I'm alright
Nobody worry 'bout me
Why you got to gimme a fight?
Can't you just let it be?
#IYKYK
Dr. Hax
Dr.Hax@hax0rbana.org
npub16v82...eqha
Cypherpunk. Infosec veteran of about 15 years (vulnerability research, exploit development and cryptography). Cypherpunks write code. :-)
Signet maintainer. Self-custody your passwords... in hardware! https://hax0rbana.org/signet
Want to see wider adoption so Bitcoin can be used as digital cash and not just an investment vehicle.
XMR: 44RDkTFmTeSetwAprJXnfpRBNEJWKvA5dBH5ZVXA4DofgoZ9AgjyZdSa2fo7pMD3Qe3pdKga8X22y3Lyn1xYde5kPQPzVUu
"Invaders Must Die" --The Prodigy
This album rocks so fsckin hard. 🤘🫨🤘
Sundays are my day off, in the sense that I don't have anything scheduled and I don't feel obligated to do anything boyond taking care of the loving things that depend on me.
Today, I kept moving forward with IT tasks. Unglamorious work, bit things that feel good when they're done.
A bugfix to get backups on two machines working again.
Completely deleting a couple VMs and re-building them from scratch (the process is automated).
Making the off-site, secondary DNS server handle an additional domain
Those kinds of things.
I don't have anything to show for it. No new features or capabilities. No cool videos, screenshots or demos. But I gotta say, it feels good.
And now it's time to relax. You know what that means. A glass of scotch, my favorite easy chair, and of course, a compact disc playing on my home stereo. I'm going endulge myself. Kick off my shoes, put my feet up. Lean back and just enjoy the melodies. After all, music soothes even the savage beast.
"People who think they know everything are a great annoyance to those of us who do."
--Isaac Asimov
Troed uaing @ZEUS's NFC feature with Square. It failed saying something like invalid card.
Is was the new model register with a customer-facing screen. Different establishment, but same model as I mentioned previously that people said it worked for them.
There was a line behind me, so I just switched to cash. No sense in being that annoying person holding up the line to play with weord tech stuff. Not going to win any hearts & minds that way, that's for sure.
Umm, I think they might be missing some origins... just sayin'
View quoted note →
Imagine it's the year 1996.
People are talking about these computer things and how they can use the phone line to dial up websites and get information from universities.
You tell them that in the future, everyone's going to have a battery powered computer that they carry around with them everywhere they go.
You claim that everyone, even department stores and fast food restraunt, will make custom software that you can install on your computer.
You'd have sounded like the people preparing everyone for flying cars, vacations to the moon, irradiated food, and a world where robots do all the work and people enjoy leisure time with their friends and family.
I've semi-automated watering the raised garden beds. Off grid. Press one buttons and it'll top water the little plants, another and it'll flood the underground basin.
Future work will be to automate those button presses, but first, I get the herb garden, garlic bed, rabbit bait, patio plants, sundial and possibly some others to put on easy mode.
Lowering my time preference for weeding will be a much harder task.
The best strategy we've found so far is to focus on a small area and let the native things grow there so they can outcompete the invasives. That keeps the maintence work to a dull roar. Then slowly expand outward.
There aren't many things the liberals and conservatives agree on, but on the topic of mass surveillance, there sure seems to be a lot of people who are pissed about it.
View quoted note →
I just saw an attack in the wild. Fun!
An exit node is hijacking SSH traffic to github. The host fingerprint didn't match, the SSH key failed, and then it prompted for a password, which presumably would be harvested.
I didn't spend much time on it, so I don't know if they patched their version of sshd to accept any password and then tie it to the repo that was pushed. That'd be smart.
And I'm sure a reply-guy is going to jump in and say this is only a risk for Tor users, ignoring the fact that your ISP, their peers, and maybe a CDN can all pull off the same thing. And anyone who compromised any of these entities can do likewise.
This is alway a risk. It's why we have things like TLS for websites and host fingerprints to verify for SSH.
Anyone know how A CUSTOMER can pay with the lightning network with square?
The UI just had a pointer of where to tap (NFC) and there to enter a credit card (chip). Tapping all over the screen did not have any effect.
I just paid cash to not cause a scene.
Does this mean they explicitly disabled lightning payments? If not, is there anything that *I* can press on the screen to pay via ln?
Please don't reply suggesting that I "just have the shopkeep do xyz". They are not going to cooperate.
Smokin' CO²
It's a white russian type of night


I helped someone with a boombox, patched up a blanket, and gave someone a refresher course on sewing while I was at it.
Also continued tuning the 3D printer with a new 0.2mm nozzle. Z-offset is still being dialed in. This thing can reportedly do a 0.01mm layer height with this nozzle. We'll see if that's actually true. I have doubts.

For the freedom lovers in the midwest USA...


Microsoft patched 570 0-days today! A new record.
Three of them were known to have been known to be exploited in the wild. We don't have idea how many of the other 567 were exploited in practice. Microsoft would like you to believe it's zero.


BleepingComputer
Microsoft July 2026 Patch Tuesday fixes massive 570 flaws, 3 zero-days
Today is Microsoft's July 2026 Patch Tuesday, and with it comes security updates for a record-breaking 570 flaws, including two zero-day vulne...
@Daniel Batten In your latest newsletter, you mentioned that "Casa dos Ventos studied batteries, concluded it was cheaper to waste the power than to store it" and cited the article below.
I wanted to highlight this to my social network, but don't see that in the article. Is there maybe an archive of an older version of the article that had that in there?
https://www.bnamericas.com/en/features/brazils-casa-dos-ventos-mulls-investing-in-batteries