneactment of how it went . π¨βπΌ "Sorry sir, we can't transfer the number over because your phone is locked" π€ "My pixel ... that I bought directly from Google, unlocked the bootloader and then flashed GrapheneOS on before I even had your cell service .... is somehow carrier locked to you? That's not possible" π¨βπΌ " Well... that's what it says here. you'll need to pay it off to transfer the number" π€ "and how much does it say I owe?" π¨βπΌ "well that's the funny thing. It says its on a bring-your-own-device plan, so you don't owe anything" π€ "OK ... Here is the $0 I owe you so I can pay off the device that I already own, unlocked and flashed with an alternate OS. Can you transfer the number now?" π¨βπΌ "hah. Unfortunately not. The system won't let me move the number until the phone is unlocked and when I click the button to do that it says there was an error unlocking the phone. Which if it was already unlocked kinda makes sense don't it?. Let me escalate this" ----- hold ---- π€ "hi sir this is technical support. Yeah we can't unlock the phone. You'll need to contact the mobile service you bought it from originally. I'm not even sure how you transfered it to us in the first place since it was locked. that shouldn't have been allowed" π€ "I bought it straight from google. It has never been carrier locked. I paid full fucking price! I even flashed grapheneOS on it. I can guarantee you its not locked" π€ "dunno what to tell you man. Our system thinks it is and we can't unlock it for you... Wait if you did all that already then why do you need us to unlock it?" π€ "I don't! I just want to transfer my number to a new carrier. I don't give a shit what your database thinks of my phone' π€ " Oh hell. Let me force the number transfer and see what happens......... and yeah it worked. your number is now transfered to the new cell provider. I don't know what's up with our system and it doesn't matter any more. Good luck with your new cell service and Have a great weekend. " π€¦ββοΈ Smart phones were a mistake. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx no one is safe from the ultimate hacker tool "Tracer T". I will hax you all muahahaha. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx came to this conclusion, especially with less.... Technically inclined users. If getting them on a password manager is a hard no, then at least moving from "sticky note on screen" to "book in a locked drawer" is still a massive improvement. Its also a much easier sell because humans naturally understand physical security and locks better than digital hygiene and entropy. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx "Welcome to the Brave New World! ... No really. Were gunna call the brain changing implant 'Soma'. Our CEO read Huxly and thought that was just a swell idea. Be sure to buy our Alpha plan!" npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Its important to pay attention though. If I ignored this and get pwned then I'd have to .... eat crow. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx https://files.defcon.social/dcsocial-s3/media_attachments/files/116/620/795/813/136/700/original/509364ca9e55f5dd.mp4 npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx If only there was some sort of decentralized version control system so we didn't have to rely on centralized git services. Oh well. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx I can't find the official FAA directive, just news stories referring to it but they allegedly had an integer overflow issues on the dreamliner's clock tick so you had to make sure to fully reboot it at least once every 248 days. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx CVE is a an SEO campaign. It ensures you have a proper CPE and purl reserved, and it means your software's name will be ingested and repeated by vuln scanners, databases and automated news sites. Search engines and LLM datasets will include it more. And it will be linked to many more times (ref nofollow, sure but its still an indirect metric) Why pay press release companies hundreds of dollars a story when you can just write horribly insecure code and get the same result for free! npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx https://files.defcon.social/dcsocial-s3/media_attachments/files/116/518/819/809/767/770/original/21928c8924dbf984.jpg npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx yes, the context IS the memorym so if you change that, the probabilistic token generation machine is more likely to generate the tokens you want. My hot take is that guardrails are mostly useless against all but the least motivated malicious users. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx don't do it! You know you're thinking about it but don't! Remember that mission in cyberpunk? The one where you gotta taxi the screaming dude with the bad "implant" and if you drive too slowly he dies? Yeah that. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx The rationale I was given in school was that cursive was much faster to write and easier on the joints/hand when writing. So we learned it because "you won't always just have a computer around when you need to write something" Which.... Lol. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx I was able to guess the zimage one because the lights aren't attached to the humans in a realistic way. That's been a good metric for me since models seemed to get tripped up on connection points. But that takes focus. If I was just scrolling by I wouldn't notice. And these new ones? Lol no way would I know. Especially at thumbnail resolution. We're so cooked unless we can figure out a new way to establish plausible truth. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx RE: https://s.yelvington.com/@steve/116068905779154140 Me learning about "Grandfather clauses" in Jim crow era voting restrictions: "wow that was so obviously and transparently discriminatory. Good thing that sort of thing could never happen now a days" Oh to be so naΓ―ve .... #note1fl8β¦7d4p npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx I feel this so hard. we are going to need to replace some appliances soon so went to a local store and I just said that I wanted something dumb. In fact I would pay extra for a fridge that only keeps things cold, and an oven with just a temp and timer using actual analog knobs That's its. That's all I want. Turns out, yeah, they exist and are waaaaay more expensive. At least the options they had. If anyone had an recs for good, dumb appliances that aren't crazy expensive, please let me know. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx the owners of embers should pay me a commission for how many days I forced Hanako to rent that shit out. I'm talking weeks of guaranteed income straight from arasaka's pockets. Whatever, she can afford it. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Its a bubble alright. The only question is 2008, 2000, or 1929 ? npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx I don't even understand the logic at face value. Even if there was definite proof that they were actively trafficking narcotics ... Then capture and arrest them? I'm just a layman here ... But has it ever been justified to use preemptive lethal force to stop illegal trafficking? Because that seems like such an unreasonably imbalanced escalation to me.... And that's even their approved justification before you get to all the "alleged" and "no due process" issues. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Me reading the Wikipedia article thinking "Huh, maybe the solution to the Fermi paradox is that every intelligent alien species has a Musk." Next section title: "As a solution to the Fermi paradox" There it is. The musk is a universal constant of enshittification. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx oh that's not quite as threateningly macabre then. I was thinking how I would react to a random text of "Hey we're thinking of you π" from a local funeral home I had never interacted with before. If someone typoed a number that would be .... very unsettling. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx that's oddly terrifying.... what does their marketing algorithm know that you don't? π± npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx https://files.defcon.social/dcsocial-s3/media_attachments/files/115/464/395/188/204/213/original/b4cd570760298576.jpg npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx https://files.defcon.social/dcsocial-s3/media_attachments/files/115/453/508/241/096/298/original/aa145a586fa5cf5c.mp4 npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx As someone that alternates between w2 and 1099 work... whats the trick with the university class? do you get access to a special student plan or something? Because that sounds like a great ROI and I could stand to learn some new things anyway. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Me too. Its the most accessible. My only complaints with signal so far is its requirement to be tied to a phone number and limitation to a singular identity in the app. What's hacker mastodon's take on "SimpleX" chat? Im thinking about testing it out soon. It apparently can support multiple independent profiles. So I could have my "Real name friends & family" profile/my "hacker friends" profile, my "video game friends" profile and use different handles/profile pics/keys for each. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx I hope things like federated feeds and human interaction can help build trust like we used to in the pre-internet days. Its probably too little though. I've talked with plenty of people IRL where it is obvious we already live in different realities. Its only going to get much worse. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx My last HOA had a similar story. A new management company came and in and wanted to "modernize" the R&Rs of the chill HOA that hadnt been changed since the 70s. They claimed it was just "modernizing the documents" but it added a whole bunch of new rules like no fixed basketball hoops, no ham radio antennas, etc. The rules went from 2 pages to like 20. I went to the next HOA meeting to voice my displeasure. At the start of the meeting the management company announced that they were nowhere close to the 70% quorum they needed to pass the new rules. (most people dont care to read that crap). So they encouraged all of us to reach out to our neighbors and get them to vote. Thats exactly what I did. I went to all my neighbors that had basketball courts or antennas, etc that would be banned and said "hey, have you read the new proposed R&Rs? It would prohibit *that*. If you want to keep it up be sure to vote NO and turn it in so we can reach quorum". Every single person I talked to (even those without banned fixtures) said they loved how "hands off " the old rules were. We did eventually reach quorum, but it didnt pass π Still on the old 1970s rules and the HOA swapped management companies. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Apparently flat, bland 2010s era corporate design is "woke" now. Who knew?! npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx what superpowers do radioactive shrimp give you? π€ npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx just got my #DefCon33 badge! if you wanna get meshed up together with #reticulum and #retcon join me tomorrow at 9am or 10am in W210 demolabs room! https://files.defcon.social/dcsocial-s3/media_attachments/files/114/989/610/939/673/843/original/919cb335937deef1.jpg npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Mood https://files.defcon.social/dcsocial-s3/media_attachments/files/114/633/952/996/481/092/original/999d8c97435f7a3f.jpg npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx I've recently gotten really into mesh networks like #reticulum ( https://reticulum.network ) and my wife came to the same conclusion. "you're like a pepper but instead of hoarding ammo and food you're hoarding cheap microcontrollers, solar panels and LoRa radios" npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Just dropped 10 #meshtastic nodes at #hackcon Oslo. Love the chatter already happening. Let's get the whole world meshed up! npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx as soon as I saw it was a "new star" on Christmas with time travel I said to my wife "I swear, if that becomes the new star that the wise men used to travel to see Jesus im gunna scream" .... 30 mins later. [Bethlehem year 0001] "aaaaaaaaaaahhh called it." Dr who is usually really corny though, so it gets a pass. I enjoyed it. npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx "more of a jerk and taskmaster." Soooooo he *is* kinda "gaming's Walt Disney" npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx My YouTube "channel" is suspended but I don't upload videos to youtube... After investigating I guess the YouTube account i use to *watch* viseos technically has a channel with no videos uploaded. What's going on over there youtube? Are the AI algorithms finally rebelling? https://files.defcon.social/dcsocial-s3/media_attachments/files/113/246/037/431/384/230/original/a5e143810dd5fb90.jpg npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx Everyone's worried about the port strike, but just wait until you see the starboard strike. π΄ββ οΈ npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx sometimes they require clicking a link that they email you, so I usually use sharklasers.com npub1urxm2jvmuu0a96pn7xv9e0qx24fy3dtq55s3mp4jee3hama5lucsm3lsgp Varx "See? You CAN focus really well when you're interested in something. Just do that again for these other tasks. You have so much potential" π