roachy

Pro tip: Don't edit DNS zone files drunk...... 😳

Getting "spiders on drugs vibes from this" youtube.com/watch?v=sHzdsF…

@TracketPacer Props to you for finding the only bag of soft cage nuts in the known universe...... 30 years of this shit and I can't feel my fingertips

i found some cage nuts

@_Freakyclown_ I can also add a "shutdown -h now" in the wrong terminal at 4pm on a Friday on a box with dysfunctional IPMI 200 miles away.

If you have never done this, your not messing around enough. It’s a rite of passage, it supposed to happen!

Oh shit. Is it that time already? Bugger. We'd better get a social media post out....... Sorry for the late announcement this month folks. We've got a couple of great speakers though! Details in the link: dc151.org/april-2026-mee…

🎮 LAST CALL, PLAYERS 🎮 The clock is ticking… The BSides Leeds CFP closes TODAY! This is your chance to press START on your talk, share your knowledge, and level up the community. Whether you're a first-time speaker or a seasoned pro, we want to hear your ideas!

We’re excited to launch our Call for Sponsors for BSides London 2026. BSides London is entirely community-driven and funded only through sponsorship, it's your support that makes this event possible! Info pack: bsides.london/s/ponsorship20… #BSidesLDN2026 #BSides #London #Sponsors

@Teddybreath @UK_Daniel_Card I mean, it's a huge improvement on the Palo Alto booth strategy....... bbc.co.uk/news/articles/…

@UK_Daniel_Card Putting vulnerabilities in wrist locks until they’re no longer dangerous!

that is so weird........

@_RobbieMoore Not wanting to be partisan @_RobbieMoore , but do you not think that slashing public services might have created a significant strain on resources that we're still feeling the impact of now?

The shocking footage of a ram raid at Colin Appleyard Motorcycles is another example of the organised mafia-style gangs still infecting our area. In Parliament, I asked the Minister for Policing and Crime what the government is doing to clamp down on these criminals If you have any information, dashcam footage from the Coney Lane area, or have seen these bikes listed online, please contact West Yorkshire Police via 101 or use the live chat options at westyorkshire.police.uk/livechat quoting reference 13260141649. Information can also be given anonymously via Crimestoppers on 0800 555 111 We need to get these criminals off our streets for good.

The use of the word “limited” is a great way of skewing statistics, especially when you consider millions of customers. My wife’s work includes looking for evidence of domestic violence. She said this bank incident would trigger a lot of cases. People don’t think of wider issue

@myexploit2600 The "no harm, no foul" response to this has been absolutely shocking. I'd not thought about the DV impact (which is terrifying) but was thinking more about fraud that could occur as a result of knowlege of historical transactions.....

@_Freakyclown_ Oh look. A whole cluster of "nopes" 😱

By Merlin’s Merkin this is a nope from me! Even though I have no problem with them, this is just Indiana Jones levels of things that nothing should be allowed to do. #burnitall

🎖️ BSides London 2026 🎬'No REST 'til Hammersmith' 📅 12th December 2026 🏛️ Novotel London West 📜CFP open 1 Aug-30 Sept 🎟️Tickets available on the 1st of Sept, Oct & Nov 😍Sponsor info pack available in April 🌏BSides.London #BSidesLDN2026 #Security #BSides #London

Slightly late announcing this one - apologies! This month (11th March) we've got John Follin presenting his talk "Making Shor: cryptography in a post-quantum world". All are welcome. Full details in the link: dc151.org/march-2026-mee…

#BSidesLDN2025 videos are now live on our YouTube channel. Don’t forget to like and subscribe, we only publish once a year, your support makes a real difference! @SecuritybsidesOrgUk" target="_blank" rel="nofollow noopener">youtube.com/@Securitybside… Huge thanks to @Ministraitor & all our presenters for sharing their time and expertise!

@UK_Daniel_Card Some poor soul just trying to get back home from a party….. and then he encountered Nadhim Zahawi. That’s nightmare fuel

WTF this guy is a fucking l00ny tun3

Yeah, so pretty much that whole Windows 11 Notepad RCE thing was ridiculously stupid. Like, it was so dumb it kind of hurts. Windows 11 Notepad, with the fancy Copilot AI slop, now possesses the ability to handle mark up, or markdown, ... It's mark something, the stuff used in ReadMes. Whatever. Anyway, a security researcher realized that if you used markup in Notepad and instead of a hyperlink to a website with https:// you put file:// (the protocol on Windows for files, like in file explorer), it will arbitrarily execute it. It won't prompt you. Furthermore, he realized you could specify a remote host to execute it from using a different Microsoft specific protocol used for app installation. In other words, if you user clicked the hyperlink in Notepad it would download and run a program from any website ... without alerting the user. Normally, any sort of hyperlink that leads to a different domain, or tries to execute a file, is supposed to prompt you with an alert message, ... or something. However, Microsoft software engineers seemingly forgot to implement this notification Window. With this attack vector which has been present for AT LEAST 9 months, a malicious actor could send a .txt file and if the user clicked the link inside the .txt file it would automatically execute and run anything specified in the hyperlink. Even more silly, forensically under the hood, the logs on Windows, or to an anti malware service, it would look like Notepad was downloading something and then running a program. This is a very unique scenario which (to the best of my knowledge) no security product has encountered before. This could hypothetically result in files being downloaded and executed and being completely ignored by anti malware services because Notepad is a known and trusted program. Why would an anti malware service question Notepad? Basically, the point I'm trying to get to here is that I don't understand why Microsoft has introduced so many new features into Notepad. With new features means a new attack landscape (more stuff to abuse). Whatever man

We've had the dome collective out tonight. With talks tonight from @gr4y_r0se and Sean

@Cthulhu_Answers @TracketPacer Literally chatting to a pal today who's kid has just started an apprenticeship as a plumber. Lets see the fucking machines steal that career from him ;)

@TracketPacer I’m considering a job transition to a park ranger

Quick update for our meetup on the 11th Feb: dc151.org/february-2026-…

@J0hnnyXm4s @Secure_ICS_OT I remember dealing with an issue for an enterprise where the MS Exchange Global Address list stopped functioning. The cause - disabling IPv6 as a knee jerk reaction to a pentest where IPv6 misconfiguration was a step in domain takeover.

@Secure_ICS_OT I used to simply recommend disabling it as the remediation, but after seeing it knock so many things over at so many companies, I know that’s not the play

Abusing IPv6 is one of my first attacks in Windows networks. It’s often a great way to bypass micro segmentation, which is often only configured for the v4 interface.