Patryk Krawaczyński @[email protected]

A-dvanced G-enetic R-esearch E-arly S-imulated O-n R-eality

[Patryk Krawaczyński @[email protected] @nfsec_pl]

A Program Is Secure If …
• It does what it’s supposed to
• It doesn’t do anything else
- Casey Schaufler

[Lukasz Olejnik @lukOlejnik]

The world’s largest residential proxy network runs on consent, TLS and vibes. The TV is always watching and apparently it is also available for contract work in surveillance or data acquisition? Bright Data sells access to a residential proxy network, the kind customers use to route requests through real home IP addresses instead of datacenter IPs that Cloudflare, DataDome and HUMAN are trained to block. The supply comes from an SDK embedded in consumer apps. So: CTV games, messengers, mobile apps and screensavers. With consent somewhere upstream, the device becomes an exit node. The TV is perfect for this job. It is plugged in, on WiFi, often unattended and barely supervised. It also asks for consent through a privacy policy and a remote-control UI, which is one way to make “informed choice” look like an endurance sport. One config flag tells the SDK to ignore whether the screen is on. Another tells it to ignore whether the user is on a call. In this economy, watching TV counts as downtime. https://t.co/WvFVvEFrzY

[Renwa @RenwaX23]

"Dad, what was it like playing CTFs before AI?"

[Patryk Krawaczyński @[email protected] @nfsec_pl]

@ThreatLocker I guess you meant: \Registry\User\.DEFAULT\Software\Policies\Microsoft\CloudFiles\BlockedApps* ?

[Patryk Krawaczyński @[email protected] @nfsec_pl]

Fragnesia (CVE-2026-46300) i DirtyDecrypt (CVE-2026-31635) ( https://t.co/uQUeNj3UlE ) #linux #kernel #security

https://t.co/9cg1KcRJw0

[V12 @v12sec]

another day, another universal linux LPE

[Patryk Krawaczyński @[email protected] @nfsec_pl]

Copy Fail (CVE-2026-31431): 732 bajty do przejęcia kontroli nad systemem ( https://t.co/WSONdckzJz ) #linux #kernel #exploit

https://t.co/VhM2v4JCtf

[Patryk Krawaczyński @[email protected] @nfsec_pl]

Uwalniamy program ping od setuid i capabilities ( https://t.co/zuKIrGECez ) #linux #security #icmp

https://t.co/i25DXkdpUJ

[Patryk Krawaczyński @[email protected] @nfsec_pl]

@Zaufana3Strona Dobrze, że kupiłem mkswap v8 50% taniej tydzień temu.

[Patryk Krawaczyński @[email protected] @nfsec_pl]

trap - persystencja po wyjściu z powłoki ( https://t.co/GVU2B07xyz ) #linux #security #bash #backdoor

https://t.co/AK6J2MrsYX

[Patryk Krawaczyński @[email protected] @nfsec_pl]

@CatFlixer @vxunderground

[Patryk Krawaczyński @[email protected] @nfsec_pl]

#ai #agent #inthewild

[Patryk Krawaczyński @[email protected] @nfsec_pl]

Dynamic Host Configuration Protocol Daemon bez DHCPd ( https://t.co/g5Hj4HGLJ3 ) #linux #sysadmin

https://t.co/gBLajvVT3K

[Dr. Clown, PhD @DrClownPhD]

This hits really hard! 😢

[Patryk Krawaczyński @[email protected] @nfsec_pl]

W miarę bezpieczne przekazywanie sekretów w powłoce ( https://t.co/8Kv3NkgGBS ) #linux #bash #security

https://t.co/FVGUHQx71Y

[Patryk Krawaczyński @[email protected] @nfsec_pl]

Darmowa fotka przy subskrypcji. Możemy popisać na priv.

[Patryk Krawaczyński @[email protected] @nfsec_pl]

@Cloudflare rlogin

[Patryk Krawaczyński @[email protected] @nfsec_pl]

Zabawy z Socket Cat i TCP/IP Gender Changer ( https://t.co/h5cBTMJN6l ) #linux #socat #tcpip #tunnels

https://t.co/D8vpenkiOU

[Patryk Krawaczyński @[email protected] @nfsec_pl]

#AI #natural #human #stupidity

[The Hacker News @TheHackersNews]

🇵🇱 Poland blocked what officials described as its strongest cyberattack on the energy sector in years.

ESET links it to Russia-aligned Sandworm, which used a new DynoWiper malware to target ⚡ power plants and renewable energy systems in late Dec 2025.

🔗Details → https://t.co/OcMpBbCNLK