tweedge's blog

A long time ago, I uploaded a benign typosquatting package to PyPI to measure how often people accidentally type 'ntlk' instead of 'nltk'.

For when I need to use a smart switch on a non-smart ceiling fan, pump, etc.

A quick dive into a hilariously unconvincing, malware-laden email that I received which is impersonating the IRS.

Intermittent faults are the hardest to diagnose, so I forced a fault to occur.

Threat actors seem to enjoy targeting InfoSec professionals (or each other?

Tired of seeing bullshit alerts about dependencies in your containers, which have some crazy new vulnerability, but aren't part of your application and don't really need to be there?

Are there Darwin awards for skids burning their C2 infrastructure?

I couldn't find an example, so now I made one.

The trackers, piece length, web seeds, etc.

ViperSoftX is a multi-stage cryptocurrency stealer which is spread within torrents and filesharing sites, responsible for stealing hundreds of thousands of dollar-equivalent funds, mostly from individual users.

Mastodon is a great replacement for Twitter, but who knew it was also a replacement for LOIC too?

HARICA - the only non-DigiCert certificate authority offering .onion certificates (for Tor hidden services) - has recently switched over to signing new certificates with their 2021 CAs.

It's pretty sad that I'm paying money for a phone number to post online, specifically to get it pulled into the tools used by the multi-hundred-billion-dollar talent and marketing industries, just to have some peace and quiet during the day.