Xiox

🇺🇸
I do software security, and spend all my money and remaining time in the half guard.

[Xiox @Xiox047]

new york is so fucking retarded smh

[terminal @terminaldotshop]

New benchmark just dropped

[Jangkku(김장꾸) @jangkku920]

한,중,일 관계

4장이면 충분함

겉으로는 싫어하는데 속으로는 누구보다 좋아함

[石黒正数 @masakazuishi]

@CzShO65M1PLDv5U 私が…作者です

[Xiox @Xiox047]

kind of random but darn tough socks still best i've tried and owned by far, it's not even close.

[Dmitrii Kovanikov @ChShersh]

The official response from the C++ embassy

[Josh Strife Hayes @JoshStrifeHayes]

In a bad place right now.

Not mentally, I'm just in London.

[Xiox @Xiox047]

Finding and watching the shit mcdojos put on instagram is a pretty good time

[Abhishek🌱 @Abhishekcur]

This article is literally wow.

i read it 2 years ago, and coming back to it today, it still feels new.

few tutorials teach computers in a way that permanently changes how you think. this is one of them.

If you've never built a VM before, you're missing one of the biggest "aha" moments in computer science.

[UwU Underground @uwu_underground]

Threat Intel Teams: Respectfully, what the actual HELL are we doing with malware names?

InvisibleFerret? OtterCookie? PondRAT? KANDYKORN??

BeaverTail?? calm yourselves

We're trying to write bangers on state-backed crime and you handed us the rejected Pokemon nobody picked.

☯️

[Prints.and.the.Revolution @PrintsandtheRev]

lol

[Vivian @suchnerve]

⚠️

[StellarBlade @StellarBlade]

It's our first mission in a while. Aren't you... a little excited?

#StellarBladeBLOODRAIN #StellarBlade #SummerGameFest

https://t.co/35pLRKTnmT

[Xiox @Xiox047]

the current ruleset for the all japan judo comp was goated

[Abdulkadir | Cybersec @cyber__razz]

Someone hid a self-replicating worm inside 37 npm packages.

Written in Rust.

Hidden behind an eBPF kernel rootkit.

Talking to its operator over Tor.

It steals 86 environment variables.

AWS keys. GCP keys. Vault secrets. Kubernetes tokens.

Your Anthropic API key. Your OpenAI key.

Your Exodus wallet seed phrase.

Then it uses your own npm credentials to republish itself into your packages.

So your code infects the next developer.

Who infects the next one.

The commits were backdated up to 13 years.

The commit author name was “claude.”

The malware named itself after the AI to hide in plain sight.

The attacker also left their own wallet recovery phrase in the debug data.

Nobody is having a good day.

Check your preinstall hooks.

[Xiox @Xiox047]

Blizzard essentially took a perfectly crafted esport, with a naturally organically growing competitive scene, and shit all over it with corporate bullshit

[Xiox @Xiox047]

I miss the golden age of overwatch (Season 3) ((2016 season 3, not this other silliness)). Also apex was such a good promoter