xecaz

Once promising child actor, now aspiring synchronized swimmer.

[xecaz @xecaz_]

@dcmjid I need google closed testers, so if you have a google account on your Android phone i would prefer if you became a tester. Is that possible? If so PM me with your email and i will add you.

[xecaz @xecaz_]

A few hours later, with the already reversed protocol, i now have a Android App for WCH BLE Analyzer Pro. Soon on Google Play Store for Internal Testing, if anyone have the device and a OTG cable. Let me know and ill sign you up.

[xecaz @xecaz_]

Finished!! Now with themes, AVR/PIC support/fuses support.

[xecaz @xecaz_]

I started coding a Debian/Linux GUI for the XGecu T48 / T56 / TL866II+ universal device programmers. At the moment it can read/write/verify/erase/save/load binary firmwares for some 29K common eeproms. https://t.co/jPDzWUEoDN

[xecaz @xecaz_]

It has a UI that shows what chip-form, where to connect it. It can detect chips that has IDs and a basic hexeditor allowing you to edit blobs before flashing.

Fun fact, that chip i am writing here is 34 years old, so that's why it look vintage ;)

[xecaz @xecaz_]

Reverse engineering the T88 thermal tattoo stencil printer, work in progress: https://t.co/t1xkLswyU6

[xecaz @xecaz_]

@dmatos @cnxsoft @WCH_TECH Please do. there is a Android app in Google Play Store open for a few more closed testers if you wanna sniff on the go..

[xecaz @xecaz_]

@linuxdevices I coded a linux driver for it after reverse engineering the USB protocol. Feel free to use it: https://t.co/ribF5mLoMd

[xecaz @xecaz_]

@cnxsoft @WCH_TECH I coded a Android app for this device too, and need testers to be able to release it publicly, DM me if interested.

[xecaz @xecaz_]

@Pandokkie1 @cnxsoft @WCH_TECH It does now. https://t.co/ribF5mLoMd

[xecaz @xecaz_]

@dmatos @cnxsoft @WCH_TECH My driver and capture tools gives you pcaps, https://t.co/ribF5mLoMd

[xecaz @xecaz_]

@Pandokkie1 @cnxsoft @WCH_TECH It does since i wrote a driver for it. https://t.co/ribF5mLoMd

[xecaz @xecaz_]

I reversed engineered the @RolandGlobal MC-707 as i suspected i could enable Linux support, but after updating my kernel it seems i solved a non-issue. Where do i pivot to from here? Whats peoples common complains about #mc707 when playing live? What could we improve?

[Aakash Gupta @aakashgupta]

Someone just poisoned the Python package that manages AI API keys for NASA, Netflix, Stripe, and NVIDIA.. 97 million downloads a month.. and a simple pip install was enough to steal everything on your machine.

The attacker picked the one package whose entire job is holding every AI credential in the organization in one place. OpenAI keys, Anthropic keys, Google keys, Amazon keys… all routed through one proxy. All compromised at once.

The poisoned version was published straight to PyPI.. no code on GitHub.. no release tag.. no review. Just a file that Python runs automatically on startup. You didn’t need to import it. You didn’t need to call it. The malware fired the second the package existed on your machine.

The attacker vibe coded it… the malware was so sloppy it crashed computers.. used so much RAM a developer noticed their machine dying and investigated. They found LiteLLM had been pulled in through a Cursor MCP plugin they didn’t even know they had.

That crash is the only reason thousands of companies aren’t fully exfiltrated right now. If the code had been cleaner nobody notices for weeks. Maybe months.

The attack chain is the part that gets worse every sentence.

TeamPCP compromised Trivy first. A security scanning tool. On March 19. LiteLLM used Trivy in its own CI pipeline… so the credentials stolen from the SECURITY product were used to hijack the AI product that holds all your other credentials.

Then they hit GitHub Actions. Then Docker Hub. Then npm. Then Open VSX. Five package ecosystems in two weeks. Each breach giving them the credentials to unlock the next one.

The payload was three stages.. harvest every SSH key, cloud token, Kubernetes secret, crypto wallet, and .env file on the machine.. deploy privileged containers across every node in the cluster.. install a persistent backdoor waiting for new instructions.

TeamPCP posted on Telegram after: “Many of your favourite security tools and open-source projects will be targeted in the months to come.. stay tuned.”

Every AI agent, copilot, and internal tool your company shipped this year runs on hundreds of packages exactly like this one… nobody chose to install LiteLLM on that developer’s machine. It came in as a dependency of a dependency of a plugin. One compromised maintainer account turned the entire trust chain into a credential harvesting operation across thousands of production environments in hours.

The companies deploying AI the fastest right now have the least visibility into what’s underneath it.

[xecaz @xecaz_]

Confirmed, it can run Doom

[xecaz @xecaz_]

@deklund @ScottApogee @Apogee_Ent I ran PcExpress, good memories!

[xecaz @xecaz_]

@rfvilarinho @ScottApogee @Apogee_Ent Probably msdos 6, desqview for multitasking, additional 16550 cards to handle multiple nodes. In the 486 days, i hosted 3 nodes on a dx66. Two for dialin, one for local logins.

[xecaz @xecaz_]

@ScottApogee @ryched @Apogee_Ent Not to mention other countries or continents. I was dialing like a mad man and had my computer and modem confiscated by my parents..

[xecaz @xecaz_]

@KimDotcom If this "war" is already won, why does he need EU help? Fucking pathetic piece of shit, Trump.

[xecaz @xecaz_]

@Fabrikat0r No harm in learning more..