Elektrine lite

← Feed

Chris Partridge

tweedge@cybersecurity.theater

<p>By day: I lead a cybersecurity team at that online-bookstore-and-server-rental company, and occasionally I&#39;m an adjunct professor at RIT.</p><p>By night: I&#39;m avid cat dad, solarpunk, open source dev, home cook, and tinkerer. The world is broken, but we can fix it!</p><p>I blog on <a href="https://chris.partridge.tech" target="_blank" rel="nofollow noopener" translate="no"><span class="invisible">https://</span><span class="">chris.partridge.tech</span><span class="invisible"></span></a>, come see my niche posts &amp; data :D</p>

Posts

  • View post

    I found a super old file on my NAS back from when I was typosquatting NLTK (then in the top 250 Python packages!) with a package named NTLK. My inspiration was simple: I&#39;d made that typo three times in a row, and so I made a package which would fail to install + give people the correct install command + send a ping telling me someone tried to install NTLK. 7 months and 28k installs later, I got a bunch of data that I forgot to write up 😅 but better late then never: https://chris.partridge.t...

  • View post

    A friend sent this to me and y&amp;#39;all might enjoy

  • View post

    Hmm. Phishing kits are putting more and more effort into blocking automatic security scanners. This is a relatively short set of evasion rules - I&amp;#39;m seeing some kits with eight *entire files* worth of rules of what IPs, hostnames, user agents, etc. to block.

  • View post

    Ah man someone accidentally zipped up their Git repo in a phishing kit and I think their actual personal, professional info is in there. I&amp;#39;m looking at a GitHub and LinkedIn rn and I&amp;#39;m suspicious.

  • View post

    Alright I&amp;#39;m speeding up my review of the phishing kits that my project, Phossil, collected. My current estimate is that over the last 5 years I&amp;#39;ve collected about 1,200 kits. I&amp;#39;m going to review these in two passes - first, just to identify whether they&amp;#39;re legit phishing kits (not other malware, webshells, etc.). Later I&amp;#39;ll review them for contents - leaked info, trends, targeted companies, etc. I&amp;#39;ll be shitposting in this thread with anything funn...

  • View post

    Did a little explainer on what the request amplification problem is with Mastodon&amp;#39;s link previews, what I observed in a small-scale test (traffic amplification of 36,000:1!), what website operators should know, etc. It&amp;#39;s here for those curious: https://chris.partridge.tech/2022/request-amplification-in-mastodon/