imabug

Diagnostic medical physicist. PhD. Physics geek. Canadian-American. Geek of many trades, master of a few. Amateur radio guy - AB4UG, VA6BUG. YEG-DTW-CHS

[Rich Burlew @RichBurlew]

New OOTS! #1344, Maximize Impact: https://t.co/l2jLsPQJtT

[Rich Burlew @RichBurlew]

New OOTS! #1343, Gotta Bounce: https://t.co/qRrrKAQv7J

[Charleston P.D. @CharlestonPD]

SCAM ALERT!

The City of Charleston Police Department is aware of a fraudulent “Final Notice – Court Enforcement Action” circulating in the community.

⚠️ This notice is NOT legitimate.
It is not from the City of Charleston Police Department or any South Carolina court.

What to know:
• We do not send notices demanding immediate payment
• We do not request payment via QR codes

Do NOT:
• Scan the QR code
• Click any links
• Provide personal or financial information
• Send payment

If you receive this notice, do not respond.

[Charleston P.D. @CharlestonPD]

Charleston Police have closed the Crosstown at Coming Street going toward I-26 due to a fatal collision. The roadway will likely be closed for several hours. #chsnews #chstrfc

[Rich Burlew @RichBurlew]

New OOTS! #1342, Told Point Blank: https://t.co/OsRVLUa0L4

[Philip Klotzbach @philklotzbach]

Atlantic seasonal #hurricane forecast from @ColoradoStateU calls for somewhat below-normal season: 13 named storms, 6 hurricanes & 2 major hurricanes. High likelihood of robust #ElNino and associated increases in vertical wind shear the primary factor.

https://t.co/xsYCRcVQ0h

[NASA @NASA]

One last look at Earth before we reach the Moon.

This view of the Earth was captured on April 5, the fourth day of the Artemis II mission, from inside the Orion spacecraft. The four astronauts will reach their closest approach of the Moon tomorrow, April 6.

[Feross @feross]

🚨 CRITICAL: Active supply chain attack on axios -- one of npm's most depended-on packages.

The latest [email protected] now pulls in [email protected], a package that did not exist before today. This is a live compromise.

This is textbook supply chain installer malware. axios has 100M+ weekly downloads. Every npm install pulling the latest version is potentially compromised right now.

Socket AI analysis confirms this is malware. plain-crypto-js is an obfuscated dropper/loader that:

• Deobfuscates embedded payloads and operational strings at runtime
• Dynamically loads fs, os, and execSync to evade static analysis
• Executes decoded shell commands
• Stages and copies payload files into OS temp and Windows ProgramData directories
• Deletes and renames artifacts post-execution to destroy forensic evidence

If you use axios, pin your version immediately and audit your lockfiles. Do not upgrade.

[Rich Burlew @RichBurlew]

New OOTS! #1341, Also Fully Biodegradable: https://t.co/BA2gQQQFff

[PHD Comics @PHDcomics]

Happy π day. Here's a pie chart

[Rich Burlew @RichBurlew]

New OOTS! #1340, Down the Chute: https://t.co/mhGEQSdCXu

[Rich Burlew @RichBurlew]

New OOTS! #1339, Weak Interaction: https://t.co/1iRD42KQK6

[Rich Burlew @RichBurlew]

New OOTS! #1338, Word for Word: https://t.co/7ZjwvLgQF2

[Rich Burlew @RichBurlew]

New OOTS! #1337, Limited Time Offer: https://t.co/Eyahw3TUBf

[Andrew Côté @Andercot]

every god-fearing generation of men maintain and uphold The Wire Box, a strategic reserve of technical entropy from which the anonymous will rise up and become the prophesied Chosen Wire in Our Time of Need.

[Rich Burlew @RichBurlew]

New OOTS! #1336, This is About Writing This: https://t.co/p9rynC26R0

[imabug @imabug]

The little Star Trek corner on one of my bookshelves
#startrek

[TrekCore.com 🖖 @TrekCore]

One of our favorite bits of #StarTrek merch this year is the new Strategic Operations Simulator arcade game holiday ornament, available from Hallmark

https://t.co/Y3YyQALXIm

[Frederico Muñoz @fredericomunoz]

@tjcages 🔥

[ty @tjcages]

normalize decorative first letters in code snippets