My BSides Cape Town 2025 talk is up on YouTube. Go watch me talk about hacking drones, crashing drones and ear-wax removers all while wearing a duck cape 🤣 While you there watch some of the other awesome BSides Cape Town talks. youtu.be/CY17U3zKNmc #drones #hacking #bsidescapetown #rubberducks
Rapid Unplanned Disassembly: Hacking flying things sounded like a great idea - Dale Nunns
YouTube video by BSides Cape Town
youtu.be
I did a talk on "Race Conditions", at BSides Cape Town! www.youtube.com/watch?v=9edv...
Knock knock. Race Condition. Who's there? - Ross Simpson | BSides Cape Town 2025
YouTube video by BSides Cape Town
youtube.com
My BSides Cape Town 2025 wrap-up is finally out, you can read about it all here www.linkedin.com/pulse/bsides.... Please share with your friends and help spread the word! #bsidescapetown2025 #bsidescapetown #hackers #rubberducks
BSides Cape Town 2025 - 14000 steps by the sea.
Saturday 6th December 2025 was BSides Cape Town 2025! Our yearly hacker/infosec/security/"cyber" conference. This year it was bigger than ever with over 600 people (I think it was as high as 640?), wi...
linkedin.com
If you’re a fan of Hacker Jeopardy, check out my song DFIU on the @defcon.bsky.social soundtrack. You can pay what you want to own (that’s right, you can actually possess the files yourself!) soundtrack and all proceeds go to the EFF. defconcommunications.bandcamp.com/track/dfiu
DFIU, by 0xdade
from the album DEF CON 33: The Official Soundtrack
defconcommunications.bandcamp.com
Today one of my favourite hackers and biggest inspirations, @leonjza.bsky.social, is speaking at DEF CON 33! Track 4 @ 16:30 PDT defcon.org/html/defcon-... If you're there, please go and support him. If you're in a close enough timezone, please stream him live (see dctv.defcon.org)
Even if you're not into the AI hype, it's worth reading about the dangers of "MCP" servers everyone's going on about: www.cyberark.com/resources/th...
Poison everywhere: No output from your MCP server is safe
The Model Context Protocol (MCP) is an open standard and open-source project from Anthropic that makes it quick and easy for developers to add real-world functionality — like sending emails or...
cyberark.com
Half way through the year... not a bad time to backup a bunch of stuff if you don't already have a backup process/plan.
Ubikron You probably know Roelof Temmingh as the man who created Maltego 17 years ago, and who has been working on the Vortimo tool for the last few years. A few days ago he released Ubikron, a tool for tracking, tagging, and saving web investigations www.ubikron.com
First Pewdiepie makes a Linux video, now a "maker" video - didn't see that coming youtu.be/pgeTa1PV_40
Presenting my Billion Dollar Plan...
YouTube video by PewDiePie
youtu.be
#speakerlife my @devconf.co.za talk is in a few days, but I'm drawing custom icons in Excalidraw. Obviously these are best enjoyed, in person at my talk. #devconf2025 #rubberduck #duckhunt #retro #gaming
Pocket is one of my favourite apps, I use daily. Mozilla bought them years back. Now Mozilla is shutting them down. Sigh.
I recreated Joey's Gibson virus from the movie Hackers and it runs on a vintage Powerbook Duo. When you launch the "virus" it makes a new post to the Bluesky bot @hacktheplanet.simone.computer Before you ask no this is not actually a virus 😜 #hacktheplanet #retrocomputing #vintageapple
This white genocide debacle highlights another reason to be extremely cautious of AI that I don't see people talking about much--if you're getting your information from AI, your knowledge will be selectively curated by the people who control the AI
I watched a company do something dumb today. And it went badly for them. There is balance to the force sometimes :)
When a rock n roll photographer shoots a hacker collective. @cultdeadcow.bsky.social
—>realhackhistory.org@bsky.realhackhistory.org · last yr.From SPIN Magazine, November 1999. Did I post these images before? They are from an article entitled "The Politics of #Hacking", about #hacktivism, online activism and a big obsession of the late 90s "cyber-terrorism". I merged two images that were across two pages here, if it looks janky.
DEF CON legal update: Truth is a complete defense against defamation. The Hadnagy lawsuit against us is over. Summary judgement. Dismissed, with prejudice. You can read the judgment here storage.courtlistener.com/recap/gov.us... . Stay tuned for a more detailed report. #defcon #legalupdate
System Of A Down, Chop Suey. Hokuto Force #C64 youtu.be/6oRUCkAbPn0?...
We (@lambdafu.bsky.social & me) found a critical security vulnerability in the #Erlang/OTP SSH daemon that allow attackers to execute arbitrary code via network access on devices running Erlang/OTP SSH servers. This vulnerability is #CVE-2025-32433, patches out now. Estimated CVSSv3 10.
You definitely know this guy’s music, even if he looks a bit different nowadays. Do you recognize him?
Gen Z and Millennials: In ten years when we’re still without a cure and you’re caring for your parents, remember what he did.
Oh, I am READY. Please be good please be good please be good #tron #tronares www.youtube.com/watch?v=9KVG...
Tron: Ares | Official Trailer
YouTube video by Disney
youtube.com
Oracle has a serious, customer impacting security incident playing out in Oracle Classic, a cloud SaaS service they manage. They're attempting to deny it by saying there's no problem in "Oracle Cloud", which is wordplay. doublepulsar.com/oracle-attem...
Oracle attempt to hide serious cybersecurity incident from customers in Oracle SaaS service
Being a provider of cloud SaaS (Software-as-a-service) solutions requires certain cybersecurity responsibilities — including being…
doublepulsar.com
Guess who showed up to defend Tesla? The Proud Boys, armed militias, and at one event in Idaho, and a guy dressed as Hitler. More on the "Tesla Takedown" protests here:
The Proud Boys and Militias Come to Tesla’s Defense
After weeks of “Tesla Takedown” protests, the Proud Boys and other far-right extremist groups are showing up to back Elon Musk's beleaguered car company.
wired.com
Years of work, pain, suffering and tears and we are SO CLOSE to a 5.0 release of the ASVS Standard. However, a standard that isn't usable isn't a standard at all, it's a mess, so we need your help. If you have some spare cycles, can you review github.com/OWASP/ASVS/t...
ASVS/5.0 at master · OWASP/ASVS
Application Security Verification Standard. Contribute to OWASP/ASVS development by creating an account on GitHub.
github.com
Whipped together a SOCKS5-over-any-transport feature today for the c2 & implant used in @sensepost.com purple teaming / emulation exercises. Here I have a cURL request, over an ICMP channel, funnelling HTTP requests in and out via our implant :D Fun! 😄🔥
