Ariel Millennium Thornton @arielmt@computerfairi.es

by the way if you are in the #uk and you need your #retro #computer or #video #game #console repaired i am a highly skilled technician that cannot be legaly employed in the uk so send me a #paypal donation of a #symbolic ammount and ship your computer to the southwest devon and i will repair it for you i have clients who can vouch for me thank you. i have an oscilloscope and everything, which is more than some thousand-follower retro tech youtubers can say. ​

Okay, story time. I was asked for the tale of my laser eye injury, so here you go. I'm fine. Customers were fine. No children were harmed. The only victims were me and Bob's career. https://www.funraniumlabs.com/2024/07/how-i-got-my-laser-eye-injury/

"Have you tested doing full restores from backups?"

"No, that would take too long."

"Say that again."

#infosec

Cloudflare is the only company that has ever given literal nazis my mother's phone number, so my opinion of them is slightly worse than my opinion of hot garbage.
https://infosec.exchange/@briankrebs/112887890911515501

Cloudflare making headlines again, probably not the way it would prefer. From @dangoodin at Ars:

A familiar debate is once again surrounding Cloudflare, the content delivery network that provides a free service that protects websites from being taken down in denial-of-service attacks by masking their hosts: Is Cloudflare a bastion of free speech or an enabler of spam, malware delivery, harassment and the very DDoS attacks it claims to block?

https://arstechnica.com/security/2024/07/cloudflare-once-again-comes-under-pressure-for-enabling-abusive-sites/

Meanwhile, from Proofpoint:

Proofpoint is tracking a cluster of cybercriminal threat activity leveraging Cloudflare Tunnels to deliver malware. Specifically, the activity abuses the TryCloudflare feature that allows an attacker to create a one-time tunnel without creating an account. Tunnels are a way to remotely access data and resources that are not on the local network, like using a virtual private network (VPN) or secure shell (SSH) protocol.

First observed in February 2024, the cluster increased activity in May through July, with most campaigns leading to Xworm, a remote access trojan (RAT), in recent months.

Campaign message volumes range from hundreds to tens of thousands of messages impacting dozens to thousands of organizations globally. In addition to English, researchers observed French, Spanish, and German language lures. Xworm, AsyncRAT, and VenomRAT campaigns are often higher volume than campaigns delivering Remcos or GuLoader. Lure themes vary, but typically include business-relevant topics like invoices, document requests, package deliveries, and taxes.

https://www.proofpoint.com/us/blog/threat-insight/threat-actor-abuses-cloudflare-tunnels-deliver-rats

🖼

Use our cloud service instead of local copies of your documents they said, it will be more efficient, they said.

very proud fox

I don't want AI to make art or write terrible articles which destroy the middle class. I just want email applications to look for the string "Hello" "Dear" "Hi" at the top of the message and warn the sender if the name that follows doesn't match the name on the email they are replying to.