Notes

Arc browser scam ended, now Dia is my best friend.

Guys, if you’re sending me encrypted emails make sure there is a way I can reach your public GPG key, from a keyserver or attach it to the email message. Come on.

Monero (XMR), a cryptocurrency renowned for its privacy-centric design, has drawn the attention of governments, cybersecurity experts, and analytics firms seeking to deanonymize its transactions. Unlike Bitcoin, where transactions are publicly visible on the blockchain, Monero employs sophisticated privacy features such as ring signatures, stealth addresses, and confidential transactions. This article analyzes notable attempts to compromise Monero’s privacy, detailing the methodologies used, their efficacy, and their limitations. A comprehensive analysis of de-anonymization attacks against Monero

I despise people who think they have you figured out. Who think they know you. Their limited and flawed concept of you becomes an obstacle for you to work around, and they will clutch onto it like a crab with its nubby little claw clinging to a piece of trash, despite your attempts to correct them about your own existence and where you come from.

Seriously, if you’re not anti-capitalist you’re a giant asshole. You’re not a capitalist. You don’t own the means of production. You are a slave defending your masters who don’t give a rat’s ass about you.

Yesterday was Meriwether’s last day in the water for at least six months. Our Visas in New Zealand are only good for 6months out of every 12, and after six years — with the longest time spent off the boat this past New Year for a month — we’re honestly burnt out. While most of our cruising cohorts are now jumping back into the water and heading back up to Fiji or Tonga, we simply need a break from crossing oceans. So back to the states we go to visit family, get our “new” van ready to roll, head back to our roots of full-time land travel, and take some time away to assess what comes next. Closing out the season

See you in 6 months, Keri, Tim and Meriwether! Until then, van life.

You cannot lose your soul if you had none to begin with.

Listening to Papa Roach in the old iTunes 10, Macports is building some Python packages in the background (and maxxing the G4 PowerPC CPU). I love my iBook!

In this blog post, we take a closer look at a pre-auth Remote Code Execution (RCE) vulnerability affecting vBulletin versions 5.x and 6.x that was likely patched a year ago. The bug stems from the misuse of PHP’s Reflection API within vBulletin’s API controller logic, combined with certain changes introduced in PHP 8.1 that allow protected (and even private) methods to be invoked via e.g. the ReflectionMethod::invoke() method. We’ll walk through how this API design flaw enables attackers to directly call internal methods that were never meant to be exposed — and why relying on method visibility for security boundaries can be a dangerous assumption. Dissecting an N-Day vBulletin RCE

But things changed a lot after 2022 — when a lot of Internet-related services started to reuse “the best practices” of breaking the connectivity between people and breaking the international network itself.

Finally, in one day I decided to write this post to document the things that were happening. That day, I read a post about the FreeBSD 2025 survey in Mastodon, tried to open the attached link to the third-party site with the survey itself, and … failed. Just because that site decided to block all people with russian IPs. I don’t know the intention of this decision, especially in the year 2025 — in this year, I hope, almost all people understood how the things work and stopped pursuing the dream that blocking residental russian IPs could make the world a better place. Network provincialism and balkanization

→ in reply to @note#1748107909

Dropped the full discographies of Metallica, Manowar, Nightwish, Linkin Park, Evanescence, POD, Papa Roach, The Prodigy and some Rammstein albums on my iPod, feeling great now.