Brutkey

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

@FediTips@social.growyourown.services How exactly was the domain name "sold by their registrar before they could renew it"?

Seems like an easy appeal to ICANN if it was registrar malfeasance vs. "oops I forgot to renew this critical identifier in time".

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

@FediTips@social.growyourown.services Mind you, I don't expect a reply or an answer that isn't “Yeah, they just forgot to renew it.”

If it is the latter, that's a big part of the reason the Fediverse is the way it is rn.

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

In other news, I'm going to stop putting anything but links into Slack (no PDFs, etc) b/c the AI summarizer slurps up the documents, spits out rubbish, and collects more training data.

Rly rly rly done w/"AI".

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

Really great of CISA to add 2 CVEs to KEV that are still marked as RESERVED by MITRE, so no API has details for either of them.

CVE and everything around it is such a stupid joke at this point I really do hope it dies in a couple months.

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

Current port distribution for the MCP scanning: 80, 81, 443, 1080, 3128, 6277, 8000, 8080, 8081, 8443, 8765, 8888, 9000

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

We're also seeing active attempts to compromise Anthropic's MCP Inspector server, so we're gonna add a tag for that, soon, too.

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

Since we flipped the MCP Server scanning tag to live, we see consistent (but low levels) of scans.

Some bots look like they're doing dedicated MCP scanning. Some have added it to other activity profiles.

33 IPs are mal/sus.

Be super careful hosting an HTTP MCP server.

https://viz.greynoise.io/tags/mcp-and-sse-endpoint-scanning?days=30

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

Current port distribution for the MCP scanning: 80, 81, 443, 1080, 3128, 6277, 8000, 8080, 8081, 8443, 8765, 8888, 9000

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

Since we flipped the MCP Server scanning tag to live, we see consistent (but low levels) of scans.

Some bots look like they're doing dedicated MCP scanning. Some have added it to other activity profiles.

33 IPs are mal/sus.

Be super careful hosting an HTTP MCP server.

https://viz.greynoise.io/tags/mcp-and-sse-endpoint-scanning?days=30

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

This is a really bad thing.

Pplx is a terrible company and I'll downgrade to Safari Tech Preview full time if this happens.

Rly hope the new render engine+browser shell projects speed-run to usable.

———

Perplexity offers to acquire Chrome for $34.5B, significantly more than Perplexity's estimated $18B valuation, and says large VC funds agreed to back the deal.

https://www.bloomberg.com/news/articles/2025-08-12/perplexity-makes-34-5-billion-bid-for-google-s-chrome-browser?embedded-checkout=true

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

Gosh if I see the letters "A" & "I" together in a non-ironic or negative context the rest of today I'm gonna go ballistic.

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

There are lots of ways to "do honeypots", and if you'd like to do a bit of what I do on a daily basis (though in a different way) def take a look at this project: https://lightscope.isi.edu/

Clever idea! Decent-ish dashboards.

Do not use the blocklists. Lots of overlaps with our Benign lists.

hrbrmstr 🇺🇦 🇬🇱 🇨🇦
@hrbrmstr@mastodon.social

I guess the hack is on… #Fortisecure

https://www.greynoise.io/blog/vulnerability-fortinet-vpn-bruteforce-spike