spuz.me

Zine dedicated to #InfoSec coverage. Created and maintained by @037

[spuz.me @spuz_]

@googlecloud Just sent a DM!

[spuz.me @spuz_]

It's been almost a year and we need help from people with connections to @googlecloud

Someone abused our platform https://t.co/fAe8yy6UwS (hosted in GCP) and our Google accounts have been locked as a result.

This prevents us from responding to abuse complaints. #DeadShip 1/5

[spuz.me @spuz_]

Happy Halloween! 🎃

Onions can be scary, but they don't have to be. With our new hardware, we're able to use our ML pipeline to categorize banned URLs on https://t.co/JSYqfOiNjo with multiple reasons and not just one.

Upgrade coming soon to our extension early warning system.

[spuz.me @spuz_]

@googlecloud @Google @torproject @Meta Running such service for two years now has been very challenging due to dealing with abuse from such.

We send @NCMEC data that includes URLs and IP addresses of offenders, and it's not enough.

As a result, to avoid further scrutiny we may just shutdown the system all together.

[spuz.me @spuz_]

@googlecloud @Google @torproject @Meta We also publish the SHA256 hashes of banned URLs with classifications for why they were flagged. The list also included a copy of other onion search engine ban lists. The published hashes allow navigators of the Tor network to see if something is bad before even clicking on them.

[spuz.me @spuz_]

IDN homograph/homoglyph attack on @DuckDuckGo. The second link is not @stripe 🔍

[spuz.me @spuz_]

Kicking off the new year with the first CVE-2026:

https://t.co/89NIX63jj8

[spuz.me @spuz_]

Happy Halloween! 🎃

Onions can be scary, but they don't have to be. With our new hardware, we're able to use our ML pipeline to categorize banned URLs on https://t.co/JSYqfOiNjo with multiple reasons and not just one.

Upgrade coming soon to our extension early warning system.

[spuz.me @spuz_]

It's been a whole year for https://t.co/JSYqfOiNjo 🧅

Here are the statistics:
- 9,190 onions indexed
- 548 onions filtered for bad content
- 479 onions queued to be peeled
- 5 IPs reported for misuse and banned
- 0 abuse reports received

We have more to come, stay tuned.

[spuz.me @spuz_]

We've created a new micro service, "Onion Peeler", a new type of Tor2Web gateway.

Working on a moderated dark web search engine for our security and intel focused audience.

Add ".pe" to any existing .onion to load over clearnet. By doing so, we'll know what to index. Use as-is

[spuz.me @spuz_]

Our site changed slightly, were you able to tell?

Of course not, more than half the websites you visit have minor changes like this to sub-resources all the time.

Most benign, but some malicious. You're blind.

Now you can see, introducing SubWatch
https://t.co/dZuIBPRrLG

[spuz.me @spuz_]

Onion Peeler Extension 1.1 is out now!
- adds hidden service search engine to popup
- now detects "Onion-Location" headers on sites to offer redirects

[spuz.me @spuz_]

We recently got a new Chrome extension that supports https://t.co/JSYqfOiftQ published here:

https://t.co/AcucoHiAL2

More about it on a blog post soon.

[spuz.me @spuz_]

Added new furniture for https://t.co/JSYqfOiNjo

[spuz.me @spuz_]

We recently got a new Chrome extension that supports https://t.co/JSYqfOiftQ published here:

https://t.co/AcucoHiAL2

More about it on a blog post soon.

[spuz.me @spuz_]

@RpTMonster we can add an API later this week. or even better, an option to download the entire dataset. Just need a little time. If you want to scrape it in the meanwhile, feel free.

[spuz.me @spuz_]

If MITRE's CVE database goes offline, you can still search a better version of it here:

https://t.co/HtrXlCJUyD

It's missing a few new CVEs but everything else is there with some additional data from third parties.

[spuz.me @spuz_]

We talk about this in our blog post as well.

Looks like people are realizing photo based authentication is a thing of the past:
https://t.co/VAL3luL5fg

[spuz.me @spuz_]

CTRL+GEN: The Rise of Undetectable AI Images

https://t.co/OPyrVc1rC1

[spuz.me @spuz_]

What if you knew a link was bad and why, before you clicked it...

All done locally, free, and open source... 🤔

#onionpeeler #llamaguard #preview

[spuz.me @spuz_]

Updated our blog managing script, can save drafts now.

https://t.co/qpFWcxBC7w