Elektrine
Log in Register
Paige Chat Timeline Gallery Friends Email Drive DNS Private DNS Domains VPN Kairo Nerve
Remote

da_667

@da_667@infosec.exchange
mastodon 4.8.0-alpha.3+glitch
  • Open on infosec.exchange

Senior Security Researcher, Proofpoint Emerging Threats. Digital Arcanist

I've been doing this cybersecurity thing for the better part of a decade now. Probably longer than that. I'm starting to forget. Time is relative, but it surely isn't kind to my memory.

I'd like to think I do cybersecurity well, but blue teamers collectively get told they're doing it wrong constantly. So maybe I just failed forward throughout my career.

Oh, I wrote a book. Its a good framework for setting up a virtual machine lab. See my bookmarked toots if you're curious.

Finally, I occasionally write about tech/nerd-related things over at https://www.totes-legit-notmalware.site where I expose that I have a short fuse, and no filter.

Work-Related hashtags:
#Iocs #ThreatIntel #DFIR #Malware #NSM #suricata #snort #BEC #phishing #APT #ThreatDetection

Hobbies:
#VideoGames #XCOM2 #Minecraft #Synthetik #Fallout #Skyrim #Anime #Manga #Adventure #Fantasy #Isekai #HomeImprovement #WoodWorking #MetalWorking #HomeLab

6295 Followers
1733 Following
50 Posts
Joined October 28, 2022
self-verification:
https://www.yeettheayys.cf/v_me/
Emerging Threats NSM rules:
https://community.emergingthreats.net
How to Homelab:
https://leanpub.com/avatar2
Personal Blog:
https://www.totes-legit-notmalware.site
Open post
da_667 @da_667@infosec.exchange
· 2w ago
saw this pop up in my feed. https://www.reddit.com/r/ClaudeAI/comments/1wm5c21/i_am_done_with_this_shit/ and the top comment from the clanker moderator bot is fucking brutal "Yes, you're a meat proxy, deal with it."
reddit

I am done with this shit.

MrMenuk

37
1
22
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
STOP SCREAMING IM SCARED TOO.
16
1
8
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
can't breach me, if you don't have disk space.
11
1
1
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
so, my wife is in the market for a new car. She wants something nice for her 40th, as her Ford flex is starting to develop an array of problems. We test drove a volvo, and honestly? I can't believe I slept on them. Currently considering an XC90 PHEV. It sounds weird to be talking about buying a luxury SUV, when I was just asking for donations for her first-grade classroom like a month ago. Of course, if this paints a different picture of us, I can't blame you, and I'm sorry if I did anything to offend you. Just to re-iterate, We contribute a large amount of our money to that classroom, and as always, I'm extremely thankful for the help we got in helping her first graders. and if we get this thing, its for her, and the work she has put in for over a decade now in the public school system.
10
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 6d ago
2
0
1
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Are turnips really comparable to potatoes? I've never had them before. But they're being recommended as an alternative to baked potatoes.
4
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
This section of the table of contents has represented about a year of real-life work.
5
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
OUR REACH IS GLOBAL OUR SHITPOSTING IS LOCAL LOCAL SHITPOSTERS UNION 667
7
1
5
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
the internet is a wonderful place. switch to incendiary rounds, today is a special occasion
8
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
The world was a better place when AI was limited in scope. Like, The most AI was doing pre 2020s was beating the shit out of chess grand masters, and letting niche game nerds do Tool-Assisted Speedruns as an entire subcategory of speedrunning. There might be more than that, but those are the most public examples I'm aware of. It showed us that focused datasets could do some crazy things. Then the wrong people got involved and said "What if I just feed everything it and market it as a replacement for labor entirely?" and now, we're in this fucking mess where it produces slop, and in spite of everyone else who is a professional pointing out how shit its output is, anyone looking to make a buck off of it thinks its wildly successful because as always, they don't have to deal with the fallout, care, or maintenance of whatever the bullshit generator spit out.
6
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
AI in a nutshell
5
0
5
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@cR0w@infosec.exchange
4
1
1
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
"the minimum requirements for Windows 11 are 4GB of RAM, a 64-bit dual-core CPU and 64GB of space" If modern developers were forced to development for minimum spec hardware, bet that software would not be so dogshit these days.
5
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
enjoy your 20MB go binaries, and 500GB game updates.
5
2
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
this is the third base I've built in this playthrough. Kind of a shitshow right now compared to my first one, but we're managing. This map tile is lovely. I can use tidal power generators, there's four easy to access geothermal vents, and only a few avenues of entry on the east and west sides of the map, so establishing killzones is quite easy. I wasn't sure if I would have to give up this base after getting the third part of the archonexus map, so I kinda didn't really care about long-term viability. But... the archonexus point showed up on the map, and I'm going to have to caravan to it.
3
2
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@munin@infosec.exchange I've long since given up on job satisfaction here. I've become very mercenary. "Pay me, so I can make my own satisfaction outside of this shitshow."
3
2
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
finally, the end is in sight.
2
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@soatok@furry.engineer I know to treat the furries well because they're everywhere you least expect them to be. also the furry erotic art is kinda good
3
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@munin@infosec.exchange that is a rarity these days. every new job offer wants to shove AI into every fucking orifice there is to shove it into. Just once I would like to point out "You do realize this dogshit software has resulted in the bombing of a school by the US military, very nearly started world war 3 with the Chinese, and consistently makes things up, right? And you're choosing to embrace it, and invite it into your home like the vampire it is."
2
0
2
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
I think what I might do is install PolarProxy in Transparent Forwarding mode and point readers to the guide for doing so over here: https://www.netresec.com/?page=Blog&month=2020-01&post=Sniffing-Decrypted-TLS-Traffic-with-Security-Onion and just adapt it to the lab instructions I gave them for SSLProxy. I'm more interested in doing a full-tutorial in setting up PolarProxy in HTTP Proxy mode, and show how to feed Suricata that data, as an alternate lab setup.
Sniffing Decrypted TLS Traffic with Security Onion
Netresec

Sniffing Decrypted TLS Traffic with Security Onion

Wouldnt it be awesome to have a NIDS like Snort, Suricata or Zeek inspect HTTP requests leaving your network inside TLS encrypted HTTPS traffic? Yeah, we think so too! We have therefore created this guide on how to configure Security Onion to sniff decrypted TLS traffic with help of PolarProxy. Pola[...]

1
0
1
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
really glad I was able to get to the bottom of the SSLProxy setup stuff. Making a lot of meaningful headway in the Suricata book.
3
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
If the weather continues to be nice when the waifu gets home, I'm goin for a walk around the neighborhood.
2
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@soatok@furry.engineer "I'm sorry but you don't have an hackernews account, so legally speaking, you're not human in my eyes."
2
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@soatok@furry.engineer I love seeing the commissioned art pieces you have on your blog posts. Legitimately great artists in the furry community.
2
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
everything seems to be mostly working now I can see all the requests and the responses just fine.
1
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
One thing that is driving up the fucking wall is how CNAs for cve.org just kinda arbitrarily hand out CVEs. Tenda/Totolink: This is the exact same vuln across multiple devices, all using the same base firmware. Better produce a CVE number for every fucking single one of them D-Link: This is a vulnerability affecting FOUR different subsystems invoked by this single CGI file, with 5 different vulnerable parameters. A single CVE number will do.
2
0
1
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
@GossiTheDog@cyberplace.social oh my god, this is like nikto level shit.
1
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
@gsuberland@chaos.social yeah on closer inspection, I'm realizing that its not actually better armor pen, but the added explosive damage is VERY good. I've noticed with all of the AP-HE rounds I used on base assaults on my first base, that it would be quite easy to blow off a limb, or in the case of automatroid raids, blow off armor plates, limbs, sensors, etc.
1
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
and this is the rifle I was talking about.
1
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
@gsuberland@chaos.social oh yeah. Towards the end of my first base, I was doing uranium armored walls. 2,000HP per square. and the automated base defenses would shred it like paper.
1
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
WHO IS SANDY LOAM AND WHY CANT I REACH HER
2
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
if you're doing this at home, the most important thing I can tell you is: If you want to do this, look at both encrypted and unencrypted streams, you CANNOT capture both on the same interface. SSLProxy changes network traffic when it decrypts it, changes sequence and ACK numbers, etc. so Suricata will get confused with it gets the encrypted stream of data, along with the unencrypted stream of data on the same interface.
1
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@jpm@aus.social I found the github repo, but couldn't find a release that has a compiled binary already, and I'm not installing that garbage on my machine.
1
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Almost ready to have my five superhumans disembark for the archonexus questline. #rimworld
1
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
okay, yeah. we need to make more of those super suits.
0
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@tw000@infosec.exchange I'll have to keep this in mind. Originally we were considering one with an air suspension for better performance in the winter possibly. Salesperson was upfront with us. "If you plan on keeping this car, you don't want to do that. Most cars that have those air suspensions, the compressor fails within 4 years or less than 40k miles." I appreciated the honesty, at least.
0
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
@hugovalters@mastodon.social hi, many of the vulns you have listed are "prior to version 8.0.7". 8.0.7 was released on september 15th. maybe some reassessment is necessary on your trust ratings? https://suricata.io/2026/09/15/suricata-8-0-7-released/
Suricata

Suricata 8.0.7 released! - Suricata

We are pleased to announce the release of Suricata 8.0.7. This is a security release, fixing a number of important issues. This is the release with the highest number of […]

0
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@0x00string@infosec.exchange @cnlohr@chaos.social kinda want it, even though I really don't need it
0
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
have to revert the SSLProxy installation again, go through the install instructions again, and test the fork of Autosuricata I've made for it.
0
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 1w ago
Replying to
...and this is why I want AP-HE. All of the damage of the FMJ rounds, but also with explosive damage, and better armor pen.
0
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
its always funny to watch them mill about the base after becoming super-humans because they're just running around everywhere at mach speed.
0
1
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@0x00string@infosec.exchange @cnlohr@chaos.social there's just something about seeing a well-engineered thing
0
0
0
0
Open post
da_667 @da_667@infosec.exchange
· 2w ago
Replying to
@nuintari@mastodon.bsd.cafe I gave him a pretty nose, because the armorskin gland makes him ugly.
0
0
0
0
Back
313k7r1n3
Elektrine

Tor hidden service

elekhj7afj4qnrr4yd3bkzslsyo5jgfxw3orgjkhlcxifueodybyiiad.onion

I2P eepsite

j6b6cyk6gjmepjih7jjadxgxvvf3lzzujljuu2v4biemzpg3naya.b32.i2p

Platform

  • Email
  • Chat
  • Timeline
  • VPN
  • DNS

Company

  • About
  • Contact
  • FAQ
  • Lite (no JS)

Legal

  • Terms of Service
  • Privacy Policy
  • Transparency Report
  • Report Abuse
  • Warrant Canary
  • VPN Policy

Support

  • support@elektrine.com
  • Report Security Issue
Mail client setup IMAP mail.elektrine.com:993 POP3 mail.elektrine.com:995 SMTP mail.elektrine.com:465
© 2026 Elektrine. All rights reserved. Server: 20:49:38 UTC