Networks, security, infosec, I'll cyber all over. Constitutionalist. Train er' day on cyber range & shooting range, hone skills.

Joined August 2014
453 Photos and videos
SuperfluousSecurity retweeted
Everyone knows John Hancock for his giant signature. Almost nobody knows the actual man, and his real life was wilder than the legend. He was an orphan. His father died when he was 7, and he was taken in by his uncle Thomas, the richest merchant in Boston. John was groomed to run the family shipping empire, inherited the whole thing in 1764, and became one of the wealthiest men in all of America before most people his age owned anything at all. He was also, by the crown's definition, a criminal. In 1768 the British seized his ship Liberty for smuggling, and Boston rioted in his defense. The man we now put on patriotic posters was, to London, a wealthy smuggler dodging customs. He didn't just resent the crown quietly. He bankrolled resistance and became such a thorn that the British wanted him gone. On the night of April 18, 1775, when Paul Revere made his famous ride, the warning was not vague. He rode to Lexington specifically to warn two men that the British were coming to arrest them: Samuel Adams and John Hancock. The opening night of the Revolutionary War was, in part, a manhunt for Hancock. Weeks later, General Gage offered a pardon to every rebel in Massachusetts who would lay down arms, with exactly two exceptions: Samuel Adams and John Hancock. Being left off that list was essentially a public death warrant. Here is the part nobody tells you. As president of the Continental Congress, Hancock actually wanted to be named commander of the army himself. He sat in the chair and watched as the Adams cousins instead rose to nominate George Washington. He was reportedly stung by it. Then he did the thing most people never manage. He swallowed his pride, signed Washington's commission, and spent the next eight years pouring his personal fortune into the war he could not lead. So when Hancock signed the Declaration of Independence first, big and bold across the top, it was not a cute flourish. He was already a hunted man with a price on his head, putting his name, his fortune, and his neck on the line before anyone else dared lift a pen. And that famous line about signing large "so King George can read it without his spectacles"? He almost certainly never said it. It is a myth stitched onto him generations later. The real story is better. He just signed first, as president, knowing exactly what it could cost him. The flamboyance was real, though. He lived in princely splendor in a granite mansion on Beacon Hill overlooking the harbor, with imported mahogany furniture and apricot trees shipped from Spain. In 1775 he married Dorothy Quincy, and the two became one of Massachusetts' first political celebrity couples, famous for endless lavish dinners that slowly drained his fortune. He went on to become the first Governor of Massachusetts, serving roughly eleven years, and died in office in 1793. His funeral was one of the grandest ever given to an American up to that point. Samuel Adams declared the day a state holiday. The orphaned smuggler with a target on his back had become the face of American defiance. That is why, 250 years later, we still say "put your John Hancock right here."
41
843
3,308
63,392
SuperfluousSecurity retweeted
Thomas Sowell on envy and social justice
38
668
2,112
25,755
SuperfluousSecurity retweeted
This photo is literally from the sand dunes boardwalk - sea level - at Virginia Beach The Coastal Virginia Offshore Wind (CVOW) project has placed 800 ft windmills off VAโ€™s pristine shore and devastated the view. As more full turbines get installed, the disaster become worse
Former @GovernorVA George Allenโ€™s daughter took a picture today from the dunes in Virginia Beach. The costly, gigantic & inefficient turbines of CVOW are ๐Ÿ’ฏ visible to the naked eyeโ€ฆ @DominionEnergy admitted they might produce โšก๏ธ only 40% of the time with all 176 turbines
19
53
178
4,550
SuperfluousSecurity retweeted
When your dad says buy a tractor, but you find a military tank tor the same price

456
1,510
21,556
1,293,364
SuperfluousSecurity retweeted
Exploit For Totolink CVE-2026-10187 Link Download : send.exploit.in/#c7dc3cbf84cโ€ฆ P.S: Limit Download (10)
4
23
1,938
SuperfluousSecurity retweeted
๐Ÿšจ ๐—ก๐—ฒ๐˜๐—น๐—ผ๐—ด๐—ผ๐—ป ๐—ฅ๐—–๐—˜ ๐——๐—ฒ๐˜๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป ๐Ÿšจ ๐—–๐—ฉ๐—˜โ€‘๐Ÿฎ๐Ÿฌ๐Ÿฎ๐Ÿฒโ€‘๐Ÿฐ๐Ÿญ๐Ÿฌ๐Ÿด๐Ÿต (๐—–๐—ฉ๐—ฆ๐—ฆ ๐Ÿต.๐Ÿด) โ€” flagged by ๐—–๐—˜๐—ฅ๐—งโ€‘๐—˜๐—จ as ๐˜ข๐˜ค๐˜ต๐˜ช๐˜ท๐˜ฆ๐˜ญ๐˜บ ๐˜ฆ๐˜น๐˜ฑ๐˜ญ๐˜ฐ๐˜ช๐˜ต๐˜ฆ๐˜ฅ. Unauthenticated attackers can escalate to ๐—ฆ๐—ฌ๐—ฆ๐—ง๐—˜๐—  ๐—ฝ๐—ฟ๐—ถ๐˜ƒ๐—ถ๐—น๐—ฒ๐—ด๐—ฒ๐˜€ on domain controllers, with ๐—œ๐—ป๐˜๐—ฒ๐—ฟ๐—ป๐—ฒ๐˜โ€‘๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐—ฒ๐—ฑ ๐—ก๐—ฒ๐˜๐—น๐—ผ๐—ด๐—ผ๐—ป ๐—ฒ๐—ป๐—ฑ๐—ฝ๐—ผ๐—ถ๐—ป๐˜๐˜€ facing the greatest risk. To help defenders, Iโ€™m sharing a ๐—ต๐—ถ๐—ด๐—ตโ€‘๐—ณ๐—ถ๐—ฑ๐—ฒ๐—น๐—ถ๐˜๐˜† ๐——๐—ฒ๐—ณ๐—ฒ๐—ป๐—ฑ๐—ฒ๐—ฟ๐—ซ๐——๐—ฅ ๐—ฑ๐—ฒ๐˜๐—ฒ๐—ฐ๐˜๐—ถ๐—ผ๐—ป tailored to CVEโ€‘2026โ€‘41089, focused on monitoring the ๐—ต๐—ถ๐—ด๐—ต๐—ฒ๐˜€๐˜โ€‘๐—ฟ๐—ถ๐˜€๐—ธ ๐—ฒ๐—ป๐—ฑ๐—ฝ๐—ผ๐—ถ๐—ป๐˜ ๐—ฒ๐˜…๐—ฝ๐—ผ๐˜€๐˜‚๐—ฟ๐—ฒ. CERT-EU Alert cert.europa.eu/publications/โ€ฆ KQL Detection: github.com/SlimKQL/Detectionโ€ฆ #Cybersecurity #NetLogonRCE #DefenderXDR
4
72
322
23,547
SuperfluousSecurity retweeted
Two days ago the US banned Claude Fable 5. Yesterday China dropped GLM 5.2. Today GLM 5.2 is #1 on @bridgebench BS at 100.0, and #1 on Reasoning at 42.8, beating Fable 5. At 1/10th the cost and 300 tokens per second. You cannot export control your way out of an open source race. The ban didn't slow China down. Unban Fable 5.
332
701
6,308
729,552
SuperfluousSecurity retweeted
โš ๏ธ PoC Exploit Released for Guest-to-Host Escape Linux Kernel Vulnerability Source: cybersecuritynews.com/poc-exโ€ฆ A proof-of-concept (PoC) exploit has been released for a critical Linux kernel vulnerability, CVE-2026-46316, that enables a guest-to-host escape in KVM environments on arm64 systems. The vulnerability was discovered by security researcher Hyunwoo Kim (V4bel) and affects the in-kernel KVM implementation rather than user-space components like QEMU. This makes the issue particularly severe, as exploitation results in a direct compromise of the host kernel rather than a confined user-space process. ITScape is caused by a race condition in the vGIC-ITS (Interrupt Translation Service) emulation within KVM on arm64. #cybersecuritynews
4
32
129
7,496
SuperfluousSecurity retweeted
Wall Street just pulled off the exact move that turned 2008 from a housing problem into a global collapse. They turned Nvidia graphics cards into bonds, stamped them investment grade, and started selling them into the funds that hold retirement money. Here is what happened while everyone was busy arguing about whether AI stocks were overvalued: The company at the center is CoreWeave, which rents out Nvidia chips to AI companies. To buy those chips, it borrows enormous sums, and the collateral on the loans is the chips themselves. That alone is alarming because a graphics card LOSES most of its value within a few years as the next generation makes it obsolete. You are lending against an asset built to rot. In January, Nvidia invested $2 billion straight into CoreWeave, which then used borrowed money to buy more Nvidia chips. On March 31, CoreWeave closed an $8.5 billion loan backed by its chips, and for the first time the rating agencies stamped that chip-backed debt investment grade, with Moody's assigning it an A3. Debt secured by depreciating graphics cards was rated nearly as SAFE as a blue-chip corporate bond. Then on May 18, CoreWeave closed the first chip-backed facility designed to be publicly syndicated and traded on secondary markets. And that's the part that really matters because it means this debt can now be sliced up, passed around, and bought by anyone, including the bond funds and pension managers who are required to hold "safe" investment-grade paper. On June 11, it announced another $3.5 billion in bonds on top of all of it. Now compare this to what happened in the past: Subprime mortgages in 2007 were not dangerous because some people got loans they couldn't repay... They became a global bomb the moment that debt got rated AAA and sold into the wider financial system, because the rating is what let it bleed into money market funds, pensions, and bank balance sheets that were supposed to be boring and safe. The bad loans were the spark but the packaging and rating were the detonator. And that detonator just got built for AI. Debt backed by graphics cards is now rated investment grade and trades on secondary markets, which means the AI bubble is no longer trapped inside tech stocks you can choose not to own. It has been quietly converted into bonds and routed toward the retirement accounts of people who have never typed a single prompt in their lives. And the whole structure rests on a backlog of customer "commitments" that CoreWeave values at nearly $100 BILLION, backed by a $21 billion Meta deal and a $6 billion Jane Street deal. Those are promises to pay over many years, made by AI companies that are themselves mostly unprofitable and burning cash. If even a few of those customers slow down or walk away, the collateral sitting under all this rated debt is a warehouse of chips losing value by the month. The AI bubble used to be a stock-market story you could opt out of. But as of this spring, that isn't the case anymore. So here's the real question: When the people packaging this debt swear to you that it's safe, who do you think is standing on the other side of that trade?
89
454
1,270
159,424
SuperfluousSecurity retweeted
One of the most underrated marvels in semiconductor fabs is the vacuum pump. A high end dry vacuum pump can spin at 90,000 RPM, operate 24/7 for years, maintain ultra clean vacuum environments, survive corrosive process gases, and hold tolerances measured in microns. These Turbo Molecular Vacuum Pumps cost $10,000 to $25,000 per unit. Without them, there are no chips, no AI GPUs, no smartphones. The semiconductor industry isn't just about EUV lithography. It's also about thousands of invisible engineering masterpieces quietly running in the background. Video Source :- Leon Li-666
55
487
3,903
401,648
SuperfluousSecurity retweeted
I am some beautiful news today!!! I can confirm that the Amish are STILL working here to rebuild Chimney Rock NC businesses after Hurricane Helene... ...a stunning 620 DAYS AFTER THE STORM!!! It's one of the greatest untold stories of all time. GOD BLESS THE AMISH!!!!!!! โค๏ธ
498
5,941
25,947
131,695
SuperfluousSecurity retweeted
โš ๏ธโš ๏ธ CVE-2026-20253 (CVSS 9.8): Unauthenticated file create/truncate via Splunk Enterprise PostgreSQL sidecar endpoint. ๐Ÿ”—FOFA Link: en.fofa.info/result?qbase64=โ€ฆ ๐ŸŽฏ94K Results are found on en.fofa.info in the past year. FOFA Query: app="splunk-Enterprise" Deep Dive: labs.watchtowr.com/why-use-aโ€ฆ ๐Ÿ”–Refer: advisory.splunk.com/advisoriโ€ฆ #OSINT #FOFA #CyberSecurity #Vulnerability
1
5
20
1,026
SuperfluousSecurity retweeted
AMD acaba de dar un golpe fuerte en la IA local. Lisa Su subiรณ al escenario con un mini PC del tamaรฑo de un libro grueso en una sola mano y ejecutรณ en vivo un modelo de 235 mil millones de parรกmetros. Sin datacenter. Sin cloud. Sin alquilar GPUs. El protagonista es el Ryzen AI Max 395 (Strix Halo). Es el primer chip x86 que une CPU y GPU con 128 GB de memoria unificada. En Linux, el GPU puede usar hasta ~110 GB de esa memoria. Para ponerlo en contexto: una RTX 5090 tiene 32 GB y una 4090 tiene 24 GB. Este pequeรฑo equipo ofrece mรกs del triple de memoria accesible para modelos grandes, en un chasis compacto. En pruebas especรญficas de inferencia (como DeepSeek R1), superรณ en mรกs de 3x al rendimiento de una RTX 5080 cuando el modelo no cabe en la VRAM de la tarjeta de Nvidia. El precio real del equipo con 128 GB (GMKtec EVO-X2) suele estar entre $1,800 y $2,500 segรบn ofertas (el kit oficial de AMD es mรกs caro). Para quien usa mucho IA, esto cambia las cuentas: en vez de pagar cientos de dรณlares al mes en suscripciones (Claude, ChatGPT Pro, Cursor, etc.), puedes correr modelos potentes localmente con Ollama, LM Studio o similares. Privacidad total, sin lรญmites de tokens y sin que te corten el servicio a las 3 a.m. No es que las suscripciones vayan a desaparecer maรฑana, pero para muchos casos de uso (RAG con documentos privados, prototipos, agentes locales, etc.) esta opciรณn se vuelve muy atractiva. Estamos viendo el inicio de una nueva etapa de IA local accesible y potente??
185
1,107
6,655
592,197
SuperfluousSecurity retweeted
We simulated a ransomware attack on HPE's Alletra B10000. It flagged the encryption at the block level, preserved forensic evidence on its own, and we recovered two ways. Full test inside.
2
12
21,902
SuperfluousSecurity retweeted
The first auto brand to make a pickup with ZERO TECH will sell out so fast it'll make their head spin. No brain, no GPS...just engine, transmission, rear end, and get the hell outta my way:)
3,018
6,253
45,184
558,395
SuperfluousSecurity retweeted
'The campaign, dubbed โ€œOperation Highlandโ€ by Sygnia researchers who discovered it, began in 2016, targeting vulnerable internet-facing systems before pivoting to an โ€œair-gappedโ€ environment with no direct internet connection.' based on the description: this network was absolutely not 'AIR GAPPED' it was segmented sure, probably lacking a direct egress route but was 100% connected to the network which did have an egress route. bleepingcomputer.com/news/seโ€ฆ
2
3
13
5,130
SuperfluousSecurity retweeted
๐Ÿค“ Soon enough (if not already), you will have to investigate AI breaches and answer these questions: How do you hunt for adversarial prompts? How do you investigate a breach in your AI agent's execution? How do you detect that your agent has been compromised? I have been working on these topics for a while and I have already investigated multiple agent compromises. Now it is time to make this into a formal security practice!
1
8
44
2,112
SuperfluousSecurity retweeted
There are vulnerability brokers who have never published a single CVE, never spoken at a conference, never appeared in any public research. They just buy zero days quietly, resell them to governments quietly, and make more money than most Series A startups.
10
26
311
15,836
SuperfluousSecurity retweeted
Jun 14
3
9
68
1,988