Arrigo Triulzi
LightNews LightNews
banner
cynicalsecurity.bsky.social
Arrigo Triulzi
@cynicalsecurity.bsky.social
460 followers 150 following 670 posts
IT Security, cynically aged. Maths. Some nukes. Longing for Symbolics and Connection Machines. Keeper of Ancient Computing Lore. Wassenaar intangible Ⓐ
Posts Replies Media Videos
cynicalsecurity.bsky.social
Configuration management, the great unknown.
October 29, 2025 at 5:24 PM
cynicalsecurity.bsky.social
2021 cynicism. Still current.
A screenshot of a post from Twitter in 2021: Bla bla bla "C insecure" bla bla bla "use [insert fashionable secure language]" "Hi! How are you? I'm your remote repository you are trusting blindly during the build process!"
September 29, 2025 at 7:15 AM
cynicalsecurity.bsky.social
Periodic reminder about stunt hacking¹.

You will get done by phishing.

Nothing else matters.
__
¹ www.cs.auckland.ac.nz/~pgut001/pub...
What gets the Attention? Consulting the OWASP top 100,000 from the Appendix to the Addendum to the Supplement to the Apocrypha, Volume 127, we see… #17,245 Spectre #17,246 POODLE #17,247 Meltdown #17,248 Rowhammer #17,249 DROWN #17,250 ROCA … What do all of these have in common? No-one ever uses them * there are 17,244 easier ways to carry out an attack * this is why they've been referred to as "stunt cryptography" Stunt cryptography attack * You have a 0.00001% chance of recovering 2 bits of plaintext from a single message Any of the OWASP top ten * You have a 100% chance of recovering the plaintext of all the messages
August 4, 2025 at 7:46 AM
cynicalsecurity.bsky.social
Ah, there is a script for the latter bit.

See en.wikipedia.org/wiki/Fascist...
Film poster for “Fascisti su Marte” (“Fascists on Mars”).
June 25, 2025 at 5:35 PM
cynicalsecurity.bsky.social
Una chicca per gli italiani di una certa età: l'analisi della CIA della situazione politica del '63¹ che non fa pena, fa pietà… nelle immortali parole di @abragad.bsky.social "gente pagata (in $$) per scrivere questo".

Basti il "(2) Fanfani" (solo lui).

__
¹ nsarchive.gwu.edu/document/329...
Italy With approval by the Special NSC 5412/2 Group, the Christian « Democratic Pai:_ty was supported by CIA to the tune of $1 million · in the campaign leading to the June elections (plus $600.,000 to·other political elements in Italy). CIA1s rationale for the loss of CDP strength in the elections is that (1) there was a loss of votes among the workers from the south who were given the Communist treatment when they moved to the northern cities; (2) Fanfani, and (3) -the Papal audience given to Khrushchev's son-in-law had an effect on anti-Comm~nist religious Italian·s ,, including wives or the workers who had preMiously been able to ·persuade their husbands to vote against the Communist candidates. Meanwhile the Special Group has authorized CIA to spend $125,000 to support the CDP in current developments looking toward the\ establishment of a center-left government coalition.
April 7, 2025 at 4:12 PM
cynicalsecurity.bsky.social
LOL™

D. Noever et al. "Infecting Generative AI With Viruses"¹

The 1990s are calling, they want their EICAR back!

__
¹ arxiv.org/abs/2501.05542
Abstract: This study demonstrates a novel approach to testing the security boundaries of Vision-Large Language Model (VLM/ LLM) using the EICAR test file embedded within JPEG images. We successfully executed four distinct protocols across multiple LLM platforms, including OpenAI GPT-4o, Microsoft Copilot, Google Gemini 1.5 Pro, and Anthropic Claude 3.5 Sonnet. The experiments validated that a modified JPEG containing the EICAR signature could be uploaded, manipulated, and potentially executed within LLM virtual workspaces. Key findings include: 1) consistent ability to mask the EICAR string in image metadata without detection, 2) successful extraction of the test file using Python-based manipulation within LLM environments, and 3) demonstration of multiple obfuscation techniques including base64 encoding and string reversal. This research extends Microsoft Research's "Penetration Testing Rules of Engagement" framework to evaluate cloud-based generative AI and LLM security boundaries, particularly focusing on file handling and execution capabilities within containerized environments.
January 14, 2025 at 4:54 PM
cynicalsecurity.bsky.social
In esclusiva il Ministro dei Trasporti che via augura “Buon viaggio!”
Totò vestito da Rosario Chiàrchiaro, “lo iettatore” ne “La Patente” (1957)
January 11, 2025 at 2:03 PM
cynicalsecurity.bsky.social
Enjoy the Mt. Blanc this morning.
Photo of the Mt. Blanc silhouetted against the rising Sun.
December 16, 2024 at 8:08 AM
cynicalsecurity.bsky.social
“You want proof? I’ll give you proof!”
November 26, 2024 at 9:39 AM
cynicalsecurity.bsky.social
So Delta lost $500M because of Clownstrike (and Microsoft…) and the CEO is upset. So upset that apparently he is "rethinking" how systems are set up in the future¹.

"… I can tell you they have not delivered exceptional service..."

"… we thought we had the best…"
__
¹ www.cnbc.com/2024/07/31/d...
“If you’re going to be having access, priority access to the Delta ecosystem in terms of technology, you’ve got to test the stuff. You can’t come into a mission critical 24/7 operation and tell us we have a bug,” Bastian said. CrowdStrike has so far made no offers to help Delta financially, Bastian added, beside offering free consulting advice on dealing with the fallout from the outage. A CrowdStrike spokesperson said in an emailed statement that it has “no knowledge of a lawsuit and have no further comment.” Microsoft didn’t immediately respond to a request for comment.
August 5, 2024 at 9:55 AM
cynicalsecurity.bsky.social
Say that you've accidentally wiped your nginx configuration for which you have no backup because you're a pro and you don't have backups for your phishing infrastructure, not that this has happened to me of course.

Well, here's how you get it back with gdb.

serverfault.com/questions/36...
# Set pid of nginx master process here pid=8192 # generate gdb commands from the process's memory mappings using awk cat /proc/$pid/maps | awk '$6 !~ "^/" {split ($1,addrs,"-"); print "dump memory mem_" addrs[1] " 0x" addrs[1] " 0x" addrs[2] ;}END{print "quit"}' > gdb-commands # use gdb with the -x option to dump these memory regions to mem_* files gdb -p $pid -x gdb-commands # look for some (any) nginx.conf text grep worker_connections mem_* grep server_name mem_*
December 14, 2023 at 11:56 AM