While I’m glad these guys are going to jail, this does go to show that one should not use Windows if they care about OPSEC.

Slavery is hardly new, novel or confined to a single group of people. Slavery has been pretty common through out human history. So much so that we have archeological evidence of it back to Sumer. The real answer to someone bringing up slavery in other contexts is, “so what?” Yes, some native American tribes had slaves, that does not less the impact that slavery had on African people kidnapped and dragged to the Americas as slaves. Nor does it lessen the impact that a century of discrimination has wrought on Black Americans.

Honestly, it sounds like you have fallen into the Myth of the Noble Savage. Humans suck, we have always sucked, and that has been true across cultures. Every once in a while, we figure out how to suck less. But that tends to be rare, fragile and fleeting. Also, it’s often a lie and we just hide our suckage.

Wow, never thought I would be nodding along as I read the crap dribbling out of Steve Brannon’s mouth. But, the GOP’s only hope is people who are so ignorant of reality that they can’t see the obvious lies right in front of them.

Of course, one should never underestimate the Democrats’ ability to snatch defeat from the jaws of victory. I could certainly see the DNC sorting out a way to fuck over more populist candidates, handing seats to the GOP.

Given how often it pops up in Office applications now, I just refer to it as “clippy”.

Good luck with that. At the very least, he’s trying to do it the Constitutional way, via an Amendment to repeal the 17th Amendment. But considering the high hurdles set in front of that process, I doubt this is going anywhere.

…including stating that on multiple occasions he had found himself mysteriously transported from two different starting points in Georgia. In one incident, Mr. Phillips said, he had suddenly found himself inside a Waffle House

Why do I have the feeling that this story starts out with “We was drinkin’…”

It’s down to your expectations and practice. We learn to read most Latin based languages left to right. Japanese et al. are learned in a top to bottom order; so, that’s what you’ve gotten used to. Were you to get enough practice, you could learn to read Latin based languages the same way. It would just take time and effort.

Trump has a point. The pool was vandalized. By Trump and his cronies. And they stole $14 million in the process. And also left the pool full of blue trash which will likely cost millions to remove.

Not surprising. Web search from the Start Menu was always a bad idea.

Hell, I’ve had to deal with users getting their systems compromised because of this idiocy. User typed ‘ms teams’ in the start menu, clicked on the first link and ended up at an attacker’s page which mimicked the official Teams download page. User clicked “Download”, received the trojaned .msi file and ran it.

Sure, there’s some blame to go around in that case (and we finally got some default configuration changes out of it), but the fact that Microslop’s greed led to a malvertising link showing up in a user’s Start Menu is indicative of everything wrong with Windows 11.

All of the above.

Is it that ISPs are being paid by tech-bros to assign them these IPs?

Bullet Proof Hosting is a thing. Some ISPs basically advertise to criminals about their ability to evade take down orders and unwillingness to work with law enforcement. So, some infrastructure ends up on these devices. However, the IP ranges from these services often get discovered and are added to public reputation and block lists.

Along side this, cloud providers are pretty bad about policing their networks. On my own home server, I have blocked much of the Digital Ocean IP space, as it’s home to a lot of scanners, bots and other malicious traffic.

Is it that residential devices have been hacked /contain malware that does this?

This happens, a lot. The Mirai Botnet thrived on compromised home routers. People are pretty bad at updating their devices and many SOHO routers ship with some pretty bad vulnerabilities. It’s only a matter of time until someone finds an unpatched or misconfigured router and adds it to a botnet. People also get phished or install trojans all the time, adding to botnets. Darknet Diaries just had a fantastic episode on the Bayrob malware, part of which was turning infected machines into a custom botnet.

Is it trivial for companies to assign themselves residential IPs?

Some ISPs just look the other way when they get reports of malicious activity on their network. Also, attackers can force a DHCP refresh and just get a new IP when the old one seems blocked. Getting one in the first place is often as simple as signing up for service and/or compromising someone’s home PC and using it as a relay.

Paid volunteers are doing this for AI companies?

This probably happens. Afterall, we’ve already seen a company selling an AI product which was just workers in India.

Obviously this is a problem because one can rotate / cycle through residential IPs and if I aggressively block each offender in my logs permanently, then the next person assigned this IP who may be a legitimate user will be unable to access my site.

Look into Fail2Ban. This program monitors your logs and will ban IPs automatically based on criteria you set. This can include specific HTTP requests in your web logs. The ban can be permanent or can be time limited. For example, I have a container running in a cloud provider which I use to proxy requests through my ISP’s CGNAT setup. There is an NGinx reverse proxy running there and I have fail2ban watching the access log. If certain request strings are seen, the sending IP gets dumped in a permanent jail. I also have it scanning the sshd logs and banning IPs which fail to login 3 times within a short period.

It’s far from a silver bullet, but it’s something which should be running on any web facing system. Attackers will always be rattling the door knobs. There is no reason to let them keep rattling away.

I have trouble feeling sympathy for any company which didn’t greet the Broadcom buyout of VMWare with a firm plan to migrate. Expecting anything other than “abusive conduct” out of Broadcom is like expecting to jump in the ocean and not get wet.

Edge is just Chrome with a Microslop skin. They went from crushing Netscape so hard it got open sourced (mostly via monopoly shenanigans) to copying Google’s homework. And their attempts at mobile anything has been failure (Windows CE) after failure (Windows Phone) after failure (Windows for ARM).

If it weren’t for Office and companies’ undying love of Active Directory and Exchange, Microslop would be a memory and little more.

Sadly, a reluctance to install patches isn’t unique to Windows administration. I worked at a site with a well functioning Satellite infrastructure and support contracts with Red Hat. And we (InfoSec) were still chasing down admins to get their shit patched. Thankfully, we had NAC and authorization to disconnect systems that feel out of compliance. Most departments got with the program pretty quick when they ignored the "please patch all critical vulnerabilities in three days’ email and ended up with a “you are out of compliance and have been disconnected” email.

And Docker had made the whole Linux situation even worse. So many devs love to spin up containers, basically disable any sort of firewall, don’t bother with IP filtering. Oh and let’s just use passwords for ssh. Also, who needs logs? It’s a container, right. So, let’s disable all logging and not forward those anywhere. Then they promptly forget about the container until we run a vuln scan and find it’s got half a dozen RCE vulns and have to run them down and ask why the fuck it’s still running.

Linux is a much better base to build on. But bad security hygiene is still rife and still really bad for security.

Wow. Learn something new everyday.
Thanks for sharing.

Then they transfered a file to /tmp/exp which was linux kernel CVE-2026-43500, nicknamed ‘Dirty Frag’, an RxRPC local privilege escalation. I had not patched these internal servers that nobody should have access to against this.

Lessons Learned #1:
Install your patches.
“But I have a firewall!”
That is not a sufficient control.
Install.
Your.
Fucking.
Patches!

Thanks for sharing.

But, please stop using the curl command piped into a terminal pattern. Malicious actors have been abusing the fuck out of this pattern ever since the idiots at Anthropic decided that would be the official install pattern for Claude. I’ve been cleaning up infections based on people just blindly running shit like that constantly over the last couple months.

Folks, never run a random script from the internet, without being sure what you are actually about to run. If using AUR packages is considered risky. Random scripts being piped into a terminal ranks right up there with sticking your dick in a blender.

LLMs are a tool. Like all tools, we are going to go though a learning curve as we adapt to safe usage of that tool. LLMs cratering companies would be a really tame way to learn those lessons. Usually, we don’t start writing regulations around tools until we have buckets of blood to write those regulations with.

I still break out the old Sierra games (specifically the Quest for Glory series) from time to time. Those are still a lot of fun and ScummVM makes them run damn near perfectly.

Most non-indie stuff is complete and utter trash.

Ya, it’s telling that some of my favorite games these days all started as indie games. I do worry about them as they get in bed with larger producers, but I also understand the draw. E.g. I still love Valheim, but they were Embracer’d by private equity. And I’m waiting for that relationship to push them to shit all over their players. Though I understand that publisher backing lets them focus more on development and less on the marketing and distribution of the game.

So now I expect it will be just a patronising nostalgia IP reboot fest designed to extract as much cash as possible.

Ya, this is one of the big turn-offs for me. For example, I really liked Prince of Persia: Sands of Time back in the day. I’ve got exactly zero interest in the remake. Ubisoft’s logo now looking like a neat pile of dogshit, viewed from above, is pretty apt.