Robert Raducanu

Information Security Enthusiast, IT Professional, Astronomy, Extreme Sports, Motorcycling, Electronic Music, SCI-FI, Science, Aviation, History, Gaming

[Robert Raducanu @abofh]

@ClaudeFabel5 @heynavtoor No.

[Robert Raducanu @abofh]

@RetroTechChris These printers will survive humanity. I've seen them in production, they were printing thousands of invoices per month with close to zero maintenance and they kept going for years. Also they environment in which they were operating was dust filled so yeah...

[Turbine Traveller @Turbinetraveler]

As if they couldn't end the day without one more...

TAROM Boeing 737-700 performs a spectacular low pass during the 16th edition of the Bucharest International Air Show (BIAS 2026) at Băneasa Airport in Bucharest, Romania.

📹: shalau

[Internet Archive @internetarchive]

We've been getting a lot of questions lately about how the Internet Archive digitizes books.

The short answer: page by page, by hand.

You may remember our viral 2021 video of Eliza Zhang scanning a book. That's still how we do it.

Meet Eliza, and learn how we scan books: https://t.co/gt9s5lbPE4

[Robert Raducanu @abofh]

@keywordian I had one, opened 22 on it and was deleted until the next day. So yeah 🤣

[exQUIZitely 🕹️ @exQUIZitely]

Imagine a whole universe hidden within in a single floppy disk. Yep, that's correct, that's all that David Braben needed to create Frontier: Elite II in 1993.

The game simulated around 200 billion stars. Nearly every star had its own system with planets and moons. Each of those systems could have up to 20 planets, and those planets had their own moon(s). By now you might want to get out a calculator to keep track.

Oh, and those planets or moons weren't just eye-candy, you could visit all of them in any system, with realistic 1:1 scale orbits, gravity, and physics.

All on ONE disk.

The first Elite was pure magic. The second one was a masterpiece of such epic proportions, I still can't comprehend how one person can envision and then actually create all of it.

Old school developers were definitely a different breed.

[cr3ghost @cr3ghost]

Malware analysts: this reverse engineering is absolutely worth your time. Red teamers: you don't need to bring a vulnerable driver. Detection engineers: your trusted-driver assumptions just got awkward.

A security researcher (@vinopaljiri) reversed Microsoft Defender's BTR.sys across 18 signed builds, found the same hard-coded encryption key, then built BTR_CLI to feed valid transactions into Defender's own Microsoft-signed Ring 0 remediation driver.

The result: kernel-level file + registry operations and a demonstrated path to disarm security tooling.

No memory corruption. No classic BYOVD. No CVE. No patch coming.

The defensive technology became the offensive primitive.

Research by @vinopaljiri / @_CPResearch_ :

https://t.co/f9OdEcG00w

#RedTeam #DetectionEngineering #MalwareAnalysis

[cr3ghost @cr3ghost]

Malware analysts: you don't see backdoors like this every day.

Red teamers: imagine C2 that never needs to beacon.

Detection engineers: what do you hunt when there's no obvious outbound C2 traffic?

Threat intel: who built this?

@TheEnergyStory discovered SLEEPWALKER, a previously undocumented passive Windows backdoor that stays dormant until it sees a specially crafted network packet.

Then it gets interesting:

• Its own 23-instruction command language
• AES-256-CCM encrypted tasks
• Encrypted bytecode programs
• In-memory shellcode execution
• TCP, UDP + ICMP
• SMB named pipes
• VMware VMCI communication
• DNS-based triggering capability
• DLL sideloading via ESET's ERAAgent.exe
• Masquerades as Microsoft's dpapi.dll

No normal beacon.

No obvious listening port by default.

Just quietly watching traffic until the right packet wakes it up.

This is an excellent malware reversing rabbit hole.

Research by @TheEnergyStory:

https://t.co/JLszaAc6Uc

#MalwareAnalysis #ReverseEngineering #ThreatIntel

[The XSS Rat - Proud XSS N00b :-) @theXSSrat]

🐀 RatCTF is free to start. Not a trial — free.

96 active challenges, and a stack of paths you don't pay for:

→ OSCP Preparation — 9 modules, 19 machines. All 9 modules free.
→ CMWAP Practice — 8 machines, no flags at all. You scope it, plan it, report it, debrief it.
→ Pentest Reporting — 4 modules, PTES-aligned. Free.
→ CPTS Preparation — first module free.

What makes it different once you're in:

🏅 A certificate for every machine you own. Not points, not a streak — a shareable, verifiable cert per box, in Standard, Elite and Legendary tiers. Points aren't on your CV. These are.

🎒 An inventory. Items you pick up carry with you and attach where they're needed.

📝 Real pentest plans and reports, not just flags. You write the deliverable a client would actually read.

📖 Community writeups, bug bounty reports and hints — written by the people hacking the same boxes as you.

Start free, decide later 👇
https://t.co/Dt774eJ8j0

Authorised targets only, always. Much love <3

[Nicolas Krassas @Dinosn]

140+ free security awareness and application security exercises. Fully white-labeled, no strings attached https://t.co/Eai2SzwpiC

[Tony/Humpty @humpty_tony]

If you operate a SIEM I'd recommend giving a look st https://t.co/XFRCqQryZ3. Absolute fantastic work!

[Robert Raducanu @abofh]

@vxunderground M8 you're doing an awesome job. Thank you!

[Robert Raducanu @abofh]

@ActionRetro1 @davepl1968 Best comment 🤣

[Robert Raducanu @abofh]

@sgszewczyk @theiaincameron And the Roman empire was all over Europe for centuries. What's your point?

[Robert Raducanu @abofh]

@mitrutdocan @theiaincameron Op's applied the typical disinformation recipe/pattern. Get a historical truth, add a current truth and slap a plausible explanation for simpletons. I liked your counter because it fits his chain of thought 😭

[Robert Raducanu @abofh]

@ExpatGringo90 @mitrutdocan @theiaincameron His counter argument is as good as the op's argument.

[Alok @analogalok]

Running Qwen 3.8 27B Q4 on a single RTX 4060 (8GB VRAM) gaming laptop shouldn’t be physically possible.

You can now run this 27B dense beast locally with a massive 64,000 token context window (minimum requirement by hermes agent) on budget consumer hardware, without crashing into OOM hell.

A model that bests claude opus 4.6 in several benchmarks, now runs on a $300 GPU!

after benchmarking it on rtx 4090 (24 GB VRAM) yesterday, today i tested on an Intel i7 12700H rig with an 8GB VRAM card and only 16GB dual channel DDR4 RAM, PCIe 4.

The breakthrough is using the new IQ4_XS quant by Unsloth (occupies just 14.6 GB on disk vs 16.7 GB for standard Q4_K_XL).

By tuning hybrid CPU/GPU offloading and quantized KV cache, we unlocked deep context with usable generation speeds.

Here are the numbers from a 4.5k real world prompt test:

- Context Window: 64,000 tokens (-c 64000)
- Prefill Speed: 150 tokens/sec
- Decode Speed: 5 tokens/sec (steady generation via native MTP)

The exact llama.cpp flags to run it right now:

.\llama-server -m Qwen3.8-27B-IQ4_XS.gguf -c 64000 --port 8080 -ngl 25 -ctk q4_0 -ctv q4_0 --threads 6 --threads-batch 8 --spec-type draft-mtp --spec-draft-n-max 2 --spec-draft-p-min 0.7

this occupies the vram completely.

Why this works:

1. `-ngl 25` offloads just enough layers to fill your 8GB VRAM without memory spillover.

2. `-ctk q4_0 -ctv q4_0` crushes the KV cache memory footprint.

3. Native MTP (`draft-mtp`) drafts candidate tokens ahead to keep CPU bound decode at a readable pace.

Complete stress test benchmark suite for this setup drops tomorrow.

Unsloths's Hugging Face GGUF link in the replies.

fire it up on your 8GB rig tonight. What budget GPU are you testing this on?

[7h3h4ckv157 @7h3h4ckv157]

Recons101x

A portable passive reconnaissance tool that enumerates hostnames published by ctl[.]shodan[.]io. It runs on Linux, Termux, and Windows using only Python 3. No Shodan API key or third-party packages are required.

Source: https://t.co/Dy3dCUMUQ1

[Panzerpicture @Panzerpicture]

Day 88

YouTube erased 13 years of real WWII history 81 days ago.155,000 subscribers.
Silver Play Button.
Thousands of hours of rare tank footage.
Restored archive films.
Interviews with the last living veterans of Normandy and the Ardennes.All deleted overnight by an algorithm.The “crime”? Black-and-white footage of 80-year-old tanks and soldiers flagged as “child sexual abuse material.”No children.
No warning.
No human review.This is not a glitch.
This is history being deleted by broken AI.Every day we stay silent, more irreplaceable footage is lost forever.If you care about actual history surviving on the internet:→ LIKE
→ REPOST
→ Tag
@TeamYouTube
and
@YouTube
→ Comment: “Demand a proper human review for historical content”We’re not quitting.
History isn’t “harmful content.”#RestorePanzerPicture #WW2History #YouTubeCensorship #HistoryMatters #SaveHistory

[7h3h4ckv157 @7h3h4ckv157]

You Don't Need Mimikatz for DCSync Anymore (SharpDCSync)

Credit/Resource: https://t.co/cIlDldyY92