hrbrmstr 🇺🇦 🇬🇱 🇨🇦🇧🇪

@hrbrmstr.mastodon.social.ap.brid.gy

Pampa • Don't look @ me…I do what he does—just slower. #rstats avuncular • 👨‍🍳 • ✝️ • 💤 • VP Super Intelligence/ML @ Censys • Carnegie Mellon lecturer […]

🌉 bridged from ⁂ https://mastodon.social/@hrbrmstr, follow @ap.brid.gy to interact

@hrbrmstr.mastodon.social.ap.brid.gy Oct 13, 2026, 12:54 AM

Sacré Bleu^WBreach! Hackers forced the temperature of fridges and freezers in many French supermarket fridges up to 50°Celsius (122° F) overnight, causing fires and spoiling food at several hundred stores in a major cyberattack. Some 150-200 Intermarché shops were targeted in the attack along […]

@hrbrmstr.mastodon.social.ap.brid.gy Oct 13, 2026, 12:33 AM

BWHAHAHAHAHAHA

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 10:26 PM

in the interim, here's a plot going into the blog post so you can see just how hungry the AI folks are for git content. it's the full window from the start of hosting /git/ to a couple hours ago.

$Stacked bar chart titled "Status of the /git/* wars" showing daily request counts to the cgit instance at rud.is/git/ from September 4 through October 12, 2026. The vertical axis runs from 0 to 125,000 requests. Each bar is split into three categories: requests that slipped through (bots or legitimate humans) in blue, server forced aborts in gold, and Akin triggers in crimson. Three dotted vertical lines mark configuration changes. The first marker, September 4, notes that cgit went live. Traffic jumped immediately and was entirely unfiltered: roughly 100,000 requests on September 5, 51,000 on the 6th, a peak of about 112,000 on the 7th, 109,000 on the 8th, and 82,000 on the 9th. Volume then fell sharply, sitting mostly between 7,000 and 11,000 per day through mid-September, with bumps to around 28,000 on the 11th and 20,000 to 26,000 on the 17th through 19th. The second marker, September 19, notes that server forced aborts based on IP behavioral heuristics were enabled. Over the following two weeks daily totals ranged from about 11,000 to 50,000. The gold abort share grew from a sliver to a large fraction of each bar, notably around September 25 and 26 (totals near 33,000 and 40,000) and October 3 (about 49,000, of which roughly 28,000 were aborted). Blue pass-through traffic still made up a substantial portion on most days, generally 5,000 to 21,000. The third marker, October 6, notes that Akin-based behavioral 403 rejections were enabled. October 6 itself totaled about 47,000, mostly blue. On October 7 the total reached about 65,000, with roughly 53,000 caught as Akin triggers and only about 9,000 slipping through. From October 8 to 12, daily totals held between about 28,000 and 35,000, with Akin triggers accounting for the large majority, small gold abort caps on top, and pass-through traffic reduced to roughly 1,000 to 6,000 requests per day.$

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 10:00 PM

We went and touched grass today (well, we also visited the newly remodeled LL Bean HQ flagship store), which ate up the hour I had originally planned for the Akin/cgit wars blog. Am still hoping to get it done today tho.

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 9:59 PM

@projectdiscovery's Nuclei —
https://projectdiscovery.io/nuclei — shld also be considered.

@Dio9sys folds many of their detections into rz so it may be redundant.

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 9:57 PM

def start with runZero tho. It's the most innovative one out there and finds all the nooks and crannies on your network nothing else does. I also may know like 1/2 the folks that work there (well, they're now part of Dragos, so likely a smaller percentage, but still…all good ppl).

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 9:55 PM

Def start with @runZeroInc (cc: @todb Dan is good ppl, pls treat him like you would me…no, wait…you should def treat him better than you treat me :-)

You likely fit into their free tier (*cough* Tod *cough*) and it's something everyone shld be running all the time (you can point it at remote […]

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 9:49 PM

(link in alt txt) O_O

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 1:40 PM

I carved out an hour later in the day to write up the [c]git battles since the Akin blocks are holding for a few days straight now. I'll detail what's next for the config (spoiler: ipset additive blocking the Akin triggered IPs).

Stacked bar chart titled "Status of the /git/* wars" showing request volumes from Sept 7 to Oct 12. Requests are categorized by those that "Slipped Through" (blue), were "Server Forced Aborts" (yellow), or hit an "Akin Trigger" (red). It shows an initial spike of unfiltered requests in early September, followed by an increase in blocked requests (yellow and red) by early October.

@lednabm.stranger.social.ap.brid.gy Oct 12, 2026, 12:54 PMReposted by @hrbrmstr.mastodon.social.ap.brid.gy

🤣👇😂👇😉

Trump is a Russian Asset
Prove me wrong
Zelensky

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 1:12 PM

ran ~28K Caddy log lines from ai[.]rud[.]is site through TypeSafe's Jev decision model: $1.80, zero failures, 147ms median API response time.

it flagged 44 attack probes and found 70 requests my (ginormous) SQL classifier filed as ordinary visitors — Laravel […]

[Original post on mastodon.social]

Bar chart: Jev classified 89.0% of 28,000 requests as serve, 6.9% throttle, 4.0% signed-agent serve, 0.16% refuse.

@resingm.infosec.exchange.ap.brid.gy Oct 12, 2026, 9:16 AMReposted by @hrbrmstr.mastodon.social.ap.brid.gy

A domain name of mine failed in #DNSViz. The error message is as follows: org zone: The server(s) were not responsive to queries over UDP. See RFC 1035, Sec. 4.2. (2001:500:c::1) I checked other `*.org.` domain names, and they all seem to error on the same cause. Following this rabbit […]

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 11:06 AM

#4 messaged me that he saw the Rocinante in No Man's Sky and TIL there's a whole NMS subculture built around creating the Roci in NMS https://kagi.com/search?q=No+Man%E2%80%99s+Sky%3A+Rocinante&r=us&sh=qgtOjntjbG_nfORxpwiKng

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 9:39 AM

the bots are starting to mind their P's and Q's

i need to dig a bit more but i suspect this change (PQ rates were declining for a while thanks to dumb mirai nodes) in what hits my primary domain site is due to the clients being used to hammer my [c]git are […]

[Original post on mastodon.social]

This image is a data dashboard from a tool called "pqwatch," showing statistics regarding Post-Quantum (PQ) cryptography adoption over a 24-hour period.

**Timeframe:**
The data covers the period from October 11, 2026, at 09:00:05 UTC to October 12, 2026, at 09:01:17 UTC.

**Summary Metrics:**
At the top of the dashboard, five key metric cards provide high-level totals:
* **Total Connections:** 90,640 connections to the monitored host.
* **Unique IPs:** 36,173 distinct source IP addresses.
* **Unique SNIs:** 50 unique hostnames.
* **PQ Offer Rate:** 61.4% (defined as offering x25519mlkem768 or draft).
* **PQ Key-Share Rate:** 61.0% (defined as sending a PQ key share).

**Detailed Chart: PQ Adoption Over Time**
Below the metrics is a stacked bar chart showing connection volume by hour.
* **Y-Axis:** Total connection count, ranging from 0 to 8,000 in increments of 1,000.
* **X-Axis:** Time of day in one-hour increments, from 09:00 on the first day to 09:00 on the second day.
* **Legend:** The bars are split into two colors: Green represents "PQ" connections, and a reddish-pink represents "Non-PQ" connections.

**Chart Trends:**
* **Baseline Volume:** For most of the 24-hour period, the total connection volume fluctuates between approximately 2,500 and 4,000 connections per hour.
* **Peak Volume:** There is a significant spike in traffic starting at 13:00 and peaking at 16:00, where total connections reach over 7,000.
* **PQ vs. Non-PQ Distribution:** The green "PQ" portion of the bars remains remarkably consistent throughout the entire period, staying steady at approximately 2,000 connections per hour. The fluctuations in total volume, including the large peak between 14:00 and 17:00, are driven almost entirely by the increase in "Non-PQ" (reddish-pink) connections.

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 9:20 AM

GitHub bragging it helped prevent a zod supply chain attack is nice and all, but given the overall service's stability, reliability, and availability, I'm not sure if it's as solid of a preventative control as they advertise.

https://github.com/orgs/community/discussions/208477

@hrbrmstr.mastodon.social.ap.brid.gy Oct 12, 2026, 9:15 AM

I wonder how much Gruber is being paid to whitewash X.

@angrystaffer.bsky.social Oct 11, 2026, 6:38 PMReposted by @hrbrmstr.mastodon.social.ap.brid.gy

We’ve been talking about this for years. None of these far-right movements are organic.

@hrbrmstr.mastodon.social.ap.brid.gy Oct 11, 2026, 7:26 PM

Bonus Drop #130 (2026-10-11): Hodepodge Edition The weekend Bonus Drop tries to make up for the Drop gap and discusses various updates, including the transition of the main rud[.]is blog to an Astro 7 static site and new features in Bootstrap version 6. It features a free font, Paper Mono, and […]

@hrbrmstr.mastodon.social.ap.brid.gy Oct 11, 2026, 4:15 PM

LOL. The marks that think DuckDuckGo doesn't regurgitate Bing AI summaries in the display list of links to search results == "NoAI" is legit amusing.

@hrbrmstr.mastodon.social.ap.brid.gy Oct 11, 2026, 1:19 PM

More Yandex 🧬💣💥 from 🇺🇦 pls if it'll help keep the 🇷🇺 bots at bay.

• Source Network: AS13238 YANDEX – Yandex LLC (Russian Federation)
• Traffic Breakdown: Prior to the drop, bot traffic accounted for roughly 99.6% of requests compared to 0.4% human traffic.
• Event Cause: The sudden plunge to zero on October 11, 2026, corresponds to a reported military/drone attack on Yandex's data center facility in Vladimir, Russia—marking the third reported attack on Yandex data infrastructure since October 8.

Older posts