Andrey [0xdc, 0x09];
@dc09.ru
16 y. o. fullstack dev from Russia
Alpine Linux #nosystemd
:neocat_flag_agender: :neocat_flag_ace: :neocat_flag_pan:
🕑 UTC+4:00
🎧 Linkin Park, Spiritbox
💻 Rust […]
🌉 bridged from ⁂ https://gts.dc09.ru/@darkcat09, follow @ap.brid.gy to interact
Alpine Linux #nosystemd
:neocat_flag_agender: :neocat_flag_ace: :neocat_flag_pan:
🕑 UTC+4:00
🎧 Linkin Park, Spiritbox
💻 Rust […]
🌉 bridged from ⁂ https://gts.dc09.ru/@darkcat09, follow @ap.brid.gy to interact
Eventually i should move away from cloudflare. From all their services i use only DNS, but still, i'm not happy to support them and don't want to rely on a SPOF of a large part of the Internet.
What if i host PowerDNS with a Poweradmin panel, on two or three virtual servers (from different […]
What if i host PowerDNS with a Poweradmin panel, on two or three virtual servers (from different […]
Original post on gts.dc09.ru
gts.dc09.ru
November 29, 2025 at 10:03 AM
Eventually i should move away from cloudflare. From all their services i use only DNS, but still, i'm not happy to support them and don't want to rely on a SPOF of a large part of the Internet.
What if i host PowerDNS with a Poweradmin panel, on two or three virtual servers (from different […]
What if i host PowerDNS with a Poweradmin panel, on two or three virtual servers (from different […]
I'm thinking of writing an Nginx module but seems like creating a custom HTTP server to replace Nginx may be simpler :neocat_think:
November 28, 2025 at 6:32 PM
I'm thinking of writing an Nginx module but seems like creating a custom HTTP server to replace Nginx may be simpler :neocat_think:
Reposted by Andrey [0xdc, 0x09];
Накидайте репортов https://mastodon.social/@trer/115627486576217800
trer (@trer@mastodon.social)
ЖКХ ПОДОРОЖАЕТ на 22% . Обычно стоимость подпрыгивала в июне. но из-за выборов в 2026 г дату новых тарифов передвинули на пару месяцев. В сентябре пройдут выборы разных депутатов и 12 губернаторов. bastyon.com/pkmkp в октябре принесут платежки с новыми ценами. @livefish@mastodon.ml @darkcat09@dc09.ru
mastodon.social
November 28, 2025 at 1:18 PM
Накидайте репортов https://mastodon.social/@trer/115627486576217800
Накидайте репортов https://mastodon.social/@trer/115627486576217800
trer (@trer@mastodon.social)
ЖКХ ПОДОРОЖАЕТ на 22% . Обычно стоимость подпрыгивала в июне. но из-за выборов в 2026 г дату новых тарифов передвинули на пару месяцев. В сентябре пройдут выборы разных депутатов и 12 губернаторов. bastyon.com/pkmkp в октябре принесут платежки с новыми ценами. @livefish@mastodon.ml @darkcat09@dc09.ru
mastodon.social
November 28, 2025 at 1:18 PM
Накидайте репортов https://mastodon.social/@trer/115627486576217800
Reposted by Andrey [0xdc, 0x09];
[age verification meta]
Stop calling it threat to anonymity. Anonymity is something for darknet hackers or something
(Term you're looking for is pseudonymity, but it doesn't really matter. Both are useful, and have different pros and cons)
Age verification is attacking privacy, forcing people […]
Stop calling it threat to anonymity. Anonymity is something for darknet hackers or something
(Term you're looking for is pseudonymity, but it doesn't really matter. Both are useful, and have different pros and cons)
Age verification is attacking privacy, forcing people […]
Original post on mastodon.ml
mastodon.ml
November 28, 2025 at 1:31 AM
[age verification meta]
Stop calling it threat to anonymity. Anonymity is something for darknet hackers or something
(Term you're looking for is pseudonymity, but it doesn't really matter. Both are useful, and have different pros and cons)
Age verification is attacking privacy, forcing people […]
Stop calling it threat to anonymity. Anonymity is something for darknet hackers or something
(Term you're looking for is pseudonymity, but it doesn't really matter. Both are useful, and have different pros and cons)
Age verification is attacking privacy, forcing people […]
November 27, 2025 at 6:53 PM
Reposted by Andrey [0xdc, 0x09];
How big is docs.rs's S3 bucket of "all docs ever"?
7.75 TiB (compressed) https://github.com/rust-lang/docs.rs/issues/3040#issuecomment-3586845728
7.75 TiB (compressed) https://github.com/rust-lang/docs.rs/issues/3040#issuecomment-3586845728
November 27, 2025 at 5:21 PM
How big is docs.rs's S3 bucket of "all docs ever"?
7.75 TiB (compressed) https://github.com/rust-lang/docs.rs/issues/3040#issuecomment-3586845728
7.75 TiB (compressed) https://github.com/rust-lang/docs.rs/issues/3040#issuecomment-3586845728
Switching to a different Fenix fork because i'm tired of random freezes in IronFox and other weird bugs like the inability to make a payment (probably because of that freeze but idk)
November 27, 2025 at 2:38 PM
Switching to a different Fenix fork because i'm tired of random freezes in IronFox and other weird bugs like the inability to make a payment (probably because of that freeze but idk)
Fuck it!! I was going to work on an entirely different project today, but urgently needed to implement reconnection in my bridge, because, even on a server, vkmax somehow disconnected from socket
November 27, 2025 at 1:44 PM
Fuck it!! I was going to work on an entirely different project today, but urgently needed to implement reconnection in my bridge, because, even on a server, vkmax somehow disconnected from socket
Если кто-то захочет пореверсить, тут сдампили устройство после взлома полицией через тулзы Cellebrite
RE: https://donotsta.re/objects/482cd0c0-449b-4dbb-8cd4-d63fb86b6334
RE: https://donotsta.re/objects/482cd0c0-449b-4dbb-8cd4-d63fb86b6334
About 1.5 years ago my friend was (wrongly) accused of terrorism.
All of their electronic devices have been seized, plus my stash of hard drives (which were at their place for _reasons_).
Of course they didn’t find any evidence. Culprit that framed my friend (and many others) was arrested (article in Polish).
Upon returning the hardware, I found that all of my harddrives have been destroyed, which made me (understandably) pissed.
We’re **very** good friends, so I’ve been given their personal phone that was pwned with cellebrite. It hasn’t been turned on since police extracted data from it so I decided to do some forensics on it.
As it turns out, police forgot to clean after themselves. Took a peek at the first-stage payload but it’s too complex for me to reverse-engineer. It’s clear it’s full of obfuscations and is even using TLS to talk to Cellebrite box.
If you’re a security researcher (or just curious nerd with more spoons than me) and you wanted to take a look at it - here you go.
Payload was uploaded onto the device on 2024-02-21. If you want to re-create the environment it was executed on, you will need a:
* Samsung Z Flip3 5G (SM-F711B)
* Android build SP2A_220305.013.F711BXXS2CVHF
Rough execution flow:
1. USB device plugged in (Cellebrite Cheetah)
2. USB controller switches to host mode
3. Gadget switching USB VID/PID to load kernel modules
4. Module 'hid_akeys' leaks memory
5. Screen unlocked
6. ADB key '82:E5:EA:F3:DC:D1:7D:CA:65:3C:D4:58:65:CD:81:8E' added to trusted keys on the device
7. First-stage payload '/data/local/tmp/falcon' copied onto the device.
8. Second-stage payload executed as root:
- /data/local/tmp/chrome-command-line
- /data/local/tmp/android-webview-command-line
- /data/local/tmp/webview-command-line
- /data/local/tmp/content-shell-command-line
- /data/local/tmp/frida-server-16.1.4-android-arm64
- /data/local/tmp/init
9. Data extraction (photos, telegram, firefox, downloads)
# Unanswered question: What the hell is "jtcb.sdylj.axpa" running as root? Seems to have been dropped around the same time...
Have fun!
donotsta.re
November 27, 2025 at 8:11 AM
Если кто-то захочет пореверсить, тут сдампили устройство после взлома полицией через тулзы Cellebrite
RE: https://donotsta.re/objects/482cd0c0-449b-4dbb-8cd4-d63fb86b6334
RE: https://donotsta.re/objects/482cd0c0-449b-4dbb-8cd4-d63fb86b6334
Reposted by Andrey [0xdc, 0x09];
yeah sure man. whatever. just use negative amounts of ram on my personal computer i don't care anymore
October 24, 2025 at 5:20 PM
yeah sure man. whatever. just use negative amounts of ram on my personal computer i don't care anymore
Reposted by Andrey [0xdc, 0x09];
> The etcd nodes are rejecting each other's connections because the certificates don't match. When all three nodes restarted simultaneously, they may have regenerated their etcd certificates, and now they don't trust each other.
Distributed systems were a mistake.
Distributed systems were a mistake.
November 26, 2025 at 10:50 AM
> The etcd nodes are rejecting each other's connections because the certificates don't match. When all three nodes restarted simultaneously, they may have regenerated their etcd certificates, and now they don't trust each other.
Distributed systems were a mistake.
Distributed systems were a mistake.
Мост max2tg — юзербот для пересылки сообщений между чатами в MAX и Telegram. Поддерживает текст, медиа и файлы, частично реакции, стикеры из телеграма.
Написан на Python с использованием Telethon и vkmax. Я участвовал в разработке второй библиотеки ради багфиксов и функционала для моста.
Не […]
Написан на Python с использованием Telethon и vkmax. Я участвовал в разработке второй библиотеки ради багфиксов и функционала для моста.
Не […]
Original post on gts.dc09.ru
gts.dc09.ru
November 25, 2025 at 6:28 PM
Мост max2tg — юзербот для пересылки сообщений между чатами в MAX и Telegram. Поддерживает текст, медиа и файлы, частично реакции, стикеры из телеграма.
Написан на Python с использованием Telethon и vkmax. Я участвовал в разработке второй библиотеки ради багфиксов и функционала для моста.
Не […]
Написан на Python с использованием Telethon и vkmax. Я участвовал в разработке второй библиотеки ради багфиксов и функционала для моста.
Не […]
Reposted by Andrey [0xdc, 0x09];
**FEP-9f9f: Collections**
Collections are the most under-specified entities in #ActivityPub. I've started documenting them in a FEP:
https://codeberg.org/silverpill/feps/src/branch/main/9f9f/fep-9f9f.md
Collections are the most under-specified entities in #ActivityPub. I've started documenting them in a FEP:
https://codeberg.org/silverpill/feps/src/branch/main/9f9f/fep-9f9f.md
feps/9f9f/fep-9f9f.md at main
feps - My FEPs
codeberg.org
November 25, 2025 at 1:09 PM
**FEP-9f9f: Collections**
Collections are the most under-specified entities in #ActivityPub. I've started documenting them in a FEP:
https://codeberg.org/silverpill/feps/src/branch/main/9f9f/fep-9f9f.md
Collections are the most under-specified entities in #ActivityPub. I've started documenting them in a FEP:
https://codeberg.org/silverpill/feps/src/branch/main/9f9f/fep-9f9f.md
Reposted by Andrey [0xdc, 0x09];
It's facet maintenance day!!!
Merged today:
support for double-colons in where clauses
https://github.com/facet-rs/facet/pull/918
Merged today:
support for double-colons in where clauses
https://github.com/facet-rs/facet/pull/918
fix double colon in where clause by cramt · Pull Request #918 · facet-rs/facet
couldnt get the git hook to work on my nix setup so i hope i didnt need to for this pr
github.com
November 25, 2025 at 7:55 AM
It's facet maintenance day!!!
Merged today:
support for double-colons in where clauses
https://github.com/facet-rs/facet/pull/918
Merged today:
support for double-colons in where clauses
https://github.com/facet-rs/facet/pull/918
Reposted by Andrey [0xdc, 0x09];
But you know, the next time I need to deploy something that has 47 resources and idles at 4GB RAM usage to do nothing at all, then I will be equipped.
November 24, 2025 at 10:20 AM
But you know, the next time I need to deploy something that has 47 resources and idles at 4GB RAM usage to do nothing at all, then I will be equipped.
Reposted by Andrey [0xdc, 0x09];
Oh my God, GitLab is running on a beefy server literally next door and it feels so sluggish. Oh my God, I don't think I can use this.
November 24, 2025 at 10:20 AM
Oh my God, GitLab is running on a beefy server literally next door and it feels so sluggish. Oh my God, I don't think I can use this.
1. Что курили дизайнеры в эппл
2. То же самое ли курил дизайнер тга
3. Похожие ли вещества использовали в гугле для md3 expressive и апдейта андроид 16
2. То же самое ли курил дизайнер тга
3. Похожие ли вещества использовали в гугле для md3 expressive и апдейта андроид 16
November 24, 2025 at 4:43 AM
1. Что курили дизайнеры в эппл
2. То же самое ли курил дизайнер тга
3. Похожие ли вещества использовали в гугле для md3 expressive и апдейта андроид 16
2. То же самое ли курил дизайнер тга
3. Похожие ли вещества использовали в гугле для md3 expressive и апдейта андроид 16
Reposted by Andrey [0xdc, 0x09];
I keep receiving funny spam e-mail messages.
> Do you want to Design or Redesign your website dc09.ru ? I can create a unique & beautiful website for your organization at a minimal cost.
> I can also upgrade your website dc09.ru that has all of the modern features and functionality.
> May I […]
> Do you want to Design or Redesign your website dc09.ru ? I can create a unique & beautiful website for your organization at a minimal cost.
> I can also upgrade your website dc09.ru that has all of the modern features and functionality.
> May I […]
Original post on gts.dc09.ru
gts.dc09.ru
November 23, 2025 at 12:50 PM
I keep receiving funny spam e-mail messages.
> Do you want to Design or Redesign your website dc09.ru ? I can create a unique & beautiful website for your organization at a minimal cost.
> I can also upgrade your website dc09.ru that has all of the modern features and functionality.
> May I […]
> Do you want to Design or Redesign your website dc09.ru ? I can create a unique & beautiful website for your organization at a minimal cost.
> I can also upgrade your website dc09.ru that has all of the modern features and functionality.
> May I […]
Reposted by Andrey [0xdc, 0x09];
am i holding this wrong or is typing into a gitlab issue text really consuming like 1MB of memory per keypress
November 22, 2025 at 4:48 PM
am i holding this wrong or is typing into a gitlab issue text really consuming like 1MB of memory per keypress
Reposted by Andrey [0xdc, 0x09];
Social engineering -- the art of tricking people into doing stupid shit -- has always been the most reliable way to hack anything. Now with AI browsers and agentic this and that, we've actually built social engineering into the code. So it can be used to trick others but also trick itself […]
Original post on infosec.exchange
infosec.exchange
November 22, 2025 at 1:32 PM
Social engineering -- the art of tricking people into doing stupid shit -- has always been the most reliable way to hack anything. Now with AI browsers and agentic this and that, we've actually built social engineering into the code. So it can be used to trick others but also trick itself […]
Is anyone using elk.dc09.ru?
I switched to a native client and personally don't need an Elk instance anymore.
//
Кто-нибудь пользуется elk.dc09.ru?
Я перешёл на нативный клиент и инстанс элка лично мне больше не нужен
#dc09ru
I switched to a native client and personally don't need an Elk instance anymore.
//
Кто-нибудь пользуется elk.dc09.ru?
Я перешёл на нативный клиент и инстанс элка лично мне больше не нужен
#dc09ru
November 22, 2025 at 10:24 AM
Is anyone using elk.dc09.ru?
I switched to a native client and personally don't need an Elk instance anymore.
//
Кто-нибудь пользуется elk.dc09.ru?
Я перешёл на нативный клиент и инстанс элка лично мне больше не нужен
#dc09ru
I switched to a native client and personally don't need an Elk instance anymore.
//
Кто-нибудь пользуется elk.dc09.ru?
Я перешёл на нативный клиент и инстанс элка лично мне больше не нужен
#dc09ru
Wow. Elk is _extremely_ laggy with "virtual scrolling" disabled. There's not that much posts in my timeline. It's just modern JS frameworks and `div>div>div` DOM overhead
November 21, 2025 at 12:08 PM
Wow. Elk is _extremely_ laggy with "virtual scrolling" disabled. There's not that much posts in my timeline. It's just modern JS frameworks and `div>div>div` DOM overhead
[sui mention]
Overheard:
"Чем бы дитя не тешилось, лишь бы не вешалось"
Overheard:
"Чем бы дитя не тешилось, лишь бы не вешалось"
November 20, 2025 at 9:07 AM
[sui mention]
Overheard:
"Чем бы дитя не тешилось, лишь бы не вешалось"
Overheard:
"Чем бы дитя не тешилось, лишь бы не вешалось"