Łukasz Bromirski
banner
lukasz.bromirski.net
Łukasz Bromirski
@lukasz.bromirski.net
networking & security geek / CCIE #15929 R&S/SP, CCDE #2012::17 / opinions are my own, not of my employer / 42 / Director@Cisco Security, building NGFW hardware platforms
Reposted by Łukasz Bromirski
I laughed at loud. These people are so pathetic; our enemies are numbskulls. They will kill us all and still not know hs physics.

COWEN: The stupidest question possible: Why don’t we just make more GPUs?

ALTMAN: Because we need to make more electrons.

conversationswithtyler.com/episodes/sam...
November 19, 2025 at 7:27 AM
Reposted by Łukasz Bromirski
Weekendowa Lektura: odcinek 650 [2025-11-15]. Bierzcie i czytajcie

zaufanatrzeciastrona.pl/post/weekend...

Linków jest dużo, a czasu mało, materiały są jak zwykle całkiem ciekawe, zaparzcie więc kawę lub herbatę i bierzcie się do czytania. Miłego klikania!
November 15, 2025 at 10:28 PM
Reposted by Łukasz Bromirski
Attacks on VPNs are attacks on digital privacy and digital freedom. And that battle is being fought by people who clearly have no idea how any of this technology actually works. www.eff.org/deeplinks/2...
Lawmakers Want to Ban VPNs—And They Have No Idea What They're Doing
It's unfortunately no longer enough to force websites to check your government-issued ID before you can access certain content, because politicians have now discovered that people are using Virtual
www.eff.org
November 15, 2025 at 5:02 PM
Reposted by Łukasz Bromirski
Turns out you can communicate across containers via 63-bits of available space in a shared lock you acquire on /proc/self/ns/time that all processes have access to.

No networking required. The post has a demo of a chat app communicating across unprivileged containers.

h4x0r.org/funreliable/
November 12, 2025 at 2:35 PM
Humans are natural problem solvers. That's what intelligence is. Seeing patterns is a way to solve problems. We're a way for universe to solve itself. -- day of (random) stolen thoughts & quotes
November 12, 2025 at 10:41 PM
Reposted by Łukasz Bromirski
Apropos of nothing in particular:

Have any of you guys ever seen the movie "Wag the Dog"?
The U.S. Navy’s largest aircraft carrier arrived in waters near Latin America on Tuesday, expanding the American military’s buildup as the Trump administration seeks to ratchet up the pressure on Venezuelan President Nicolás Maduro.
Arrival of U.S.’s Largest Warship Ratchets Up Pressure on Venezuela
The USS Gerald R. Ford carrier strike group is in waters off Latin America, as the buildup of U.S. forces continues in the Caribbean.
on.wsj.com
November 12, 2025 at 4:43 PM
Reposted by Łukasz Bromirski
Our foreign policy, if that is still the right concept, has three pillars: alienate allies, encourage enemies, and take bribes.
November 12, 2025 at 4:49 PM
Reposted by Łukasz Bromirski
Tomorrow: Join us to explore how combining Talos research with AI/ML can strengthen your network's defenses in a hybrid mesh firewall architecture. There's still time to register: cs.co/633217MvSv
November 12, 2025 at 4:51 PM
I mean... it still took surprisingly long IMHO. #humanity
November 12, 2025 at 4:46 PM
Reposted by Łukasz Bromirski
Ktoś wyczyścił konta wielu klientom Santandera naraz, wypłacając pieniądze z bankomatów. Chętnie posłuchamy szczegółów tego incydentu, bo dawno takiego w Polsce nie było. tvn24.pl/poznan/dwa-w...
Jeden bank, dwa województwa i 120 nieuprawnionych wypłat z kont
Policjanci z województwa wielkopolskiego i kujawsko-pomorskiego badają przypadki nieuprawnionych wypłat z bankomatów. - Klienci otrzymywali powiadomienie SMS o wypłacie z bankomatu środków z ich konta...
tvn24.pl
October 26, 2025 at 4:08 PM
Reposted by Łukasz Bromirski
Happy Sunday! Here's this.weekinsecurity.com, featuring:

• Trenchant boss accused of selling secrets to Russia
• Microsoft issues emergency WSUS fix
• Feds demand user's ChatGPT prompts
• AI browsers are security hot mess
• Dutch sharing less intel with the US
• A brand new cyber cat(!), and more.
this week in security — october 26 2025 edition
DOJ says Trenchant boss sold secrets to Russian buyer, U.S. 'slipping' on cyber, Microsoft patches exploited Windows bug, AI browser security, and more.
this.weekinsecurity.com
October 26, 2025 at 4:36 PM
Reposted by Łukasz Bromirski
“The Russian can see us just from the other side of the river, and a minute later they hit you - and they are specifically targeting residential areas, kindergartens, hospitals.”

read this horrific report from Kherson:

open.substack.com/pub/twogrump...
Talking to Ukrainians under the rain of Russian bombs
Far away from the futile Trump-Putin noise (will he? won’t he? why didn't he?), Ukrainians are being targeted and killed every day. I talked to friends and acquaintances in Kherson, a frontline city.
open.substack.com
October 27, 2025 at 9:12 AM
Reposted by Łukasz Bromirski
The Missing Semester of Your CS Education (2020) | Discussion
The Missing Semester of Your CS Education
missing.csail.mit.edu
October 25, 2025 at 11:00 AM
Reposted by Łukasz Bromirski
Donald Trump is telling his own Justice Department that it owes him $230 million, @qjurecic.bsky.social writes. "The goal is not just dictatorial power, but the ostentatious performance of dictatorial power."
Trump to DOJ: Pay Up
The goal is not just dictatorial power, but ostentatious performance.
bit.ly
October 23, 2025 at 9:15 PM
Friendly reminder - I'm running multiple open projects for networking community & geeks - BGP Full Feed, BGP Blackholing and open RPKI server. You can read more here: lukasz.bromirski.net/projects/ #FreeBSD #CiscoIOSXR
projects
below you can see some of the community projects I created/actively maintaining: AS 112 - world wide project to sinkhole RFC 1918 DNS traffic locally within countries/geos and avoid slamming DNS root ...
lukasz.bromirski.net
October 23, 2025 at 8:55 PM
Reposted by Łukasz Bromirski
The security paradox of local LLMs | Discussion
The security paradox of local LLMs - Quesma Blog
Local LLMs prioritize privacy over security. Our research reveals a 95% backdoor injection success rate.
quesma.com
October 22, 2025 at 4:20 PM
Reposted by Łukasz Bromirski
Those annoying Cloudflare Captchas made everyone so used to clicking "I am not a robot" that Russian hackers used this to hack victims. Victims received PDF with a link that, if clicked, produced a Cloudflare Captcha. If user checked "I am not a robot" box and followed instructions, they got hacked
PhantomCaptcha | Multi-Stage WebSocket RAT Targets Ukraine in Single-Day Spearphishing Operation
SentinelLABS uncovers a coordinated spearphishing campaign targeting organizations critical to Ukraine's war relief efforts.
www.sentinelone.com
October 22, 2025 at 1:37 PM
Reposted by Łukasz Bromirski
Are you familiar with our Bellingcat toolkit? Its a resource to discover open source tools and learn what could be useful for your research. bellingcat.gitbook.io/toolkit
Home | Bellingcat's Online Investigation Toolkit
A toolkit for open source researchers
bellingcat.gitbook.io
October 22, 2025 at 1:45 PM
Reposted by Łukasz Bromirski
Join us on October 30 at 1:00 p.m. ET for a free CCNA Cybersecurity Prep session with Pierre Cadieux, focused on Defense in Depth strategy and security monitoring tools and technologies: cs.co/63324Atv76
October 22, 2025 at 2:06 PM
Reposted by Łukasz Bromirski
Repeat after me: It's because the "hacktivist" group was ALWAYS an intelligence operation. ALWAYS!

Russia clearly shifted from DDoS to actual physical sabotage a few months back, and its NoName project has no more use. Physical and destructive sabotage is a top priority for them right now
The takedown of infrastructure and naming of some of the organizers of NoName has made that group self-radicalize even more I feel. They seem a lot more invested in offline actions now, having previously barely ever mentioned them.
October 21, 2025 at 4:23 PM
Internet is here, because it's distributed. Self-host. Build, grow, experiment and scale, but remember about distributed nature of stuff you create. Monolithic, centralized systems are slow, prone to catastrophic failures... and easy to kill. #self-host
October 20, 2025 at 10:10 PM
After you saw "Inside", you'll believe just about anything to not have to see it again. Just like Jordan Peele's "Nope". Very apt names BTW.
Home Depot Introduces New 12-Foot-Tall Willem Dafoe https://theonion.com/home-depot-introduces-new-12-foot-tall-willem-dafoe/
October 20, 2025 at 3:24 PM
Reposted by Łukasz Bromirski
New from 404 Media: the same hackers who doxed hundreds of DHS, ICE, and FBI officials say they have personal data of tens of thousands more government officials, including thousands NSA, more in intel community. They sent me data from a dizzying list of agencies
www.404media.co/hackers-say-...
Hackers Say They Have Personal Data of Thousands of NSA and Other Government Officials
The same hackers who doxed hundreds of DHS, ICE, and FBI officials now say they have the personal data of tens of thousands of officials from the NSA, Air Force, Defense Intelligence Agency, and many ...
www.404media.co
October 20, 2025 at 3:18 PM
I don't do webmail. But when I do, I always use "realgymessentials.com" to reset my password. And I share "internal communication" with the world.
October 17, 2025 at 10:36 AM