Eric Parker
@atericparker.bsky.social
Cybersecurity YouTuber (170k), security reseacher and reverse engineer.
Once streamed myself with cat ears on.
Once streamed myself with cat ears on.
TIL you can repurpose USB 3.0 cables for PCIE 1x transmission. The pin counts match (note: neither end transmits USB and you cannot use a usb port for this adapter)
November 12, 2025 at 11:21 PM
TIL you can repurpose USB 3.0 cables for PCIE 1x transmission. The pin counts match (note: neither end transmits USB and you cannot use a usb port for this adapter)
we have dllhost at home
October 28, 2025 at 8:53 PM
we have dllhost at home
you may not like it but this is what peak performance looks like.
October 11, 2025 at 4:54 PM
you may not like it but this is what peak performance looks like.
So for anyone else who has a WRX 80E sage motherboard and bought the ASUS Hyper M.2 card, to make it work you need to enable "PCIe raid mode" on the slot (even if you don't want raid). Why they couldn't just call this x4x4x4x4 bifurcation I will never understand.
October 9, 2025 at 6:33 PM
So for anyone else who has a WRX 80E sage motherboard and bought the ASUS Hyper M.2 card, to make it work you need to enable "PCIe raid mode" on the slot (even if you don't want raid). Why they couldn't just call this x4x4x4x4 bifurcation I will never understand.
old malware hit different
October 1, 2025 at 11:09 PM
old malware hit different
Best possible ruling for Google, worst possible for their competitors / mozilla. Google can no longer pay for play as a default search engine, but keeps Chrome.
I don't see how mozilla survives this, unless Microsoft wants to buy that placement instead.
I don't see how mozilla survives this, unless Microsoft wants to buy that placement instead.
September 2, 2025 at 8:59 PM
Best possible ruling for Google, worst possible for their competitors / mozilla. Google can no longer pay for play as a default search engine, but keeps Chrome.
I don't see how mozilla survives this, unless Microsoft wants to buy that placement instead.
I don't see how mozilla survives this, unless Microsoft wants to buy that placement instead.
Another AUR malware this time a smarter typo squat, google-chrome-stable. The real one is google-chrome but it creates a binary called google-chrome-stable, I could see someone making this mistake.
Likely the same bozo as before, who has a serious lack of opsec (more on that soon).
Likely the same bozo as before, who has a serious lack of opsec (more on that soon).
August 1, 2025 at 1:56 AM
Another AUR malware this time a smarter typo squat, google-chrome-stable. The real one is google-chrome but it creates a binary called google-chrome-stable, I could see someone making this mistake.
Likely the same bozo as before, who has a serious lack of opsec (more on that soon).
Likely the same bozo as before, who has a serious lack of opsec (more on that soon).
Endgame Gear has acknowledged that they shipped xred malware on their CDN, but seemingly doesn't know or doesn't wish to explain how it happened. Not a very good post mortem IMO.
www.endgamegear.com/security-upd...
www.endgamegear.com/security-upd...
July 23, 2025 at 3:49 PM
Endgame Gear has acknowledged that they shipped xred malware on their CDN, but seemingly doesn't know or doesn't wish to explain how it happened. Not a very good post mortem IMO.
www.endgamegear.com/security-upd...
www.endgamegear.com/security-upd...
YouTube gives me a strike whenever I even innuendo the P word sadly, but I'll see what can be done.
Pretty cringe tier obfuscation.
Pretty cringe tier obfuscation.
July 19, 2025 at 3:00 AM
YouTube gives me a strike whenever I even innuendo the P word sadly, but I'll see what can be done.
Pretty cringe tier obfuscation.
Pretty cringe tier obfuscation.
Really not a fan of this UI change. I keep thinking I'm unsubscribed from people I watch. Clicking it prompts a membership purchase.
June 28, 2025 at 2:18 AM
Really not a fan of this UI change. I keep thinking I'm unsubscribed from people I watch. Clicking it prompts a membership purchase.
Jankiest "reverse shell" idea ever? While loop that irms a batch file from a webserver (that I assume tailors to the requestor IP)?
May 23, 2025 at 9:08 PM
Jankiest "reverse shell" idea ever? While loop that irms a batch file from a webserver (that I assume tailors to the requestor IP)?
New Virtualbox RCE due to a memory safety issue.
May 17, 2025 at 4:03 PM
New Virtualbox RCE due to a memory safety issue.
But think of the poor sim swappers who might not be able to get in.
May 17, 2025 at 1:40 PM
But think of the poor sim swappers who might not be able to get in.
Rare I see something new / interesting but this runelite pro scam is actually quite sophisticated. Custom stealer that takes the runescape credentials.
May 12, 2025 at 7:20 PM
Rare I see something new / interesting but this runelite pro scam is actually quite sophisticated. Custom stealer that takes the runescape credentials.
I posted a chart of YouTube's appeal rate & acceptance rate a while, here's an updated one (source: Google Transparency report).
May 8, 2025 at 1:23 AM
I posted a chart of YouTube's appeal rate & acceptance rate a while, here's an updated one (source: Google Transparency report).
Somehow got signed up for some slop cybersecurity newsletter. They've gone from shilling to hating on VPNs with misinformation.
Ironically making the same assumption that many promoters make. This premise is impossible due to HTTPs, and of course data brokers != subpoena.
Ironically making the same assumption that many promoters make. This premise is impossible due to HTTPs, and of course data brokers != subpoena.
May 6, 2025 at 4:58 PM
Somehow got signed up for some slop cybersecurity newsletter. They've gone from shilling to hating on VPNs with misinformation.
Ironically making the same assumption that many promoters make. This premise is impossible due to HTTPs, and of course data brokers != subpoena.
Ironically making the same assumption that many promoters make. This premise is impossible due to HTTPs, and of course data brokers != subpoena.
Not sure how exactly this is done, but quite a phishing trick. Somehow they reflect an email as if I sent it. This was to a gmail so it can't be a spoof either.
The 'message failed' then delivers the phish.
The 'message failed' then delivers the phish.
April 29, 2025 at 10:33 PM
Not sure how exactly this is done, but quite a phishing trick. Somehow they reflect an email as if I sent it. This was to a gmail so it can't be a spoof either.
The 'message failed' then delivers the phish.
The 'message failed' then delivers the phish.
Am I the only one whos under understood why they didn't just name the CAP file the right thing to begin with?
April 28, 2025 at 7:07 PM
Am I the only one whos under understood why they didn't just name the CAP file the right thing to begin with?
Quite a big day in linuxland.
April 26, 2025 at 10:36 PM
Quite a big day in linuxland.
This feels like such a scam.
April 25, 2025 at 1:13 AM
This feels like such a scam.
Nothing like not having an abuse contact email that works.
April 3, 2025 at 8:47 PM
Nothing like not having an abuse contact email that works.
Be careful or your PC will be taken over by communist bugs bunny.
March 18, 2025 at 6:23 PM
Be careful or your PC will be taken over by communist bugs bunny.
When in Florida do as the Floridians do.
(from my ZTW 2025 trip)
(from my ZTW 2025 trip)
March 8, 2025 at 9:06 PM
When in Florida do as the Floridians do.
(from my ZTW 2025 trip)
(from my ZTW 2025 trip)